@senguoyun/dsh-arkme 0.1.11 → 0.1.12

package/lib/{persistent-runtime-DInn3Zb1.js → persistent-runtime-kUpXXUZI.js}

@@ -1,6 +1,7 @@
 import { chmodSync, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, createHmac, createPublicKey, randomUUID, timingSafeEqual, verify } from "node:crypto";
 import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
 import { open } from "node:fs/promises";
 import OSS from "ali-oss";
 import { createContext, runInContext } from "node:vm";
@@ -957,6 +958,17 @@ var ServiceRuntime = class {
 			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0], signal, false, requestOptions());
 		}
 	}
+	async authenticatedCalendarPost(path, body, initialSession, signal, options = {}) {
+		let session = initialSession ?? await this.requireSession();
+		const requestOptions = () => this.authenticatedRequestOptions(session, "record", "interactive-read", options);
+		try {
+			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0, 200], signal, false, requestOptions());
+		} catch (error) {
+			if (!(error instanceof ArkmePluginError) || !["auth-http-401", "auth-http-403"].includes(error.code)) throw error;
+			session = await this.refreshAccessToken(session);
+			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0, 200], signal, false, requestOptions());
+		}
+	}
 	async authenticatedAuthPost(path, body, initialSession, signal, options = {}) {
 		let session = initialSession ?? await this.requireSession();
 		const requestOptions = () => this.authenticatedRequestOptions(session, "auth", "write", options);
@@ -1079,13 +1091,13 @@ var ServiceRuntime = class {
 };
 //#endregion
 //#region src/services/ai-video-service.ts
-function numberValue$20(value) {
+function numberValue$21(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$11(value) {
+function booleanValue$12(value) {
 	return value === true;
 }
-function listValue$20(value) {
+function listValue$21(value) {
 	return Array.isArray(value) ? value : [];
 }
 var AiVideoService = class {
@@ -1097,12 +1109,12 @@ var AiVideoService = class {
 		const session = await this.runtime.requireSession();
 		const data = await this.runtime.authenticatedIntelligentPost("/api/v1/ai-comic-video/preflight", this.aiVideoSelectionBody(sessionId, segments), session, signal);
 		return {
-			allowed: booleanValue$11(data.allowed),
+			allowed: booleanValue$12(data.allowed),
 			message: stringValue$1(data.message).trim() || "AI 视频内容检查已完成",
-			selectedDurationMillis: Math.max(0, numberValue$20(data.selected_duration_millis)),
-			minimumDurationMillis: Math.max(0, numberValue$20(data.minimum_duration_millis)),
-			selectedSegmentCount: Math.max(0, numberValue$20(data.selected_segment_count)),
-			retryable: booleanValue$11(data.retryable),
+			selectedDurationMillis: Math.max(0, numberValue$21(data.selected_duration_millis)),
+			minimumDurationMillis: Math.max(0, numberValue$21(data.minimum_duration_millis)),
+			selectedSegmentCount: Math.max(0, numberValue$21(data.selected_segment_count)),
+			retryable: booleanValue$12(data.retryable),
 			...stringValue$1(data.reason_code).trim() === "" ? {} : { reasonCode: stringValue$1(data.reason_code).trim() },
 			...stringValue$1(data.proof).trim() === "" ? {} : { proof: stringValue$1(data.proof).trim() }
 		};
@@ -1137,8 +1149,8 @@ var AiVideoService = class {
 			...options.statuses === void 0 || options.statuses.length === 0 ? {} : { statuses: options.statuses }
 		}, session, options.signal);
 		return {
-			items: listValue$20(data.items).map((raw) => this.aiVideoListItem(raw)).filter((item) => item !== void 0),
-			hasMore: booleanValue$11(data.has_more),
+			items: listValue$21(data.items).map((raw) => this.aiVideoListItem(raw)).filter((item) => item !== void 0),
+			hasMore: booleanValue$12(data.has_more),
 			...stringValue$1(data.next_cursor).trim() === "" ? {} : { nextCursor: stringValue$1(data.next_cursor).trim() }
 		};
 	}
@@ -1149,13 +1161,13 @@ var AiVideoService = class {
 			texts
 		}, session, signal);
 		return {
-			allowed: booleanValue$11(data.allowed),
+			allowed: booleanValue$12(data.allowed),
 			message: stringValue$1(data.message).trim() || "AI 视频内容检查已完成",
-			selectedDurationMillis: Math.max(0, numberValue$20(data.selected_duration_millis)),
-			minimumDurationMillis: Math.max(0, numberValue$20(data.minimum_duration_millis)),
-			selectedSegmentCount: Math.max(0, numberValue$20(data.selected_segment_count)),
-			selectedTextCount: Math.max(0, numberValue$20(data.selected_text_count)),
-			retryable: booleanValue$11(data.retryable),
+			selectedDurationMillis: Math.max(0, numberValue$21(data.selected_duration_millis)),
+			minimumDurationMillis: Math.max(0, numberValue$21(data.minimum_duration_millis)),
+			selectedSegmentCount: Math.max(0, numberValue$21(data.selected_segment_count)),
+			selectedTextCount: Math.max(0, numberValue$21(data.selected_text_count)),
+			retryable: booleanValue$12(data.retryable),
 			...stringValue$1(data.reason_code).trim() === "" ? {} : { reasonCode: stringValue$1(data.reason_code).trim() },
 			...stringValue$1(data.proof).trim() === "" ? {} : { proof: stringValue$1(data.proof).trim() }
 		};
@@ -1194,19 +1206,19 @@ var AiVideoService = class {
 			"canceled"
 		])).has(status)) throw new ArkmePluginError("ai-video-contract-invalid", "AI 视频服务返回了无效任务信息", true, 502);
 		const selection = objectValue$1(data.selection);
-		const segmentCount = listValue$20(selection.segments).length;
