@awiki/dsh-plugin 0.3.0-rc.1 → 0.3.0

package/lib/types/client/controller.js

@@ -44,6 +44,43 @@ function registrationOtpFailureMessage(failure) {
             return registrationFailureMessage(failure);
     }
 }
+function recoveryPreparationFailureMessage(failure) {
+    switch (failure.code) {
+        case 'invalid-request':
+            return '恢复信息不匹配，请检查验证码后重试。';
+        case 'invalid-otp':
+            return '验证码不正确，请检查后重试。';
+        case 'challenge-expired':
+            return '验证码状态已失效，请重新获取恢复验证码。';
+        case 'rate-limited':
+            return '恢复验证过于频繁，请稍后重试。';
+        case 'network':
+            return '无法连接 AWiki 服务，请检查网络后重试。';
+        case 'remote':
+            return 'AWiki 服务暂时无法验证恢复信息，请稍后重试。';
+        default:
+            return `${failure.code}：${failure.message}`;
+    }
+}
+function recoveryContinuationFailureMessage(failure, phase) {
+    const remoteCommitted = phase === 'remote_committed' || phase === 'identity_transition_pending';
+    if (remoteCommitted && ['invalid-request', 'conflict', 'forbidden', 'remote'].includes(failure.code)) {
+        return '身份已在服务端恢复，但本机切换尚未完成。请保留当前恢复操作，并继续完成本机切换；不要重新获取验证码或创建新身份。';
+    }
+    switch (failure.code) {
+        case 'network':
+            return remoteCommitted
+                ? '身份已在服务端恢复，但当前设备暂时无法完成本机切换。请检查网络后继续完成本机切换。'
+                : '恢复请求结果尚未确认。请保留当前恢复操作并重新检查状态，不要重复提交。';
+        case 'invalid-request':
+        case 'conflict':
+            return '身份恢复暂未完成。请保留当前恢复操作并重新检查状态，不要重新获取验证码或创建新身份。';
+        case 'rate-limited':
+            return '恢复状态检查过于频繁，请稍后继续。';
+        default:
+            return `${failure.code}：${failure.message}`;
+    }
+}
 function identityAccessInspectionFailureMessage(failure) {
     switch (failure.code) {
         case 'invalid-request':
@@ -62,9 +99,11 @@ const INITIAL_VIEW = Object.freeze({
     identity: null,
     profile: null,
     conversations: Object.freeze([]),
+    hiddenConversations: Object.freeze([]),
     conversationsHasMore: false,
     selectedConversationId: null,
     selectedGroup: null,
+    groupAccess: null,
     groupMembers: Object.freeze([]),
     groupMembersHasMore: false,
     groupRecovery: null,
@@ -142,13 +181,66 @@ function groupRecoveryFailureMessage(failure) {
         ? '无法连接 AWiki 服务，暂时不能恢复旧群聊身份。'
         : '暂时不能检查旧群聊身份，请稍后重试。';
 }
-function groupRecoveryView(summary) {
-    if (summary.blocked > 0) {
-        return { status: 'blocked', pending: summary.pending, blocked: summary.blocked };
+function conversationPreferenceFailureMessage(_failure) {
+    return '无法保存本机会话设置，请稍后重试。';
+}
+function recoveryFingerprint(parts) {
+    let hash = 0x811c9dc5;
+    for (const part of parts) {
+        for (let index = 0; index < part.length; index += 1) {
+            hash ^= part.charCodeAt(index);
+            hash = Math.imul(hash, 0x01000193);
+        }
+        hash ^= 0;
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0).toString(16).padStart(8, '0');
+}
+function groupRecoveryProjection(summary, hiddenGroupDids) {
+    const hiddenItems = summary.items.filter(item => hiddenGroupDids.has(item.groupDid));
+    const hiddenPending = hiddenItems.filter(item => item.status === 'pending').length;
+    const hiddenBlocked = hiddenItems.filter(item => item.status === 'blocked').length;
+    const pending = Math.max(0, summary.pending - hiddenPending);
+    const blocked = Math.max(0, summary.blocked - hiddenBlocked);
+    const visibleItems = summary.items
+        .filter(item => !hiddenGroupDids.has(item.groupDid))
+        .map(item => `${item.status}:${item.groupDid}`)
+        .sort();
+    const signature = `v1:${pending}:${blocked}:${recoveryFingerprint(visibleItems)}`;
+    if (blocked > 0)
+        return { view: { status: 'blocked', pending, blocked }, signature };
+    return {
+        view: pending > 0 ? { status: 'pending', pending, blocked: 0 } : null,
+        signature,
+    };
+}
+function groupReadFailureReason(failure) {
+    switch (failure.code) {
+        case 'group-identity-stale': return 'recovering';
+        case 'group-membership-required':
+        case 'not-found':
+        case 'forbidden': return 'not-member';
+        default: return 'network-error';
+    }
+}
+async function callGroupRead(operation) {
+    try {
+        const carried = await operation();
+        if (!carried.ok) {
+            return { ok: false, error: '暂时无法连接 AWiki 群聊服务，请稍后重新检查。', reason: 'network-error' };
+        }
+        if (!carried.value.ok) {
+            return {
+                ok: false,
+                error: groupReadFailureMessage(carried.value.error),
+                reason: groupReadFailureReason(carried.value.error),
+            };
+        }
+        return { ok: true, value: carried.value.value };
+    }
+    catch {
+        return { ok: false, error: '暂时无法连接 AWiki 群聊服务，请稍后重新检查。', reason: 'network-error' };
     }
-    return summary.pending > 0
-        ? { status: 'pending', pending: summary.pending, blocked: 0 }
-        : null;
 }
 /** Flatten the carrier and business result once for every controller caller. */
 async function call(operation, failureMessage = failure => `${failure.code}：${failure.message}`, carrierFailureMessage = message => `连接 AWiki Host 失败：${message}`) {
