@kafca/agentdock 0.1.55 → 0.1.57

package/dist-electron/services/local-ai-core/src/channel/weixin/local-core-weixin-gateway.js

@@ -3,26 +3,27 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalCoreWeixinGateway = void 0;
-exports.createWeixinAttachmentContentPart = createWeixinAttachmentContentPart;
+exports.LocalCoreWeixinGateway = exports.createWeixinAttachmentContentPart = void 0;
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
 const node_crypto_2 = require("node:crypto");
-const desktop_js_1 = require("../../../../../shared/desktop.js");
+const node_stream_1 = require("node:stream");
 const local_core_errors_js_1 = require("../../kernel/local-core-errors.js");
 const content_js_1 = require("../shared/content.js");
 const file_utils_js_1 = require("../shared/file-utils.js");
+const inbound_attachment_store_js_1 = require("../shared/inbound-attachment-store.js");
 const thread_routing_js_1 = require("../shared/thread-routing.js");
 const base_channel_gateway_js_1 = require("../shared/base-channel-gateway.js");
+const inbound_authorization_js_1 = require("../shared/inbound-authorization.js");
 const channel_keys_js_1 = require("../shared/channel-keys.js");
 const config_js_1 = require("./config.js");
 const transport_js_1 = require("./transport.js");
+const runtime_state_js_1 = require("./runtime-state.js");
+const text_utils_js_1 = require("./text-utils.js");
+const inbound_poller_js_1 = require("./inbound-poller.js");
+var inbound_media_js_1 = require("./inbound-media.js");
+Object.defineProperty(exports, "createWeixinAttachmentContentPart", { enumerable: true, get: function () { return inbound_media_js_1.createWeixinAttachmentContentPart; } });
 // ==================== Constants ====================
-const PAIRING_EXPIRY_MS = 10 * 60 * 1000;
-const RETRY_DELAY_MS = 2_000;
-const BACKOFF_DELAY_MS = 30_000;
-const MAX_CONSECUTIVE_FAILURES = 3;
 const PROCESSED_MESSAGE_TTL_MS = 10 * 60 * 1000;
 const WEIXIN_TEXT_MESSAGE_MAX_BYTES = 900;
 const WEIXIN_CONTEXT_REPLY_MAX_BYTES = 3500;
@@ -31,124 +32,10 @@ const WEIXIN_RESERVED_TERMINAL_SENDS = 1;
 const WEIXIN_PROGRESS_SEND_BUDGET = WEIXIN_CONTEXT_SEND_LIMIT - WEIXIN_RESERVED_TERMINAL_SENDS;
 const RESPONSE_TIMEOUT_MS = 5 * 60 * 1000;
 const WEIXIN_MAX_UPLOAD_FILE_SIZE = 30 * 1024 * 1024;
-const ERROR_LOG_WINDOW_MS = 5 * 60 * 1000;
-// ==================== Utilities ====================
-function stripHtml(html) {
-    let result = html;
-    let prev;
-    do {
-        prev = result;
-        result = result.replace(/<[^>]*>/g, '');
-    } while (result !== prev);
-    return result.replace(/&amp;/g, '&').replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&nbsp;/g, ' ');
-}
-function formatError(err) {
-    if (err instanceof Error) {
-        const cause = err.cause;
-        return cause !== undefined ? `${err.message}: ${String(cause)}` : err.message;
-    }
-    return String(err);
-}
-function sleep(ms, signal) {
-    return new Promise((resolve, reject) => {
-        const t = setTimeout(resolve, ms);
-        const onAbort = () => { clearTimeout(t); reject(new Error('aborted')); };
-        signal?.addEventListener('abort', onAbort, { once: true });
-    });
-}
-function utf8ByteLength(value) {
-    return Buffer.byteLength(value, 'utf-8');
-}
-function splitTextByUtf8Bytes(text, maxBytes) {
-    const normalized = String(text || '').replace(/\r\n/g, '\n').trim();
-    if (!normalized)
-        return [];
-    if (utf8ByteLength(normalized) <= maxBytes)
-        return [normalized];
-    const chunks = [];
-    let current = '';
-    const pushCurrent = () => {
-        const trimmed = current.trim();
-        if (trimmed)
-            chunks.push(trimmed);
-        current = '';
-    };
-    const appendPart = (part) => {
-        if (!part.trim())
-            return;
-        const separator = current ? '\n\n' : '';
-        if (current && utf8ByteLength(`${current}${separator}${part}`) <= maxBytes) {
-            current = `${current}${separator}${part}`;
-            return;
-        }
-        if (current)
-            pushCurrent();
-        if (utf8ByteLength(part) <= maxBytes) {
-            current = part;
-            return;
-        }
-        let segment = '';
-        for (const char of Array.from(part)) {
-            if (segment && utf8ByteLength(`${segment}${char}`) > maxBytes) {
-                chunks.push(segment);
-                segment = '';
-            }
-            segment += char;
-        }
-        current = segment;
-    };