-		const textCount = listValue$20(selection.texts).length;
+		const segmentCount = listValue$21(selection.segments).length;
+		const textCount = listValue$21(selection.texts).length;
 		return {
 			jobId,
 			status,
 			stage: stringValue$1(data.stage).trim() || status,
-			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$20(data.progress)))),
+			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$21(data.progress)))),
 			selectedSegmentCount: segmentCount,
 			...textCount === 0 ? {} : { selectedTextCount: textCount },
-			retryable: booleanValue$11(data.retryable),
+			retryable: booleanValue$12(data.retryable),
 			...stringValue$1(data.video_asset_uid).trim() === "" ? {} : { videoAssetUid: stringValue$1(data.video_asset_uid).trim() },
 			...stringValue$1(data.cover_asset_uid).trim() === "" ? {} : { coverAssetUid: stringValue$1(data.cover_asset_uid).trim() },
-			...numberValue$20(data.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$20(data.video_duration_millis) },
+			...numberValue$21(data.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$21(data.video_duration_millis) },
 			...stringValue$1(data.error_code).trim() === "" ? {} : { errorCode: stringValue$1(data.error_code).trim() },
 			...stringValue$1(data.error_message).trim() === "" ? {} : { errorMessage: stringValue$1(data.error_message).trim() },
 			...stringValue$1(data.failure_stage).trim() === "" ? {} : { failureStage: stringValue$1(data.failure_stage).trim() }
@@ -1229,17 +1241,17 @@ var AiVideoService = class {
 			sessionId: stringValue$1(item.session_id).trim(),
 			status,
 			stage: stringValue$1(item.stage).trim() || status,
-			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$20(item.progress)))),
+			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$21(item.progress)))),
 			title: stringValue$1(source.title).trim() || "长录音 AI 视频",
-			sourceStartedAtMillis: numberValue$20(source.started_at),
-			selectedDurationMillis: Math.max(0, numberValue$20(source.selected_duration_millis)),
-			selectedSegmentCount: Math.max(0, Math.trunc(numberValue$20(item.selected_segment_count))),
-			retryable: booleanValue$11(item.retryable),
-			createdAtMillis: numberValue$20(item.created_at),
-			updatedAtMillis: numberValue$20(item.updated_at),
+			sourceStartedAtMillis: numberValue$21(source.started_at),
+			selectedDurationMillis: Math.max(0, numberValue$21(source.selected_duration_millis)),
+			selectedSegmentCount: Math.max(0, Math.trunc(numberValue$21(item.selected_segment_count))),
+			retryable: booleanValue$12(item.retryable),
+			createdAtMillis: numberValue$21(item.created_at),
+			updatedAtMillis: numberValue$21(item.updated_at),
 			...stringValue$1(item.cover_asset_uid).trim() === "" ? {} : { coverAssetUid: stringValue$1(item.cover_asset_uid).trim() },
 			...stringValue$1(item.video_asset_uid).trim() === "" ? {} : { videoAssetUid: stringValue$1(item.video_asset_uid).trim() },
-			...numberValue$20(item.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$20(item.video_duration_millis) },
+			...numberValue$21(item.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$21(item.video_duration_millis) },
 			...stringValue$1(item.error_code).trim() === "" ? {} : { errorCode: stringValue$1(item.error_code).trim() },
 			...stringValue$1(item.error_message).trim() === "" ? {} : { errorMessage: clippedText(item.error_message, 500) }
 		};
@@ -1265,13 +1277,13 @@ const ARKO_RUN_STATUSES = /* @__PURE__ */ new Set([
 	"expired"
 ]);
 const ARKO_PROFILE_DISPLAY_NAME_CACHE_TTL_MS = 10 * 6e4;
-function numberValue$19(value) {
+function numberValue$20(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$10(value) {
+function booleanValue$11(value) {
 	return value === true;
 }
-function listValue$19(value) {
+function listValue$20(value) {
 	return Array.isArray(value) ? value : [];
 }
 function optionalString$3(value) {
@@ -1300,7 +1312,7 @@ function joinUrlWithQuery(baseUrl, path, query) {
 }
 function arkoProfileFromData(data) {
 	const displayName = stringValue$1(data.display_name).trim();
-	const version = numberValue$19(data.version);
+	const version = numberValue$20(data.version);
 	if (displayName === "" || !Number.isSafeInteger(version) || version < 0) throw new ArkmePluginError("arko-profile-contract-invalid", "Arko 资料响应不完整", true, 502);
 	return {
 		displayName,
@@ -1324,15 +1336,15 @@ function arkoModelOptionFromData(value) {
 		displayName,
 		provider,
 		description,
-		recommended: booleanValue$10(data.recommended),
-		selected: booleanValue$10(data.selected)
+		recommended: booleanValue$11(data.recommended),
+		selected: booleanValue$11(data.selected)
 	};
 }
 function arkoModelCatalogFromData(data) {
 	const defaultRouteKey = arkoModelRouteKey(data.default_route_key);
 	const effectiveRouteKey = arkoModelRouteKey(data.effective_route_key);
 	const selectionSource = stringValue$1(data.selection_source);
-	const options = listValue$19(data.items).map(arkoModelOptionFromData);
+	const options = listValue$20(data.items).map(arkoModelOptionFromData);
 	const routeKeys = new Set(options.map((option) => option.routeKey));
 	const selected = options.filter((option) => option.selected);
 	if (selectionSource !== "default" && selectionSource !== "personal" || options.length === 0 || options.length > 16 || routeKeys.size !== options.length || !routeKeys.has(defaultRouteKey) || !routeKeys.has(effectiveRouteKey) || selected.length !== 1 || selected[0]?.routeKey !== effectiveRouteKey) throw new ArkmePluginError("arko-model-contract-invalid", "Arko 模型目录响应无效", true, 502);