@@ -168,6 +260,28 @@ async function call(operation, failureMessage = failure => `${failure.code}：${
         };
     }
 }
+/** Preserve only the stable business code for controller-level state transitions. */
+async function callWithFailureCode(operation) {
+    try {
+        const carried = await operation();
+        if (!carried.ok)
+            return { ok: false, error: `连接 AWiki Host 失败：${carried.error.message}` };
+        if (!carried.value.ok) {
+            return {
+                ok: false,
+                error: `${carried.value.error.code}：${carried.value.error.message}`,
+                failureCode: carried.value.error.code,
+            };
+        }
+        return { ok: true, value: carried.value.value };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: error instanceof Error ? `AWiki 调用失败：${error.message}` : 'AWiki 调用失败',
+        };
+    }
+}
 function recoveryCarrierFailureMessage(message) {
     return message.includes('business result failed boundary validation')
         ? '恢复信息已验证，但暂时无法读取恢复状态。请稍后重试。'
@@ -354,6 +468,13 @@ export class AwikiController {
     directProfiles = new Map();
     /** Last trustworthy group title for the active identity, keyed by canonical Group DID. */
     groupTitles = new Map();
+    /** Current secret-free Core journal state, keyed by canonical Group DID. */
+    groupRecoveryItems = new Map();
+    /** Identity-scoped product overlays. Core conversations and history remain untouched. */
+    hiddenConversationPreferences = new Map();
+    dismissedGroupRecoverySignature;
+    lastGroupRecoverySignature;
+    lastGroupRecoverySummary;
     /** Verified image payloads retained outside observable state for instant remounts. */
     imageAttachments = new Map();
     imageAttachmentCacheBytes = 0;
@@ -405,6 +526,7 @@ export class AwikiController {
             recoveryOperationId: storedRecoveryOperation(),
         });
         if (identity !== null) {
+            await this.loadConversationPreferences(generation);
             const profile = await call(() => this.remote.getProfile());
             if (this.current(generation) && profile.ok)
                 this.publish({ ...this.view, profile: profile.value });
@@ -556,7 +678,7 @@ export class AwikiController {
     }
     /** Request a recovery OTP and persist only its secret-free operation id in the browser. */
     async sendRecoveryOtp(request) {
-        const result = await this.withPending('发送恢复验证码', () => call(() => this.remote.sendRecoveryOtp(request), registrationOtpFailureMessage));
+        const result = await this.withPending('发送恢复验证码', () => call(() => this.remote.sendRecoveryOtp(request), registrationOtpFailureMessage), { publishFailure: false });
         if (!result.ok)
             return result;
         storeRecoveryOperation(result.value.operationId);
@@ -568,7 +690,7 @@ export class AwikiController {
         const operationId = this.view.recoveryOperationId;
         if (operationId === null)
             return this.fail('请先获取恢复验证码');
-        const result = await this.withPending('验证恢复信息', () => call(() => this.remote.prepareRecovery({ ...request, operationId }), registrationFailureMessage, recoveryCarrierFailureMessage));
+        const result = await this.withPending('验证恢复信息', () => call(() => this.remote.prepareRecovery({ ...request, operationId }), recoveryPreparationFailureMessage, recoveryCarrierFailureMessage), { publishFailure: false });
         if (result.ok)
             this.publish({ ...this.view, recoveryProgress: result.value });
         return result;
@@ -580,7 +702,8 @@ export class AwikiController {
             return this.fail('没有可继续的身份恢复操作');
         if (this.view.recoveryProgress?.phase !== 'ready_to_commit')
             return this.fail('请先完成恢复信息验证');
-        const result = await this.withPending('恢复身份', () => call(() => this.remote.activateRecovery({ operationId }), registrationFailureMessage, recoveryCarrierFailureMessage));
+        const phase = this.view.recoveryProgress.phase;
+        const result = await this.withPending('恢复身份', () => call(() => this.remote.activateRecovery({ operationId }), failure => recoveryContinuationFailureMessage(failure, phase), recoveryCarrierFailureMessage), { publishFailure: false });
         if (!result.ok)
             return result;
         this.publish({ ...this.view, recoveryProgress: result.value });
@@ -596,7 +719,7 @@ export class AwikiController {
         const operationId = this.view.recoveryOperationId;
         if (operationId === null)
             return this.fail('没有可查询的身份恢复操作');
-        const result = await this.withPending('刷新恢复状态', () => call(() => this.remote.getRecoveryStatus({ operationId }), undefined, recoveryCarrierFailureMessage));
+        const result = await this.withPending('刷新恢复状态', () => call(() => this.remote.getRecoveryStatus({ operationId }), undefined, recoveryCarrierFailureMessage), { publishFailure: false });
         if (!result.ok)
             return result;
         this.publish({ ...this.view, recoveryProgress: result.value });
@@ -616,7 +739,7 @@ export class AwikiController {
