@ai-setting/roy-agent-core 1.7.77 → 1.7.88

package/dist/shared/@ai-setting/{roy-agent-core-3gpygqcx.js → roy-agent-core-gr5h1dyr.js}

@@ -1,49 +1,79 @@
 import {
   defaultLarkCliRunner
-} from "./roy-agent-core-bxkjk7zx.js";
+} from "./roy-agent-core-vx8zc847.js";
 import {
   cliCommandHandler
 } from "./roy-agent-core-v0hf14bj.js";
+import {
+  getSharedWecomSessionCardStore
+} from "./roy-agent-core-7kvpc0w5.js";
+import {
+  guardConfigWrite
+} from "./roy-agent-core-2stt4rp5.js";
 import {
   TaskTagPlugin,
+  createGroupChatViaLarkCli,
   createLarkCliTaskNotifyHook,
   createPerTaskGroupChatPlugin,
-  extractPerTaskChatId,
-  extractPerTaskChatName
-} from "./roy-agent-core-rsn44n9y.js";
+  createWecomCardStateStore,
+  createWecomTaskNotifyHook,
+  deleteGroupChatViaLarkCli,
+  handleCardAction
+} from "./roy-agent-core-ra66sf50.js";
+import {
+  registerWecomRespondTarget,
+  sendWecomCliMarkdown,
+  unregisterWecomRespondTarget
+} from "./roy-agent-core-h1e1fm9b.js";
+import {
+  ROY_SESSION_PREFIX,
+  WECOM_SESSION_TASK_SEP,
+  WecomCardActionKey,
+  buildWecomCardUpdateFrame,
+  buildWecomSessionUpdateFrame
+} from "./roy-agent-core-c4ec7k0p.js";
 import {
   getSharedEventStore
-} from "./roy-agent-core-na18zwj0.js";
+} from "./roy-agent-core-4t3yskp8.js";
 import {
   createLarkCliWorkflowNotifyHook
-} from "./roy-agent-core-hd3n57zs.js";
+} from "./roy-agent-core-wr1qexzq.js";
 import {
-  LarkCardPatchNotifier,
-  buildTaskCard
-} from "./roy-agent-core-w0qjeq2v.js";
+  DEFAULT_APP_LINK_BASE,
+  getSharedLarkCardNotifier,
+  getSharedLarkCardStateStore
+} from "./roy-agent-core-shb1qsyg.js";
+import {
+  RECENT_MESSAGE_LIMIT,
+  createActivityProbe,
+  createSessionActivityProbe,
+  extractToolCallsFromMessages,
+  mapBgTaskStatusToSessionLifecycle,
+  toActivityMessage
+} from "./roy-agent-core-418zc9ha.js";
 import {
   notifyReactFailure
-} from "./roy-agent-core-6cy43nss.js";
+} from "./roy-agent-core-9c565frx.js";
 import {
   normalizeLarkAtMentions
 } from "./roy-agent-core-m880qz3y.js";
 import {
   globalHookManager,
   init_global_hook_manager
-} from "./roy-agent-core-cpcd24n2.js";
+} from "./roy-agent-core-yet36q5k.js";
 import {
   init_context
-} from "./roy-agent-core-qqaak24r.js";
+} from "./roy-agent-core-tkpp1ba0.js";
 import {
   createEnvContext,
   normalizeParentTaskId,
   runWithEnvContext
-} from "./roy-agent-core-7cbpmk4q.js";
+} from "./roy-agent-core-p31ftgq9.js";
 import {
   TracedAs,
   init_decorator,
   wrapFunction
-} from "./roy-agent-core-qq96p0tj.js";
+} from "./roy-agent-core-5s2t8z00.js";
 import {
   createLogger,
   getTracerProvider,
@@ -55,250 +85,139 @@ import {
 } from "./roy-agent-core-fs0mn2jk.js";
 
 // src/env/event-source/event-source-handlers.ts
-import { spawn as spawn2, exec as execSync } from "child_process";
-import { promisify as promisify2 } from "node:util";
+import { spawn as spawn3, exec as execSync } from "child_process";
+import { promisify } from "node:util";
 init_global_hook_manager();
 init_context();
 
-// src/env/task/plugins/lark-card-action-handler.ts
-init_logger();
-import { exec } from "node:child_process";
-import { promisify } from "node:util";
-var logger = createLogger("lark-card-action-handler");
-var execAsync = promisify(exec);
-var CTX_FIELD_CHAT_ID = "larkPerTaskChatId";
-var CTX_FIELD_CHAT_NAME = "larkPerTaskChatName";
-var CTX_FIELD_CHAT_CREATED_AT = "larkPerTaskChatCreatedAt";
-var CTX_FIELD_CHAT_TASK_ID = "larkPerTaskChatTaskId";
-var CTX_FIELD_CHAT_INVITEES = "larkPerTaskChatInvitees";
-var cardActionInflight = new Map;
-async function handleCardAction(event, ports) {
-  const { action, taskId: taskIdRaw } = event.actionValue;
-  const taskId = typeof taskIdRaw === "string" ? parseInt(taskIdRaw, 10) : taskIdRaw;
-  if (!taskId || Number.isNaN(taskId)) {
-    return { ok: false, action, error: `Invalid taskId: ${taskIdRaw}` };
-  }
-  if (action !== "create_group" && action !== "disband_group") {
-    return { ok: false, action, error: `Unknown action: ${action}` };
-  }
-  const inflightKey = `${event.profile ?? "-"}:${event.messageId || String(taskId)}:${action}`;
-  const inflight = cardActionInflight.get(inflightKey);
-  if (inflight) {
-    logger.warn(`handleCardAction: ${inflightKey} 已有同操作在处理中（疑似用户重复点击），本次忽略。`);
-    return { ok: false, action, error: `重复点击：${inflightKey} 正在处理中，已忽略` };
+// src/env/event-source/es-plugins.ts
+init_global_hook_manager();
+var BUILT_IN_PLUGIN_FACTORIES = {
+  LarkCliTaskNotifyPlugin: (cfg) => createLarkCliTaskNotifyHook(cfg),
+  WecomTaskNotifyPlugin: (cfg) => createWecomTaskNotifyHook(cfg),
+  LarkCliWorkflowNotifyPlugin: (cfg) => createLarkCliWorkflowNotifyHook(cfg),
+  PerTaskGroupChatPlugin: (cfg) => createPerTaskGroupChatPlugin(cfg),
+  "task-tag": () => new TaskTagPlugin
+};
+function getWecomPluginFactories() {
+  return BUILT_IN_PLUGIN_FACTORIES;
+}
+function getPluginHookPointsShared(plugin) {
+  if (Array.isArray(plugin.hooks)) {
+    return plugin.hooks.map((h) => h.point || h);
   }
-  const pending = handleCardActionInner(event, ports, taskId);
-  cardActionInflight.set(inflightKey, pending);
-  try {
-    return await pending;
-  } finally {
-    cardActionInflight.delete(inflightKey);
+  if (Array.isArray(plugin.hookPoints)) {
+    return plugin.hookPoints.map((h) => h.point || h);
   }
-}
-async function handleCardActionInner(event, ports, taskId) {
-  const { action } = event.actionValue;
-  if (!ports.getTask) {
-    return { ok: false, action, error: "ports.getTask not injected" };
+  if (typeof plugin.execute === "function" && plugin.hookPoint) {
+    return [plugin.hookPoint];
   }
-  const task = await ports.getTask(taskId);
-  if (!task) {
-    return { ok: false, action, error: `Task #${taskId} not found` };
+  if (plugin.name && typeof plugin.execute === "function") {
+    return [
+      "task:after.create",
+      "task:after.update",
+      "task:operation:after.create",
+      "task:after.complete",
+      "task:after.delete"
+    ];
   }
-  const existingChatId = extractPerTaskChatId(task.context);
-  if (action === "create_group") {
-    return await handleCreateGroup(event, ports, task, existingChatId);
-  } else {
-    return await handleDisbandGroup(event, ports, task, existingChatId);
-  }
-}
-function buildCardAfterGroupChange(event, ports, task, perTaskChatId, perTaskChatName) {
-  const meta = buildTaskMetaFromTask(task, perTaskChatId, perTaskChatName);
-  const preserved = ports.notifier?.updateMetaAndBuildCard?.(event.messageId, meta, { clearPerTaskChat: !perTaskChatId });
-  if (preserved) {
-    logger.debug(`buildCardAfterGroupChange: 复用 notifier 累积状态（里程碑历史保留）messageId=${event.messageId}`);
-    return preserved;
-  }
-  logger.warn(`buildCardAfterGroupChange: notifier 无 messageId=${event.messageId} 的状态，` + `fallback 重建卡片（该卡片的历史里程碑可能丢失）`);
-  return buildTaskCard({
-    status: "running",
-    meta,
-    milestones: [
-      { title: "Task 创建", timestamp: new Date().toISOString(), description: task.current_status }
-    ]
-  });
+  return [];
 }
-async function handleCreateGroup(event, ports, task, existingChatId) {
-  if (existingChatId) {
-    const existingName = extractPerTaskChatName(task.context);
-    logger.info(`handleCreateGroup: Task #${task.id} 已有专属群 ${existingChatId}（幂等命中，不重复建群）`);
-    return {
-      ok: true,
-      action: "create_group",
-      newChatId: existingChatId,
-      cardUpdate: buildCardAfterGroupChange(event, ports, task, existingChatId, existingName)
+function registerPluginHooksShared(plugin, pluginName, sourceId) {
+  const hookPoints = getPluginHookPointsShared(plugin);
+  if (typeof plugin.init === "function") {
+    const pluginEnv = {
+      getComponent: () => null,
+      registerAgent: () => {},
+      registerTool: () => {},
+      registerHook: (hook) => {
+        globalHookManager.register(hook.point, {
+          name: `${pluginName}:${hook.point}`,
+          priority: hook.priority ?? 0,
+          pluginName,
+          sourceId,
+          execute: hook.handler
+        });
+      },
+      logger: {
+        debug: (...args) => console.debug(`[plugin:${pluginName}]`, ...args),
+        info: (...args) => console.info(`[plugin:${pluginName}]`, ...args),
+        warn: (...args) => console.warn(`[plugin:${pluginName}]`, ...args),
+        error: (...args) => console.error(`[plugin:${pluginName}]`, ...args)
+      }
     };
-  }
-  if (!ports.createGroupChat) {
-    return { ok: false, action: "create_group", error: "ports.createGroupChat not injected" };
-  }
-  try {
-    const renderedName = truncateText(`Task #${task.id} - ${task.title ?? "(无标题)"}`, 60);
-    const description = truncateText(`roy-agent task #${task.id} - ${task.project_path ?? ""}`, 100);
-    const operatorOpenId = extractOperatorOpenId(event.operatorId);
-    const initialUserIds = operatorOpenId ? [operatorOpenId] : undefined;
-    const chatId = await ports.createGroupChat({
-      name: renderedName,
-      description,
-      profile: event.profile,
-      initialUserIds
-    });
-    let invitedOpenIds = [];
-    if (operatorOpenId) {
-      if (initialUserIds) {
-        invitedOpenIds = [operatorOpenId];
-        logger.debug(`handleCreateGroup: ${operatorOpenId} 已在建群时邀请（initialUserIds 路径）`);
-      } else if (ports.inviteUser) {
-        try {
-          await ports.inviteUser(chatId, operatorOpenId, event.profile);
-          invitedOpenIds = [operatorOpenId];
-          logger.debug(`handleCreateGroup: 走 inviteUser 端口邀请 ${operatorOpenId} 进 ${chatId}`);
-        } catch (err) {
-          logger.warn(`handleCreateGroup: inviteUser(${chatId}, ${operatorOpenId}) 失败（不阻断主流程）: ${err.message}`);
-        }
-      } else {
-        logger.warn(`handleCreateGroup: createGroupChat 不支持 initialUserIds 且 inviteUser 未注入，` + `${operatorOpenId} 未被拉进群 ${chatId}。` + `需升级 caller（bridge/real impl）使用 ports.inviteUser 或实现 createGroupChat.initialUserIds 参数。`);
+    plugin.init(pluginEnv);
+    return hookPoints;
+  }
+  if (typeof plugin.execute === "function") {
+    if (plugin.hookPoint) {
+      globalHookManager.register(plugin.hookPoint, {
+        name: `${pluginName}:${plugin.hookPoint}`,
+        priority: plugin.priority ?? 0,
+        pluginName,
+        sourceId,
+        execute: plugin.execute.bind(plugin)
+      });
+    } else {
+      for (const hookPoint of hookPoints) {
+        globalHookManager.register(hookPoint, {
+          name: `${pluginName}:${hookPoint}`,
+          priority: plugin.priority ?? 0,
+          pluginName,
+          sourceId,
+          execute: plugin.execute.bind(plugin)
+        });
       }
     }
-    const newContext = patchContext(task.context ?? "{}", {
-      [CTX_FIELD_CHAT_ID]: chatId,
-      [CTX_FIELD_CHAT_NAME]: renderedName,
-      [CTX_FIELD_CHAT_CREATED_AT]: new Date().toISOString(),
-      [CTX_FIELD_CHAT_TASK_ID]: task.id,
-      [CTX_FIELD_CHAT_INVITEES]: invitedOpenIds.length > 0 ? invitedOpenIds : undefined
-    });
-    if (ports.updateTaskContext) {
-      await ports.updateTaskContext(task.id, newContext);
+    return hookPoints;
+  }
+  if (Array.isArray(plugin.hooks)) {
+    for (const hook of plugin.hooks) {
+      const hookPoint = hook.point || hook;
+      const priority = hook.priority ?? 0;
+      globalHookManager.register(hookPoint, {
+        name: `${pluginName}:${hookPoint}`,
+        priority,
+        pluginName,
+        sourceId,
+        execute: async (ctx) => {
+          await plugin.execute(ctx);
+        }
+      });
     }
-    const cardUpdate = buildCardAfterGroupChange(event, ports, task, chatId, renderedName);
-    return { ok: true, action: "create_group", newChatId: chatId, cardUpdate };
-  } catch (err) {
-    logger.error(`handleCardAction.create_group failed: ${err.message}`);
-    return { ok: false, action: "create_group", error: err.message };
+    return hookPoints;
   }
+  return hookPoints;
 }
-function extractOperatorOpenId(raw) {
-  if (!raw)
-    return;
-  if (typeof raw === "string")
-    return raw;
-  if (typeof raw === "object" && typeof raw.open_id === "string")
-    return raw.open_id;
-  return;
-}
-async function handleDisbandGroup(event, ports, task, existingChatId) {
-  if (!existingChatId) {
-    return {
-      ok: false,
-      action: "disband_group",
-      error: `Task #${task.id} 无专属群（context.larkPerTaskChatId 空），无需解散`
-    };
-  }
-  if (!ports.deleteGroupChat) {
-    return { ok: false, action: "disband_group", error: "ports.deleteGroupChat not injected" };
+function importPluginShared(name, factories, pluginConfig = {}) {
+  const factory = factories[name];
+  if (!factory) {
+    console.error(`[es-plugins] Unknown plugin: ${name}`);
+    return null;
   }
   try {
-    await ports.deleteGroupChat(existingChatId, event.profile);
-    const newContext = patchContext(task.context ?? "{}", {
-      [CTX_FIELD_CHAT_ID]: undefined,
-      [CTX_FIELD_CHAT_NAME]: undefined,
-      [CTX_FIELD_CHAT_CREATED_AT]: undefined,
-      [CTX_FIELD_CHAT_TASK_ID]: undefined
+    return factory({
+      sourceId: "",
+      pluginName: name,
+      ...pluginConfig
     });
-    if (ports.updateTaskContext) {
-      await ports.updateTaskContext(task.id, newContext);
-    }
-    const cardUpdate = buildCardAfterGroupChange(event, ports, task, undefined, undefined);
-    return { ok: true, action: "disband_group", cardUpdate };
-  } catch (err) {
-    logger.error(`handleCardAction.disband_group failed: ${err.message}`);
-    return { ok: false, action: "disband_group", error: err.message };
-  }
-}
-function patchContext(contextStr, changes) {
-  let obj = {};
-  try {
-    const parsed = JSON.parse(contextStr);
-    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-      obj = parsed;
-    }
-  } catch {
-    obj = {};
-  }
-  for (const [k, v] of Object.entries(changes)) {
-    if (v === undefined) {
-      delete obj[k];
-    } else {
-      obj[k] = v;
-    }
-  }
-  return JSON.stringify(obj);
-}
-function buildTaskMetaFromTask(task, perTaskChatId, perTaskChatName) {
-  return {
-    id: task.id,
-    title: task.title,
-    description: task.description,
-    goals: task.goals,
-    parentTaskId: typeof task.parent_task_id === "number" && task.parent_task_id > 0 ? task.parent_task_id : undefined,
-    priority: task.priority,
-    type: task.type,
-    projectPath: task.project_path,
-    context: task.context,
-    currentStatus: task.current_status,
-    perTaskChatId,
-    perTaskChatName
-  };
-}
-async function deleteGroupChatViaLarkCli(chatId, profile) {
-  const profileFlag = profile ? `--profile ${profile} ` : "";
-  try {
-    const { stdout: authStdout } = await execAsync(`lark-cli ${profileFlag}auth status --json`, { timeout: 15000 });
-    const appId = JSON.parse(authStdout).appId;
-    if (!appId) {
-      throw new Error(`lark-cli auth status 未返回 appId: ${authStdout.slice(0, 200)}`);
-    }
-    const cmd = `lark-cli ${profileFlag}api DELETE /open-apis/im/v1/chats/${chatId}/members ` + `--params '{"member_id_type":"app_id"}' ` + `--data ${shellQuote(JSON.stringify({ id_list: [appId] }))} ` + `--as bot`;
-    const { stdout, stderr } = await execAsync(cmd, { timeout: 30000 });
-    logger.debug(`deleteGroupChatViaLarkCli(${chatId}) bot 退群 ok: ` + `stdout=${stdout?.slice(0, 300)} stderr=${stderr?.slice(0, 300)}`);
-  } catch (err) {
-    logger.warn(`deleteGroupChatViaLarkCli(${chatId}) bot 退群失败（task.context 仍会清掉，` + `飞书侧群会保留）：${err.message}`);
+  } catch (error) {
+    console.error(`[es-plugins] Failed to instantiate plugin ${name}:`, error);
+    return null;
   }
 }
-function shellQuote(s) {
-  return `'${s.replace(/'/g, `'\\''`)}'`;
-}
-function truncateText(text, maxLen) {
-  if (!text)
-    return "";
-  if (text.length <= maxLen)
-    return text;
-  return text.substring(0, Math.max(0, maxLen - 3)) + "...";
-}
-async function createGroupChatViaLarkCli(opts) {
-  const profileFlag = opts.profile ? `--profile ${opts.profile} ` : "";
-  const usersFlag = opts.initialUserIds && opts.initialUserIds.length > 0 ? `--users ${shellQuote(opts.initialUserIds.join(","))} ` : "";
-  const cmd = `lark-cli ${profileFlag}im +chat-create --name ${shellQuote(truncateText(opts.name, 60))} ` + usersFlag + `--description ${shellQuote(truncateText(opts.description, 100))} --as bot`;
-  const { stdout } = await execAsync(cmd, { timeout: 60000 });
-  const m = stdout.match(/"chat_id"\s*:\s*"(oc_[a-f0-9]+)"/);
-  if (!m) {
-    throw new Error(`lark-cli +chat-create 返回无法解析: ${stdout.slice(0, 300)}`);
+function unregisterPluginHooksShared(pluginName, hookPoints) {
+  for (const hookPoint of hookPoints) {
+    globalHookManager.unregister(hookPoint, `${pluginName}:${hookPoint}`);
   }
-  return m[1];
 }
 
 // src/env/event-source/timer-handler.ts
 init_decorator();
+init_logger();
 var DEFAULT_TIMER_INTERVAL_MS = 10 * 60 * 1000;
+var SKIPPED_TICK_LOG_EVERY = 20;
+var timerLogger = createLogger("timer:event-source");
 var SELF_REMINDER_MESSAGE = `[Timer Self-Reminder]
 请读取最近 1 周处理的 task 信息，分析用户当前的工作目标和重点任务。
 基于分析结果，自主构建有价值的任务来推进用户目标。
@@ -316,6 +235,19 @@ var TIMER_OPTIONS_KEY_SCHEDULE = "schedule";
 var TIMER_OPTIONS_KEY_SESSION_ID = "sessionId";
 var TIMER_OPTIONS_KEY_SKIP_WHEN_RUNNING = "skipWhenRunning";