-    for (const part of normalized.split(/\n{2,}/)) {
-        appendPart(part);
-    }
-    pushCurrent();
-    return chunks;
-}
-function createWeixinAttachmentContentPart(att) {
-    if (att.kind === 'image') {
-        if (!att.data)
-            return null;
-        return {
-            type: 'image',
-            data: att.data,
-            mimeType: att.mimeType,
-            fileName: att.name,
-        };
-    }
-    return {
-        type: 'file',
-        path: att.path,
-        fileName: att.name,
-    };
-}
-function truncateTextByUtf8Bytes(text, maxBytes) {
-    const normalized = String(text || '').replace(/\r\n/g, '\n').trim();
-    if (utf8ByteLength(normalized) <= maxBytes)
-        return normalized;
-    const suffix = '\n\n（内容过长，已截断以保证微信送达）';
-    const budget = Math.max(0, maxBytes - utf8ByteLength(suffix));
-    let result = '';
-    for (const char of Array.from(normalized)) {
-        if (utf8ByteLength(`${result}${char}`) > budget)
-            break;
-        result += char;
-    }
-    return `${result.trim()}${suffix}`;
-}
-function renderBridgeContentForWeixin(event) {
-    const toolCall = event.toolCall;
-    if (!toolCall) {
-        return String(event.content || '').trim();
-    }
-    const name = String(toolCall.name || '').trim() || 'Tool update';
-    const status = String(toolCall.status || '').trim();
-    if (name === 'Tool update' && status === 'completed')
-        return '';
-    return [name, status].filter(Boolean).join(' - ');
-}
 // ==================== Gateway Class ====================
 class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGateway {
     processedInboundMessages = new Map();
-    pollErrorLogWindows = new Map();
+    inboundAttachmentStore = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
     platform = 'weixin';
     constructor(options) {
         super(options);
@@ -168,7 +55,6 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
         return (0, config_js_1.collectWeixinWorkspaceBindings)(config);
     }
     buildStatusObject(state, resolved) {
-        this.options.store.expirePendingPairings();
         const platformKey = state.platformKey || (0, channel_keys_js_1.channelPlatformKey)('weixin', resolved.instanceId);
         const pairings = this.options.store.listPendingPairings(state.workspaceId)
             .filter((row) => row.platform === platformKey && row.expires_at >= new Date().toISOString());
@@ -325,19 +211,19 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             const bridgeThreadId = route.threadId || binding.thread_id;
             if (this.mutedThreadBridgeCounts.has(bridgeThreadId))
                 return;
-            const turn = this.getOrCreateTurnState(sessionKey);
+            const turn = (0, runtime_state_js_1.getOrCreateWeixinTurnState)(this.outboundTurns, sessionKey);
             if (event.replyCtx) {
                 // WeChat doesn't support reply context; ignore
             }
-            this.consumeBridgeEvent(turn, event);
+            (0, runtime_state_js_1.consumeWeixinBridgeEvent)(turn, event);
             if (event.type !== 'reply' && event.type !== 'buttons' && event.type !== 'status')
                 return;
-            const rendered = this.renderTurnText(turn);
+            const rendered = (0, runtime_state_js_1.renderWeixinTurnText)(turn);
             if (!rendered)
                 return;
             if (rendered === turn.lastSentText)
                 return;
-            const terminalMessage = this.isTerminalBridgeMessage(event, rendered);
+            const terminalMessage = (0, runtime_state_js_1.isTerminalWeixinBridgeMessage)(event, rendered);
             if (binding.last_platform_message_id && !terminalMessage && turn.sentCount >= WEIXIN_PROGRESS_SEND_BUDGET) {
                 turn.foldedProgressCount += 1;
                 this.options.log?.(`localcore-weixin folded progress for sessionKey=${sessionKey}: sent=${turn.sentCount} folded=${turn.foldedProgressCount}`);
@@ -360,7 +246,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                 this.options.log?.(`localcore-weixin sent message for sessionKey=${sessionKey} type=${event.type} sent=${turn.sentCount}/${binding.last_platform_message_id ? WEIXIN_CONTEXT_SEND_LIMIT : 'unlimited'}`);
             }
             catch (error) {
-                this.options.log?.(`localcore-weixin send failed for sessionKey=${sessionKey}: ${formatError(error)}`);