@@ -1353,12 +1365,12 @@ function parsedJsonRecord(value) {
 }
 function arkoHistoryItemFromData(value) {
 	const data = objectValue$1(value);
-	const messageId = numberValue$19(data.id ?? data.msg_id ?? data.msgId);
-	const sessionId = numberValue$19(data.session_id ?? data.sessionId);
-	const roleCode = numberValue$19(data.role ?? data.sender_role ?? data.senderRole);
+	const messageId = numberValue$20(data.id ?? data.msg_id ?? data.msgId);
+	const sessionId = numberValue$20(data.session_id ?? data.sessionId);
+	const roleCode = numberValue$20(data.role ?? data.sender_role ?? data.senderRole);
 	if (!Number.isSafeInteger(messageId) || messageId <= 0 || !Number.isSafeInteger(sessionId) || sessionId <= 0 || roleCode !== 2 && roleCode !== 3) return void 0;
 	const extra = parsedJsonRecord(data.extra ?? data.metadata ?? data.meta);
-	const createdAt = numberValue$19(data.created_at ?? data.create_at ?? data.createdAt ?? data.createAt);
+	const createdAt = numberValue$20(data.created_at ?? data.create_at ?? data.createdAt ?? data.createAt);
 	const runUid = optionalString$3(extra.agent_run_uid);
 	const runStatus = optionalString$3(extra.agent_run_status);
 	const retryable = optionalBooleanValue$1(extra.agent_run_retryable);
@@ -1371,7 +1383,7 @@ function arkoHistoryItemFromData(value) {
 		text: stringValue$1(data.content ?? data.text_content ?? data.textContent),
 		reasoning: stringValue$1(data.reason_content ?? data.reason_text ?? data.reasonText),
 		createdAtMillis: createdAt > 0 && createdAt < 1e11 ? createdAt * 1e3 : createdAt,
-		status: numberValue$19(data.status ?? data.msg_status),
+		status: numberValue$20(data.status ?? data.msg_status),
 		...runUid === void 0 ? {} : { runUid },
 		...runStatus === void 0 ? {} : { runStatus },
 		...retryable === void 0 ? {} : { retryable },
@@ -1390,14 +1402,14 @@ function arkoRunProjectionFromData(data) {
 	return {
 		runUid,
 		status,
-		retryable: booleanValue$10(data.agent_run_retryable ?? data.retryable),
+		retryable: booleanValue$11(data.agent_run_retryable ?? data.retryable),
 		...errorCode === "" ? {} : { errorCode },
 		...retryOfRunUid === "" ? {} : { retryOfRunUid },
 		...clientAction === void 0 ? {} : { clientAction }
 	};
 }
 function arkoCreatedRecordUids(value) {
-	return listValue$19(value).map((item) => stringValue$1(item).trim()).filter((item) => item !== "");
+	return listValue$20(value).map((item) => stringValue$1(item).trim()).filter((item) => item !== "");
 }
 function arkoStreamFrame(raw) {
 	try {
@@ -1426,7 +1438,7 @@ var ArkoService = class {
 	async arkoEnsureSession(signal) {
 		const session = await this.runtime.requireSession();
 		const latest = await this.runtime.authenticatedIntelligentPost("/api/v1/qa/latest-session", { type: ARKO_AGENT_DIRECT_SESSION_TYPE }, session, signal);
-		const latestSessionId = numberValue$19(latest.id);
+		const latestSessionId = numberValue$20(latest.id);
 		if (Number.isSafeInteger(latestSessionId) && latestSessionId > 0) return {
 			sessionId: latestSessionId,
 			created: false,
@@ -1436,7 +1448,7 @@ var ArkoService = class {
 	}
 	async arkoCreateSession(signal) {
 		const session = await this.runtime.requireSession();
-		const createdSessionId = numberValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-session", {
+		const createdSessionId = numberValue$20((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-session", {
 			name: ARKO_DEFAULT_SESSION_NAME,
 			type: ARKO_AGENT_DIRECT_SESSION_TYPE
 		}, session, signal)).session_id);
@@ -1461,7 +1473,7 @@ var ArkoService = class {
 		const normalizedLimit = Math.min(ARKO_HISTORY_PAGE_LIMIT, Math.max(1, Math.trunc(limit)));
 		const normalizedOffset = Math.max(0, Math.trunc(offset));
 		const session = await this.runtime.requireSession();
-		const rawItems = listValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/message-list", {
+		const rawItems = listValue$20((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/message-list", {
 			limit: normalizedLimit,
 			offset: normalizedOffset,
 			session_type: ARKO_AGENT_DIRECT_SESSION_TYPE
@@ -1504,9 +1516,9 @@ var ArkoService = class {
 		};
 		if (modelRouteKey !== "") body.model_route_key = modelRouteKey;
 		const accepted = await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-msg-v2", body, session, options.signal);
-		const userMsgId = numberValue$19(accepted.user_msg_id);
-		const assistantMsgId = numberValue$19(accepted.assistant_msg_id);
-		const acceptedSessionId = numberValue$19(accepted.session_id) || sessionId;
+		const userMsgId = numberValue$20(accepted.user_msg_id);
+		const assistantMsgId = numberValue$20(accepted.assistant_msg_id);
+		const acceptedSessionId = numberValue$20(accepted.session_id) || sessionId;
 		if (!Number.isSafeInteger(acceptedSessionId) || acceptedSessionId <= 0 || !Number.isSafeInteger(userMsgId) || userMsgId <= 0 || !Number.isSafeInteger(assistantMsgId) || assistantMsgId <= 0) throw new ArkmePluginError("arko-ask-contract-invalid", "Arko 消息响应不完整", true, 502);
 		const runUid = stringValue$1(accepted.run_uid).trim();
 		if (runUid === "") throw new ArkmePluginError("arko-ask-contract-invalid", "Arko 消息响应缺少运行标识", true, 502);
@@ -1542,8 +1554,8 @@ var ArkoService = class {
 		}, session, signal);
 		const status = stringValue$1(data.status).trim();
 		const normalizedRunUid = stringValue$1(data.run_uid).trim() || runUid.trim();