 var TIME_PATTERN = /^([01]\d|2[0-3]):([0-5]\d)$/;
+function buildFireSpanAttributes(ctx) {
+  const attrs = {
+    mode: ctx.mode,
+    sourceId: ctx.sourceId,
+    skippedSinceLastFire: ctx.skippedSinceLastFire
+  };
+  if (ctx.entry !== undefined) {
+    attrs.scheduleTime = ctx.entry.time;
+    if (ctx.entry.label !== undefined)
+      attrs.scheduleLabel = ctx.entry.label;
+  }
+  return attrs;
+}
 function isValidScheduleTime(time) {
   return typeof time === "string" && TIME_PATTERN.test(time);
 }
@@ -406,6 +338,9 @@ class TimerInstance {
   scheduleSessionId;
   skipWhenRunning;
   firedKeys = new Set;
+  firedTicks = 0;
+  skippedTicks = 0;
+  skippedSinceLastFire = 0;
   now;
   status = "created";
   timerId;
@@ -461,6 +396,13 @@ class TimerInstance {
   getStatus() {
     return this.status;
   }
+  getTickStats() {
+    return {
+      firedTicks: this.firedTicks,
+      skippedTicks: this.skippedTicks,
+      skippedSinceLastFire: this.skippedSinceLastFire
+    };
+  }
   onEvent(handler) {
     this.eventHandler = handler;
   }
@@ -477,13 +419,31 @@ class TimerInstance {
       allTasks = this.getRunningTasks();
     } catch (error) {
       console.warn(`[TimerInstance] Failed to get running tasks, skipping tick: ${error}`);
+      this.recordSkip();
       return;
     }
     const hasRunning = Array.isArray(allTasks) && allTasks.some((t) => t.status === "running");
     if (hasRunning) {
+      this.recordSkip();
       return;
     }
-    const event = this.buildSelfReminderEvent();
+    this.fireTick({
+      mode: "interval",
+      sourceId: this.config.id,
+      skippedSinceLastFire: this.skippedSinceLastFire
+    });
+  }
+  recordSkip() {
+    this.skippedTicks++;
+    this.skippedSinceLastFire++;
+    if (this.skippedTicks % SKIPPED_TICK_LOG_EVERY === 0) {
+      timerLogger.debug(`[TimerInstance] ${this.config.id}: ${this.skippedTicks} ticks skipped ` + `(${this.skippedSinceLastFire} since last fire, mode=${this.isScheduleMode ? "schedule" : "interval"})`);
+    }
+  }
+  fireTick(ctx) {
+    this.firedTicks++;
+    this.skippedSinceLastFire = 0;
+    const event = this.buildSelfReminderEvent(ctx.entry);
     this.eventHandler?.(event);
   }
   tickSchedule() {
@@ -492,6 +452,7 @@ class TimerInstance {
         this.invalidScheduleWarned = true;
         console.warn(`[TimerInstance] Timer ${this.config.id} has an invalid or empty schedule configuration; ` + `no events will be fired. Check options.schedule (expected [{ time: "HH:MM", prompt: "..." }]).`);
       }
+      this.recordSkip();
       return;
     }
     const now = new Date(this.now());
@@ -513,6 +474,7 @@ class TimerInstance {
           hasRunning = Array.isArray(allTasks) && allTasks.some((t) => t.status === "running");
         } catch (error) {
           console.warn(`[TimerInstance] Failed to get running tasks, skipping tick: ${error}`);
+          this.recordSkip();
           return;
         }
         if (hasRunning) {
@@ -521,10 +483,15 @@ class TimerInstance {
       }
       this.firedKeys.add(firedKey);
       this.pruneFiredKeys(dateKey);
-      const event = this.buildSelfReminderEvent(entry);
-      this.eventHandler?.(event);
+      this.fireTick({
+        mode: "schedule",
+        sourceId: this.config.id,
+        skippedSinceLastFire: this.skippedSinceLastFire,
+        entry
+      });
       return;
     }
+    this.recordSkip();
   }
   pruneFiredKeys(currentDateKey) {
     if (this.firedKeys.size <= 32)
@@ -581,14 +548,14 @@ class TimerInstance {
   }
 }
 __legacyDecorateClassTS([
-  TracedAs("timer.tick", { recordParams: false, log: false })
-], TimerInstance.prototype, "tick", null);
-__legacyDecorateClassTS([
-  TracedAs("timer.tickSchedule", { recordParams: false, log: false })
-], TimerInstance.prototype, "tickSchedule", null);
-__legacyDecorateClassTS([
-  TracedAs("timer.buildSelfReminderEvent", { recordParams: false, log: false })
-], TimerInstance.prototype, "buildSelfReminderEvent", null);
+  TracedAs("timer.tick.fire", {
+    recordParams: true,
+    recordResult: false,
+    log: false,
+    paramFilter: (args) => buildFireSpanAttributes(args[0]),
+    flattenParamFilter: true
+  })
+], TimerInstance.prototype, "fireTick", null);
 var timerHandler = {
   type: "timer",
   validateConfig(config) {
@@ -788,13 +755,19 @@ class BountyIMInstance {
     const { email } = readBountyIMConfig(this.config);
     return email || "unknown";
   }
+  cachedSystemPrompt;
+  systemPromptResolved = false;
   getCurrentSystemPrompt() {
-    const { email, imServerUrl } = readBountyIMConfig(this.config);
-    return resolveBountyIMSystemPrompt({
-      configSystemPrompt: this.config.systemPrompt,
-      currentEmail: email,
-      imServerUrl
-    });
+    if (!this.systemPromptResolved) {
+      const { email, imServerUrl } = readBountyIMConfig(this.config);
+      this.cachedSystemPrompt = resolveBountyIMSystemPrompt({
+        configSystemPrompt: this.config.systemPrompt,
+        currentEmail: email,
+        imServerUrl
+      });
+      this.systemPromptResolved = true;
+    }
+    return this.cachedSystemPrompt;
   }
   getStatus() {
     return this.status;
@@ -1148,123 +1121,2030 @@ class BountyCliInstance {
       this.processStdout(stdoutBuffer, channel ?? "");
       stdoutBuffer = "";
     });
-    this.child.stderr?.on("data", (data) => {
-      const output = data.toString();
-      stderrBuffer += output;
-      this.processStderr(stderrBuffer);
-      stderrBuffer = "";
+    this.child.stderr?.on("data", (data) => {
+      const output = data.toString();
+      stderrBuffer += output;
+      this.processStderr(stderrBuffer);
+      stderrBuffer = "";
+    });
+    this.child.on("exit", (code, signal) => {
+      if (code !== 0 && signal !== "SIGINT" && signal !== "SIGTERM") {
+        this.setStatus("error");
+      } else {
+        this.setStatus("stopped");
+      }
+    });
+    this.child.on("error", (err) => {
+      console.error(`[bounty-cli] spawn error: ${err.message}`);
+      this.setStatus("error");
+    });
+    this.setStatus("running");
+  }
+  processStdout(buffer, fallbackChannel) {
+    const lines = buffer.split(`
+`);
+    const tail = lines.pop() ?? "";
+    this.buffer = tail;
+    for (const line of lines) {
+      const trimmed = line.trim();
+      if (!trimmed)
+        continue;
+      this.handleEventLine(trimmed, fallbackChannel);
+    }
+  }
+  processStderr(buffer) {
+    const lines = buffer.split(`
+`);
+    const tail = lines.pop() ?? "";
+    for (const line of lines) {
+      const trimmed = line.trim();
+      if (!trimmed)
+        continue;
+      if (trimmed.startsWith("{") && trimmed.includes("event_id")) {
+        this.handleEventLine(trimmed, readBountyCliConfig(this.config).channel ?? "");
+      }
+    }
+    if (tail.trim().length > 0) {
+      this.buffer = tail;
+    } else {
+      this.buffer = "";
+    }
+  }
+  handleEventLine(line, fallbackChannel) {
+    let raw;
+    try {
+      raw = JSON.parse(line);
+    } catch {
+      console.error(`[bounty-cli] failed to parse event line: ${line.slice(0, 200)}`);
+      return;
+    }
+    const { metadata, replyChannel } = translateEvent(raw, fallbackChannel);
+    const event = {
+      metadata,
+      rawEvent: raw,
+      replyChannel,
+      recommendedAction: buildBountyCliRecommendedAction({
+        profile: readBountyCliConfig(this.config).profile,
+        channelName: String(metadata.channelName ?? fallbackChannel)
+      })
+    };
+    if (this.eventHandler) {
+      try {
+        this.eventHandler(event);
+      } catch (err) {
+        console.error(`[bounty-cli] event handler threw: ${err}`);
+      }
+    }
+  }
+  async stop() {
+    if (this.status === "stopped" || this.status === "created")
+      return;
+    if (this.child && !this.child.killed) {
+      this.child.kill("SIGINT");
+      await new Promise((resolve) => {
+        const timer = setTimeout(() => {
+          if (this.child && !this.child.killed) {
+            this.child.kill("SIGKILL");
+          }
+          resolve();
+        }, 3000);
+        if (this.child) {
+          this.child.on("exit", () => {
+            clearTimeout(timer);
+            resolve();
+          });
+        } else {
+          clearTimeout(timer);
+          resolve();
+        }
+      });
+    }
+    this.setStatus("stopped");
+  }
+}
+var bountyCliHandler = {
+  type: "bounty-cli",
+  validateConfig(config) {
+    const errors = [];
+    if (!config.id)
+      errors.push("EventSource ID is required");
+    if (!config.name)
+      errors.push("EventSource name is required");
+    const { channel, customCommand } = readBountyCliConfig(config);
+    if (!channel && !customCommand) {
+      errors.push("Bounty CLI 'channel' (top-level channel or options.channel) is required");
+    }
+    return errors;
+  },
+  createInstance(config) {
+    return new BountyCliInstance(config);
+  }
+};
+
+// src/env/event-source/wecom-cli-handler.ts
+import { spawn as spawn2 } from "child_process";
+import { existsSync, readFileSync } from "fs";
+import { delimiter, isAbsolute, join as join2 } from "path";
+
+// src/env/event-source/wecom-ws-bridge.ts
+var WECOM_WS_URL = "wss://openws.work.weixin.qq.com";
+var WECOM_HEARTBEAT_INTERVAL_MS = 30000;
+var WECOM_RECONNECT_BASE_DELAY_MS = 1000;
+var WECOM_RECONNECT_MAX_DELAY_MS = 60000;
+var WECOM_MAX_RECONNECT_ATTEMPTS = 10;
+var WECOM_MAX_AUTH_FAILURE_ATTEMPTS = 5;
+function randomString() {
+  return Math.random().toString(36).slice(2, 10);
+}
+function generateWecomReqId(prefix) {
+  return `${prefix}_${Date.now()}_${randomString()}`;
+}
+function buildWecomAuthFrame(botId, secret) {
+  return {
+    cmd: "aibot_subscribe",
+    headers: { req_id: generateWecomReqId("aibot_subscribe") },
+    body: { bot_id: botId, secret }
+  };
+}
+function buildWecomHeartbeatFrame() {
+  return {
+    cmd: "ping",
+    headers: { req_id: generateWecomReqId("ping") }
+  };
+}
+function buildWecomRespondFrame(reqId, body) {
+  const id = reqId.trim();
+  if (!id) {
+    throw new Error("buildWecomRespondFrame: req_id is required (reply must reference the original message frame)");
+  }
+  return {
+    cmd: "aibot_respond_msg",
+    headers: { req_id: id },
+    body
+  };
+}
+function isWecomAuthResponse(frame) {
+  if (frame.cmd)
+    return false;
+  const reqId = frame.headers?.req_id ?? "";
+  return reqId.startsWith("aibot_subscribe_");
+}
+function isWecomHeartbeatResponse(frame) {
+  if (frame.cmd)
+    return false;
+  const reqId = frame.headers?.req_id ?? "";
+  return reqId.startsWith("ping_");
+}
+function isWecomDisconnectedEvent(frame) {
+  if (!frame || typeof frame !== "object")
+    return false;
+  const f = frame;
+  if (f.cmd !== "aibot_event_callback")
+    return false;
+  return f.body?.event?.eventtype === "disconnected_event";
+}
+function sanitizeWecomFrame(frame) {
+  const clean = { ...frame };
+  if ("secret" in clean)
+    delete clean.secret;
+  if (clean.body && typeof clean.body === "object") {
+    clean.body = { ...clean.body };
+    if ("secret" in clean.body)
+      delete clean.body.secret;
+  }
+  return clean;
+}
+function backoffDelay(attempt, base, max) {
+  return Math.min(base * Math.pow(2, attempt - 1), max);
+}
+
+class WecomWsBridge {
+  opts;
+  botId;
+  secret;
+  wsFactory;
+  wsUrl;
+  ws;
+  heartbeatTimer;
+  reconnectTimer;
+  reconnectAttempts = 0;
+  authFailureAttempts = 0;
+  manualClose = false;
+  lastCloseWasAuthFailure = false;
+  stopped = false;
+  onMessageCb;
+  onAuthenticatedCb;
+  onReconnectingCb;
+  onErrorCb;
+  constructor(opts) {
+    this.opts = {
+      heartbeatIntervalMs: opts.heartbeatIntervalMs ?? WECOM_HEARTBEAT_INTERVAL_MS,
+      reconnectBaseDelayMs: opts.reconnectBaseDelayMs ?? WECOM_RECONNECT_BASE_DELAY_MS,
+      reconnectMaxDelayMs: opts.reconnectMaxDelayMs ?? WECOM_RECONNECT_MAX_DELAY_MS,
+      maxReconnectAttempts: opts.maxReconnectAttempts ?? WECOM_MAX_RECONNECT_ATTEMPTS,
+      maxAuthFailureAttempts: opts.maxAuthFailureAttempts ?? WECOM_MAX_AUTH_FAILURE_ATTEMPTS
+    };
+    this.botId = opts.botId;
+    this.secret = opts.secret;
+    this.wsUrl = opts.wsUrl ?? WECOM_WS_URL;
+    this.wsFactory = opts.wsFactory ?? ((url) => {
+      throw new Error("wsFactory is required in production (inject WebSocket from 'ws')");
+    });
+  }
+  onMessage(cb) {
+    this.onMessageCb = cb;
+  }
+  onAuthenticated(cb) {
+    this.onAuthenticatedCb = cb;
+  }
+  onReconnecting(cb) {
+    this.onReconnectingCb = cb;
+  }
+  onError(cb) {
+    this.onErrorCb = cb;
+  }
+  connect() {
+    if (this.stopped)
+      return;
+    const ws = this.wsFactory(this.wsUrl);
+    this.ws = ws;
+    ws.on("open", () => {
+      this.lastCloseWasAuthFailure = false;
+      this.sendFrame(buildWecomAuthFrame(this.optsBotId(), this.optsSecret()));
+    });
+    ws.on("message", (data) => {
+      try {
+        const raw = String(data).replace(/[\x00-\x08\x0B-\x0D\x0E-\x1F]/g, "");
+        const frame = JSON.parse(raw);
+        this.handleFrame(frame);
+      } catch {}
+    });
+    ws.on("close", () => {
+      this.stopHeartbeat();
+      if (this.manualClose || this.stopped)
+        return;
+      this.scheduleReconnect();
+    });
+    ws.on("error", (err) => {
+      this.onErrorCb?.(err);
+    });
+  }
+  optsBotId() {
+    return this.botId;
+  }
+  optsSecret() {
+    return this.secret;
+  }
+  handleFrame(frame) {
+    if (isWecomAuthResponse(frame)) {
+      if ((frame.errcode ?? 0) !== 0) {
+        this.lastCloseWasAuthFailure = true;
+        this.onErrorCb?.(new Error(`wecom auth failed: ${frame.errmsg ?? "?"} (code=${frame.errcode})`));
+        this.ws?.terminate();
+        return;
+      }
+      this.reconnectAttempts = 0;
+      this.authFailureAttempts = 0;
+      this.startHeartbeat();
+      this.onAuthenticatedCb?.();
+      return;
+    }
+    if (isWecomHeartbeatResponse(frame))
+      return;
+    if (isWecomDisconnectedEvent(frame)) {
+      this.lastCloseWasAuthFailure = false;
+      this.onErrorCb?.(new Error("wecom disconnected_event: server kicked this connection " + "(bot allows only 1 long connection) — reconnecting"));
+      this.stopHeartbeat();
+      const stale = this.ws;
+      this.ws = undefined;
+      try {
+        stale?.close?.();
+      } catch {}
+      this.scheduleReconnect();
+      return;
+    }
+    this.onMessageCb?.(sanitizeWecomFrame(frame));
+  }
+  sendFrame(frame) {
+    try {
+      this.ws?.send(JSON.stringify(frame));
+    } catch (err) {
+      this.onErrorCb?.(err);
+    }
+  }
+  respond(reqId, body) {
+    if (this.stopped || this.manualClose) {
+      return new Error("wecom bridge stopped, cannot respond");
+    }
+    if (!this.ws || this.ws.readyState !== 1) {
+      return new Error("wecom bridge not connected, cannot respond");
+    }
+    try {
+      let frame;
+      try {
+        frame = buildWecomRespondFrame(reqId, body);
+      } catch (err) {
+        return err;
+      }
+      this.ws.send(JSON.stringify(frame));
+      return;
+    } catch (err) {
+      return err instanceof Error ? err : new Error(String(err));
+    }
+  }
+  sendCmd(cmd, body) {
+    if (this.stopped || this.manualClose) {
+      return new Error("wecom bridge stopped, cannot send");
+    }
+    if (!this.ws || this.ws.readyState !== 1) {
+      return new Error("wecom bridge not connected, cannot send");
+    }
+    try {
+      this.ws.send(JSON.stringify({
+        cmd,
+        headers: { req_id: generateWecomReqId(cmd) },
+        body
+      }));
+      return;
+    } catch (err) {
+      return err instanceof Error ? err : new Error(String(err));
+    }
+  }
+  sendFrameWithReqId(frame) {
+    if (this.stopped || this.manualClose) {
+      return new Error("wecom bridge stopped, cannot send");
+    }
+    if (!this.ws || this.ws.readyState !== 1) {
+      return new Error("wecom bridge not connected, cannot send");
+    }
+    if (!frame.headers?.req_id?.trim()) {
+      return new Error("sendFrameWithReqId: req_id is required (must reference the original frame)");
+    }
+    try {
+      this.ws.send(JSON.stringify(frame));
+      return;
+    } catch (err) {
+      return err instanceof Error ? err : new Error(String(err));
+    }
+  }
+  startHeartbeat() {
+    this.stopHeartbeat();
+    this.heartbeatTimer = setInterval(() => {
+      this.sendFrame(buildWecomHeartbeatFrame());
+    }, this.opts.heartbeatIntervalMs);
+  }
+  stopHeartbeat() {
+    if (this.heartbeatTimer) {
+      clearInterval(this.heartbeatTimer);
+      this.heartbeatTimer = undefined;
+    }
+  }
+  scheduleReconnect() {
+    if (this.manualClose || this.stopped)
+      return;
+    if (this.reconnectTimer)
+      return;
+    const isAuthFailure = this.lastCloseWasAuthFailure;
+    if (isAuthFailure) {
+      if (this.authFailureAttempts >= this.opts.maxAuthFailureAttempts) {
+        this.onErrorCb?.(new Error(`wecom auth failed ${this.authFailureAttempts} times, giving up`));
+        return;
+      }
+      this.authFailureAttempts++;
+    } else {
+      if (this.reconnectAttempts >= this.opts.maxReconnectAttempts) {