+                this.options.log?.(`localcore-weixin send failed for sessionKey=${sessionKey}: ${(0, text_utils_js_1.formatWeixinError)(error)}`);
             }
         })
             .finally(() => {
@@ -385,7 +271,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
         const previousRoute = this.threadRouting.get(input.sessionKey);
         this.threadRouting.set(input.sessionKey, route);
         if (!this.outboundTurns.has(input.sessionKey)) {
-            this.createTurnState(input.sessionKey);
+            this.outboundTurns.set(input.sessionKey, (0, runtime_state_js_1.createWeixinTurnState)(input.sessionKey));
         }
         return () => {
             if (previousRoute) {
@@ -488,52 +374,32 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                 messageId: msg.messageId,
             },
         });
-        this.options.store.expirePendingPairings();
         const binding = await this.getBinding(msg.workspaceId, instanceId);
-        let authorized = this.options.store.getAuthorizedUser(msg.workspaceId, msg.platformUserId, platformKey);
-        if (!authorized) {
-            if (binding.allowFrom === '*') {
-                const authorizedAt = new Date().toISOString();
-                this.options.store.createAuthorizedUser({
-                    id: `wx-user-${(0, node_crypto_2.randomUUID)()}`,
-                    workspace_id: msg.workspaceId,
-                    platform: platformKey,
-                    platform_user_id: msg.platformUserId,
-                    chat_id: msg.chatId,
-                    display_name: msg.displayName,
-                    thread_id: null,
-                    authorized_at: authorizedAt,
-                });
-                authorized = this.options.store.getAuthorizedUser(msg.workspaceId, msg.platformUserId, platformKey);
-                this.options.log?.(`localcore-weixin auto-approved user for ${msg.workspaceId}: ${msg.platformUserId}`);
-                this.notifyRuntimeStateChanged();
-            }
-        }
-        if (!authorized) {
-            const existingPending = this.options.store.listPendingPairings(msg.workspaceId).find((item) => item.platform === platformKey && item.platform_user_id === msg.platformUserId && item.chat_id === msg.chatId && item.status === 'pending');
-            let pairingCode = existingPending?.code || '';
-            if (!existingPending) {
-                const now = new Date();
-                pairingCode = String((0, node_crypto_2.randomInt)(100000, 1000000));
-                this.options.store.createPairingRequest({
-                    code: pairingCode,
-                    workspace_id: msg.workspaceId,
-                    platform: platformKey,
-                    platform_user_id: msg.platformUserId,
-                    chat_id: msg.chatId,
-                    display_name: msg.displayName,
-                    requested_at: now.toISOString(),
-                    expires_at: new Date(now.getTime() + PAIRING_EXPIRY_MS).toISOString(),
-                    status: 'pending',
-                });
-                this.notifyRuntimeStateChanged();
-            }
+        const authorization = (0, inbound_authorization_js_1.resolveInboundChannelAuthorization)({
+            store: this.options.store,
+            identity: {
+                workspaceId: msg.workspaceId,
+                platformKey,
+                platformUserId: msg.platformUserId,
+                chatId: msg.chatId,
+                displayName: msg.displayName,
+            },
+            autoApprove: binding.allowFrom === '*',
+            authorizedUserIdPrefix: 'wx-user',
+            generatePairingCode: () => String((0, node_crypto_2.randomInt)(100000, 1000000)),
+            onStateChanged: () => this.notifyRuntimeStateChanged(),
+        });
+        if (authorization.status === 'pending') {
             const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(msg.workspaceId, instanceId));
             if (state?.connected) {
-                await this.sendTextMessage(state, msg.chatId, `**已收到消息**\n\n当前账号还未授权接入这个工作区。\n请在桌面端完成审批后再次发送消息。\n\n配对码：\`${pairingCode}\``, msg.contextToken);
+                await this.sendTextMessage(state, msg.chatId, `**已收到消息**\n\n当前账号还未授权接入这个工作区。\n请在桌面端完成审批后再次发送消息。\n\n配对码：\`${authorization.pairingCode}\``, msg.contextToken);
             }
             return;
         }
+        if (authorization.autoApproved) {
+            this.options.log?.(`localcore-weixin auto-approved user for ${msg.workspaceId}: ${msg.platformUserId}`);