-		const sequence = numberValue$19(data.sequence);
-		const surfaceAssistantMsgId = numberValue$19(data.surface_assistant_msg_id);
+		const sequence = numberValue$20(data.sequence);
+		const surfaceAssistantMsgId = numberValue$20(data.surface_assistant_msg_id);
 		const clientAction = optionalRecord(data.client_action);
 		if (normalizedRunUid !== runUid.trim() || !ARKO_RUN_STATUSES.has(status) || !Number.isSafeInteger(sequence) || sequence < 0 || !Number.isSafeInteger(surfaceAssistantMsgId) || surfaceAssistantMsgId <= 0) throw new ArkmePluginError("arko-run-status-contract-invalid", "Arko 运行状态响应不完整", true, 502);
 		return {
@@ -1552,7 +1564,7 @@ var ArkoService = class {
 			status,
 			sequence,
 			surfaceAssistantMsgId,
-			retryable: booleanValue$10(data.retryable),
+			retryable: booleanValue$11(data.retryable),
 			...stringValue$1(data.error_code).trim() === "" ? {} : { errorCode: stringValue$1(data.error_code).trim() },
 			...stringValue$1(data.retry_of_run_uid).trim() === "" ? {} : { retryOfRunUid: stringValue$1(data.retry_of_run_uid).trim() },
 			...clientAction === void 0 ? {} : { clientAction }
@@ -1727,12 +1739,12 @@ var ArkoService = class {
 				if (tailRun !== void 0) {
 					run = tailRun;
 					status = tailRun.status;
-				} else if (booleanValue$10(tail.error) || stringValue$1(tail.status).trim() === "error") status = "failed";
+				} else if (booleanValue$11(tail.error) || stringValue$1(tail.status).trim() === "error") status = "failed";
 				else status = ARKO_COMPLETED_STATUS;
 				createdRecordUids = arkoCreatedRecordUids(tail.created_record_uids);
 				const nextProfile = optionalRecord(tail.agent_profile);
 				if (nextProfile !== void 0) profile = arkoProfileFromData(nextProfile);
-				if (booleanValue$10(tail.error) || stringValue$1(tail.status).trim() === "error") errorMessage = stringValue$1(tail.error_message).trim() || "Arko 执行失败";
+				if (booleanValue$11(tail.error) || stringValue$1(tail.status).trim() === "error") errorMessage = stringValue$1(tail.error_message).trim() || "Arko 执行失败";
 			}
 			const type = stringValue$1(frame.type ?? frame.event).trim();
 			const payload = optionalRecord(frame.payload) ?? frame;
@@ -1781,13 +1793,13 @@ const ARKME_ARRANGEMENT_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_ARRANGEMENT_REFS = 4096;
 const ARKME_ARRANGEMENT_REMINDER_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_ARRANGEMENT_REMINDER_REFS = 4096;
-function numberValue$18(value) {
+function numberValue$19(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$9(value) {
+function booleanValue$10(value) {
 	return value === true;
 }
-function listValue$18(value) {
+function listValue$19(value) {
 	return Array.isArray(value) ? value : [];
 }
 function arrangementStatusCode(status) {
@@ -1797,7 +1809,7 @@ function arrangementStatusCode(status) {
 	return -1;
 }
 function arrangementStatus(value) {
-	const code = Math.trunc(numberValue$18(value));
+	const code = Math.trunc(numberValue$19(value));
 	if (code === 1) return "identified";
 	if (code === 2) return "following";
 	if (code === 3) return "completed";
@@ -1846,9 +1858,9 @@ var ArrangementService = class {
 			limit,
 			offset
 		}, session, options.signal, { lane: "interactive-read" });
-		const rawItems = listValue$18(data.list);
+		const rawItems = listValue$19(data.list);
 		const items = await Promise.all(rawItems.map(async (raw) => await this.arrangementItem(raw, session.userId)));
-		const total = Math.max(0, Math.trunc(numberValue$18(data.total)));
+		const total = Math.max(0, Math.trunc(numberValue$19(data.total)));
 		const nextOffset = offset + rawItems.length;
 		const hasMore = rawItems.length > 0 && nextOffset < total;
 		return {
@@ -1872,9 +1884,9 @@ var ArrangementService = class {
 			offset,
 			unread_only: options.unreadOnly === true
 		}, session, options.signal, { lane: "interactive-read" });
-		const rawItems = listValue$18(data.list);
+		const rawItems = listValue$19(data.list);
 		const items = await Promise.all(rawItems.map(async (raw) => await this.arrangementReminderEvent(raw, session.userId)));
-		const total = Math.max(0, Math.trunc(numberValue$18(data.total)));
+		const total = Math.max(0, Math.trunc(numberValue$19(data.total)));
 		const nextOffset = offset + rawItems.length;
 		const hasMore = rawItems.length > 0 && nextOffset < total;
 		return {
@@ -1897,7 +1909,7 @@ var ArrangementService = class {
 			project(data.next_reminder)
 		]);
 		return {
-			unreadCount: Math.max(0, Math.trunc(numberValue$18(data.unread_count))),
+			unreadCount: Math.max(0, Math.trunc(numberValue$19(data.unread_count))),
 			...latestUnread === void 0 ? {} : { latestUnread },
 			...latestEvent === void 0 ? {} : { latestEvent },
 			...nextReminder === void 0 ? {} : { nextReminder }
@@ -2001,7 +2013,7 @@ var ArrangementService = class {
 				}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$19(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2019,7 +2031,7 @@ var ArrangementService = class {
 				}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$19(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2034,7 +2046,7 @@ var ArrangementService = class {
 				const data = await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/reminders/clear", {}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$19(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2067,7 +2079,7 @@ var ArrangementService = class {
 	}
 	async reconcileArrangementDelete(arrangementRef, arrangementUid, session) {