+        this.onErrorCb?.(new Error(`wecom reconnect exhausted (${this.reconnectAttempts} attempts)`));
+        return;
+      }
+      this.reconnectAttempts++;
+    }
+    const attempt = isAuthFailure ? this.authFailureAttempts : this.reconnectAttempts;
+    const delay = backoffDelay(attempt, this.opts.reconnectBaseDelayMs, this.opts.reconnectMaxDelayMs);
+    this.onReconnectingCb?.(attempt);
+    this.reconnectTimer = setTimeout(() => {
+      this.reconnectTimer = undefined;
+      if (this.manualClose || this.stopped)
+        return;
+      this.connect();
+    }, delay);
+  }
+  stop() {
+    this.stopped = true;
+    this.manualClose = true;
+    this.stopHeartbeat();
+    if (this.reconnectTimer) {
+      clearTimeout(this.reconnectTimer);
+      this.reconnectTimer = undefined;
+    }
+    try {
+      this.ws?.close();
+    } catch {}
+    this.ws = undefined;
+  }
+}
+
+// src/env/event-source/wecom-card-action-handler.ts
+init_logger();
+var logger = createLogger("wecom:card-action");
+var cardActionInflight = new Map;
+var ROY_TASK_PREFIX = "roy-task-";
+function parseRoySessionId(cardTaskId) {
+  if (!cardTaskId.startsWith(ROY_SESSION_PREFIX))
+    return null;
+  const rest = cardTaskId.slice(ROY_SESSION_PREFIX.length);
+  const sepIdx = rest.indexOf(WECOM_SESSION_TASK_SEP);
+  const id = (sepIdx >= 0 ? rest.slice(0, sepIdx) : rest).trim();
+  return id || null;
+}
+function parseRoyTaskId(cardTaskId) {
+  if (!cardTaskId.startsWith(ROY_TASK_PREFIX))
+    return null;
+  const rest = cardTaskId.slice(ROY_TASK_PREFIX.length);
+  const m = rest.match(/^(\d+)/);
+  if (!m)
+    return null;
+  const n = Number(m[1]);
+  return Number.isFinite(n) && n > 0 ? n : null;
+}
+function extractWecomCardAction(frame) {
+  if (!frame || typeof frame !== "object")
+    return null;
+  const f = frame;
+  if (f.cmd !== "aibot_event_callback")
+    return null;
+  const body = f.body;
+  if (!body || typeof body !== "object")
+    return null;
+  const event = body.event;
+  if (event?.eventtype !== "template_card_event")
+    return null;
+  const tce = event.template_card_event;
+  if (!tce)
+    return null;
+  const cardTaskId = String(tce.task_id ?? "");
+  const from = body.from ?? {};
+  return {
+    eventKey: String(tce.event_key ?? ""),
+    cardTaskId,
+    taskId: parseRoyTaskId(cardTaskId),
+    sessionId: parseRoySessionId(cardTaskId),
+    userId: from.userid ?? "",
+    reqId: f.headers?.req_id ?? ""
+  };
+}
+var ACTION_CARD_LABEL = {
+  view: {
+    statusLabel: "\uD83D\uDC40 已查看",
+    note: "用户已查看任务"
+  },
+  mark_done: {
+    statusLabel: "\uD83C\uDF89 已完成",
+    note: "用户已确认任务完成"
+  },
+  reopen: {
+    statusLabel: "\uD83D\uDD04 进行中",
+    note: "用户已重新打开任务"
+  },
+  refresh_activity: {
+    statusLabel: "⚡ 活性已刷新",
+    note: "已读取子会话最新活性"
+  }
+};
+async function handleWecomCardAction(frame, ports) {
+  const action = extractWecomCardAction(frame);
+  if (!action) {
+    return { ok: false, error: "not a template_card_event frame" };
+  }
+  const inflightKey = `${action.cardTaskId}:${action.eventKey}`;
+  const inflight = cardActionInflight.get(inflightKey);
+  if (inflight) {
+    logger.warn(`handleWecomCardAction: ${inflightKey} 已有同操作在处理中` + `（疑似用户重复点击），本次忽略。`);
+    return { ok: false, error: "同操作处理中，已忽略重复点击" };
+  }
+  const job = doHandle(action, ports).finally(() => {
+    cardActionInflight.delete(inflightKey);
+  });
+  cardActionInflight.set(inflightKey, job);
+  return job;
+}
+async function probeSessionActivityByAssociatedTask(taskId, ports) {
+  if (!ports.findSessionCardByTaskId || !ports.loadSessionActivity) {
+    return;
+  }
+  const card = await ports.findSessionCardByTaskId(taskId);
+  if (!card?.sessionId)
+    return;
+  return await ports.loadSessionActivity(card.sessionId);
+}
+async function doHandle(action, ports) {
+  let actionType;
+  if (action.eventKey === WecomCardActionKey.MARK_DONE) {
+    actionType = "mark_done";
+  } else if (action.eventKey === WecomCardActionKey.REOPEN) {
+    actionType = "reopen";
+  } else if (action.eventKey === WecomCardActionKey.VIEW) {
+    actionType = "view";
+  } else if (action.eventKey === WecomCardActionKey.REFRESH_ACTIVITY) {
+    actionType = "refresh_activity";
+  } else if (action.eventKey === WecomCardActionKey.CREATE_LARK_GROUP) {
+    actionType = "create_lark_group";
+  } else {
+    return { ok: false, error: `unknown event_key: ${action.eventKey}` };
+  }
+  if (action.sessionId !== null) {
+    if (actionType === "refresh_activity") {
+      return await doHandleSessionActivity(action, ports);
+    }
+    if (actionType === "create_lark_group") {
+      return await doHandleSessionCreateLarkGroup(action, ports);
+    }
+    return {
+      ok: false,
+      error: `action ${actionType} requires a task card (got session ${action.sessionId})`
+    };
+  }
+  if (action.taskId === null && actionType !== "view") {
+    return {
+      ok: false,
+      error: `cannot parse roy task id from card task_id: ${action.cardTaskId}`
+    };
+  }
+  let opError;
+  try {
+    if (actionType === "mark_done" && action.taskId !== null) {
+      await ports.markTaskDone(action.taskId);
+    } else if (actionType === "reopen" && action.taskId !== null) {
+      await ports.reopenTask(action.taskId);
+    }
+  } catch (err) {
+    opError = err instanceof Error ? err.message : String(err);
+    logger.error(`handleWecomCardAction: task op failed for #${action.taskId}: ${opError}`);
+  }
+  const label = ACTION_CARD_LABEL[actionType];
+  const note = actionType === "view" || actionType === "refresh_activity" ? label.note : opError ? `${label.note}（操作失败：${opError}）` : label.note;
+  let timeline;
+  if ((actionType === "view" || actionType === "reopen") && action.taskId !== null) {
+    try {
+      timeline = ports.loadTimeline?.(action.taskId) ?? [];
+      if (timeline.length === 0) {
+        logger.warn(`handleWecomCardAction: task #${action.taskId} 无时间线记录，` + `降级为简单按钮态更新`);
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      logger.warn(`handleWecomCardAction: loadTimeline failed for ` + `task #${action.taskId}: ${msg}（降级为简单按钮态更新）`);
+      timeline = [];
+    }
+  }
+  let taskExtra;
+  try {
+    const t = action.taskId !== null ? await ports.loadTaskTitle?.(action.taskId) : undefined;
+    if (t && (t.title || t.number !== undefined)) {
+      taskExtra = { taskNumber: t.number, taskTitle: t.title };
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    logger.warn(`handleWecomCardAction: loadTaskTitle failed for ` + `task #${action.taskId}: ${msg}（降级为无标题更新）`);
+  }
+  let activity;
+  let activityTerminal;
+  if (actionType === "refresh_activity" && action.taskId !== null) {
+    try {
+      const r = await ports.loadSubSessionActivity?.(action.taskId);
+      activity = r?.activity ?? null;
+      activityTerminal = r?.terminal === true;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      logger.warn(`handleWecomCardAction: loadSubSessionActivity failed for ` + `task #${action.taskId}: ${msg}（降级为「暂无数据」）`);
+      activity = null;
+    }
+    if (activity === null) {
+      try {
+        const fallback = await probeSessionActivityByAssociatedTask(action.taskId, ports);
+        if (fallback?.activity) {
+          activity = fallback.activity;
+          activityTerminal = fallback.terminal === true;
+          logger.info(`handleWecomCardAction: task #${action.taskId} bgTask 反查失败，` + `已回退 session store probe（messageCount=${fallback.activity.messageCount}）`);
+        }
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn(`handleWecomCardAction: session probe fallback failed for ` + `task #${action.taskId}: ${msg}（保持「暂无数据」）`);
+      }
+    }
+  }
+  try {
+    await ports.updateCard(action.reqId, action.cardTaskId, label.statusLabel, note, timeline, actionType, activity === undefined ? taskExtra : {
+      ...taskExtra ?? {},
+      activity,
+      ...activityTerminal !== undefined ? { activityTerminal } : {}
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    logger.error(`handleWecomCardAction: updateCard failed: ${msg}`);
+    return {
+      ok: false,
+      action: actionType,
+      error: `card update failed: ${msg}`
+    };
+  }
+  if (opError) {
+    return { ok: false, action: actionType, error: opError };
+  }
+  logger.info(`handleWecomCardAction: task #${action.taskId} → ${actionType} ` + `(by ${action.userId})`);
+  return { ok: true, action: actionType };
+}
+async function doHandleSessionActivity(action, ports) {
+  const sessionId = action.sessionId;
+  let state;
+  try {
+    state = await ports.loadSessionCardState?.(sessionId);
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: loadSessionCardState failed for ${sessionId}: ` + `${err instanceof Error ? err.message : String(err)}（降级为仅活性）`);
+    state = undefined;
+  }
+  if (!state) {
+    logger.warn(`handleWecomCardAction: 无 session 卡持久层记录（${sessionId}）` + ` ⇒ 刷新卡降级为仅活性（生命周期/操作记录不可用）`);
+  }
+  let activity = null;
+  let probeTerminal;
+  try {
+    const r = await ports.loadSessionActivity?.(sessionId);
+    activity = r?.activity ?? null;
+    probeTerminal = r?.terminal;
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: loadSessionActivity failed for ${sessionId}: ` + `${err instanceof Error ? err.message : String(err)}（降级为「暂无数据」）`);
+    activity = null;
+  }
+  let sessionTask;
+  try {
+    const t = await ports.loadSessionTaskInfo?.(sessionId);
+    if (t && typeof t.id === "number") {
+      sessionTask = t;
+    }
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: loadSessionTaskInfo failed for ${sessionId}: ` + `${err instanceof Error ? err.message : String(err)}（降级为无任务行）`);
+  }
+  let linkedChatId;
+  try {
+    const g = await ports.findGroupChatForSession?.(sessionId);
+    if (g && typeof g.chatId === "string" && g.chatId.trim()) {
+      linkedChatId = g.chatId.trim();
+    }
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: findGroupChatForSession failed for ${sessionId}: ` + `${err instanceof Error ? err.message : String(err)}（当作没有群）`);
+  }
+  if (ports.updateSessionCard) {
+    try {
+      await ports.updateSessionCard(action.reqId, {
+        sessionId,
+        cardTaskId: action.cardTaskId,
+        state,
+        activity,
+        ...sessionTask ? { task: sessionTask } : {},
+        ...linkedChatId ? { perTaskChatId: linkedChatId } : {}
+      });
+      logger.info(`handleWecomCardAction: session ${sessionId} → refresh ` + `(lifecycle=${state?.lifecycle ?? "unknown"}, by ${action.userId})`);
+      return { ok: true, action: "refresh_activity" };
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      logger.error(`handleWecomCardAction: session card update failed for ${sessionId}: ${msg}`);
+      return {
+        ok: false,
+        action: "refresh_activity",
+        error: `card update failed: ${msg}`
+      };
+    }
+  }
+  try {
+    await ports.updateCard(action.reqId, action.cardTaskId, ACTION_CARD_LABEL.refresh_activity.statusLabel, ACTION_CARD_LABEL.refresh_activity.note, undefined, "refresh_activity", {
+      activity,
+      activityTerminal: state?.lifecycle !== undefined ? state.lifecycle !== "running" : probeTerminal ?? false
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    logger.error(`handleWecomCardAction: session card update failed for ${sessionId}: ${msg}`);
+    return { ok: false, action: "refresh_activity", error: `card update failed: ${msg}` };
+  }
+  logger.info(`handleWecomCardAction: session ${sessionId} → refresh ` + `(lifecycle=${state?.lifecycle ?? "unknown"}, by ${action.userId})`);
+  return { ok: true, action: "refresh_activity" };
+}
+async function doHandleSessionCreateLarkGroup(action, ports) {
+  const sessionId = action.sessionId;
+  let existingChatId;
+  try {
+    const g = await ports.findGroupChatForSession?.(sessionId);
+    if (g && typeof g.chatId === "string" && g.chatId.trim()) {
+      existingChatId = g.chatId.trim();
+    }
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: findGroupChatForSession(${sessionId}) 失败` + `（当作没有群）: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  if (existingChatId) {
+    logger.info(`handleWecomCardAction: session ${sessionId} 已有飞书群 ` + `${existingChatId}（幂等命中，不重复建群）`);
+    await updateSessionCardWithGroup(ports, action, sessionId, existingChatId);
+    return { ok: true, action: "create_lark_group", newChatId: existingChatId };
+  }
+  if (!ports.createLarkGroupForSession) {
+    return {
+      ok: false,
+      action: "create_lark_group",
+      error: "ports.createLarkGroupForSession not injected " + "(wecom-cli-handler wiring missing)"
+    };
+  }
+  let chatId;
+  try {
+    chatId = await ports.createLarkGroupForSession(sessionId);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    logger.error(`handleWecomCardAction: createLarkGroupForSession(${sessionId}) ` + `failed: ${msg}`);
+    await updateSessionCardWithGroup(ports, action, sessionId, undefined, `⚠️ 建群失败：${msg.slice(0, 80)}`);
+    return { ok: false, action: "create_lark_group", error: msg };
+  }
+  logger.info(`handleWecomCardAction: session ${sessionId} → 飞书群 ${chatId} ` + `创建成功（by ${action.userId}）`);
+  await updateSessionCardWithGroup(ports, action, sessionId, chatId);
+  if (ports.notifyGroupLink) {
+    try {
+      await ports.notifyGroupLink({
+        sessionId,
+        chatId,
+        ...action.userId ? { userId: action.userId } : {}
+      });
+    } catch (err) {
+      logger.warn(`handleWecomCardAction: notifyGroupLink(${sessionId} → ${chatId}) ` + `失败（不阻断建群结果）: ` + `${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  return { ok: true, action: "create_lark_group", newChatId: chatId };
+}
+async function updateSessionCardWithGroup(ports, action, sessionId, chatId, errorHint) {
+  if (!ports.updateSessionCard)
+    return;
+  try {
+    let state;
+    try {
+      state = await ports.loadSessionCardState?.(sessionId);
+    } catch {
+      state = undefined;
+    }
+    let activity = null;
+    try {
+      const r = await ports.loadSessionActivity?.(sessionId);
+      activity = r?.activity ?? null;
+    } catch {
+      activity = null;
+    }
+    await ports.updateSessionCard(action.reqId, {
+      sessionId,
+      cardTaskId: action.cardTaskId,
+      ...state ? { state } : {},
+      activity,
+      ...chatId ? { perTaskChatId: chatId } : {},
+      ...errorHint ? { errorHint } : {}
+    });
+    logger.info(`handleWecomCardAction: session card updated after group change ` + `(session=${sessionId}, chatId=${chatId ?? "none"})`);
+  } catch (err) {
+    logger.warn(`handleWecomCardAction: session card update after group change ` + `failed for ${sessionId}（不阻断建群结果）: ` + `${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+function buildWecomCardUpdateBody(input) {
+  const refreshable = input.action === "view" || input.action === "reopen";
+  const activityRefreshable = input.action === "refresh_activity";
+  const frame = buildWecomCardUpdateFrame({
+    reqId: "placeholder",
+    taskId: input.cardTaskId,
+    statusLabel: input.statusLabel,
+    note: input.note,
+    timeline: input.timeline,
+    taskTitle: input.taskTitle,
+    taskNumber: input.taskNumber,
+    buttonOverrides: refreshable ? [{ text: "刷新详情", key: WecomCardActionKey.VIEW, style: 1 }] : activityRefreshable ? [
+      { text: "刷新详情", key: WecomCardActionKey.VIEW, style: 2 },
+      { text: "刷新活性", key: WecomCardActionKey.REFRESH_ACTIVITY, style: 1 }
+    ] : [{ text: "已处理", key: "task_done_ack", style: 4 }],
+    ...input.activity !== undefined ? { activity: input.activity } : {},
+    ...input.activityTerminal !== undefined ? { activityTerminal: input.activityTerminal } : {}
+  });
+  return { cmd: frame.cmd, body: frame.body };
+}
+function buildWecomSessionCardUpdateBody(input) {
+  const state = input.state;
+  const lifecycle = state?.lifecycle ?? "unknown";
+  let milestones;
+  if (state?.milestones) {
+    try {
+      const arr = JSON.parse(state.milestones);
+      if (Array.isArray(arr) && arr.length > 0) {
+        milestones = arr;
+      }
+    } catch {
+      milestones = undefined;
+    }
+  }
+  const task = input.task ?? (state?.associatedTaskId !== undefined ? { id: state.associatedTaskId } : undefined);
+  const frame = buildWecomSessionUpdateFrame({
+    reqId: input.reqIdForTest ?? "placeholder",
+    cardTaskId: input.cardTaskId,
+    sessionId: input.sessionId,
+    lifecycle,
+    ...state?.title ? { title: state.title } : {},
+    ...state?.agentType ? { agentType: state.agentType } : {},
+    ...state?.startedAt ? { startedAt: state.startedAt } : {},
+    ...task ? { task } : {},
+    ...milestones ? { milestones } : {},
+    ...input.perTaskChatId ? { perTaskChatId: input.perTaskChatId } : {},
+    ...input.errorHint ? { errorHint: input.errorHint } : {},
+    ...input.activity !== undefined ? { activity: input.activity } : {},
+    ...input.now !== undefined ? { now: input.now } : {}
+  });
+  return { cmd: frame.cmd, body: frame.body };
+}
+
+// src/env/event-source/wecom-media.ts
+import { createDecipheriv } from "crypto";
+import { mkdirSync, writeFileSync } from "fs";
+import { basename, join, resolve } from "path";
+var WECOM_MEDIA_DIR = "/tmp/wecom-media";