+        }
+        const authorized = authorization.authorized;
         const router = this.options.getWorkspaceRouter();
         let { threadId } = await (0, thread_routing_js_1.resolveChannelThreadRoute)({
             store: this.options.store,
@@ -584,10 +450,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             return;
         }
         this.options.store.updatePlatformThreadMessageId(msg.workspaceId, msg.chatId, msg.platformUserId, msg.contextToken || msg.messageId, platformKey);
-        const wrappedText = slashCommand
-            ? msg.text
-            : (0, desktop_js_1.wrapUserMessageWithSchedulerProtocol)(msg.text);
-        await router.sendThreadMessage(threadId, (0, content_js_1.createChannelThreadMessageInput)(wrappedText, msg.contentParts));
+        await router.sendThreadMessage(threadId, (0, content_js_1.createChannelThreadMessageInput)(msg.text, msg.contentParts));
         return;
     }
     async resolveDefaultAgentType(workspaceId, threadId) {
@@ -634,7 +497,18 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             status.connectedAt = new Date().toISOString();
             this.clearRuntimeError(status);
             // Start long-poll loop in background
-            this.runMonitorLoop(binding, abortController.signal).catch((err) => {
+            (0, inbound_poller_js_1.runWeixinInboundPoller)({
+                binding,
+                signal: abortController.signal,
+                getRuntimeState: () => this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId)),
+                getAuthorizedUser: (workspaceId, platformUserId, platformKey) => this.options.store.getAuthorizedUser(workspaceId, platformUserId, platformKey),
+                clearRuntimeError: (runtimeState) => this.clearRuntimeError(runtimeState),
+                setRuntimeError: (runtimeState, errorInfo) => this.setRuntimeError(runtimeState, errorInfo),
+                notifyRuntimeStateChanged: () => this.notifyRuntimeStateChanged(),
+                downloadMediaItem: (item, messageId, index, uploadsDir, workspaceBinding) => this.downloadMediaItem(item, messageId, index, uploadsDir, workspaceBinding),
+                handleInboundMessage: (message) => this.handleInboundMessage(message),
+                log: this.options.log,
+            }).catch((err) => {
                 if (!abortController.signal.aborted) {
                     status.status = 'error';
                     status.connected = false;
@@ -661,127 +535,13 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             return 'expired';
         return 'wait';
     }
-    async runMonitorLoop(binding, signal) {
-        let buf = (0, config_js_1.loadWeixinBuf)(binding);
-        let consecutiveFailures = 0;
-        while (!signal.aborted) {
-            try {
-                const resp = await (0, transport_js_1.getWeixinUpdates)(binding, buf, signal);
-                const isApiError = (resp.ret !== undefined && resp.ret !== 0) || (resp.errcode !== undefined && resp.errcode !== 0);
-                if (isApiError) {
-                    consecutiveFailures++;
-                    const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
-                    const retryDelayMs = this.computeRetryDelay(consecutiveFailures);
-                    if (resp.errcode === -14 || resp.ret === -14) {
-                        if (state) {
-                            state.status = 'error';
-                            state.connected = false;
-                            state.consecutiveFailures = consecutiveFailures;
-                            state.nextRetryAt = new Date(Date.now() + retryDelayMs).toISOString();
-                            this.setRuntimeError(state, (0, local_core_errors_js_1.toLocalCoreErrorInfo)(new local_core_errors_js_1.LocalCoreError('channel_session_expired', 'WeChat login expired.')));
-                            this.notifyRuntimeStateChanged();
-                        }
-                    }
-                    this.logPollError(binding, `ret=${resp.ret} errcode=${resp.errcode} errmsg=${resp.errmsg || ''}`, `localcore-weixin getUpdates failed for ${binding.workspaceId}: ret=${resp.ret} errcode=${resp.errcode}${resp.errmsg ? ` errmsg=${resp.errmsg}` : ''} (${consecutiveFailures})`);
-                    if (state && resp.errcode !== -14 && resp.ret !== -14) {
-                        state.consecutiveFailures = consecutiveFailures;
-                        state.nextRetryAt = new Date(Date.now() + retryDelayMs).toISOString();