         if (!progress.retryable && !['remote_outcome_unknown', 'remote_committed', 'identity_transition_pending'].includes(progress.phase)) {
             return this.fail('当前恢复状态不能重试');
         }
-        const result = await this.withPending('继续恢复身份', () => call(() => this.remote.resumeRecovery({ operationId }), registrationFailureMessage, recoveryCarrierFailureMessage));
+        const result = await this.withPending('继续恢复身份', () => call(() => this.remote.resumeRecovery({ operationId }), failure => recoveryContinuationFailureMessage(failure, progress.phase), recoveryCarrierFailureMessage), { publishFailure: false });
         if (!result.ok)
             return result;
         this.publish({ ...this.view, recoveryProgress: result.value });
@@ -636,7 +759,7 @@ export class AwikiController {
         if (phase !== undefined && phase !== 'awaiting_factor' && phase !== 'ready_to_commit') {
             return this.fail('当前恢复状态不能取消');
         }
-        const result = await this.withPending('取消身份恢复', () => call(() => this.remote.discardRecovery({ operationId })));
+        const result = await this.withPending('取消身份恢复', () => call(() => this.remote.discardRecovery({ operationId })), { publishFailure: false });
         if (!result.ok)
             return result;
         storeRecoveryOperation(null);
@@ -669,16 +792,20 @@ export class AwikiController {
      */
     async loadMoreConversations() {
         const generation = this.generation;
-        const result = await this.withPending('加载更多会话', () => call(() => this.remote.listConversations(this.conversationsCursor === undefined ? {} : { cursor: this.conversationsCursor })));
+        const result = await this.withPending('加载更多会话', () => this.listConversationPage(this.conversationsCursor === undefined ? {} : { cursor: this.conversationsCursor }));
         if (!result.ok)
             return result;
         if (!this.current(generation))
             return { ok: true, value: undefined };
         this.conversationsCursor = result.value.nextCursor;
-        const conversations = result.value.items.map(incoming => this.cacheConversation(incoming, this.view.conversations.find(current => current.id === incoming.id)));
+        const conversations = await this.reconcileConversationPage(result.value.items, generation);
+        if (!this.current(generation))
+            return { ok: true, value: undefined };
         this.publish({
             ...this.view,
-            conversations: appendUnique(this.view.conversations, conversations, value => value.id),
+            conversations: appendUnique(this.view.conversations, conversations.visible, value => value.id),
+            hiddenConversations: conversations.hidden,
+            groupRecovery: this.currentGroupRecoveryView(),
             conversationsHasMore: result.value.hasMore && result.value.nextCursor !== undefined,
         });
         return { ok: true, value: undefined };
@@ -693,6 +820,80 @@ export class AwikiController {
             return this.resumeGroupRebindRecovery(generation);
         });
     }
+    /** Dismiss only the current recovery-summary revision; Core recovery remains untouched. */
+    async dismissGroupRecoveryNotice() {
+        const signature = this.lastGroupRecoverySignature;
+        if (signature === undefined || this.view.groupRecovery === null)
+            return { ok: true, value: undefined };
+        const result = await call(() => this.remote.updateConversationPreference({ action: 'dismiss-group-recovery', signature }), conversationPreferenceFailureMessage);
+        if (!result.ok)
+            return this.fail(result.error);
+        this.applyConversationPreferences(result.value);
+        this.publish({ ...this.view, groupRecovery: null, error: null });
+        return { ok: true, value: undefined };
+    }
+    /** Hide one recent row locally without leaving a group or deleting history. */
+    async hideConversation(conversationId) {
+        const conversation = this.view.conversations.find(item => item.id === conversationId);
+        if (conversation === undefined)
+            return this.fail('该会话已不在当前列表中');
+        const generation = this.generation;
+        const result = await this.withPending('移除会话', () => call(() => this.remote.updateConversationPreference({ action: 'hide', conversation }), conversationPreferenceFailureMessage));
+        if (!result.ok)
+            return result;
+        if (!this.current(generation))
+            return { ok: true, value: undefined };
+        this.applyConversationPreferences(result.value);
+        const selected = this.view.selectedConversationId === conversationId;
+        if (selected) {
+            this.selectionRevision += 1;
+            this.historyCursor = undefined;
+            this.groupMembersCursor = undefined;
+        }
+        this.publish({
+            ...this.view,
+            conversations: this.view.conversations.filter(item => item.id !== conversationId),
+            hiddenConversations: this.hiddenConversationsView(),
+            ...(selected
+                ? {
+                    selectedConversationId: null,
+                    selectedGroup: null,
+                    groupAccess: null,