+var WECOM_MEDIA_BLOCK_SIZE = 32;
+var mediaDirOverride;
+function getWecomMediaDir() {
+  return mediaDirOverride ?? WECOM_MEDIA_DIR;
+}
+function decryptWecomMedia(encrypted, aesKeyBase64) {
+  if (!encrypted || encrypted.length === 0) {
+    throw new Error("decryptWecomMedia: encrypted buffer is empty");
+  }
+  if (!aesKeyBase64 || typeof aesKeyBase64 !== "string") {
+    throw new Error("decryptWecomMedia: aesKey must be a non-empty string");
+  }
+  const key = Buffer.from(aesKeyBase64, "base64");
+  if (key.length !== 32) {
+    throw new Error(`decryptWecomMedia: aesKey must decode to 32 bytes (got ${key.length})`);
+  }
+  const iv = key.subarray(0, 16);
+  const decipher = createDecipheriv("aes-256-cbc", key, iv);
+  decipher.setAutoPadding(false);
+  const decrypted = Buffer.concat([
+    decipher.update(encrypted),
+    decipher.final()
+  ]);
+  const padLen = decrypted[decrypted.length - 1];
+  if (padLen < 1 || padLen > WECOM_MEDIA_BLOCK_SIZE || padLen > decrypted.length) {
+    throw new Error(`decryptWecomMedia: invalid PKCS#7 padding value: ${padLen}`);
+  }
+  for (let i = decrypted.length - padLen;i < decrypted.length; i++) {
+    if (decrypted[i] !== padLen) {
+      throw new Error("decryptWecomMedia: invalid PKCS#7 padding (bytes mismatch)");
+    }
+  }
+  return decrypted.subarray(0, decrypted.length - padLen);
+}
+function refFromField(kind, field) {
+  if (!field || typeof field !== "object")
+    return null;
+  const url = typeof field.url === "string" ? field.url : undefined;
+  const aeskey = typeof field.aeskey === "string" ? field.aeskey : undefined;
+  if (!url || !aeskey)
+    return null;
+  return {
+    kind,
+    url,
+    aeskey,
+    filename: typeof field.filename === "string" ? field.filename : undefined
+  };
+}
+function extractWecomMediaRefs(body) {
+  const refs = [];
+  const msgType = String(body.msgtype ?? "");
+  const single = refFromField(msgType, body[msgType]);
+  if (single)
+    refs.push(single);
+  if (msgType === "mixed") {
+    const mixed = body.mixed;
+    for (const item of mixed?.msg_item ?? []) {
+      if (!item || typeof item !== "object")
+        continue;
+      const it = item;
+      const itemType = String(it.msgtype ?? "");
+      const ref = refFromField(itemType, it[itemType]);
+      if (ref)
+        refs.push(ref);
+    }
+  }
+  return refs;
+}
+async function defaultWecomMediaFetcher(url) {
+  const resp = await fetch(url);
+  const status = resp.status;
+  if (!resp.ok) {
+    return { ok: false, status, buffer: Buffer.alloc(0) };
+  }
+  const ab = await resp.arrayBuffer();
+  const disposition = resp.headers.get("content-disposition") ?? "";
+  let filename;
+  const utf8Match = disposition.match(/filename\*=UTF-8''([^;\s]+)/i);
+  if (utf8Match) {
+    filename = decodeURIComponent(utf8Match[1]);
+  } else {
+    const m = disposition.match(/filename="?([^";\s]+)"?/i);
+    if (m)
+      filename = decodeURIComponent(m[1]);
+  }
+  return {
+    ok: true,
+    status,
+    buffer: Buffer.from(ab),
+    filename
+  };
+}
+async function fetchAndSaveWecomMedia(input) {
+  const fetcher = input.fetcher ?? defaultWecomMediaFetcher;
+  const result = await fetcher(input.url);
+  if (!result.ok) {
+    throw new Error("fetchAndSaveWecomMedia: download failed (HTTP " + result.status + ")" + " for msgid=" + input.msgid + " url=" + input.url.slice(0, 120));
+  }
+  const decrypted = decryptWecomMedia(result.buffer, input.aeskey);
+  return saveWecomMediaFile({
+    msgid: input.msgid,
+    filename: input.filename ?? result.filename,
+    buffer: decrypted,
+    chatId: input.chatId
+  });
+}
+async function saveWecomMediaFile(input) {
+  const root = getWecomMediaDir();
+  mkdirSync(root, { recursive: true, mode: 448 });
+  const safeMsgid = input.msgid.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 80);
+  const safeName = input.filename ? basename(input.filename) : `${safeMsgid}.bin`;
+  const safeChatId = input.chatId ? input.chatId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 120) : undefined;
+  const dir = safeChatId ? join(resolve(root), safeChatId) : resolve(root);
+  if (safeChatId)
+    mkdirSync(dir, { recursive: true, mode: 448 });
+  const filePath = join(dir, `${safeMsgid}_${safeName}`);
+  writeFileSync(filePath, input.buffer);
+  return filePath;
+}
+
+// src/env/event-source/wecom-cli-handler.ts
+var WECOM_CLI_ES_TYPE = "wecom-cli";
+var WECOM_CHAT_ID_PREFIX = "wecom:";
+var WECOM_WS_DEFAULT_URL = "wss://openws.work.weixin.qq.com";
+function readWecomCliConfig(config) {
+  const top = config;
+  const opts = config.options ?? {};
+  return {
+    botId: top.botId || opts.botId || undefined,
+    secret: top.secret || opts.secret || undefined,
+    command: top.command || opts.command || undefined,
+    webhook: top.webhook || opts.webhook || undefined,
+    credentialsPath: top.credentialsPath || opts.credentialsPath || undefined
+  };
+}
+var WECOM_CREDENTIALS_DEFAULT_PATH = join2(process.env.HOME || "/tmp", ".roy-agent", "wecom-credentials.json");
+function readWecomCredentialsFile(path) {
+  try {
+    const raw = readFileSync(path, "utf-8");
+    const parsed = JSON.parse(raw);
+    const agentId = typeof parsed.agent_id === "string" ? parsed.agent_id : undefined;
+    const botId = typeof parsed.bot_id === "string" ? parsed.bot_id : undefined;
+    const secret = typeof parsed.secret === "string" ? parsed.secret : undefined;
+    const id = botId || agentId;
+    if (!id || !secret)
+      return null;
+    return { botId: id, secret };
+  } catch {
+    return null;
+  }
+}
+function resolveWecomCredentials(config, credentialsPath = WECOM_CREDENTIALS_DEFAULT_PATH) {
+  const cliConfig = readWecomCliConfig(config);
+  if (cliConfig.botId && cliConfig.secret) {
+    return { botId: cliConfig.botId, secret: cliConfig.secret };
+  }
+  const fromFile = readWecomCredentialsFile(cliConfig.credentialsPath ?? credentialsPath);
+  if (fromFile)
+    return fromFile;
+  return;
+}
+function buildWecomReplyChannel(input) {
+  const chatType = input.chatType === "group" ? "group" : "single";
+  const userId = input.userId?.trim() || undefined;
+  const rawChatId = input.chatId?.trim() || undefined;
+  const chatId = rawChatId ?? userId ?? `${WECOM_CHAT_ID_PREFIX}unknown`;
+  return {
+    type: WECOM_CLI_ES_TYPE,
+    chatId,
+    messageId: input.messageId?.trim() || undefined,
+    params: {
+      chatType,
+      userId,
+      wecomChatId: rawChatId,
+      wecomUserId: userId,
+      ...input.sourceId ? { sourceId: input.sourceId } : {},
+      ...input.reqId ? { reqId: input.reqId } : {},
+      statusNotifications: input.statusNotifications === true
+    }
+  };
+}
+function hasWecomMediaRef(body, kind) {
+  const field = body[kind];
+  return !!field && typeof field === "object" && typeof field.url === "string" && typeof field.aeskey === "string";
+}
+function extractText(body) {
+  const msgType = String(body.msgtype ?? "");
+  switch (msgType) {
+    case "text": {
+      const t = body.text;
+      return t?.content ?? "";
+    }
+    case "mixed": {
+      const mixed = body.mixed;
+      const items = mixed?.msg_item ?? [];
+      const parts = [];
+      for (const it of items) {
+        const item = it;
+        if (item?.msgtype === "text" && item.text?.content) {
+          parts.push(item.text.content);
+        } else if (item?.msgtype) {
+          parts.push(`[${item.msgtype}]`);
+        }
+      }
+      return parts.join(`
+`);
+    }
+    case "image":
+      return hasWecomMediaRef(body, "image") ? "[image](media:downloading)" : "[image]";
+    case "voice":
+      return hasWecomMediaRef(body, "voice") ? "[voice](media:downloading)" : "[voice]";
+    case "file":
+      return hasWecomMediaRef(body, "file") ? "[file](media:downloading)" : "[file]";
+    case "video":
+      return hasWecomMediaRef(body, "video") ? "[video](media:downloading)" : "[video]";
+    default:
+      return msgType ? `[${msgType}]` : "";
+  }
+}
+function extractWecomQuotedText(body) {
+  const quote = body.quote;
+  if (!quote || typeof quote !== "object")
+    return;
+  const msgType = String(quote.msgtype ?? "");
+  if (msgType === "text") {
+    const content = quote.text?.content;
+    return typeof content === "string" && content ? content : undefined;
+  }
+  return msgType ? `[${msgType}]` : undefined;
+}
+function buildWecomUserMessage(text, replyContext) {
+  const quotedText = replyContext?.quotedText;
+  if (!quotedText)
+    return text;
+  return `${text}
+
+[引用消息] ${quotedText}`;
+}
+function parseWecomFrame(raw) {
+  if (!raw || typeof raw !== "object")
+    return null;
+  const frame = raw;
+  const cmd = String(frame.cmd ?? "");
+  const body = frame.body;
+  if (!body || typeof body !== "object")
+    return null;
+  const msgid = typeof body.msgid === "string" ? body.msgid : undefined;
+  const isMsg = cmd === "aibot_msg_callback";
+  const isEvent = cmd === "aibot_event_callback";
+  if (!isMsg && !isEvent)
+    return null;
+  if (isMsg && !msgid)
+    return null;
+  const msgType = String(body.msgtype ?? (isEvent ? "event" : ""));
+  const from = body.from ?? {};
+  const senderId = from.userid ?? "";
+  const chattype = typeof body.chattype === "string" ? body.chattype : undefined;
+  const rawChatId = typeof body.chatid === "string" ? body.chatid : undefined;
+  let eventType;
+  let text;
+  if (isEvent) {
+    const event = body.event ?? {};
+    const eventTypeName = event.eventtype ?? "unknown";
+    eventType = `wecom.event.${eventTypeName}`;
+    text = `[wecom-event:${eventTypeName}]`;
+  } else {
+    eventType = "wecom.message.receive";
+    text = extractText(body);
+  }
+  const metadata = {
+    sourceType: WECOM_CLI_ES_TYPE,
+    eventType,
+    eventId: msgid,
+    appId: typeof body.aibotid === "string" ? body.aibotid : undefined,
+    chatId: rawChatId ?? senderId ?? undefined,
+    chatType: chattype,
+    messageId: msgid,
+    messageType: msgType,
+    senderId,
+    sourceTime: typeof body.create_time === "number" ? new Date(body.create_time * 1000).toISOString() : undefined,
+    payload: body
+  };
+  const quotedText = extractWecomQuotedText(body);
+  if (quotedText) {
+    metadata.replyContext = { quotedText };
+  }
+  return {
+    metadata,
+    text,
+    reqId: frame.headers?.req_id
+  };
+}
+var WECOM_DEFAULT_EXTEND_TOOLS = ["wecom_respond"];
+function resolveWecomExtendTools(config) {
+  const out = [];
+  const push = (name) => {
+    if (typeof name !== "string")
+      return;
+    const trimmed = name.trim();
+    if (trimmed.length === 0)
+      return;
+    if (!out.includes(trimmed))
+      out.push(trimmed);
+  };
+  WECOM_DEFAULT_EXTEND_TOOLS.forEach(push);
+  (config?.extendTools ?? []).forEach(push);
+  return out;
+}
+var WECOM_CHANNEL_PROMPT_SECTION_TITLE = "⭐ 企业微信回复规范（system prompt 注入版）";
+function buildWecomChannelSystemPrompt(opts) {
+  const botLine = opts.botId ? `本渠道智能机器人 BotID：${opts.botId}。` : `本渠道未配置 BotID（使用事件回调里的 aibotid）。`;
+  return [
+    `# ${WECOM_CHANNEL_PROMPT_SECTION_TITLE}`,
+    ``,
+    `本节是企业微信渠道的**回复规范**（静态规则，随 system prompt 注入）。`,
+    `每条企微事件的 \`recommendedAction\` 只带动态定位（chatId / messageId），`,
+    `所有回复规则都在本节 —— replyChannel 给出的 chatId 是本轮唯一权威定位。`,
+    botLine,
+    ``,
+    `## 回复命令（唯一出站通道）`,
+    `用 \`wecom_respond\` 工具回复。工具内部**主路径是官方 CLI**`,
+    `（\`wecom-cli message aibot send --msg-type markdown\`，已扫码授权），`,
+    `CLI 失败时自动降级为 WS 长连接回帧（aibot_respond_msg）。`,
+    `- \`content\`：**必填**，回复正文（markdown 格式）。`,
+    `- \`chat_id\`：可选；缺省自动取本事件的 chatId/senderId（单聊=对方 userid，群聊=chatid）。`,
+    `- \`req_id\`：可选；缺省取 metadata.reqId（仅 WS fallback 用）。`,
+    `- ⚠️ 不要自己拼 \`wecom-cli\` 命令 —— 统一走 \`wecom_respond\`（chat_id 需要内部解析成真实 userid，手工拼会报 40073）。`,
+    `- ⚠️ CLI 没有 text 类型；markdown 上限 20480 UTF-8 字节，超长分段压缩，不要静默截断。`,
+    `- 工具返回 success=false 时如实告知用户，不要假装已发送。`,
+    ``,
+    `## 出站纪律`,
+    `- ❌ 不要用 \`curl\` 直连 \`qyapi.weixin.qq.com\`（绕过 CLI 丢鉴权与错误规范）。`,
+    `- ❌ 不要用 \`lark-cli\` 的任何 flag（--profile / --msg-type / --as bot 都不适用于企微）。`,
+    `- ❌ 整次回复只发**一条**消息：先想清楚再发，不要拆段循环 send 刷屏。`,
+    ``,
+    `## 文档交付规范`,
+    `- 文档类生成（报告 / 代码 / 长文）：企微消息里给**结论 + 关键内容摘要**，`,
+    `  完整文档内容直接放进 markdown 正文（企微支持 markdown 渲染），`,
+    `  **不要只给本地文件路径** —— 企微用户无法访问 roy-agent 所在机器的文件系统。`,
+    `- **调研文档 / docs / ppt 等文档类产出必须上传到企微文档，链接作为交付物**：`,
+    `  - 在线文档：\`wecom-cli doc create --doc-name <标题> --doc-type doc --content-type text --file-path <本地md>\``,
+    `    （或 --content 传纯文本；ppt 用 --doc-type ppt），取返回里的文档链接`,
+    `  - 微盘文件：\`wecom-cli disk files upload --file-path <本地文件>\`（默认传到我的空间），取返回里的文件链接`,
+    `  - 本地路径只作中转（生成 → 上传企微文档 → 回复里贴链接），**不落本地路径**交付`,
+    ``,
+    `## 图片/文件消息处理（Task #5199）`,
+    `- 用户发图片时，消息正文是 \`[image](media:downloading)\` 占位；`,
+    `  媒体文件已自动下载解密落盘，本地路径在事件 metadata.mediaFiles`,
+    `  （数组，如 \`/tmp/wecom-media/<chatId>/<msgid>_photo.png\`）。`,
+    `- ⚠️ **只用 metadata.mediaFiles 里列出的路径**（Task #5313）——`,
+    `  禁止 \`ls\`/\`find\` 扫媒体目录：同目录下的历史文件属于别的消息，`,
+    `  扫目录会把它们误当本条消息的附件。`,
+    `- **看图**：用 \`understand_image\` 工具，\`image_source\` 传`,
+    `  metadata.mediaFiles 里的本地路径，\`prompt\` 写想了解什么。`,
+    `- mediaFiles 缺失（下载失败/URL 过期）时如实告知用户，不要编造图片内容。`,
+    `- ⚠️ 截图内容边界（Task #5317）：截图/图片里可能内嵌`,
+    `  **其他群聊或其他会话的聊天记录**（如聊天记录截图、转发图）。`,
+    `  截图里的聊天记录**不是本群的对话上下文**——分析图片时如需`,
+    `  提及其中内容，必须明确标注「截图里包含的内容」，`,
+    `  禁止把截图内的聊天记录当作本群刚发生的消息来转述或回应。`,
+    ``,
+    `## 引用消息上下文 replyContext`,
+    `本条消息引用了其他消息时，user message 末尾会带 \`[引用消息] <原文>\` 行；`,
+    `同时 recommendedAction.replyContext.quotedText 也有同一份内容（非文本引用为 [image] 等占位）。`,
+    `- 回复时优先围绕被引用内容作答，不要忽略引用语境。`
+  ].join(`
+`);
+}
+function buildWecomNotifyPrompt(input) {
+  const isGroup = input.chatType === "group";
+  const target = isGroup ? `群聊 chat_id = "${input.chatId ?? "<chatid>"}"` : `单聊 chat_id = "${input.userId ?? "<userid>"}"（企微单聊用对方 userid 作 chat_id）`;
+  return [
+    `### ① 用 wecom_respond 工具回消息
+` + `本事件来自企业微信（WeCom）。回复用户请用 \`wecom_respond\` 工具（主路径 = 官方 wecom-cli 已授权，CLI 失败自动降级 WS 回帧），目标：${target}。
+` + `不要使用 lark-cli —— 那是飞书的通道，参数完全不同。`,
+    `### ② 具体参数
+` + `调用 \`wecom_respond\` 工具：
+` + `- \`content\`：**必填**，回复正文（markdown）
+` + `- \`chat_id\`：可选；缺省自动取本事件 chatId / senderId（单聊 = 对方 userid）
+` + `- \`req_id\`：可选；缺省取 metadata.reqId（仅 WS fallback 用）
+` + `- ⚠️ 不要自己拼 \`wecom-cli\` 命令 —— chat_id 需内部解析成真实 userid，手拼会报 40073`,
+    `### ③ 禁止的做法
+` + `- ❌ 不要用 \`curl\` 直连 \`qyapi.weixin.qq.com\` —— 绕过官方通道会丢鉴权与错误规范
+` + `- ❌ 不要用 \`lark-cli\` 的任何 flag（--profile / --msg-type post / --content）
+` + `- ❌ 不要自己编 chat_id / req_id —— 用工具默认值即可
+` + `- ❌ 不要在失败时假装已发送`,
+    `### ④ 怎么判断成功
+` + `- 工具返回 \`success: true\` = 回帧已发出
+` + `- 工具返回 \`success: false\` = 发送失败（读 \`error\` 字段），如实告知用户失败原因`
+  ].join(`
+
+`);
+}
+function resolveWecomBinary(binName = "wecom-cli") {
+  if (isAbsolute(binName)) {
+    return existsSync(binName) ? { found: true, path: binName } : { found: false };
+  }
+  if (binName.includes("/")) {
+    return existsSync(binName) ? { found: true, path: binName } : { found: false };
+  }
+  const pathEnv = process.env.PATH ?? "";
+  const candidates = [binName, `${binName}.exe`, `${binName}.cmd`, `${binName}.bat`];
+  for (const dir of pathEnv.split(delimiter)) {
+    if (!dir)
+      continue;
+    for (const candidate of candidates) {
+      const full = join2(dir, candidate);
+      if (existsSync(full))
+        return { found: true, path: full };
+    }
+  }
+  return { found: false };
+}
+function probeCommandBinary(command) {
+  const stripped = command.trim().replace(/^exec\s+/, "");
+  const firstToken = (stripped.match(/^"[^"]+"|^'[^']+'|^\S+/) ?? [""])[0].replace(/^["']|["']$/g, "");
+  if (!firstToken)
+    return { found: true };
+  if (!firstToken.includes("/")) {
+    return resolveWecomBinary(firstToken);
+  }
+  return resolveWecomBinary(firstToken);
+}
+async function defaultWecomWsFactory() {
+  const { WebSocket: Ws } = await import("ws");
+  return (url) => new Ws(url);
+}
+
+class WecomCliInstance {
+  config;
+  status = "created";
+  child;
+  buffer = "";
+  eventHandler;
+  lastError;
+  wsBridge;
+  pluginInstances = new Map;
+  loadedPlugins = [];
+  cardActionPorts;
+  sessionCardStore;
+  constructor(config) {
+    this.config = config;
+  }
+  setCardActionPorts(ports) {
+    this.cardActionPorts = ports;
+    this.applySessionCardPorts();
+  }
+  hasCardActionPorts() {
+    return this.cardActionPorts !== undefined;
+  }
+  setSessionCardStore(store) {
+    this.sessionCardStore = store;
+    this.applySessionCardPorts();
+  }
+  hasSessionCardStore() {
+    return this.sessionCardStore !== undefined;
+  }
+  applySessionCardPorts() {
+    if (!this.cardActionPorts || !this.sessionCardStore)
+      return;
+    const store = this.sessionCardStore;
+    this.cardActionPorts.loadSessionCardState ??= (sessionId) => store.get(sessionId);
+    this.cardActionPorts.findSessionCardByTaskId ??= (taskId) => {
+      const hits = store.list().filter((s) => s.associatedTaskId === taskId);
+      if (hits.length === 0)
+        return;
+      const open = hits.filter((s) => s.closedAt === undefined);
+      const pool = open.length > 0 ? open : hits;
+      return pool.reduce((a, b) => b.updatedAt > a.updatedAt ? b : a);