-                    }
-                    await sleep(retryDelayMs, signal);
-                    if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                        consecutiveFailures = MAX_CONSECUTIVE_FAILURES;
-                    }
-                    continue;
-                }
-                consecutiveFailures = 0;
-                const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
-                if (state) {
-                    this.clearRuntimeError(state);
-                    state.status = 'running';
-                    state.connected = true;
-                    this.notifyRuntimeStateChanged();
-                }
-                if (resp.get_updates_buf) {
-                    buf = resp.get_updates_buf;
-                    (0, config_js_1.saveWeixinBuf)(binding, buf);
-                }
-                for (const msg of resp.msgs ?? []) {
-                    const items = msg.item_list ?? [];
-                    const textItem = items.find((i) => i.type === transport_js_1.TEXT_ITEM_TYPE);
-                    const voiceTextItems = items.filter((i) => i.type === transport_js_1.VOICE_ITEM_TYPE && i.voice_item?.text);
-                    const mediaItems = items.filter((i) => i.type === transport_js_1.IMAGE_ITEM_TYPE || i.type === transport_js_1.FILE_ITEM_TYPE);
-                    if (!textItem && voiceTextItems.length === 0 && mediaItems.length === 0)
-                        continue;
-                    const conversationId = msg.from_user_id ?? '';
-                    const text = [textItem?.text_item?.text?.trim(), ...voiceTextItems.map((i) => i.voice_item?.text?.trim())]
-                        .filter((part) => Boolean(part))
-                        .join('\n\n');
-                    const msgId = msg.msg_id ?? String(Date.now());
-                    // Handle attachments
-                    let attachmentText = '';
-                    const attachmentParts = [];
-                    if (mediaItems.length > 0) {
-                        const uploadsDir = node_path_1.default.join(binding.stateDir, 'weixin-uploads');
-                        for (const [idx, item] of mediaItems.entries()) {
-                            try {
-                                const att = await this.downloadMediaItem(item, msgId, idx, uploadsDir, binding);
-                                if (att) {
-                                    attachmentText += attachmentText ? '\n' : '';
-                                    attachmentText += att.kind === 'image' ? `[Image: ${att.path}]` : `[File "${att.name}": ${att.path}]`;
-                                    const part = createWeixinAttachmentContentPart(att);
-                                    if (part)
-                                        attachmentParts.push(part);
-                                }
-                            }
-                            catch (dlErr) {
-                                this.options.log?.(`localcore-weixin attachment download failed (${conversationId}#${idx}): ${formatError(dlErr)}`);
-                            }
-                        }
-                    }
-                    const fullText = [text, attachmentText].filter(Boolean).join('\n\n');
-                    if (!fullText)
-                        continue;
-                    await this.handleInboundMessage({
-                        workspaceId: binding.workspaceId,
-                        instanceId: binding.instanceId,
-                        platformKey: binding.platformKey,
-                        platformUserId: conversationId,
-                        chatId: conversationId,
-                        displayName: conversationId.slice(-6),
-                        text: fullText,
-                        messageId: msgId,
-                        contextToken: msg.context_token,
-                        contentParts: [
-                            ...(text ? [{ type: 'text', text }] : []),
-                            ...attachmentParts,
-                        ],
-                    });
-                }
-            }
-            catch (err) {
-                if (signal.aborted)
-                    return;
-                consecutiveFailures++;
-                const retryDelayMs = this.computeRetryDelay(consecutiveFailures);
-                const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
-                if (state) {
-                    state.consecutiveFailures = consecutiveFailures;