+                    groupMembers: [],
+                    groupMembersHasMore: false,
+                    messages: [],
+                    historyHasMore: false,
+                    localPending: false,
+                    refreshing: false,
+                }
+                : {}),
+            groupRecovery: this.currentGroupRecoveryView(),
+            error: null,
+        });
+        return { ok: true, value: undefined };
+    }
+    /** Restore one locally hidden row to the recent roster. */
+    async restoreConversation(conversationId) {
+        const hidden = this.hiddenConversationPreferences.get(conversationId);
+        if (hidden === undefined)
+            return { ok: true, value: undefined };
+        const generation = this.generation;
+        const result = await this.withPending('恢复会话', () => call(() => this.remote.updateConversationPreference({ action: 'restore', conversationId }), conversationPreferenceFailureMessage));
+        if (!result.ok)
+            return result;
+        if (!this.current(generation))
+            return { ok: true, value: undefined };
+        this.applyConversationPreferences(result.value);
+        const conversation = this.cacheConversation(hidden.conversation, this.view.conversations.find(item => item.id === conversationId));
+        this.publish({
+            ...this.view,
+            conversations: appendUnique([conversation], this.view.conversations, item => item.id),
+            hiddenConversations: this.hiddenConversationsView(),
+            groupRecovery: this.currentGroupRecoveryView(),
+            error: null,
+        });
+        return { ok: true, value: undefined };
+    }
     /**
      * Look up a Handle or DID, then open the matching direct conversation.
      * @param handle - peer Handle or DID typed by the user.
@@ -709,9 +910,15 @@ export class AwikiController {
             return this.fail('请先注册 AWiki 身份');
         if (sameIdentity(identity, peer))
             return this.fail('不能向自己发起私聊');
-        const existing = findDirect(this.view.conversations, peer);
-        if (existing !== undefined)
+        const existing = findDirect([...this.view.conversations, ...this.view.hiddenConversations], peer);
+        if (existing !== undefined) {
+            if (this.hiddenConversationPreferences.has(existing.id)) {
+                const restored = await this.restoreConversation(existing.id);
+                if (!restored.ok)
+                    return restored;
+            }
             return this.selectConversation(existing.id);
+        }
         const generation = this.generation;
         const resolved = await this.withPending('查找用户', () => call(() => this.remote.resolvePeer({ peer })));
         if (!resolved.ok) {
@@ -805,7 +1012,8 @@ export class AwikiController {
         await this.refreshConversations(generation);
         if (!this.current(generation))
             return result;
-        const conversation = this.view.conversations.find(value => value.kind === 'group' && value.groupDid === groupDid)
+        const conversation = [...this.view.conversations, ...this.view.hiddenConversations]
+            .find(value => value.kind === 'group' && value.groupDid === groupDid)
             ?? this.cacheConversation({
                 kind: 'group',
                 id: result.value.conversationId,
@@ -813,10 +1021,17 @@ export class AwikiController {
                 title: result.value.title,
                 unreadCount: 0,
             });
-        this.publish({
-            ...this.view,
-            conversations: appendUnique([conversation], this.view.conversations, value => value.id),
-        });
+        if (this.hiddenConversationPreferences.has(conversation.id)) {
+            const restored = await this.restoreConversation(conversation.id);
+            if (!restored.ok)
+                return { ok: false, error: restored.error };
+        }
+        else {
+            this.publish({
+                ...this.view,
+                conversations: appendUnique([conversation], this.view.conversations, value => value.id),
+            });
+        }
         await this.selectConversation(conversation.id);
         return result;
     }
@@ -825,10 +1040,20 @@ export class AwikiController {
         const conversation = this.selectedConversation();
         if (conversation?.kind !== 'group')
             return this.fail('请先打开一个群聊');
-        return this.withPending('刷新群成员', async () => {
-            const refreshed = await this.loadGroupState(conversation, true);
+        if (this.disposed)
+            return { ok: false, error: 'AWiki 插件已卸载' };
+        const generation = this.generation;
+        this.publish({ ...this.view, pending: '刷新群成员', error: null });
+        const result = await (async () => {
+            if (this.view.groupAccess?.status !== 'available' && this.view.groupAccess?.status !== 'loading') {
+                await this.resumeGroupRebindRecovery(this.generation);
+            }
+            const refreshed = await this.loadGroupState(conversation, true, true);
             return refreshed.ok ? { ok: true, value: undefined } : refreshed;
-        });