+    };
+    this.cardActionPorts.updateSessionCard ??= async (reqId, input) => {
+      const { cmd, body } = buildWecomSessionCardUpdateBody({
+        cardTaskId: input.cardTaskId,
+        sessionId: input.sessionId,
+        ...input.state ? { state: input.state } : {},
+        activity: input.activity,
+        ...input.task ? { task: input.task } : {},
+        ...input.perTaskChatId ? { perTaskChatId: input.perTaskChatId } : {},
+        ...input.errorHint ? { errorHint: input.errorHint } : {},
+        ...input.now !== undefined ? { now: input.now } : {}
+      });
+      const err = this.wsBridge?.sendFrameWithReqId({
+        cmd,
+        headers: { req_id: reqId },
+        body
+      });
+      if (err)
+        throw err;
+    };
+    this.cardActionPorts.loadSessionTaskInfo ??= async (sessionId) => {
+      const taskComponent = this.environment?.getComponent?.("task");
+      const getter = taskComponent?.getTaskIdBySessionId;
+      if (typeof getter !== "function")
+        return;
+      const taskId = await getter.call(taskComponent, sessionId);
+      if (typeof taskId !== "number")
+        return;
+      const withOps = await taskComponent?.getTaskWithOperations?.(taskId);
+      if (!withOps)
+        return { id: taskId };
+      const ops = Array.isArray(withOps.operations) ? withOps.operations : [];
+      return {
+        id: taskId,
+        ...typeof withOps.title === "string" ? { title: withOps.title } : {},
+        ...typeof withOps.status === "string" ? { status: withOps.status } : {},
+        ...typeof withOps.progress === "number" ? { progress: withOps.progress } : {},
+        ...ops.length > 0 ? {
+          milestones: ops.slice(-10).map((o) => ({
+            title: String(o.milestoneTitle ?? o.milestoneType ?? ""),
+            timestamp: String(o.timestamp ?? "")
+          }))
+        } : {}
+      };
+    };
+  }
+  environment;
+  setEnvironment(env) {
+    this.environment = env;
+  }
+  getBridge() {
+    return this.wsBridge;
+  }
+  async handleWsFrame(frame) {
+    const cardAction = extractWecomCardAction(frame);
+    if (cardAction) {
+      await this.handleCardActionEvent(frame, cardAction);
+      return;
+    }
+    const parsed = parseWecomFrame(frame);
+    if (!parsed)
+      return;
+    const { botId } = readWecomCliConfig(this.config);
+    const channelPrompt = buildWecomChannelSystemPrompt(botId ? { botId } : {});
+    const metadata = {
+      ...parsed.metadata,
+      systemPrompt: channelPrompt,
+      extendTools: resolveWecomExtendTools(this.config),
+      reqId: parsed.reqId,
+      plugins: this.config.handleRule?.plugins || [],
+      pluginEnabled: Object.fromEntries((this.config.handleRule?.plugins || []).map((p) => [
+        `${this.config.id}:${p}`,
+        true
+      ]))
+    };
+    const replyChannel = buildWecomReplyChannel({
+      chatId: metadata.chatId,
+      messageId: metadata.messageId,
+      chatType: metadata.chatType,
+      userId: metadata.senderId,
+      sourceId: this.config.id,
+      reqId: parsed.reqId,
+      statusNotifications: this.config.statusNotifications === true
+    });
+    const event = {
+      id: `es-${this.config.id}-${Date.now()}`,
+      type: "event-source.event.wecom-cli",
+      timestamp: Date.now(),
+      metadata: {
+        source: "event-source",
+        sourceId: this.config.id,
+        sourceMessageType: metadata.eventType,
+        systemPrompt: channelPrompt,
+        replyChannel,
+        ...metadata
+      },
+      payload: {
+        sourceId: this.config.id,
+        sourceType: WECOM_CLI_ES_TYPE,
+        rawEvent: frame,
+        message: buildWecomUserMessage(parsed.text, metadata.replyContext),
+        metadata,
+        replyChannel,
+        timestamp: Date.now()
+      },
+      rawEvent: frame,
+      replyChannel,
+      recommendedAction: {
+        action: `处理企业微信消息并回复。回复规范见 system prompt「${WECOM_CHANNEL_PROMPT_SECTION_TITLE}」章节。` + ` 用 wecom_respond 工具回复（content=回复正文）；` + `chat_id 缺省取本事件 chatId。` + (parsed.reqId ? `（WS fallback req_id=${parsed.reqId}）` : ""),
+        replyTo: {
+          chatId: replyChannel.chatId,
+          messageId: replyChannel.messageId
+        },
+        ...metadata.replyContext ? { replyContext: metadata.replyContext } : {},
+        staticRulesInSystemPrompt: true
+      }
+    };
+    const mediaRefs = extractWecomMediaRefs(frame.body ?? {});
+    if (mediaRefs.length > 0 && parsed.metadata.messageId) {
+      const msgid = parsed.metadata.messageId;
+      const saved = await this.downloadMediaRefs(msgid, mediaRefs, parsed.metadata.chatId);
+      if (saved.length > 0) {
+        event.payload.mediaFiles = saved;
+        event.metadata.mediaFiles = saved;
+      }
+    }
+    try {
+      this.eventHandler?.(event);
+    } catch (err) {
+      console.error(`[wecom-cli] event handler threw: ${err}`);
+      notifyReactFailure({
+        error: err,
+        envEvent: event,
+        replyChannel
+      }).catch(() => {});
+    }
+  }
+  async handleCardActionEvent(frame, action) {
+    if (!this.cardActionPorts) {
+      console.warn(`[wecom-cli] handleCardActionEvent: cardActionPorts 未注入，` + `template_card_event 被跳过（event_key=${action?.eventKey}）。` + `调 instance.setCardActionPorts({markTaskDone, reopenTask, updateCard}) 注入。`);
+      return;
+    }
+    try {
+      const result = await handleWecomCardAction(frame, this.cardActionPorts);
+      if (!result.ok) {
+        console.warn(`[wecom-cli] handleCardActionEvent failed: ${result.error ?? "unknown"}`);
+      }
+    } catch (err) {
+      console.error(`[wecom-cli] handleCardActionEvent threw: ${err.message}`);
+    }
+  }
+  wireCardActionPorts() {
+    if (this.cardActionPorts)
+      return;
+    const taskComponent = this.environment?.getComponent?.("task");
+    if (!this.wsBridge) {
+      console.warn(`[wecom-cli] cardActionPorts 未注入：wsBridge 缺失（没有通道发更新帧）。` + `卡片按钮点击会被跳过。`);
+      return;
+    }
+    const taskOpsAvailable = typeof taskComponent?.updateTask === "function";
+    if (!taskOpsAvailable) {
+      console.warn(`[wecom-cli] taskComponent.updateTask 不可用 ⇒ 「标记完成 / 重新打开」` + `降级为报错；session 卡「刷新」不受影响（Task #5364）。`);
+    }
+    const requireTaskOps = () => {
+      if (!taskOpsAvailable) {
+        throw new Error("task ops unavailable (taskComponent.updateTask missing)");
+      }
+    };
+    this.cardActionPorts = {
+      markTaskDone: async (taskId) => {
+        requireTaskOps();
+        await taskComponent.updateTask(taskId, {
+          status: "completed",
+          current_status: "用户在企微卡片点「标记完成」确认完成"
+        });
+      },
+      reopenTask: async (taskId) => {
+        requireTaskOps();
+        await taskComponent.updateTask(taskId, {
+          status: "active",
+          current_status: "用户在企微卡片点「重新打开」"
+        });
+      },
+      updateCard: async (reqId, cardTaskId, statusLabel, note, timeline, action, extra) => {
+        const { cmd, body } = buildWecomCardUpdateBody({
+          cardTaskId,
+          statusLabel,
+          note,
+          timeline,
+          action,
+          taskTitle: extra?.taskTitle,
+          taskNumber: extra?.taskNumber,
+          ...extra?.activity !== undefined ? { activity: extra.activity } : {},
+          ...extra?.activityTerminal !== undefined ? { activityTerminal: extra.activityTerminal } : {}
+        });
+        const frame = {
+          cmd,
+          headers: { req_id: reqId },
+          body
+        };
+        const err = this.wsBridge.sendFrameWithReqId(frame);
+        if (err)
+          throw err;
+      },
+      loadTimeline: (taskId) => {
+        const store = this.getWecomCardStateStore();
+        if (!store)
+          return [];
+        const rec = store.get(taskId);
+        if (!rec?.timeline)
+          return [];
+        try {
+          const arr = JSON.parse(rec.timeline);
+          return Array.isArray(arr) ? arr : [];
+        } catch {
+          return [];
+        }
+      },
+      loadTaskTitle: (taskId) => {
+        const taskComponent2 = this.environment?.getComponent?.("task");
+        const getter = taskComponent2?.getTask;
+        if (!getter)
+          return;
+        try {
+          const raw = getter.call(taskComponent2, taskId);
+          const extract = (t) => {
+            if (!t || typeof t !== "object")
+              return;
+            const rec = t;
+            if (typeof rec.title !== "string" || !rec.title)
+              return;
+            return {
+              title: rec.title,
+              number: typeof rec.id === "number" ? rec.id : taskId
+            };
+          };
+          if (raw && typeof raw.then === "function") {
+            return raw.then(extract).catch((err) => {
+              console.warn(`[wecom-cli] loadTaskTitle failed for task #${taskId}: ${err}`);
+              return;
+            });
+          }
+          return extract(raw);
+        } catch (err) {
+          console.warn(`[wecom-cli] loadTaskTitle failed for task #${taskId}: ${err}`);
+          return;
+        }
+      }
+    };
+    this.cardActionPorts.loadSubSessionActivity = createActivityProbe({
+      listBackgroundTasks: () => {
+        const tc = this.environment?.getComponent?.("task");
+        return tc?.getBackgroundTaskManager?.()?.listTasks?.();
+      },
+      getSubSessionActivity: (bgId) => {
+        const tc = this.environment?.getComponent?.("task");
+        return tc?.getBackgroundTaskManager?.()?.getSubSessionActivity?.(bgId);
+      },
+      getLastMessage: async (subSessionId) => {
+        const sc = this.environment?.getComponent?.("session");
+        if (!sc?.getMessages)
+          return;
+        const tail = await sc.getMessages(subSessionId, { offset: -1, limit: 1 });
+        return toActivityMessage(tail?.[tail.length - 1]);
+      },
+      isTerminalTask: async (taskId) => {
+        const tc = this.environment?.getComponent?.("task");
+        const raw = tc?.getTask?.call(tc, taskId);
+        const t = raw && typeof raw.then === "function" ? await raw : raw;
+        return t?.status === "completed" || t?.status === "cancelled" || t?.status === "failed" || t?.status === "archived";
+      }
+    });
+    this.cardActionPorts.loadSessionActivity = createSessionActivityProbe({
+      getSession: async (sessionId) => {
+        const sc = this.environment?.getComponent?.("session");
+        if (!sc?.get)
+          return;
+        const s = await sc.get(sessionId);
+        if (!s)
+          return;
+        return {
+          ...typeof s.messageCount === "number" ? { messageCount: s.messageCount } : {},
+          ...typeof s.updatedAt === "number" ? { updatedAt: s.updatedAt } : {}
+        };
+      },
+      getLastMessage: async (sessionId) => {
+        const sc = this.environment?.getComponent?.("session");
+        if (!sc?.getMessages)
+          return;
+        const tail = await sc.getMessages(sessionId, { offset: -1, limit: 1 });
+        return toActivityMessage(tail?.[tail.length - 1]);
+      },
+      getLifecycle: (sessionId) => {
+        const tc = this.environment?.getComponent?.("task");
+        const tasks = tc?.getBackgroundTaskManager?.()?.listTasks?.() ?? [];
+        const hit = tasks.find((t) => t?.subSessionId === sessionId);
+        return mapBgTaskStatusToSessionLifecycle(hit?.status);
+      }
+    });
+    this.sessionCardStore ??= getSharedWecomSessionCardStore();
+    this.applySessionCardPorts();
+    if (this.cardActionPorts) {
+      const sessionComponent = () => this.environment?.getComponent?.("session");
+      this.cardActionPorts.findGroupChatForSession ??= async (sessionId) => {
+        const sc = sessionComponent();
+        if (typeof sc?.findGroupChatForSession !== "function") {
+          return;
+        }
+        return sc.findGroupChatForSession(sessionId);
+      };
+      this.cardActionPorts.createLarkGroupForSession ??= async (sessionId) => {
+        const sc = sessionComponent();
+        let title;
+        try {
+          const s = await sc?.get?.(sessionId);
+          if (typeof s?.title === "string" && s.title.trim()) {
+            title = s.title.trim();
+          }
+        } catch {}
+        const name = title ?? sessionId.slice(-20);
+        const chatId = await createGroupChatViaLarkCli({
+          name: `会话 ${name}`.slice(0, 60),
+          description: `roy-agent session ${sessionId}`.slice(0, 100)
+        });
+        try {
+          await sc?.attachGroupSession?.({
+            chatId,
+            originSessionId: sessionId,
+            title: name
+          });
+        } catch (err) {
+          console.warn(`[wecom-cli] attachGroupSession(${chatId} ← ${sessionId}) ` + `失败（不阻断建群）: ${err}`);
+        }
+        return chatId;
+      };
+      this.cardActionPorts.notifyGroupLink ??= async (input) => {
+        const link = `${DEFAULT_APP_LINK_BASE}/client/chat/open?openChatId=${input.chatId}`;
+        const text = `\uD83D\uDCE8 会话 ${input.sessionId} 的关联飞书群已建立：` + `[点击进入群](${link})`;
+        let target = input.userId || "";
+        if (!target) {
+          try {
+            target = this.sessionCardStore?.get(input.sessionId)?.chatId ?? "";
+          } catch {
+            target = "";
+          }
+        }
+        if (!target) {
+          console.warn(`[wecom-cli] notifyGroupLink: 无法定位企微会话 ` + `(userId 缺失且 session store 无 chatId)，跳过通知`);
+          return;
+        }
+        const r = await sendWecomCliMarkdown({ chatId: target, content: text });
+        if (!r.ok) {
+          console.warn(`[wecom-cli] notifyGroupLink cli failed: ${r.ok ? "unknown" : r.error}`);
+        }
+      };
+    }
+    console.info(`[wecom-cli] cardActionPorts 已注入（task ops + bridge.respond 更新 + timeline + taskTitle + activity + session task info + lark group）`);
+  }
+  getWecomCardStateStore() {
+    const plugin = this.pluginInstances.get("WecomTaskNotifyPlugin");
+    const store = plugin?.cardStateStore;
+    if (store && typeof store.get === "function") {
+      return store;
+    }
+    if (!this.fallbackCardStateStore) {
+      try {
+        this.fallbackCardStateStore = createWecomCardStateStore();
+      } catch (err) {
+        console.warn(`[wecom-cli] fallback card state store 创建失败: ${err}`);
+        return;
+      }
+    }
+    return this.fallbackCardStateStore;
+  }
+  fallbackCardStateStore;
+  async downloadMediaRefs(msgid, refs, chatId) {
+    const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error("media download timeout (10s)")), 1e4));
+    try {
+      const paths = await Promise.race([
+        timeout,
+        Promise.all(refs.map(async (ref) => {
+          try {
+            const path = await fetchAndSaveWecomMedia({
+              msgid,
+              url: ref.url,
+              aeskey: ref.aeskey,
+              kind: ref.kind,
+              filename: ref.filename,
+              chatId
+            });
+            console.log(`[wecom-cli] media saved: ${ref.kind} chat=${chatId ?? "(none)"} ${path}`);
+            return path;
+          } catch (err) {
+            console.error(`[wecom-cli] media download failed for ${ref.kind}: ${err.message}`);
+            return;
+          }
+        }))
+      ]);
+      return paths.filter((p) => !!p);
+    } catch (err) {
+      console.error(`[wecom-cli] media download aborted: ${err.message}`);
+      return [];
+    }
+  }
+  getStatus() {
+    return this.status;
+  }
+  setStatus(status) {
+    this.status = status;
+  }
+  onEvent(handler) {
+    this.eventHandler = handler;
+  }
+  offEvent() {
+    this.eventHandler = undefined;
+  }
+  getLastError() {
+    return this.lastError;
+  }
+  buildCommand() {
+    const { command } = readWecomCliConfig(this.config);
+    if (command)
+      return command;
+    return "wecom-cli chat messages list --help";
+  }
+  loadPlugins() {
+    const plugins = this.config.handleRule?.plugins || [];
+    if (plugins.length === 0)
+      return;
+    for (const pluginName of plugins) {
+      const pluginConfig = this.config.handleRule?.pluginConfig?.[pluginName] ?? {};
+      const plugin = importPluginShared(pluginName, getWecomPluginFactories(), {
+        sourceId: this.config.id,
+        pluginName,
+        statusNotifications: this.config.statusNotifications === true,
+        ...pluginConfig
+      });
+      if (!plugin)
+        continue;
+      this.pluginInstances.set(pluginName, plugin);
+      const hookPoints = registerPluginHooksShared(plugin, pluginName, this.config.id);
+      this.loadedPlugins.push({ name: pluginName, hooks: hookPoints });
+      console.debug(`[wecom-cli] Loaded plugin "${pluginName}" with ${hookPoints.length} hook(s): [${hookPoints.join(", ")}]`);
+    }
+  }
+  unloadPlugins() {
+    for (const p of this.loadedPlugins) {
+      unregisterPluginHooksShared(p.name, p.hooks);
+    }
+    this.loadedPlugins = [];
+    this.pluginInstances.clear();
+  }
+  async start() {
+    this.loadPlugins();
+    await this.startWithBridge(await defaultWecomWsFactory());
+  }
+  async startWithBridge(wsFactory, credentialsPath) {
+    if (this.status === "running")
+      return;
+    this.setStatus("starting");