-                    state.nextRetryAt = new Date(Date.now() + retryDelayMs).toISOString();
-                    this.setRuntimeError(state, (0, local_core_errors_js_1.toLocalCoreErrorInfo)(err));
-                    this.notifyRuntimeStateChanged();
-                }
-                this.logPollError(binding, formatError(err), `localcore-weixin getUpdates error for ${binding.workspaceId} (${consecutiveFailures}): ${formatError(err)}`);
-                await sleep(retryDelayMs, signal);
-            }
-        }
-    }
     // ==================== Private: HTTP API ====================
     async sendTextMessage(state, toUserId, text, contextToken, options = {}) {
         const binding = await this.getBinding(state.workspaceId);
-        const stripped = stripHtml(text);
+        const stripped = (0, text_utils_js_1.stripWeixinHtml)(text);
         const chunks = contextToken
-            ? [truncateTextByUtf8Bytes(stripped, WEIXIN_CONTEXT_REPLY_MAX_BYTES)].filter(Boolean)
-            : splitTextByUtf8Bytes(stripped, WEIXIN_TEXT_MESSAGE_MAX_BYTES);
+            ? [(0, text_utils_js_1.truncateTextByUtf8Bytes)(stripped, WEIXIN_CONTEXT_REPLY_MAX_BYTES)].filter(Boolean)
+            : (0, text_utils_js_1.splitTextByUtf8Bytes)(stripped, WEIXIN_TEXT_MESSAGE_MAX_BYTES);
         for (const [index, chunk] of chunks.entries()) {
             const finalChunk = options.final && index === chunks.length - 1;
             const resp = await (0, transport_js_1.sendWeixinTextMessageChunk)(binding, toUserId, chunk, contextToken, {
@@ -789,7 +549,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                 final: finalChunk,
             });
             if ((0, transport_js_1.isWeixinApiError)(resp)) {
-                throw new Error(`WeChat sendmessage failed: ret=${resp.ret} errcode=${resp.errcode}${resp.errmsg ? ` errmsg=${resp.errmsg}` : ''} chunk=${index + 1}/${chunks.length} bytes=${utf8ByteLength(chunk)} context=${contextToken ? 'yes' : 'no'} message_state=${finalChunk ? 2 : 1}`);
+                throw new Error(`WeChat sendmessage failed: ret=${resp.ret} errcode=${resp.errcode}${resp.errmsg ? ` errmsg=${resp.errmsg}` : ''} chunk=${index + 1}/${chunks.length} bytes=${(0, text_utils_js_1.utf8ByteLength)(chunk)} context=${contextToken ? 'yes' : 'no'} message_state=${finalChunk ? 2 : 1}`);
             }
         }
         this.options.log?.(`localcore-weixin sent message to ${toUserId} for workspace ${state.workspaceId}${chunks.length > 1 ? ` chunks=${chunks.length}` : ''}`);
@@ -887,37 +647,58 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             aesKey = decoded.length === 16 ? decoded : decoded.length === 32 ? Buffer.from(decoded.toString('ascii'), 'hex') : undefined;
         }
         const cdnUrl = `${binding.cdnBaseUrl}/download?encrypted_query_param=${encodeURIComponent(encryptQueryParam)}`;
-        const resp = await fetch(cdnUrl, { signal: AbortSignal.timeout(30_000) });
-        if (!resp.ok)
-            throw new Error(`CDN HTTP ${resp.status}`);
-        const rawBuf = Buffer.from(await resp.arrayBuffer());
-        if (rawBuf.length === 0)
-            throw new Error('CDN returned empty data');
-        let resultBuf;
-        if (aesKey) {
-            const decipher = node_crypto_1.default.createDecipheriv('aes-128-ecb', aesKey, null);
-            decipher.setAutoPadding(true);
-            resultBuf = Buffer.concat([decipher.update(rawBuf), decipher.final()]);
-        }
-        else {
-            resultBuf = rawBuf;
-        }
-        const { ext, kind } = this.sniffExtAndKind(resultBuf);
         const declaredName = String(itemData?.file_name ?? (item.type === transport_js_1.IMAGE_ITEM_TYPE ? 'image' : 'file'));
-        const safeName = declaredName.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 64);
-        const safeMsgId = msgId.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 48);
-        const fileName = `${safeMsgId}-${idx}-${safeName}${ext}`;
-        const filePath = node_path_1.default.join(uploadsDir, fileName);
-        node_fs_1.default.mkdirSync(uploadsDir, { recursive: true });
-        node_fs_1.default.writeFileSync(filePath, resultBuf);
+        const stored = await this.inboundAttachmentStore.save({
+            directory: uploadsDir,
+            storedFileName: `${msgId}-${idx}-${declaredName}`,
+            displayFileName: declaredName,
+            maxBytes: WEIXIN_MAX_UPLOAD_FILE_SIZE,