+        })();
+        if (this.current(generation))
+            this.publish({ ...this.view, pending: null, error: null });
+        return result;
     }
     /** Load the next authoritative member page using Core's opaque cursor. */
     async loadMoreGroupMembers() {
@@ -911,6 +1136,7 @@ export class AwikiController {
             ...this.view,
             selectedConversationId: null,
             selectedGroup: null,
+            groupAccess: null,
             groupMembers: [],
             groupMembersHasMore: false,
             messages: [],
@@ -940,6 +1166,9 @@ export class AwikiController {
             ...this.view,
             selectedConversationId: conversationId,
             selectedGroup: null,
+            groupAccess: selected?.kind === 'group'
+                ? { groupDid: selected.groupDid, status: 'loading' }
+                : null,
             groupMembers: [],
             groupMembersHasMore: false,
             messages: sameConversation ? this.view.messages : [],
@@ -985,20 +1214,39 @@ export class AwikiController {
         void this.refreshSelectedDirectProfile(selected, generation, selectionRevision);
         return { ok: true, value: undefined };
     }
-    async loadGroupState(conversation, reset) {
+    async loadGroupState(conversation, reset, preserveAvailableOnNetworkFailure = false) {
         const generation = this.generation;
         const selectionRevision = this.selectionRevision;
-        const snapshot = await call(() => this.remote.getGroup({ groupDid: conversation.groupDid }), groupReadFailureMessage);
+        const snapshot = await callGroupRead(() => this.remote.getGroup({ groupDid: conversation.groupDid }));
         if (!snapshot.ok) {
-            if (this.currentSelection(generation, selectionRevision, conversation.id)) {
-                this.publish({ ...this.view, error: snapshot.error });
+            const retainAvailable = preserveAvailableOnNetworkFailure
+                && snapshot.reason === 'network-error'
+                && this.view.groupAccess?.groupDid === conversation.groupDid
+                && this.view.groupAccess.status === 'available';
+            if (!retainAvailable && this.currentSelection(generation, selectionRevision, conversation.id)) {
+                this.publishGroupAccessFailure(conversation, snapshot.reason);
             }
             return snapshot;
         }
-        const members = await call(() => this.remote.listGroupMembers({ groupDid: conversation.groupDid, limit: 50 }), groupReadFailureMessage);
+        if (this.currentSelection(generation, selectionRevision, conversation.id)) {
+            const access = this.view.groupAccess;
+            this.publish({
+                ...this.view,
+                selectedGroup: snapshot.value,
+                groupAccess: access?.groupDid === conversation.groupDid && access.status === 'available'
+                    ? access
+                    : { groupDid: conversation.groupDid, status: 'loading' },
+                error: null,
+            });
+        }
+        const members = await callGroupRead(() => this.remote.listGroupMembers({ groupDid: conversation.groupDid, limit: 50 }));
         if (!members.ok) {
-            if (this.currentSelection(generation, selectionRevision, conversation.id)) {
-                this.publish({ ...this.view, error: members.error });
+            const retainAvailable = preserveAvailableOnNetworkFailure
+                && members.reason === 'network-error'
+                && this.view.groupAccess?.groupDid === conversation.groupDid
+                && this.view.groupAccess.status === 'available';
+            if (!retainAvailable && this.currentSelection(generation, selectionRevision, conversation.id)) {
+                this.publishGroupAccessFailure(conversation, members.reason);
             }
             return members;
         }
@@ -1011,6 +1259,7 @@ export class AwikiController {
         this.publish({
             ...this.view,
             selectedGroup: snapshot.value,
+            groupAccess: { groupDid: conversation.groupDid, status: 'available' },
             groupMembers: reset
                 ? members.value.items
                 : appendUnique(this.view.groupMembers, members.value.items, groupMemberKey),
@@ -1040,10 +1289,12 @@ export class AwikiController {
         if (!this.currentSelection(generation, selectionRevision, conversationId))
             return;
         if (!remote.ok) {
+            if (selected?.kind === 'group')
+                this.publishGroupAccessFailure(selected, remote.reason);
             this.publish({
                 ...this.view,
                 refreshing: false,
-                error: refreshFailureMessage(this.view.messages, remote.error),
+                error: selected?.kind === 'group' ? null : refreshFailureMessage(this.view.messages, remote.error),
             });
             return;
         }
@@ -1081,17 +1332,22 @@ export class AwikiController {
     }
     async readRemoteHistoryWithGroupReadiness(conversation, conversationId, generation, selectionRevision) {
         if (conversation?.kind !== 'group') {