+    const credentials = resolveWecomCredentials(this.config, credentialsPath);
+    if (credentials) {
+      this.startWsBridge(credentials, wsFactory);
+      return;
+    }
+    this.startSkeletonMode();
+  }
+  startWsBridge(credentials, wsFactory) {
+    const bridge = new WecomWsBridge({
+      botId: credentials.botId,
+      secret: credentials.secret,
+      wsFactory
+    });
+    this.wsBridge = bridge;
+    registerWecomRespondTarget(this.config.id, {
+      respond: (reqId, body) => bridge.respond(reqId, body),
+      sendCmd: (cmd, body) => bridge.sendCmd(cmd, body)
+    });
+    this.wireCardActionPorts();
+    bridge.onMessage((frame) => {
+      this.handleWsFrame(frame).catch((err) => {
+        console.error(`[wecom-cli] ws frame handling threw: ${err}`);
+        try {
+          const parsed = parseWecomFrame(frame);
+          if (!parsed) {
+            return;
+          }
+          const baseChannel = buildWecomReplyChannel({
+            chatId: parsed.metadata.chatId,
+            messageId: parsed.metadata.messageId,
+            chatType: parsed.metadata.chatType,
+            userId: parsed.metadata.senderId,
+            sourceId: this.config.id,
+            reqId: parsed.reqId,
+            statusNotifications: this.config.statusNotifications === true
+          });
+          notifyReactFailure({
+            error: err,
+            envEvent: {
+              type: "event-source.event.wecom-cli",
+              metadata: {
+                sourceId: this.config.id,
+                replyChannel: baseChannel
+              },
+              payload: {}
+            }
+          }).catch(() => {});
+        } catch {}
+      });
+    });
+    bridge.onError((err) => {
+      this.lastError = err.message;
+      console.error(`[wecom-cli] ws error: ${err.message}`);
+    });
+    bridge.connect();
+    this.setStatus("running");
+  }
+  startSkeletonMode() {
+    console.warn(`[wecom-cli] ⚠️ 骨架模式：未找到企微凭据（config botId/secret 或 ` + `${WECOM_CREDENTIALS_DEFAULT_PATH}），**不会收到任何入站消息**。
+` + `[wecom-cli]    请在 event source 配置里提供 botId + secret，或创建凭据文件（chmod 600）。
+` + `[wecom-cli]    如需临时自定义，可在事件源配置里设置 'command' 字段。`);
+    this.startSkeletonSpawn();
+  }
+  startSkeletonSpawn() {
+    const { command: customCommand } = readWecomCliConfig(this.config);
+    if (!customCommand) {
+      console.warn(`[wecom-cli] ⚠️ 骨架模式：当前启动的是占位命令 ` + `"wecom-cli chat messages list --help"，它**不会产出任何入站事件**。
+` + `[wecom-cli]    Phase 2 长连接需要凭据（config botId/secret 或凭据文件）。
+` + `[wecom-cli]    如需临时自定义，可在事件源配置里设置 'command' 字段。`);
+    }
+    if (customCommand) {
+      const probe = probeCommandBinary(customCommand);
+      if (!probe.found) {
+        this.lastError = `wecom-cli command not found: ${customCommand}`;
+        this.setStatus("error");
+        return;
+      }
+    } else {
+      const bin = resolveWecomBinary();
+      if (!bin.found) {
+        this.lastError = "wecom-cli binary not found on PATH. Install it with: npm install -g @wecom/cli --registry=https://registry.npmmirror.com (or set 'command' in the event source config to override the launch command).";
+        this.setStatus("error");
+        return;
+      }
+    }
+    const command = this.buildCommand();
+    let child;
+    try {
+      child = spawn2(`exec ${command}`, [], {
+        shell: true,
+        stdio: ["pipe", "pipe", "pipe"],
+        windowsHide: true
+      });
+    } catch (err) {
+      this.lastError = `failed to spawn wecom-cli: ${err.message}`;
+      this.setStatus("error");
+      return;
+    }
+    this.child = child;
+    child.stdout?.on("data", (data) => {
+      this.processStdout(data.toString());
+    });
+    child.stderr?.on("data", (data) => {
+      const text = data.toString().trim();
+      if (text) {
+        this.lastError = text.slice(0, 500);
+        console.error(`[wecom-cli] ${text}`);
+      }
     });
-    this.child.on("exit", (code, signal) => {
+    child.on("error", (err) => {
+      this.lastError = `wecom-cli process error: ${err.message}`;
+      this.setStatus("error");
+    });
+    child.on("exit", (code, signal) => {
       if (code !== 0 && signal !== "SIGINT" && signal !== "SIGTERM") {
+        this.lastError = `wecom-cli exited with code ${code}`;
         this.setStatus("error");
       } else {
         this.setStatus("stopped");
       }
     });
-    this.child.on("error", (err) => {
-      console.error(`[bounty-cli] spawn error: ${err.message}`);
-      this.setStatus("error");
-    });
     this.setStatus("running");
   }
-  processStdout(buffer, fallbackChannel) {
-    const lines = buffer.split(`
-`);
-    const tail = lines.pop() ?? "";
-    this.buffer = tail;
-    for (const line of lines) {
-      const trimmed = line.trim();
-      if (!trimmed)
-        continue;
-      this.handleEventLine(trimmed, fallbackChannel);
-    }
-  }
-  processStderr(buffer) {
-    const lines = buffer.split(`
+  processStdout(chunk) {
+    this.buffer += chunk;
+    const lines = this.buffer.split(`
 `);
-    const tail = lines.pop() ?? "";
+    this.buffer = lines.pop() ?? "";
     for (const line of lines) {
       const trimmed = line.trim();
       if (!trimmed)
         continue;
-      if (trimmed.startsWith("{") && trimmed.includes("event_id")) {
-        this.handleEventLine(trimmed, readBountyCliConfig(this.config).channel ?? "");
-      }
-    }
-    if (tail.trim().length > 0) {
-      this.buffer = tail;
-    } else {
-      this.buffer = "";
+      this.handleEventLine(trimmed);
     }
   }
-  handleEventLine(line, fallbackChannel) {
+  handleEventLine(line) {
     let raw;
     try {
       raw = JSON.parse(line);
     } catch {
-      console.error(`[bounty-cli] failed to parse event line: ${line.slice(0, 200)}`);
+      console.error(`[wecom-cli] skipping non-JSON line: ${line.slice(0, 200)}`);
       return;
     }
-    const { metadata, replyChannel } = translateEvent(raw, fallbackChannel);
+    const parsed = parseWecomFrame(raw);
+    if (!parsed) {
+      console.error(`[wecom-cli] skipping non-event frame: ${JSON.stringify(raw).slice(0, 200)}`);
+      return;
+    }
+    const replyChannel = buildWecomReplyChannel({
+      chatId: parsed.metadata.chatId,
+      messageId: parsed.metadata.messageId,
+      chatType: parsed.metadata.chatType,
+      userId: parsed.metadata.senderId,
+      sourceId: this.config.id,
+      reqId: parsed.reqId,
+      statusNotifications: this.config.statusNotifications === true
+    });
     const event = {
-      metadata,
+      metadata: parsed.metadata,
+      payload: {
+        sourceId: this.config.id,
+        sourceType: WECOM_CLI_ES_TYPE,
+        rawEvent: raw,
+        message: buildWecomUserMessage(parsed.text, parsed.metadata.replyContext),
+        metadata: parsed.metadata,
+        replyChannel,
+        timestamp: Date.now()
+      },
       rawEvent: raw,
       replyChannel,
-      recommendedAction: buildBountyCliRecommendedAction({
-        profile: readBountyCliConfig(this.config).profile,
-        channelName: String(metadata.channelName ?? fallbackChannel)
-      })
+      recommendedAction: {
+        description: "Reply to the WeCom user via `wecom-cli message aibot send --json ...`",
+        command: `wecom-cli message aibot send --json '{"chat_id":"${parsed.metadata.chatId ?? parsed.metadata.senderId ?? ""}","msg_type":"markdown","markdown":{"content":"..."}}'`,
+        notes: [
+          "企微单聊的 chat_id 是对方 userid；群聊的 chat_id 是回调里的 chatid。",
+          "发送成功 = 退出码 0 且 stdout 无 error 字段。"
+        ]
+      }
     };
     if (this.eventHandler) {
       try {
         this.eventHandler(event);
       } catch (err) {
-        console.error(`[bounty-cli] event handler threw: ${err}`);
+        console.error(`[wecom-cli] event handler threw: ${err}`);
+        notifyReactFailure({
+          error: err,
+          envEvent: event,
+          replyChannel
+        }).catch(() => {});
       }
     }
   }
   async stop() {
     if (this.status === "stopped" || this.status === "created")
       return;
+    this.unloadPlugins();
+    if (this.wsBridge) {
+      unregisterWecomRespondTarget(this.config.id);
+      this.wsBridge.stop();
+      this.wsBridge = undefined;
+    }
+    try {
+      this.fallbackCardStateStore?.close?.();
+    } catch {}
+    this.fallbackCardStateStore = undefined;
     if (this.child && !this.child.killed) {
       this.child.kill("SIGINT");
-      await new Promise((resolve) => {
+      await new Promise((resolve2) => {
         const timer = setTimeout(() => {
-          if (this.child && !this.child.killed) {
+          if (this.child && !this.child.killed)
             this.child.kill("SIGKILL");
-          }
-          resolve();
+          resolve2();
         }, 3000);
         if (this.child) {
           this.child.on("exit", () => {
             clearTimeout(timer);
-            resolve();
+            resolve2();
           });
         } else {
           clearTimeout(timer);
-          resolve();
+          resolve2();
         }
       });
     }
     this.setStatus("stopped");
   }
 }
-var bountyCliHandler = {
-  type: "bounty-cli",
+var wecomCliHandler = {
+  type: WECOM_CLI_ES_TYPE,
   validateConfig(config) {
     const errors = [];
     if (!config.id)
       errors.push("EventSource ID is required");
     if (!config.name)
       errors.push("EventSource name is required");
-    const { channel, customCommand } = readBountyCliConfig(config);
-    if (!channel && !customCommand) {
-      errors.push("Bounty CLI 'channel' (top-level channel or options.channel) is required");
+    const { botId, secret } = readWecomCliConfig(config);
+    if (!botId) {
+      errors.push("WeCom 'botId' is required (企业微信智能机器人的 BotID；CLI 用 --bot-id 传入)");
+    }
+    if (!secret) {
+      errors.push("WeCom 'secret' is required (智能机器人 Secret；CLI 用 --secret 传入)");
     }
     return errors;
   },
   createInstance(config) {
-    return new BountyCliInstance(config);
+    return new WecomCliInstance(config);
+  },
+  getOptions() {
+    return [
+      { name: "botId", description: "企业微信智能机器人 BotID", required: true, type: "string" },
+      { name: "secret", description: "智能机器人 Secret（长连接专用密钥）", required: true, type: "string" },
+      { name: "webhook", description: "群机器人 webhook URL（可选）", required: false, type: "string" },
+      { name: "command", description: "覆盖默认启动命令（高级）", required: false, type: "string" }
+    ];
   }
 };
 
@@ -1488,7 +3368,13 @@ function writeConfigPath(configPath, dotPath, value) {
     }
   });
   const result = applyEdits(text, edits);
-  fs.writeFileSync(configPath, result, "utf-8");
+  const configDir = path.dirname(configPath);
+  const ok = guardConfigWrite(configDir, path.basename(configPath), () => {
+    fs.writeFileSync(configPath, result, "utf-8");
+  });
+  if (!ok) {
+    throw new Error(`config.jsonc 写入失败（护栏记录见 audit.log）：${configPath}`);
+  }
 }
 function readFallbackModelList(configPath) {
   const config = readConfigFile(configPath);
@@ -1728,12 +3614,12 @@ function resolveSocketPath() {
   return process.env.ROY_DAEMON_SOCKET || DEFAULT_SOCKET_PATH;
 }
 async function requestReset(socketPath, reason) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let sock;
     try {
       sock = connect(socketPath);
     } catch (e) {
-      resolve({ confirmed: false, reason: e.message });
+      resolve2({ confirmed: false, reason: e.message });
       return;
     }
     let settled = false;
@@ -1743,7 +3629,7 @@ async function requestReset(socketPath, reason) {
       settled = true;
       clearTimeout(timer);
       sock.destroy();
-      resolve({ confirmed, reason: why });
+      resolve2({ confirmed, reason: why });
     };
     const timer = setTimeout(() => finish(false, `daemon 未在 ${RESET_ACK_TIMEOUT_MS}ms 内确认`), RESET_ACK_TIMEOUT_MS);
     sock.once("connect", () => {
@@ -1799,6 +3685,227 @@ var resetCommand = {
   }
 };
 
+// src/env/event-source/es-command.ts
+import * as fs2 from "fs";
+import * as path2 from "path";
+var MOD_ALLOWED_FIELDS = [
+  "enabled",
+  "name",
+  "interval",
+  "cron",
+  "profile"
+];
+function resolveEsFilePath(configPath) {
+  const dir = configPath ? path2.dirname(configPath) : defaultRoyDir();
+  return path2.join(dir, "event-sources.json");
+}
+function defaultRoyDir() {
+  const home = process.env.HOME || process.env.USERPROFILE || "/tmp";
+  return path2.join(home, ".roy-agent");
+}
+function readEsFile(esFile) {
+  if (!fs2.existsSync(esFile)) {
+    return { version: "1.0.0", sources: [] };
+  }
+  try {
+    const parsed = JSON.parse(fs2.readFileSync(esFile, "utf-8"));
+    if (parsed && typeof parsed === "object" && Array.isArray(parsed.sources)) {
+      return parsed;
+    }
+  } catch {}
+  throw new Error(`event-sources.json 解析失败：${esFile}`);
+}
+function writeEsFile(esFile, data) {
+  fs2.mkdirSync(path2.dirname(esFile), { recursive: true });
+  const tmp = `${esFile}.tmp-${process.pid}-${Date.now()}`;
+  try {
+    fs2.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf-8");
+    fs2.renameSync(tmp, esFile);
+  } catch (err) {
+    try {
+      fs2.rmSync(tmp, { force: true });
+    } catch {}
+    throw new Error(`写入 ${esFile} 失败：${err.message}`);
+  }
+}
+function dualResult2(text) {
+  return {
+    ok: true,
+    output: {
+      text,
+      card: renderTextCard("⚙️ EventSource 管理", text),
+      kind: "card"
+    }
+  };
+}
+var USAGE2 = [
+  "用法：##command##: es <子命令> [参数]",
+  "",
+  "子命令：",
+  "  list                    列出所有事件源",
+  "  add <name> <type>       新增事件源（enabled=true）",
+  "  del <name|id>           删除事件源（别名 remove）",
+  "  mod <name|id> k=v       修改字段（enabled/name/interval/cron/profile；别名 update）",
+  "",
+  "  ⚠️ command/url 不可经 mod 修改（避免命令注入面）；如需改请 del 后 add。",
+  "",
+  "注意：修改的是磁盘配置，运行中的进程需「##command##: reset」重启后生效。"
+].join(`
+`);
+function findSource(sources, nameOrId) {
+  return sources.find((s) => s.name === nameOrId || s.id === nameOrId);
+}
+function parseKv(pair) {
+  const idx = pair.indexOf("=");
+  if (idx <= 0)
+    return null;
+  const key = pair.slice(0, idx).trim();
+  const rawValue = pair.slice(idx + 1).trim();
+  let value = rawValue;
+  if (rawValue === "true")
+    value = true;
+  else if (rawValue === "false")
+    value = false;
+  else if (rawValue !== "" && !Number.isNaN(Number(rawValue))) {
+    value = Number(rawValue);
+  }
+  return { key, value };
+}
+function renderList(sources) {
+  if (sources.length === 0) {
+    return `当前没有已配置的事件源。
+（可用「##command##: es add <name> <type>」新增）`;
+  }
+  const lines = sources.map((s) => {
+    const name = String(s.name ?? "?");
+    const type = String(s.type ?? "?");
+    const enabled = s.enabled === false ? "disabled" : "enabled";
+    const id = String(s.id ?? "");
+    return `- ${name}  [${type}]  ${enabled}  (${id})`;
+  });
+  return `事件源列表（${sources.length} 个）：
+${lines.join(`
+`)}`;
+}
+var esCommand = {
+  name: "es",
+  description: "管理事件源（list/add/del/mod），改磁盘配置",
+  usage: "##command##: es <list|add|del|mod> [参数]",
+  async execute(ctx) {
+    try {
+      return await executeEsCommand(ctx);
+    } catch (err) {
+      return {
+        ok: false,
+        error: `event-sources.json 读写失败：${err.message}`
+      };
+    }
+  }
+};
+async function executeEsCommand(ctx) {
+  {
+    const esFile = resolveEsFilePath(ctx.configPath);
+    const [sub, ...rest] = ctx.args;
+    switch (sub) {
+      case "list":
+      case undefined: {
+        const data = readEsFile(esFile);
+        return dualResult2(renderList(data.sources));
+      }
+      case "add": {
+        const [name, type] = rest;
+        if (!name || !type) {
+          return { ok: false, error: `用法：##command##: es add <name> <type>
+${USAGE2}` };
+        }
+        const data = readEsFile(esFile);
+        if (findSource(data.sources, name)) {
+          return {
+            ok: false,
+            error: `事件源「${name}」已存在（add 拒绝重名）。可用 es mod 修改或 es del 删除后重建。`
+          };
+        }
+        const id = `es-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+        const source = {
+          id,
+          name,
+          type,
+          enabled: true
+        };
+        data.sources.push(source);
+        writeEsFile(esFile, data);
+        return dualResult2(`✅ 已新增事件源「${name}」[${type}]（id=${id}，enabled）。` + `重启进程后生效（##command##: reset）。`);
+      }
+      case "del":
+      case "remove": {
+        const target = rest[0];
+        if (!target) {
+          return { ok: false, error: `用法：##command##: es del <name|id>
+${USAGE2}` };
+        }
+        const data = readEsFile(esFile);
+        const src = findSource(data.sources, target);
+        if (!src) {
+          return { ok: false, error: `未找到事件源「${target}」。` };
+        }
+        data.sources = data.sources.filter((s) => s !== src);
+        writeEsFile(esFile, data);
+        return dualResult2(`✅ 已删除事件源「${String(src.name)}」（id=${String(src.id)}）。` + `重启进程后生效（##command##: reset）。`);
+      }
+      case "mod":
+      case "update": {
+        const [target, ...pairs] = rest;
+        if (!target || pairs.length === 0) {
+          return {
+            ok: false,
+            error: `用法：##command##: es mod <name|id> k=v [k=v...]