+            includeBase64: ({ prefix }) => this.sniffExtAndKind(prefix).kind === 'image',
+            finalizeStoredFileName: ({ storedFileName, prefix }) => `${storedFileName}${this.sniffExtAndKind(prefix).ext}`,
+            source: {
+                open: async () => {
+                    const resp = await fetch(cdnUrl, { signal: AbortSignal.timeout(30_000) });
+                    if (!resp.ok)
+                        throw new Error(`CDN HTTP ${resp.status}`);
+                    if (!resp.body)
+                        throw new Error('CDN returned no response body');
+                    const rawStream = node_stream_1.Readable.fromWeb(resp.body);
+                    if (!aesKey) {
+                        return { stream: rawStream };
+                    }
+                    const decipher = node_crypto_1.default.createDecipheriv('aes-128-ecb', aesKey, null);
+                    decipher.setAutoPadding(true);
+                    return { stream: rawStream.pipe(decipher) };
+                },
+            },
+        });
+        const { ext, kind } = this.sniffExtAndKind(stored.prefix);
+        const uri = await this.resolveInboundAttachmentUri(binding, stored.path);
         return {
-            path: filePath,
+            path: stored.path,
             kind,
             name: declaredName,
-            data: kind === 'image' ? resultBuf.toString('base64') : undefined,
+            data: stored.data,
             mimeType: kind === 'image' ? this.mimeTypeForImageExt(ext) : undefined,
+            ...(uri ? { uri } : {}),
         };
     }
+    async resolveInboundAttachmentUri(binding, filePath) {
+        const sandbox = binding.project?.agent?.options?.sandbox;
+        if (!sandbox?.enabled) {
+            return (0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({ filePath });
+        }
+        const workspace = await this.options.getWorkspaceRouter().getWorkspaceRegistryEntry(binding.workspaceId).catch(() => undefined);
+        if (!workspace) {
+            return undefined;
+        }
+        return (0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({
+            filePath,
+            workspacePath: workspace.path,
+            sandboxEnabled: true,
+            sandboxWorkspacePath: sandbox.workspace_mount_path,
+        });
+    }
     mimeTypeForImageExt(ext) {
         if (ext === '.jpg')
             return 'image/jpeg';
@@ -927,149 +708,6 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             return 'image/gif';
         return 'application/octet-stream';
     }
-    // ==================== Private: Turn State ====================
-    createTurnState(sessionKey) {
-        const turn = {
-            sessionKey,
-            sentCount: 0,
-            foldedProgressCount: 0,
-            awaitingPermission: false,
-            processing: false,
-            previewText: '',
-            finalText: '',
-            thinkingSteps: [],
-            pendingThoughtText: undefined,
-            statusLines: [],
-            buttonRows: [],
-            lastSentAt: 0,
-            lastSentText: '',
-        };
-        this.outboundTurns.set(sessionKey, turn);
-        return turn;
-    }
-    getOrCreateTurnState(sessionKey) {
-        return this.outboundTurns.get(sessionKey) || this.createTurnState(sessionKey);
-    }
-    consumeBridgeEvent(turn, event) {
-        const content = renderBridgeContentForWeixin(event);
-        const bridgeKind = this.resolveBridgeEventKind(event);
-        if (event.type === 'typing_start') {
-            turn.processing = true;
-            turn.previewText = '';
-            turn.finalText = '';
-            turn.thinkingSteps = [];
-            turn.pendingThoughtText = undefined;
-            turn.statusLines = [];
-            turn.buttonRows = [];
-            return;
-        }
-        if (event.type === 'typing_stop') {
-            turn.processing = false;
-            return;
-        }
-        if (event.type === 'preview_start' || event.type === 'update_message') {
-            if (bridgeKind === 'thought') {
-                turn.pendingThoughtText = content;
-                return;
-            }
-            turn.previewText = content;
-            return;
-        }
-        if (bridgeKind !== 'thought') {
-            this.flushPendingThought(turn);
-        }
-        if (event.type === 'status') {
-            if (content) {
-                this.pushUnique(turn.statusLines, content);
-                turn.finalText = content;