-            return call(() => this.remote.getHistory({ conversationId }));
+            const result = await call(() => this.remote.getHistory({ conversationId }));
+            return result.ok
+                ? result
+                : { ...result, reason: 'network-error' };
         }
         for (const retryDelay of GROUP_HISTORY_RETRY_DELAYS_MS) {
-            const remote = await call(() => this.remote.getHistory({ conversationId }), groupReadFailureMessage);
+            const remote = await callGroupRead(() => this.remote.getHistory({ conversationId }));
             if (remote.ok || !this.currentSelection(generation, selectionRevision, conversationId))
                 return remote;
+            if (remote.reason !== 'network-error')
+                return remote;
             await delay(retryDelay);
             if (!this.currentSelection(generation, selectionRevision, conversationId))
                 return remote;
         }
-        return call(() => this.remote.getHistory({ conversationId }), groupReadFailureMessage);
+        return callGroupRead(() => this.remote.getHistory({ conversationId }));
     }
     async refreshSelectedDirectProfile(selected, generation, selectionRevision) {
         if (selected?.kind !== 'direct')
@@ -1145,6 +1401,9 @@ export class AwikiController {
         if (conversation === undefined || (conversation.unreadCount ?? 0) <= 0) {
             return { ok: true, value: undefined };
         }
+        if (conversation.kind === 'group' && this.view.groupAccess?.status !== 'available') {
+            return { ok: true, value: undefined };
+        }
         const existing = this.markReadInFlight.get(conversation.id);
         if (existing !== undefined)
             return existing;
@@ -1237,6 +1496,9 @@ export class AwikiController {
         const conversation = this.selectedConversation();
         if (conversation === undefined)
             return this.fail('请先选择会话');
+        if (conversation.kind === 'group' && this.view.groupAccess?.status !== 'available') {
+            return this.fail('当前身份尚未获得这个群聊的发送权限，请先重新检查群成员状态。');
+        }
         const conversationId = conversation.id;
         const generation = this.generation;
         const result = await this.withPending('发送消息', () => call(() => this.remote.sendText({
@@ -1262,6 +1524,9 @@ export class AwikiController {
         const conversation = this.selectedConversation();
         if (conversation === undefined)
             return this.fail('请先选择会话');
+        if (conversation.kind === 'group' && this.view.groupAccess?.status !== 'available') {
+            return this.fail('当前身份尚未获得这个群聊的发送权限，请先重新检查群成员状态。');
+        }
         const conversationId = conversation.id;
         const generation = this.generation;
         const request = {
@@ -1344,8 +1609,74 @@ export class AwikiController {
         this.close();
         this.listeners.clear();
     }
+    async loadConversationPreferences(generation) {
+        const result = await call(() => this.remote.getConversationPreferences(), conversationPreferenceFailureMessage);
+        if (!result.ok || !this.current(generation))
+            return;
+        this.applyConversationPreferences(result.value);
+        this.publish({ ...this.view, hiddenConversations: this.hiddenConversationsView() });
+    }
+    applyConversationPreferences(preferences) {
+        this.hiddenConversationPreferences.clear();
+        for (const hidden of preferences.hiddenConversations) {
+            this.hiddenConversationPreferences.set(hidden.conversation.id, {
+                conversation: { ...hidden.conversation },
+                hiddenAt: hidden.hiddenAt,
+            });
+        }
+        this.dismissedGroupRecoverySignature = preferences.dismissedGroupRecoverySignature;
+    }
+    hiddenConversationsView() {
+        return [...this.hiddenConversationPreferences.values()]
+            .sort((left, right) => right.hiddenAt - left.hiddenAt)
+            .map(item => item.conversation);
+    }
+    currentGroupRecoveryView() {
+        const summary = this.lastGroupRecoverySummary;
+        if (summary === undefined)
+            return this.view.groupRecovery;
+        const hiddenGroupDids = new Set([...this.hiddenConversationPreferences.values()]
+            .map(item => item.conversation)
+            .filter((conversation) => conversation.kind === 'group')
+            .map(conversation => conversation.groupDid));
+        const projection = groupRecoveryProjection(summary, hiddenGroupDids);
+        this.lastGroupRecoverySignature = projection.signature;
+        return projection.signature === this.dismissedGroupRecoverySignature ? null : projection.view;
+    }
+    async reconcileConversationPage(incoming, generation) {
+        const current = [...this.view.conversations, ...this.view.hiddenConversations];
+        const conversations = incoming.map(item => this.cacheConversation(item, current.find(candidate => candidate.id === item.id)));
+        for (const conversation of conversations) {
+            const hidden = this.hiddenConversationPreferences.get(conversation.id);
+            if (hidden === undefined)
+                continue;