 		try {
-			const visible = listValue$18((await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/list", {
+			const visible = listValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/list", {
 				status: -1,
 				uids: [arrangementUid],
 				limit: 1,
@@ -2098,17 +2110,17 @@ var ArrangementService = class {
 		const item = objectValue$1(raw);
 		const arrangementUid = stringValue$1(item.uid).trim();
 		if (arrangementUid === "") throw new ArkmePluginError("arrangement-contract-invalid", "安排响应缺少业务身份", true, 502);
-		const dueAtMillis = Math.trunc(numberValue$18(item.due_at));
-		const remindAtMillis = Math.trunc(numberValue$18(item.remind_at));
+		const dueAtMillis = Math.trunc(numberValue$19(item.due_at));
+		const remindAtMillis = Math.trunc(numberValue$19(item.remind_at));
 		return {
 			arrangementRef: await this.arrangementRef(viewerUserId, arrangementUid),
 			title: stringValue$1(item.title),
 			description: stringValue$1(item.description),
 			status: arrangementStatus(item.status),
-			reminderEnabled: booleanValue$9(item.reminder_enabled),
+			reminderEnabled: booleanValue$10(item.reminder_enabled),
 			reminderState: stringValue$1(item.reminder_state),
-			createdAtMillis: Math.trunc(numberValue$18(item.create_at)),
-			updatedAtMillis: Math.trunc(numberValue$18(item.update_at)),
+			createdAtMillis: Math.trunc(numberValue$19(item.create_at)),
+			updatedAtMillis: Math.trunc(numberValue$19(item.update_at)),
 			...dueAtMillis > 0 ? { dueAtMillis } : {},
 			...remindAtMillis > 0 ? { remindAtMillis } : {}
 		};
@@ -2129,20 +2141,20 @@ var ArrangementService = class {
 		const eventUid = stringValue$1(item.uid).trim();
 		const arrangementUid = stringValue$1(item.arrangement_uid).trim();
 		if (eventUid === "" || arrangementUid === "") throw new ArkmePluginError("arrangement-reminder-contract-invalid", "安排提醒响应缺少有效身份", true, 502);
-		const dueAtMillis = Math.trunc(numberValue$18(item.due_at));
-		const remindAtMillis = Math.trunc(numberValue$18(item.remind_at));
-		const readAtMillis = Math.trunc(numberValue$18(item.read_at));
+		const dueAtMillis = Math.trunc(numberValue$19(item.due_at));
+		const remindAtMillis = Math.trunc(numberValue$19(item.remind_at));
+		const readAtMillis = Math.trunc(numberValue$19(item.read_at));
 		return {
 			eventRef: await this.arrangementReminderRef(viewerUserId, eventUid),
 			arrangementRef: await this.arrangementRef(viewerUserId, arrangementUid),
 			title: stringValue$1(item.title),
 			description: stringValue$1(item.description),
 			eventKind: stringValue$1(item.event_kind),
-			eventAtMillis: Math.trunc(numberValue$18(item.event_at)),
+			eventAtMillis: Math.trunc(numberValue$19(item.event_at)),
 			read: readAtMillis > 0,
 			reminderState: stringValue$1(item.reminder_state),
-			createdAtMillis: Math.trunc(numberValue$18(item.create_at)),
-			updatedAtMillis: Math.trunc(numberValue$18(item.update_at)),
+			createdAtMillis: Math.trunc(numberValue$19(item.create_at)),
+			updatedAtMillis: Math.trunc(numberValue$19(item.update_at)),
 			...dueAtMillis > 0 ? { dueAtMillis } : {},
 			...remindAtMillis > 0 ? { remindAtMillis } : {},
 			...readAtMillis > 0 ? { readAtMillis } : {}
@@ -2199,7 +2211,7 @@ var ArrangementService = class {
 const ARKME_PHONE_BIND_SUCCESS = 1;
 const ARKME_PHONE_BIND_REPEAT = 2;
 const ARKME_PHONE_BIND_CODE_ERR = 3;
-function numberValue$17(value) {
+function numberValue$18(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
 var AuthService = class {
@@ -2264,7 +2276,7 @@ var AuthService = class {
 		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/public/v1/auth/wechat-login-qrcode", {}, void 0, [200]);
 		const sceneStr = stringValue$1(data.scene_str).trim();
 		const qrContent = stringValue$1(data.url).trim();
-		const expireSeconds = Math.max(30, numberValue$17(data.expire_seconds) || 300);
+		const expireSeconds = Math.max(30, numberValue$18(data.expire_seconds) || 300);
 		if (qrContent === "" && sceneStr !== "") throw new ArkmePluginError("wechat-qr-unavailable", "测试环境当前未返回可用微信二维码，请使用手机号登录", true, 503);
 		if (sceneStr === "" || qrContent === "") throw new ArkmePluginError("login-contract-invalid", "Arkme 登录二维码响应不完整", true, 502);
 		const attemptId = crypto.randomUUID();
@@ -2300,7 +2312,7 @@ var AuthService = class {
 			ref: 0,
 			keep_cancel: true
 		}, void 0, [200]);
-		const userId = numberValue$17(data.user_id);
+		const userId = numberValue$18(data.user_id);
 		if (userId <= 0) return {
 			status: "pending",
 			environment: this.runtime.config.environment,
@@ -2344,7 +2356,7 @@ var AuthService = class {
 		const normalizedCaptcha = this.normalizedCaptcha(captcha);
 		const session = await this.runtime.sessionStore.read() ?? await this.runtime.readPendingBindingSession();
 		if (session !== void 0) {
-			if (numberValue$17((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/bind-phone-send-code", {
+			if (numberValue$18((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/bind-phone-send-code", {
 				phone: normalizedPhone,
 				pre: "86",
 				is_test: this.runtime.config.environment === "test",
@@ -2366,7 +2378,7 @@ var AuthService = class {
 		if (!/^[0-9]{6}$/.test(normalizedCode)) throw new ArkmePluginError("phone-code-invalid", "请输入有效的短信验证码", false);
 		const session = await this.runtime.sessionStore.read() ?? await this.runtime.readPendingBindingSession();
 		if (session !== void 0) {