+${USAGE2}`
+          };
+        }
+        const data = readEsFile(esFile);
+        const src = findSource(data.sources, target);
+        if (!src) {
+          return { ok: false, error: `未找到事件源「${target}」。` };
+        }
+        const applied = [];
+        for (const pair of pairs) {
+          const kv = parseKv(pair);
+          if (!kv) {
+            return { ok: false, error: `参数格式错误：「${pair}」（应为 k=v）
+${USAGE2}` };
+          }
+          if (!MOD_ALLOWED_FIELDS.includes(kv.key)) {
+            return {
+              ok: false,
+              error: `字段「${kv.key}」不允许修改（白名单：${MOD_ALLOWED_FIELDS.join("/")}；id/type 不可改）。`
+            };
+          }
+          if (kv.key === "name" && typeof kv.value === "string" && kv.value !== src.name && data.sources.some((s0) => s0 !== src && s0.name === kv.value)) {
+            return {
+              ok: false,
+              error: `名称「${String(kv.value)}」已被其它事件源占用，改 name 拒绝。`
+            };
+          }
+          let value = kv.value;
+          if (kv.key === "enabled") {
+            value = kv.value === true || kv.value === 1 || kv.value === "1" || kv.value === "true" || kv.value === "yes" || kv.value === "on";
+          }
+          src[kv.key] = value;
+          applied.push(`${kv.key}=${String(value)}`);
+        }
+        writeEsFile(esFile, data);
+        return dualResult2(`✅ 已修改事件源「${String(src.name)}」：${applied.join("，")}。` + `重启进程后生效（##command##: reset）。`);
+      }
+      default:
+        return {
+          ok: false,
+          error: `未知子命令「${sub}」。
+${USAGE2}`
+        };
+    }
+  }
+}
+
 // src/env/event-source/command-registry.ts
 var logger2 = createLogger("command-registry");
 var COMMAND_PREFIX = "##command##:";
@@ -1892,6 +3999,7 @@ function getGlobalCommandRegistry() {
     registry.register(fallbackModelCommand);
     registry.register(listCommand);
     registry.register(resetCommand);
+    registry.register(esCommand);
     g.__royCommandRegistry = registry;
   }
   return g.__royCommandRegistry;
@@ -1998,7 +4106,7 @@ async function handleCommandCardAction(event, ports) {
 
 // src/env/event-source/event-source-handlers.ts
 init_logger();
-var execAsync2 = promisify2(execSync);
+var execAsync = promisify(execSync);
 var logger4 = createLogger("lark-cli:event-source");
 var CHILD_READY_TIMEOUT_MS = 5000;
 var GRACEFUL_STOP_TIMEOUT_MS = 5000;
@@ -2009,12 +4117,6 @@ function isChildAlive(child) {
 function isPluginDebugEnabled() {
   return process.env.ROY_TASK_NOTIFY_DEBUG === "1" || process.env.ROY_TRACE_DEBUG === "1";
 }
-var BUILT_IN_PLUGIN_FACTORIES = {
-  LarkCliTaskNotifyPlugin: (cfg) => createLarkCliTaskNotifyHook(cfg),
-  LarkCliWorkflowNotifyPlugin: (cfg) => createLarkCliWorkflowNotifyHook(cfg),
-  PerTaskGroupChatPlugin: (cfg) => createPerTaskGroupChatPlugin(cfg),
-  "task-tag": () => new TaskTagPlugin
-};
 function matchEventType(eventType, patterns) {
   for (const pattern of patterns) {
     if (pattern === "*")
@@ -2029,17 +4131,85 @@ function matchEventType(eventType, patterns) {
   }
   return false;
 }
+function buildSlimRawData(rawEvent) {
+  const event = rawEvent ?? {};
+  const innerEvent = event.event;
+  const message = innerEvent?.message ?? event.message;
+  const sender = innerEvent?.sender ?? event.sender;
+  const slim = {};
+  const chatId = message?.chat_id ?? event.chat_id;
+  if (chatId !== undefined)
+    slim.chat_id = chatId;
+  const messageId = message?.message_id ?? event.message_id ?? event.id;
+  if (messageId !== undefined)
+    slim.message_id = messageId;
+  const rawSenderId = sender?.sender_id ?? event.sender_id;
+  let senderId;
+  if (typeof rawSenderId === "string") {
+    senderId = rawSenderId;
+  } else if (rawSenderId && typeof rawSenderId === "object") {
+    const obj = rawSenderId;
+    senderId = obj.open_id ?? obj.user_id ?? obj.union_id;
+  }
+  if (senderId !== undefined)
+    slim.sender_id = senderId;
+  const chatType = message?.chat_type ?? event.chat_type;
+  if (chatType !== undefined)
+    slim.chat_type = chatType;
+  const content = message?.content ?? event.content;
+  if (content !== undefined)
+    slim.content = content;
+  const mentions = message?.mentions ?? event.mentions;
+  if (mentions !== undefined)
+    slim.mentions = mentions;
+  return slim;
+}
 function buildLarkRecommendedAction(opts) {
-  const { profile, chatType, appId, chatId, messageId } = opts;
+  const { profile, chatType, appId, chatId, messageId, senderId } = opts;
   const profileFlag = profile ? `--profile ${profile} ` : "";
   const profileWarn = profile ? `（⚠️ 必须用 profile="${profile}" 调 lark-cli；openId per-app 隔离，换 profile 会失败）` : "";
   const isGroup = chatType === "group";
-  const scopeHint = isGroup ? `群聊消息；回复到 replyTo.chatId。如需 @发件人，用结构化 at 节点 {"tag":"at","user_id":"<senderId>"}（不要写 <at> 文本标签）` : "p2p 私聊消息；回复到 replyTo.chatId";
+  const senderIdForPrompt = senderId || "<senderId>";
+  const scopeHint = isGroup ? `群聊消息；回复到 replyTo.chatId。如需 @发件人，用结构化 at 节点 {"tag":"at","user_id":"${senderIdForPrompt}"}（不要写 <at> 文本标签）` : "p2p 私聊消息；回复到 replyTo.chatId";
   const scopeWord = isGroup ? "群聊" : "p2p 私聊";
   const action = [
     `处理飞书 ${scopeWord}消息并以机器人身份回复${profileWarn}。`,
     `scope: ${scopeHint}。`,
     ``,
+    ...larkStaticRuleLines(profileFlag, senderIdForPrompt),
+    ``,
+    `## 必须使用 replyTo 里给定的值`,
+    `profile / chatId / messageId / --as bot 必须原样取自 recommendedAction.replyTo；不要凭印象自己拼接。`
+  ].join(`
+`);
+  const actionWithReplyContext = [
+    action,
+    larkReplyContextSection(profileFlag)
+  ].join(`
+`);
+  return {
+    action: actionWithReplyContext,
+    replyTo: {
+      appId,
+      profile,
+      chatId,
+      messageId
+    }
+  };
+}
+var LARK_CHANNEL_PROMPT_SECTION_TITLE = "⭐ 飞书回复规范（system prompt 注入版）";
+var LARK_PROMPT_LENGTH_BUDGET = 5900;
+function larkReplyContextSection(profileFlag) {
+  return [
+    ``,
+    `## 引用消息上下文 replyContext`,
+    `recommendedAction.replyContext 存在 = 本条是对 parentId 的回复。`,
+    `- 取原文：lark-cli ${profileFlag}im +messages-mget --message-ids <parentId> --as bot（best-effort）`
+  ].join(`
+`);
+}
+function larkStaticRuleLines(profileFlag, senderIdForPrompt) {
+  return [
     `## ⭐ 关键 0：整次回复只发一条结构化 post（禁分段）`,
     `> 指令优先级：本 prompt 与 lark-* skill 文档冲突时**以本 prompt 为准**`,
     `> （例：lark-im skill 建议 --markdown / ANSI-C 引号，本项目一律走下面模板）。`,
@@ -2074,6 +4244,13 @@ function buildLarkRecommendedAction(opts) {
     `  ]}}`,
     ``,
     `- @mention：用 {"tag":"at","user_id":"ou_xxx"}（user_id 填对方 open_id；@所有人填 "all"）`,
+    `- **群聊必须 @ sender**：若接收的消息是 \`chat_type: group\`，回复时 content **必须**保留结构化 at 节点 @ 发送者（user_id 填 senderId，即消息发送者的 open_id）；**禁止只用引用回复**（quote/reply 不算 @，群聊里对方收不到提醒）；私聊（p2p）不需要。群聊可跑示例（照抄，--arg uid 填消息发送者 open_id）：`,
+    `  body_file="$(mktemp /tmp/lark-ask.XXXXXX.md)"`,
+    `  cat > "$body_file" <<'EOF2'`,
+    `  回复正文……`,
+    `  EOF2`,
+    `  content="$(jq -nc --rawfile md "$body_file" --arg uid "${senderIdForPrompt}" '{zh_cn:{content:[[{tag:"at",user_id:$uid}],[{tag:"md",text:$md}]]}}')"`,
+    `  lark-cli ${profileFlag}im +messages-reply --message-id <replyTo.messageId> --as bot --msg-type post --content "$content"`,
     `- 正文：全部放进 {"tag":"md","text":"..."} 这一个节点里`,
     `- 不需要 @ 时，content 里只放 md 节点：{"zh_cn":{"content":[[{"tag":"md","text":"..."}]]}}`,
     `- md 节点支持 CommonMark 0.31 + GFM：ATX 标题（#~######）/ 表格 / 任务列表 / 加粗 / 围栏代码块 / 超链接`,
@@ -2091,7 +4268,7 @@ function buildLarkRecommendedAction(opts) {
     `  cat > "$body_file" <<'LARK_REPLY_EOF'`,
     `  ...（回复的 Markdown 正文，可多行 / 含表格 / 含特殊字符；不要写 <at> 标签）`,
     `  LARK_REPLY_EOF`,
-    `  content="$(jq -nc --rawfile md "$body_file" --arg uid "<senderId>" '{zh_cn:{content:[[{tag:"at",user_id:$uid}],[{tag:"md",text:$md}]]}}')"`,
+    `  content="$(jq -nc --rawfile md "$body_file" --arg uid "${senderIdForPrompt}" '{zh_cn:{content:[[{tag:"at",user_id:$uid}],[{tag:"md",text:$md}]]}}')"`,
     `  lark-cli ${profileFlag}im +messages-reply --message-id <取自 replyTo.messageId> --as bot --msg-type post --content "$content"`,
     ``,
     `不需要 @ 某人时，把 jq 表达式换成 '{zh_cn:{content:[[{tag:"md",text:$md}]]}}'。`,
@@ -2135,20 +4312,60 @@ function buildLarkRecommendedAction(opts) {
     `  - 飞书消息正文里常含裸 \`"\`、\`|\`、Markdown 表格分隔符 → json.load 会报 \`Expecting ',' delimiter\` 假失败`,
     `  - 假失败 → 重发 → 形成 3 份相同消息`,
     `- 重试建议：固定 idempotency-key（飞书层面去重，**最长 50 字符**），不要靠内容 hash 自检`,
+    ``,
+    `## 文档交付规范：产出物存飞书云盘，云盘链接交付`,
+    `- 本渠道触发的**文档类生成**（调研文档 / PPT / doc 等）必须用**飞书云盘**存储产出物`,
+    `  （\`lark-cli docs +create --title <标题> --markdown @<本地md>\`，用完即弃）`,
+    `- 交付时只给**云盘链接**（https://my.feishu.cn/...），**不落本地路径**交付`,
+    `  - 本地路径只作中转（生成 md → 上传云盘 → 回复里贴云盘链接），不作为交付物`
+  ];
+}
+function buildLarkChannelSystemPrompt(opts) {
+  const { profile } = opts;
+  const profileFlag = profile ? `--profile ${profile} ` : "";
+  const profileWarn = profile ? `（⚠️ 必须用 profile="${profile}" 调 lark-cli；openId per-app 隔离，换 profile 会失败）` : "";
+  const header = [
+    `# ${LARK_CHANNEL_PROMPT_SECTION_TITLE}`,
+    ``,
+    `本节是飞书渠道的**回复规范**（静态规则，随 system prompt 注入）。`,
+    `每条飞书事件的 \`recommendedAction\` 只带动态定位（replyTo 四元组），`,
+    `profile / chatId / messageId 是本轮唯一权威定位，其余回复规则全部在此。`,
+    profile ? `本渠道 profile：${profile}${profileWarn}` : `本渠道未配置 profile（使用 lark-cli active profile）。`,
+    ``
+  ].join(`
+`);
+  const footer = [
     ``,
     `## 必须使用 replyTo 里给定的值`,
-    `profile / chatId / messageId / --as bot 必须原样取自 recommendedAction.replyTo；不要凭印象自己拼接。`
+    `profile / chatId / messageId / --as bot 必须原样取自 recommendedAction.replyTo；不要凭印象自己拼接。`,
+    larkReplyContextSection(profileFlag)
   ].join(`
 `);
-  return {
-    action,
-    replyTo: {
-      appId,
-      profile,
-      chatId,
-      messageId
-    }
-  };
+  return header + larkStaticRuleLines(profileFlag, "<senderId>").join(`
+`) + footer;
+}
+function buildLarkLeanAction(chatType, senderId) {
+  const isGroup = chatType === "group";
+  const senderIdForPrompt = senderId || "<senderId>";
+  const scopeHint = isGroup ? `群聊消息；回复到 replyTo.chatId。如需 @发件人，用结构化 at 节点 {"tag":"at","user_id":"${senderIdForPrompt}"}（不要写 <at> 文本标签）` : "p2p 私聊消息；回复到 replyTo.chatId";
+  return [
+    `处理飞书${isGroup ? "群聊" : "p2p 私聊"}消息并回复。回复规范见 system prompt「${LARK_CHANNEL_PROMPT_SECTION_TITLE}」章节。`,
+    `scope: ${scopeHint}。`,
+    `replyTo 的 profile/chatId/messageId 是本轮唯一权威定位；其余回复规则（发送命令模板、长度上限、发送纪律等）全部见 system prompt 上述章节。`
+  ].join(`
+`);
+}
+function resolveLarkChannelSystemPrompt(config) {
+  const mode = config.channelPromptMode ?? "lean";
+  if (mode === "legacy") {
+    return config.systemPrompt;
+  }
+  const channelPrompt = buildLarkChannelSystemPrompt({
+    profile: config.profile
+  });
+  return config.systemPrompt ? config.systemPrompt + `
+
+` + channelPrompt : channelPrompt;
 }
 function extractMetadata(rawEvent, eventType) {
   const event = rawEvent;
@@ -2184,6 +4401,19 @@ function extractMetadata(rawEvent, eventType) {
     metadata.chatType = messageData.chat_type;
     metadata.messageId = messageData.message_id;
     metadata.messageType = messageData.message_type;
+    const rootId = messageData.root_id ?? event.root_id;
+    const parentId = messageData.parent_id ?? event.reply_to ?? event.parent_id;
+    const threadId = messageData.thread_id ?? event.thread_id;
+    if (rootId || parentId || threadId) {
+      const replyContext = {};
+      if (rootId)
+        replyContext.rootId = rootId;
+      if (parentId)
+        replyContext.parentId = parentId;
+      if (threadId)
+        replyContext.threadId = threadId;
+      metadata.replyContext = replyContext;
+    }
   }
   if (typeof senderId === "string") {
     metadata.senderId = senderId;
@@ -2193,13 +4423,34 @@ function extractMetadata(rawEvent, eventType) {
   let recommendedAction;
   if (eventType === "im.message.receive_v1" || event.type === "im.message.receive_v1") {
     const profile2 = event.profile;
-    recommendedAction = buildLarkRecommendedAction({
-      profile: profile2,
-      chatType: metadata.chatType,
-      appId: metadata.appId,
-      chatId: metadata.chatId,
-      messageId: metadata.messageId
-    });
+    const promptMode = event.channelPromptMode ?? "lean";
+    if (promptMode === "legacy") {
+      recommendedAction = buildLarkRecommendedAction({
+        profile: profile2,
+        chatType: metadata.chatType,
+        appId: metadata.appId,
+        chatId: metadata.chatId,
+        messageId: metadata.messageId,
+        senderId: metadata.senderId
+      });
+    } else {
+      recommendedAction = {
+        action: buildLarkLeanAction(metadata.chatType, metadata.senderId),
+        replyTo: {
+          appId: metadata.appId,
+          profile: profile2,
+          chatId: metadata.chatId,
+          messageId: metadata.messageId
+        },
+        staticRulesInSystemPrompt: true
+      };
+    }
+    if (metadata.replyContext) {
+      recommendedAction = {
+        ...recommendedAction,
+        replyContext: metadata.replyContext
+      };
+    }
   }
   const profile = event.profile;
   const senderOpenId = typeof senderId === "string" ? senderId : senderId?.open_id;
@@ -2210,7 +4461,8 @@ function extractMetadata(rawEvent, eventType) {
     chatId: messageData?.chat_id,
     messageId: messageData?.message_id,
     params: {
-      userId: senderOpenId
+      userId: senderOpenId,
+      statusNotifications: event.statusNotifications === true
     }
   };
   return { metadata, replyChannel, recommendedAction };
@@ -2244,6 +4496,15 @@ class LarkCliInstance {
   recentEventIds = new Map;
   DEDUP_WINDOW_MS = 60000;
   DEDUP_MAX_SIZE = 100;
+  cachedChannelSystemPrompt;
+  channelSystemPromptResolved = false;
+  getChannelSystemPrompt() {
+    if (!this.channelSystemPromptResolved) {
+      this.cachedChannelSystemPrompt = resolveLarkChannelSystemPrompt(this.config);
+      this.channelSystemPromptResolved = true;
+    }
+    return this.cachedChannelSystemPrompt;
+  }
   environment;
   loadedPlugins = [];
   constructor(config) {
@@ -2291,7 +4552,7 @@ class LarkCliInstance {
     logger4.info(`[LarkCliInstance] 已监听 ${CARD_ACTION_EVENT_TYPE}。` + `⚠️ 若点击卡片无反应，先确认飞书开发者后台「事件与回调 → 回调配置」已开启该事件。`);
   }
   spawnConsumeChild(command) {
-    return spawn2("exec " + command, [], {
+    return spawn3("exec " + command, [], {
       shell: true,
       stdio: ["pipe", "pipe", "pipe"],
       windowsHide: true
@@ -2335,7 +4596,7 @@ class LarkCliInstance {
     const profile = this.config.profile;
     const profileFlag = profile ? `--profile ${profile} ` : "";
     try {
-      const { stdout } = await execAsync2(`lark-cli ${profileFlag}event status --json`, {
+      const { stdout } = await execAsync(`lark-cli ${profileFlag}event status --json`, {
         timeout: 5000
       });
       const parsed = JSON.parse(stdout);
@@ -2428,13 +4689,13 @@ class LarkCliInstance {
         logger4.warn(`[LarkCliInstance] Error sending SIGTERM to ${child.pid}: ${error}`);
       }
     }
-    const allExited = Promise.all(children.map((child) => new Promise((resolve) => {
+    const allExited = Promise.all(children.map((child) => new Promise((resolve2) => {
       if (isChildAlive(child) === false)
-        return resolve();
-      child.once("exit", () => resolve());