+            const previousActivity = hidden.conversation.lastMessageAt ?? 0;
+            const currentActivity = conversation.lastMessageAt ?? 0;
+            if (currentActivity <= previousActivity)
+                continue;
+            const restored = await call(() => this.remote.updateConversationPreference({
+                action: 'restore',
+                conversationId: conversation.id,
+            }), conversationPreferenceFailureMessage);
+            if (!this.current(generation))
+                return { visible: [], hidden: this.hiddenConversationsView() };
+            if (restored.ok)
+                this.applyConversationPreferences(restored.value);
+        }
+        const visible = [];
+        for (const conversation of conversations) {
+            const hidden = this.hiddenConversationPreferences.get(conversation.id);
+            if (hidden === undefined) {
+                visible.push(conversation);
+            }
+            else {
+                this.hiddenConversationPreferences.set(conversation.id, { ...hidden, conversation });
+            }
+        }
+        return { visible, hidden: this.hiddenConversationsView() };
+    }
     async refreshConversations(generation, background = false) {
-        const result = await call(() => this.remote.listConversations({}));
+        const result = await this.listConversationPage({});
         if (!this.current(generation))
             return { ok: true, value: undefined };
         if (!result.ok)
@@ -1353,15 +1684,16 @@ export class AwikiController {
         const firstPage = this.view.conversations.length === 0;
         if (firstPage)
             this.conversationsCursor = result.value.nextCursor;
-        const refreshed = result.value.items.map((incoming) => {
-            const current = this.view.conversations.find(value => value.id === incoming.id);
-            return this.cacheConversation(incoming, current);
-        });
+        const refreshed = await this.reconcileConversationPage(result.value.items, generation);
+        if (!this.current(generation))
+            return { ok: true, value: undefined };
         this.publish({
             ...this.view,
             conversations: firstPage
-                ? refreshed
-                : appendUnique(refreshed, this.view.conversations, value => value.id),
+                ? refreshed.visible
+                : appendUnique(refreshed.visible, this.view.conversations, value => value.id),
+            hiddenConversations: refreshed.hidden,
+            groupRecovery: this.currentGroupRecoveryView(),
             conversationsHasMore: firstPage
                 ? result.value.hasMore && result.value.nextCursor !== undefined
                 : this.view.conversationsHasMore,
@@ -1369,6 +1701,51 @@ export class AwikiController {
         });
         return { ok: true, value: undefined };
     }
+    /** List the active identity's own conversations and detect a revoked local credential. */
+    async listConversationPage(request) {
+        const result = await callWithFailureCode(() => this.remote.listConversations(request));
+        if (!result.ok && (result.failureCode === 'identity-recovery-required' || result.failureCode === 'forbidden')) {
+            this.enterIdentityRecoveryRequired();
+            return { ok: false, error: '当前设备的 AWiki 身份凭证已失效，请重新恢复身份。' };
+        }
+        return result.ok ? result : { ok: false, error: result.error };
+    }
+    /** Replace only visible browser projections; Core identity and SQLite state remain untouched. */
+    enterIdentityRecoveryRequired() {
+        if (this.view.identity === null)
+            return;
+        this.close();
+        this.conversationsCursor = undefined;
+        this.historyCursor = undefined;
+        this.groupMembersCursor = undefined;
+        this.unreadAtOpen.clear();
+        this.summaryBaselines.clear();
+        this.groupRecoveryItems.clear();
+        this.lastGroupRecoverySignature = undefined;
+        this.lastGroupRecoverySummary = undefined;
+        this.clearImageAttachments();
+        this.publish({
+            ...this.view,
+            status: 'ready',
+            sessionStatus: 'recovery-required',
+            conversations: Object.freeze([]),
+            hiddenConversations: Object.freeze([]),
+            conversationsHasMore: false,
+            selectedConversationId: null,
+            selectedGroup: null,
+            groupAccess: null,
+            groupMembers: Object.freeze([]),
+            groupMembersHasMore: false,
+            groupRecovery: null,
+            messages: Object.freeze([]),
+            historyHasMore: false,
+            localPending: false,
+            refreshing: false,
+            pending: null,
+            error: null,
+            summaries: Object.freeze({}),
+        });
+    }
     /** Hydrate account-projected groups before asking Core to resume their durable rebind jobs. */
     async refreshConversationsAndRecoverGroups(generation, background = false) {
         const listed = await this.refreshConversations(generation, background);
@@ -1385,11 +1762,24 @@ export class AwikiController {