-			const result = numberValue$17((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/verify-bind-phone", {
+			const result = numberValue$18((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/verify-bind-phone", {
 				phone: normalizedPhone,
 				pre: "86",
 				code: normalizedCode,
@@ -2387,7 +2399,7 @@ var AuthService = class {
 			keep_cancel: true
 		}, void 0, [200]);
 		if (data.ok === false) throw new ArkmePluginError("phone-code-rejected", "手机号或验证码错误", false, 401);
-		const userId = numberValue$17(data.user_id);
+		const userId = numberValue$18(data.user_id);
 		const accessToken = stringValue$1(data.access_token);
 		const refreshToken = stringValue$1(data.refresh_token);
 		if (userId <= 0 || accessToken === "" || refreshToken === "") throw new ArkmePluginError("login-contract-invalid", "Arkme手机号登录响应不完整", false, 502);
@@ -2454,19 +2466,19 @@ var SecretValue = class {
 };
 //#endregion
 //#region src/services/bot-service.ts
-function numberValue$16(value) {
+function numberValue$17(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$8(value) {
+function booleanValue$9(value) {
 	return value === true;
 }
-function listValue$17(value) {
+function listValue$18(value) {
 	return Array.isArray(value) ? value : [];
 }
-function encodeOpaqueJson$5(value) {
+function encodeOpaqueJson$6(value) {
 	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
 }
-function decodeOpaqueJson$5(value) {
+function decodeOpaqueJson$6(value) {
 	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
 }
 var BotService = class {
@@ -2501,7 +2513,7 @@ var BotService = class {
 		const session = await this.runtime.requireSession();
 		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/list", {}, session, options.signal);
 		const items = [];
-		for (const value of listValue$17(data.bots)) {
+		for (const value of listValue$18(data.bots)) {
 			const raw = objectValue$1(value);
 			const provider = stringValue$1(raw.provider).trim();
 			if (provider !== "openclaw" && provider !== "webhook") continue;
@@ -2588,19 +2600,19 @@ var BotService = class {
 		const group = await this.openGroupSourceRef(groupSourceRef, session.userId);
 		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/group/list", { subject_uid: group.ownerRef }, session, options.signal);
 		const items = [];
-		for (const value of listValue$17(data.bots)) {
+		for (const value of listValue$18(data.bots)) {
 			const raw = objectValue$1(value);
 			if (stringValue$1(raw.provider).trim() !== "openclaw") continue;
 			const { directChatAvailable: _directChatAvailable, ...summary } = await this.botSummaryFromData(raw, session.userId);
 			items.push({
 				...summary,
-				installed: booleanValue$8(raw.installed)
+				installed: booleanValue$9(raw.installed)
 			});
 		}
 		return {
 			groupSourceRef,
 			displayName: stringValue$1(data.subject_title).trim() || group.displayName,
-			canAddBots: booleanValue$8(data.can_current_user_add_bots),
+			canAddBots: booleanValue$9(data.can_current_user_add_bots),
 			items
 		};
 	}
@@ -2653,7 +2665,7 @@ var BotService = class {
 		};
 	}
 	async sealBotRef(userId, botId) {
-		const payload = encodeOpaqueJson$5({
+		const payload = encodeOpaqueJson$6({
 			version: 1,
 			userId,
 			botId
@@ -2669,13 +2681,13 @@ var BotService = class {
 		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("bot-ref-invalid", "Bot 引用无效", false);
 		let raw;
 		try {
-			raw = objectValue$1(decodeOpaqueJson$5(payload));
+			raw = objectValue$1(decodeOpaqueJson$6(payload));
 		} catch (error) {
 			throw new ArkmePluginError("bot-ref-invalid", "Bot 引用无效", false, 400, { cause: error });
 		}
 		const reference = {
 			version: 1,
-			userId: numberValue$16(raw.userId),
+			userId: numberValue$17(raw.userId),
 			botId: stringValue$1(raw.botId).trim()
 		};
 		if (raw.version !== 1 || reference.userId !== expectedUserId || reference.botId === "") throw new ArkmePluginError("bot-ref-invalid", "Bot 引用与当前账号不匹配", false, 403);
@@ -2683,6 +2695,181 @@ var BotService = class {
 	}
 };
 //#endregion
+//#region src/services/calendar-service.ts
+const MAX_CALENDAR_RANGE_DAYS = 62;
+const MAX_DAY_RECORD_LIMIT = 50;
+function numberValue$16(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function booleanValue$8(value) {
+	if (typeof value === "boolean") return value;
+	if (typeof value === "number") return value !== 0;
+}
+function listValue$17(value) {
+	return Array.isArray(value) ? value : [];
+}
+function readCalendarDate(value, field) {
+	const normalized = value.trim();
+	const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(normalized);
+	if (match === null) throw new ArkmePluginError("calendar-date-invalid", `${field} 必须是 YYYY-MM-DD`, false);
+	const year = Number(match[1]);
+	const month = Number(match[2]);
+	const day = Number(match[3]);
+	const date = new Date(Date.UTC(year, month - 1, day));
+	if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day) throw new ArkmePluginError("calendar-date-invalid", `${field} 必须是真实日期`, false);
+	return normalized;
+}
+function calendarDayNumber(date) {
+	const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(date);
+	if (match === null) throw new ArkmePluginError("calendar-date-invalid", "日期格式无效", false);
+	const year = Number(match[1]);
+	const month = Number(match[2]);
+	const day = Number(match[3]);
+	return Math.trunc(Date.UTC(year, month - 1, day) / 864e5);
+}
+function readTimezone(value) {
+	const normalized = value?.trim() || Intl.DateTimeFormat().resolvedOptions().timeZone || "local";