-                turn.previewText = content;
-            }
-            return;
-        }
-        if (event.type === 'buttons') {
-            turn.awaitingPermission = true;
-            turn.buttonRows = Array.isArray(event.buttonRows)
-                ? event.buttonRows
-                    .map((row) => Array.isArray(row)
-                    ? row.filter((b) => Boolean(b?.text && b?.data))
-                        .map((b) => ({ text: b.text, data: b.data }))
-                    : [])
-                    .filter((row) => row.length > 0)
-                : [];
-            return;
-        }
-        if (!content)
-            return;
-        if (bridgeKind === 'thought' || bridgeKind === 'plan') {
-            this.pushUnique(turn.thinkingSteps, content);
-            return;
-        }
-        if (bridgeKind === 'tool' || bridgeKind === 'status') {
-            this.pushUnique(turn.statusLines, content);
-            return;
-        }
-        turn.finalText = content;
-        turn.previewText = content;
-    }
-    renderTurnText(turn) {
-        const sections = [];
-        if (turn.thinkingSteps.length > 0) {
-            sections.push(`**中间过程**\n${turn.thinkingSteps.map((step) => `• ${step.replace(/\s+/g, ' ').trim()}`).join('\n')}`);
-        }
-        if (turn.finalText) {
-            sections.push(turn.finalText);
-        }
-        else if (turn.previewText) {
-            sections.push(turn.previewText);
-        }
-        else if (turn.statusLines.length > 0) {
-            sections.push(`**处理中**\n${turn.statusLines.slice(-3).map((l) => `• ${l.replace(/\s+/g, ' ').trim()}`).join('\n')}`);
-        }
-        else if (turn.processing) {
-            sections.push('**处理中**\n正在思考...');
-        }
-        if (turn.awaitingPermission) {
-            sections.push('\n回复：`allow` / `allow all` / `deny`');
-        }
-        return sections.join('\n\n').trim();
-    }
-    flushPendingThought(turn) {
-        const text = String(turn.pendingThoughtText || '').trim();
-        if (!text)
-            return;
-        this.pushUnique(turn.thinkingSteps, text);
-        turn.pendingThoughtText = undefined;
-    }
-    isTerminalBridgeMessage(event, rendered) {
-        if (event.type === 'buttons')
-            return true;
-        if (event.type !== 'reply')
-            return false;
-        const bridgeKind = this.resolveBridgeEventKind(event);
-        if (bridgeKind === 'tool' || bridgeKind === 'thought' || bridgeKind === 'plan' || bridgeKind === 'status')
-            return false;
-        const normalized = rendered.trim();
-        if (!normalized)
-            return false;
-        return true;
-    }
-    resolveBridgeEventKind(event) {
-        if (event.bridgeKind) {
-            return event.bridgeKind;
-        }
-        return event.type === 'status' ? 'status' : 'assistant';
-    }
-    // ==================== Private: Helpers ====================
-    pushUnique(target, value) {
-        const normalized = value.trim();
-        if (!normalized)
-            return;
-        if (target[target.length - 1] === normalized)
-            return;
-        target.push(normalized);
-        if (target.length > 8)
-            target.splice(0, target.length - 8);
-    }
     isDuplicateInboundMessage(input) {
         const messageKey = input.contextToken || input.messageId;
         if (!messageKey)
@@ -1104,29 +742,6 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             return null;
         return { name: name.trim().toLowerCase(), args };
     }
-    computeRetryDelay(failures) {
-        if (failures <= 1)
-            return RETRY_DELAY_MS;
-        if (failures === 2)
-            return 5_000;
-        if (failures === 3)
-            return 15_000;
-        if (failures === 4)
-            return 30_000;
-        return 60_000;
-    }
-    logPollError(binding, errorKey, message) {
-        const key = (0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId);
-        const current = this.pollErrorLogWindows.get(key);
-        const now = Date.now();
-        if (!current || current.errorKey !== errorKey || now - current.at >= ERROR_LOG_WINDOW_MS) {
-            this.pollErrorLogWindows.set(key, { at: now, count: 1, errorKey });
-            this.options.log?.(message);
-            return;
-        }
-        current.count += 1;
-        this.pollErrorLogWindows.set(key, current);
-    }
 }
 exports.LocalCoreWeixinGateway = LocalCoreWeixinGateway;
 function getWeixinInstanceId(platform) {