         operation = call(() => this.remote.resumeGroupRebindRecovery(), groupRecoveryFailureMessage).then((result) => {
             if (!this.current(generation))
                 return result;
+            if (result.ok) {
+                this.lastGroupRecoverySummary = result.value;
+                this.groupRecoveryItems.clear();
+                for (const item of result.value.items) {
+                    this.groupRecoveryItems.set(item.groupDid, item.status);
+                }
+            }
+            else {
+                this.lastGroupRecoverySummary = undefined;
+                this.lastGroupRecoverySignature = 'unavailable';
+            }
             this.publish({
                 ...this.view,
                 groupRecovery: result.ok
-                    ? groupRecoveryView(result.value)
-                    : { status: 'unavailable', pending: 0, blocked: 0 },
+                    ? this.currentGroupRecoveryView()
+                    : this.dismissedGroupRecoverySignature === 'unavailable'
+                        ? null
+                        : { status: 'unavailable', pending: 0, blocked: 0 },
             });
             return result;
         }).finally(() => {
@@ -1403,6 +1793,10 @@ export class AwikiController {
         const conversationId = this.view.selectedConversationId;
         if (conversationId === null)
             return this.fail('请先选择会话');
+        const selectedConversation = this.selectedConversation();
+        if (selectedConversation?.kind === 'group' && this.view.groupAccess?.status !== 'available') {
+            return { ok: false, error: '当前群聊仅可查看本机已有记录，请先重新检查群成员状态。' };
+        }
         const generation = this.generation;
         const request = {
             conversationId,
@@ -1448,6 +1842,9 @@ export class AwikiController {
             const selected = this.view.selectedConversationId;
             if (selected === null || !this.current(generation))
                 return;
+            const selectedConversation = this.selectedConversation();
+            if (selectedConversation?.kind === 'group' && this.view.groupAccess?.status !== 'available')
+                return;
             const result = await call(() => this.remote.getHistory({ conversationId: selected }));
             if (!this.current(generation) || !result.ok || this.view.selectedConversationId !== selected)
                 return;
@@ -1472,7 +1869,7 @@ export class AwikiController {
             this.polling = false;
         }
     }
-    async withPending(label, operation) {
+    async withPending(label, operation, options = {}) {
         if (this.disposed)
             return { ok: false, error: 'AWiki 插件已卸载' };
         const generation = this.generation;
@@ -1480,7 +1877,11 @@ export class AwikiController {
         const result = await operation();
         if (!this.current(generation))
             return result;
-        this.publish({ ...this.view, pending: null, error: result.ok ? null : result.error });
+        this.publish({
+            ...this.view,
+            pending: null,
+            error: result.ok || options.publishFailure === false ? null : result.error,
+        });
         return result;
     }
     appendMessage(message) {
@@ -1531,6 +1932,21 @@ export class AwikiController {
         const selected = this.view.selectedConversationId;
         return selected === null ? undefined : this.view.conversations.find(value => value.id === selected);
     }
+    publishGroupAccessFailure(conversation, reason) {
+        const journal = this.groupRecoveryItems.get(conversation.groupDid);
+        const status = reason === 'not-member'
+            ? journal === 'blocked'
+                ? 'blocked'
+                : journal === 'pending'
+                    ? 'recovering'
+                    : 'not-member'
+            : reason;
+        this.publish({
+            ...this.view,
+            groupAccess: { groupDid: conversation.groupDid, status },
+            error: null,
+        });
+    }
     /** Keep presentation-only cache entries isolated to one authenticated identity. */
     activatePresentationCache(identity) {
         const ownerDid = identity?.did ?? null;
@@ -1538,6 +1954,11 @@ export class AwikiController {
             return;
         this.directProfiles.clear();
         this.groupTitles.clear();
+        this.groupRecoveryItems.clear();
+        this.hiddenConversationPreferences.clear();
+        this.dismissedGroupRecoverySignature = undefined;
+        this.lastGroupRecoverySignature = undefined;
+        this.lastGroupRecoverySummary = undefined;
         this.clearImageAttachments();
         this.presentationCacheOwnerDid = ownerDid;
     }
@@ -1545,6 +1966,11 @@ export class AwikiController {
     clearPresentationCache() {
         this.directProfiles.clear();
         this.groupTitles.clear();
+        this.groupRecoveryItems.clear();
+        this.hiddenConversationPreferences.clear();
+        this.dismissedGroupRecoverySignature = undefined;
+        this.lastGroupRecoverySignature = undefined;
+        this.lastGroupRecoverySummary = undefined;
         this.clearImageAttachments();
         this.presentationCacheOwnerDid = null;
     }