+	if (normalized.length > 80) throw new ArkmePluginError("calendar-timezone-invalid", "timezone 无效", false);
+	return normalized;
+}
+function boundedLimit(value) {
+	const limit = Math.trunc(value ?? 20);
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_DAY_RECORD_LIMIT) throw new ArkmePluginError("calendar-limit-invalid", `limit 必须是 1-${MAX_DAY_RECORD_LIMIT} 的整数`, false);
+	return limit;
+}
+function contentAccessState(value) {
+	const code = Math.trunc(numberValue$16(value));
+	if (code === 1) return "available";
+	if (code === 2) return "protected";
+	return "unknown";
+}
+function sourceKind(raw) {
+	const topic = objectValue$1(raw.topic_core);
+	const chat = objectValue$1(raw.chat_core);
+	if (stringValue$1(topic.topic_uid).trim() !== "") return "topic";
+	if (stringValue$1(chat.chat_session_uid).trim() !== "") return "chat";
+	if (booleanValue$8(raw.is_uncategorized) === true) return "self";
+	return "unknown";
+}
+var CalendarService = class {
+	runtime;
+	constructor(runtime) {
+		this.runtime = runtime;
+	}
+	async bucketPage(options) {
+		const startDate = readCalendarDate(options.startDate, "start_date");
+		const endDate = readCalendarDate(options.endDate, "end_date");
+		const startDay = calendarDayNumber(startDate);
+		const endDay = calendarDayNumber(endDate);
+		if (startDay > endDay) throw new ArkmePluginError("calendar-range-invalid", "start_date 不能晚于 end_date", false);
+		if (endDay - startDay + 1 > MAX_CALENDAR_RANGE_DAYS) throw new ArkmePluginError("calendar-range-too-wide", `日历范围最多查询 ${MAX_CALENDAR_RANGE_DAYS} 天`, false);
+		const timezone = readTimezone(options.timezone);
+		const session = await this.runtime.requireSession();
+		const data = await this.runtime.authenticatedCalendarPost("/api/v1/calendar/buckets/query", {
+			bucket_scope_kind: 1,
+			bucket_scope_uid: "",
+			start_date: startDate,
+			end_date: endDate,
+			timezone
+		}, session, options.signal, {
+			key: `calendar:buckets:self:${startDate}:${endDate}:${timezone}`,
+			cacheMs: 3e4,
+			failureCooldownMs: 2e3
+		});
+		return {
+			scope: "self",
+			startDate,
+			endDate,
+			timezone: stringValue$1(data.timezone).trim() || timezone,
+			refreshedAtMillis: Date.now(),
+			days: listValue$17(data.daily_data).map((raw) => this.bucketDay(raw)).filter((day) => day !== void 0)
+		};
+	}
+	async dayRecords(options) {
+		const bucketDate = readCalendarDate(options.bucketDate, "bucket_date");
+		const timezone = readTimezone(options.timezone);
+		const limit = boundedLimit(options.limit);
+		const cursorSendAt = Math.trunc(options.cursor?.sendAtMillis ?? 0);
+		const cursorRecordUid = options.cursor?.recordUid.trim() ?? "";
+		const session = await this.runtime.requireSession();
+		const data = await this.runtime.authenticatedCalendarPost("/api/v1/calendar/records/query", {
+			bucket_scope_kind: 1,
+			bucket_scope_uid: "",
+			bucket_date: bucketDate,
+			timezone,
+			limit,
+			...cursorSendAt > 0 && cursorRecordUid !== "" ? {
+				cursor_send_at: cursorSendAt,
+				cursor_record_uid: cursorRecordUid
+			} : {}
+		}, session, options.signal, {
+			key: `calendar:records:self:${bucketDate}:${timezone}:${String(limit)}:${String(cursorSendAt)}:${cursorRecordUid}`,
+			cacheMs: 1e4,
+			failureCooldownMs: 2e3
+		});
+		const nextSendAt = Math.trunc(numberValue$16(data.next_cursor_send_at));
+		const nextUid = stringValue$1(data.next_cursor_record_uid).trim();
+		return {
+			scope: "self",
+			bucketDate,
+			timezone: stringValue$1(data.timezone).trim() || timezone,
+			refreshedAtMillis: Date.now(),
+			items: listValue$17(data.items).map((raw) => this.dayRecord(raw)).filter((item) => item !== void 0),
+			hasMore: data.has_more === true,
+			...nextSendAt > 0 && nextUid !== "" ? { nextCursor: {
+				sendAtMillis: nextSendAt,
+				recordUid: nextUid
+			} } : {}
+		};
+	}
+	bucketDay(raw) {
+		const item = objectValue$1(raw);
+		const bucketDate = stringValue$1(item.bucket_date).trim();
+		if (bucketDate === "") return void 0;
+		const count = Math.max(0, Math.trunc(numberValue$16(item.count)));
+		return {
+			bucketDate,
+			count,
+			protectedCount: Math.max(0, Math.trunc(numberValue$16(item.protected_count))),
+			hasRecords: count > 0,
+			...numberValue$16(item.first_send_at) > 0 ? { firstSendAtMillis: Math.trunc(numberValue$16(item.first_send_at)) } : {}
+		};
+	}
+	dayRecord(raw) {
+		const item = objectValue$1(raw);
+		const core = objectValue$1(item.record_core);
+		const recordUid = stringValue$1(item.record_uid ?? core.record_uid).trim();
+		const sendAtMillis = Math.trunc(numberValue$16(item.send_at ?? core.send_at));
+		if (recordUid === "" || sendAtMillis <= 0) return void 0;
+		const accessState = contentAccessState(core.content_access_state);
+		const available = accessState === "available";
+		const title = available ? clippedText(core.title, 500) : "";
+		const textContent = available ? clippedText(core.text_content, 4e3) : "";
+		const preview = title || clippedText(textContent, 160) || (available ? "无文字内容" : "受保护内容");
+		const topic = objectValue$1(item.topic_core);
+		const isUncategorized = booleanValue$8(item.is_uncategorized);
+		const hasManualEdit = booleanValue$8(core.has_manual_edit);
+		const hasPolish = booleanValue$8(core.has_polish);
+		return {
+			recordUid,
+			sendAtMillis,
+			accessState,
+			title,
+			textContent,
+			preview,
+			...stringValue$1(topic.title).trim() === "" ? {} : { topicTitle: stringValue$1(topic.title).trim() },