-      child.once("error", () => resolve());
+        return resolve2();
+      child.once("exit", () => resolve2());
+      child.once("error", () => resolve2());
     })));
-    const timeout = new Promise((resolve) => setTimeout(resolve, GRACEFUL_STOP_TIMEOUT_MS));
+    const timeout = new Promise((resolve2) => setTimeout(resolve2, GRACEFUL_STOP_TIMEOUT_MS));
     await Promise.race([allExited, timeout]);
     for (const child of children) {
       if (isChildAlive(child)) {
@@ -2488,7 +4749,7 @@ class LarkCliInstance {
       logger4.debug(`[LarkCliInstance] card.action.trigger 端口未注入：taskComponent 不可用` + `（getTask=${typeof taskComponent?.getTask}, updateTask=${typeof taskComponent?.updateTask}）。` + `卡片按钮点击会被跳过。`);
       return;
     }
-    const sharedNotifier = this.pluginInstances.get("LarkCliTaskNotifyPlugin")?.cardNotifier ?? this.pluginInstances.get("PerTaskGroupChatPlugin")?.cardNotifier;
+    const sharedNotifier = this.pluginInstances.get("LarkCliTaskNotifyPlugin")?.cardNotifier ?? this.pluginInstances.get("PerTaskGroupChatPlugin")?.cardNotifier ?? getSharedLarkCardNotifier();
     this.setCardActionPorts({
       getTask: async (id) => {
         const t = await taskComponent.getTask(id);
@@ -2512,7 +4773,117 @@ class LarkCliInstance {
       },
       createGroupChat: (opts) => createGroupChatViaLarkCli(opts),
       deleteGroupChat: (chatId, profile) => deleteGroupChatViaLarkCli(chatId, profile),
-      notifier: sharedNotifier ?? new LarkCardPatchNotifier
+      notifier: sharedNotifier ?? getSharedLarkCardNotifier(),
+      resolveSessionIdByTask: async (taskId) => {
+        const fromNotifier = sharedNotifier?.getSessionIdByTask?.(taskId);
+        if (fromNotifier)
+          return fromNotifier;
+        const tc = taskComponent;
+        try {
+          const rec = getSharedLarkCardStateStore().get(taskId);
+          if (rec?.sessionId)
+            return rec.sessionId;
+        } catch {}
+        return;
+      },
+      loadSessionActivity: createSessionActivityProbe({
+        getSession: async (sessionId) => {
+          const sc = this.environment?.getComponent?.("session");
+          if (!sc?.get)
+            return;
+          const s = await sc.get(sessionId);
+          if (!s)
+            return;
+          return {
+            ...typeof s.messageCount === "number" ? { messageCount: s.messageCount } : {},
+            ...typeof s.updatedAt === "number" ? { updatedAt: s.updatedAt } : {}
+          };
+        },
+        getLastMessage: async (sessionId) => {
+          const sc = this.environment?.getComponent?.("session");
+          if (!sc?.getMessages)
+            return;
+          const tail = await sc.getMessages(sessionId, { offset: -1, limit: 1 });
+          return toActivityMessage(tail?.[tail.length - 1]);
+        },
+        getLifecycle: (sessionId) => {
+          const bgTasks = taskComponent.getBackgroundTaskManager?.()?.listTasks?.() ?? [];
+          const hit = bgTasks.find((t) => t?.subSessionId === sessionId);
+          return mapBgTaskStatusToSessionLifecycle(hit?.status);
+        }
+      }),
+      loadSubSessionActivity: createActivityProbe({
+        listBackgroundTasks: () => taskComponent.getBackgroundTaskManager?.()?.listTasks?.(),
+        getSubSessionActivity: (bgId) => taskComponent.getBackgroundTaskManager?.()?.getSubSessionActivity?.(bgId),
+        getLastMessage: async (subSessionId) => {
+          const sessionComponent = this.environment?.getComponent?.("session");
+          if (!sessionComponent?.getMessages)
+            return;
+          const tail = await sessionComponent.getMessages(subSessionId, {
+            offset: -1,
+            limit: 1
+          });
+          return toActivityMessage(tail?.[tail.length - 1]);
+        },
+        isTerminalTask: async (taskId) => {
+          const t = await taskComponent.getTask?.(taskId);
+          const status = t?.status;
+          return status === "completed" || status === "cancelled" || status === "failed" || status === "archived";
+        }
+      }),
+      loadSessionMessages: async (sessionId, limit) => {
+        const sc = this.environment?.getComponent?.("session");
+        if (!sc?.getMessages)
+          return;
+        const n = typeof limit === "number" && limit > 0 ? limit : RECENT_MESSAGE_LIMIT;
+        const tail = await sc.getMessages(sessionId, {
+          offset: -1,
+          limit: n * 3
+        });
+        const calls = extractToolCallsFromMessages(tail);
+        return calls.slice(-n);
+      },
+      attachGroupSession: async (args) => {
+        const sessionComponent = this.environment?.getComponent?.("session");
+        if (typeof sessionComponent?.attachGroupSession !== "function") {
+          logger4.warn(`[LarkCliInstance] attachGroupSession 跳过：sessionComponent.attachGroupSession 不可用`);
+          return;
+        }
+        await sessionComponent.attachGroupSession(args);
+        logger4.info(`[LarkCliInstance] 群 session 已初始化：${args.chatId} ← ${args.originSessionId}` + `（独立会话 + 1 条 user 事件背景提示）`);
+      },
+      findGroupChatForSession: async (sessionId) => {
+        const sessionComponent = this.environment?.getComponent?.("session");
+        if (typeof sessionComponent?.findGroupChatForSession !== "function") {
+          logger4.warn(`[LarkCliInstance] findGroupChatForSession 跳过：sessionComponent 不支持`);
+          return;
+        }
+        return await sessionComponent.findGroupChatForSession(sessionId);
+      },
+      detachGroupSession: async (chatId) => {
+        const sessionComponent = this.environment?.getComponent?.("session");
+        if (typeof sessionComponent?.detachGroupSession !== "function") {
+          logger4.warn(`[LarkCliInstance] detachGroupSession 跳过：sessionComponent.detachGroupSession 不可用`);
+          return;
+        }
+        const r = await sessionComponent.detachGroupSession(chatId);
+        if (!r.ok) {
+          logger4.warn(`[LarkCliInstance] detachGroupSession 失败: ${chatId}`);
+          return;
+        }
+        logger4.info(`[LarkCliInstance] 群 session 已标记解散：${chatId}`);
+      },
+      getSessionTitle: async (sessionId) => {
+        const sessionComponent = this.environment?.getComponent?.("session");
+        if (typeof sessionComponent?.get !== "function")
+          return;
+        try {
+          const s = await sessionComponent.get(sessionId);
+          return typeof s?.title === "string" && s.title.trim() ? s.title.trim() : undefined;
+        } catch {
+          return;
+        }
+      }
     });
     logger4.info(`[LarkCliInstance] card.action.trigger 端口已注入` + `（notifier ${sharedNotifier ? "复用插件共享实例" : "新建实例"}）`);
   }
@@ -2673,6 +5044,12 @@ class LarkCliInstance {
       getTask: taskComponent?.getTask ? (id) => taskComponent.getTask(id) : undefined
     };
     plugin.setCardRoutingPorts({ ...this.cardRoutingPorts });
+    if (typeof plugin === "object" && "syncGroupCardFromOriginFn" in plugin) {
+      const sessionComponent = this.environment?.getComponent?.("session");
+      if (typeof sessionComponent?.findGroupChatForSession === "function") {
+        plugin.syncGroupCardFromOriginFn = (sid) => sessionComponent.findGroupChatForSession(sid);
+      }
+    }
   }
   injectSessionComponent(plugin) {
     if (typeof plugin.setSessionComponent !== "function") {
@@ -2833,9 +5210,18 @@ class LarkCliInstance {
       const enrichedEvent = {
         ...rawEvent,
         profile: this.config.profile,
-        eventSourceId: this.config.id
+        eventSourceId: this.config.id,
+        channelPromptMode: this.config.channelPromptMode ?? "lean",
+        statusNotifications: this.config.statusNotifications === true
       };
       const { metadata, replyChannel, recommendedAction } = extractMetadata(enrichedEvent, eventType);
+      const channelSystemPrompt = this.getChannelSystemPrompt();
+      if (channelSystemPrompt !== undefined) {
+        metadata.systemPrompt = channelSystemPrompt;
+      }
+      if (this.config.extendTools?.length) {
+        metadata.extendTools = [...this.config.extendTools];
+      }
       failureReplyChannel = replyChannel;
       const commandText = isCardAction ? undefined : extractCommandText(enrichedEvent);
       const parentTaskId = isCardAction ? null : await this.resolveChatTaskBinding(metadata?.chatId);
@@ -2864,8 +5250,9 @@ class LarkCliInstance {
           console.error(`[LarkCliInstance] emitTriggerEvent failed: ${err instanceof Error ? err.message : String(err)}`);
         }
       }
+      const slimRawData = buildSlimRawData(rawEvent);
       const message = JSON.stringify({
-        rawData,
+        rawData: slimRawData,
         recommendedAction,
         ...triggerEventId ? { triggerEventId } : {}
       });
@@ -2888,6 +5275,8 @@ class LarkCliInstance {
           pluginEnabled,
           replyChannel,
           agent,
+          ...channelSystemPrompt !== undefined ? { systemPrompt: channelSystemPrompt } : {},
+          ...this.config.extendTools?.length ? { extendTools: [...this.config.extendTools] } : {},
           parentTaskId: parentTaskId ?? undefined,
           ...triggerEventId ? { triggerEventId } : {},
           traceContext: eventTraceContext
@@ -2981,7 +5370,12 @@ class LarkCliInstance {
       }, this.cardActionPorts);
       if (result.ok && result.cardUpdate) {
         const patch = this.cardActionPorts.patchByToken ?? patchCardByLarkCli;
-        await patch(token, result.cardUpdate, profile);
+        try {
+          await patch(token, result.cardUpdate, profile);
+          logger4.info(`[LarkCliInstance] 卡片 patch 成功: messageId=${messageId} action=${String(result.action)} chatId=${chatId}`);
+        } catch (patchErr) {
+          logger4.warn(`[LarkCliInstance] 卡片 patch 失败: messageId=${messageId} ` + `action=${String(result.action)} error=${patchErr.message}` + `（token 30min 有效，过期即失败——需用新卡重试）`);
+        }
       } else {
         logger4.warn(`[LarkCliInstance] handleCardActionEvent failed: ${result.error ?? "unknown"}`);
       }
@@ -3138,8 +5532,8 @@ class LarkCliInstance {
     if (profile) {
       args.unshift("--profile", profile);
     }
-    await new Promise((resolve, reject) => {
-      const proc = spawn2("lark-cli", args, {
+    await new Promise((resolve2, reject) => {
+      const proc = spawn3("lark-cli", args, {
         shell: false,
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -3149,7 +5543,7 @@ class LarkCliInstance {
       });
       proc.on("close", (code) => {
         if (code === 0)
-          resolve();
+          resolve2();
         else
           reject(new Error(`lark-cli exited with code ${code}: ${stderr}`));
       });
@@ -3223,7 +5617,7 @@ class LarkCliInstance {
     };
   }
   async sendLarkMessage(options) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const { chatId, userId, messageId, content, format = "text", profile } = options;
       const normalizedContent = normalizeLarkAtMentions(content);
       const contentFlag = format === "markdown" ? "--markdown" : "--text";
@@ -3241,7 +5635,7 @@ class LarkCliInstance {
       if (profile) {
         args.unshift("--profile", profile);
       }
-      const proc = spawn2("lark-cli", args, {
+      const proc = spawn3("lark-cli", args, {
         shell: false,
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -3255,7 +5649,7 @@ class LarkCliInstance {
       });
       proc.on("close", (code) => {
         if (code === 0) {
-          resolve();
+          resolve2();
         } else {
           reject(new Error(`lark-cli exited with code ${code}: ${stderr}`));
         }
@@ -3470,7 +5864,7 @@ ${headline}
 - **chatId: ${chatId || "(缺失)"}**  ← 关键！必须发到这里
 - **messageId: ${messageId || "(缺失)"}**  ← ${messageId ? "reply 这条，保持话题线索" : "无触发消息，用 +messages-send"}
 - sender: ${senderId || "(未知)"}
-${input.notifyEvent.subSessionId ? `- 子 session: ${input.notifyEvent.subSessionId}  ← 如需续跑：delegate_task(existingSubSessionId=<此值>, prompt=<新要求>)
+${input.notifyEvent.subSessionId ? `- 子 session: ${input.notifyEvent.subSessionId}  ← 如需续跑：delegate_task(sub_session_id="${input.notifyEvent.subSessionId}", prompt=<新要求>)
 ` : ""}${profile ? `- profile: ${profile}  ← 调用 lark-cli 必须带 --profile
 ` : ""}
 ### 系统回执（rule-based 直发）
@@ -3525,7 +5919,7 @@ async function patchCardByLarkCli(token, card, profile) {
   const profileFlag = profile ? `--profile ${profile} ` : "";
   const cmd = `lark-cli ${profileFlag}api POST /open-apis/interactive/v1/card/update ` + `--data '${JSON.stringify({ token, card }).replace(/'/g, "'\\''")}' --as bot`;
   try {
-    const { stdout } = await execAsync2(cmd, { timeout: 30000 });
+    const { stdout } = await execAsync(cmd, { timeout: 30000 });
     logger4.debug(`patchCardByLarkCli ok: ${stdout?.slice(0, 200)}`);
   } catch (err) {
     const msg = err.message;
@@ -3538,10 +5932,11 @@ var builtInHandlers = [
   timerHandler,
   bountyIMHandler,
   bountyCliHandler,
-  cliCommandHandler
+  cliCommandHandler,
+  wecomCliHandler
 ];
 function getBuiltInHandler(type) {
   return builtInHandlers.find((h) => h.type === type);
 }
 
-export { TimerInstance, timerHandler, buildDefaultBountyIMSystemPrompt, resolveBountyIMSystemPrompt, BountyIMInstance, bountyIMHandler, bountyCliHandler, FALLBACK_MODEL_ACTION_NS, FALLBACK_MODEL_ACTIONS, isFallbackModelCard, renderTextCard, renderFallbackModelCard, DEFAULT_CONFIG_PATH, readFallbackModelList, readRawFallbackModelArray, writeFallbackModelList, fallbackModelCommand, listCommand, COMMAND_PREFIX, isCommandMessage, extractCommandInvocation, CommandRegistry, getGlobalCommandRegistry, handleCommandMessage, isCommandCardAction, translateCardActionToCommand, handleCommandCardAction, buildLarkRecommendedAction, extractMetadata, LarkCliInstance, renderRuleNoticeSection, extractCommandText, larkCliHandler, patchCardByLarkCli, builtInHandlers, getBuiltInHandler };
+export { TimerInstance, timerHandler, buildDefaultBountyIMSystemPrompt, resolveBountyIMSystemPrompt, BountyIMInstance, bountyIMHandler, bountyCliHandler, sanitizeWecomFrame, WECOM_CLI_ES_TYPE, WECOM_CHAT_ID_PREFIX, WECOM_WS_DEFAULT_URL, readWecomCliConfig, WECOM_CREDENTIALS_DEFAULT_PATH, readWecomCredentialsFile, resolveWecomCredentials, buildWecomReplyChannel, parseWecomFrame, WECOM_CHANNEL_PROMPT_SECTION_TITLE, buildWecomChannelSystemPrompt, buildWecomNotifyPrompt, resolveWecomBinary, probeCommandBinary, wecomCliHandler, FALLBACK_MODEL_ACTION_NS, FALLBACK_MODEL_ACTIONS, isFallbackModelCard, renderTextCard, renderFallbackModelCard, DEFAULT_CONFIG_PATH, readFallbackModelList, readRawFallbackModelArray, writeFallbackModelList, fallbackModelCommand, listCommand, resolveEsFilePath, esCommand, COMMAND_PREFIX, isCommandMessage, extractCommandInvocation, CommandRegistry, getGlobalCommandRegistry, handleCommandMessage, isCommandCardAction, translateCardActionToCommand, handleCommandCardAction, buildSlimRawData, buildLarkRecommendedAction, LARK_CHANNEL_PROMPT_SECTION_TITLE, LARK_PROMPT_LENGTH_BUDGET, buildLarkChannelSystemPrompt, resolveLarkChannelSystemPrompt, extractMetadata, LarkCliInstance, renderRuleNoticeSection, extractCommandText, larkCliHandler, patchCardByLarkCli, builtInHandlers, getBuiltInHandler };