+			sourceKind: sourceKind(item),
+			creationSource: Math.trunc(numberValue$16(core.creation_source)),
+			templateKind: Math.trunc(numberValue$16(core.template_kind)),
+			displayKind: Math.trunc(numberValue$16(core.display_kind)),
+			protected: accessState === "protected",
+			...isUncategorized === void 0 ? {} : { isUncategorized },
+			...hasManualEdit === void 0 ? {} : { hasManualEdit },
+			...hasPolish === void 0 ? {} : { hasPolish }
+		};
+	}
+};
+//#endregion
 //#region src/chat-realtime.ts
 const ARKME_CHAT_SSE_PATH = "/api/v1/sse/chat/noty";
 const DEFAULT_CONNECT_TIMEOUT_MS = 15e3;
@@ -2690,7 +2877,7 @@ const DEFAULT_INACTIVITY_TIMEOUT_MS = 75e3;
 const DEFAULT_LEASE_DURATION_MS = 57e4;
 const DEFAULT_IDLE_POLL_MS = 2e3;
 const DEFAULT_RETRY_BASE_MS = 1e3;
-const DEFAULT_MAX_RETRY_MS = 6e4;
+const DEFAULT_MAX_RETRY_MS = 15e3;
 const DEFAULT_STABLE_CONNECTION_MS = 3e4;
 const MAX_SEEN_EVENTS = 256;
 var ArkmeChatRealtimeAuthError = class extends Error {};
@@ -2771,11 +2958,14 @@ var ArkmeChatRealtimeRuntime = class {
 	now;
 	rootController;
 	connectionController;
+	waitController;
 	loop;
 	revision = 0;
 	connected = false;
 	lastAcceptedAccessToken;
 	lastConnectionLifetimeMs = 0;
+	connectionGeneration = 0;
+	forceReconnectRequested = false;
 	lastEventAtMillis;
 	seenEventUids = /* @__PURE__ */ new Set();
 	listeners = /* @__PURE__ */ new Set();
@@ -2812,14 +3002,19 @@ var ArkmeChatRealtimeRuntime = class {
 	stop() {
 		this.rootController?.abort();
 		this.connectionController?.abort();
+		this.waitController?.abort();
 	}
 	reconnect() {
+		if (this.loop === void 0) return;
+		this.forceReconnectRequested = true;
 		this.connectionController?.abort();
+		this.waitController?.abort();
 	}
 	state() {
 		return {
 			revision: this.revision,
 			connected: this.connected,
+			connectionGeneration: this.connectionGeneration,
 			...this.lastEventAtMillis === void 0 ? {} : { lastEventAtMillis: this.lastEventAtMillis }
 		};
 	}
@@ -2841,16 +3036,17 @@ var ArkmeChatRealtimeRuntime = class {
 			if (session === void 0) {
 				this.connected = false;
 				blockedAccessToken = void 0;
-				await waitFor(this.idlePollMs, signal);
+				await this.wait(this.idlePollMs, signal);
 				continue;
 			}
 			if (blockedAccessToken === session.accessToken) {
 				this.connected = false;
-				await waitFor(this.idlePollMs, signal);
+				await this.wait(this.idlePollMs, signal);
 				continue;
 			}
 			blockedAccessToken = void 0;
 			let stableConnection = false;
+			this.options.diagnostic?.("reconnect_attempt", { connectionGeneration: this.connectionGeneration + 1 });
 			try {
 				await this.consume(session, signal);
 				stableConnection = this.lastConnectionLifetimeMs >= this.stableConnectionMs;
@@ -2865,7 +3061,7 @@ var ArkmeChatRealtimeRuntime = class {
 					if (refreshedButUnacceptedToken === session.accessToken) {
 						blockedAccessToken = session.accessToken;
 						refreshedButUnacceptedToken = void 0;
-						await waitFor(this.idlePollMs, signal);
+						await this.wait(this.idlePollMs, signal);
 						continue;
 					}
 					let refreshed;
@@ -2876,17 +3072,24 @@ var ArkmeChatRealtimeRuntime = class {
 					}
 					if (refreshed !== void 0 && refreshed.accessToken !== session.accessToken) {
 						refreshedButUnacceptedToken = refreshed.accessToken;
+						this.forceReconnectRequested = false;
 						retryMs = this.retryBaseMs;
 						continue;
 					}
 					blockedAccessToken = session.accessToken;
-					await waitFor(this.idlePollMs, signal);
+					await this.wait(this.idlePollMs, signal);
 					continue;
 				}
 			} finally {
+				if (this.connected && !signal.aborted) this.options.diagnostic?.("sse_disconnected", { connectionGeneration: this.connectionGeneration });
 				this.connected = false;
 			}
-			await waitFor(Math.max(1, Math.round(retryMs * (.8 + this.random() * .4))), signal);
+			if (this.forceReconnectRequested) {
+				this.forceReconnectRequested = false;
+				retryMs = this.retryBaseMs;
+				continue;
+			}
+			await this.wait(this.jitteredDelay(retryMs), signal);
 			if (!stableConnection) retryMs = Math.min(this.maxRetryMs, Math.max(this.retryBaseMs, retryMs * 2));
 		}
 	}
@@ -2922,6 +3125,7 @@ var ArkmeChatRealtimeRuntime = class {
 			acceptedAtMillis = this.now();
 			this.connected = true;
 			this.lastAcceptedAccessToken = session.accessToken;
+			this.connectionGeneration += 1;
 			this.advanceRevision("reconcile");
 			leaseTimer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("chat SSE lease rotation")), this.leaseDurationMs);
 			const reader = response.body.getReader();
@@ -2946,6 +3150,25 @@ var ArkmeChatRealtimeRuntime = class {
 			if (this.connectionController === controller) this.connectionController = void 0;
 		}
 	}
+	jitteredDelay(milliseconds) {
+		const random = Math.min(1, Math.max(0, this.random()));
+		return Math.max(0, Math.round(milliseconds * (.8 + random * .4)));
+	}
+	async wait(milliseconds, rootSignal) {
+		if (rootSignal.aborted) return;
+		const controller = new AbortController();
+		const abortFromRoot = () => {
+			controller.abort(rootSignal.reason);
+		};
+		rootSignal.addEventListener("abort", abortFromRoot, { once: true });
+		this.waitController = controller;
+		try {
+			await waitFor(milliseconds, controller.signal);
+		} finally {
+			rootSignal.removeEventListener("abort", abortFromRoot);
+			if (this.waitController === controller) this.waitController = void 0;
+		}
+	}
 	acceptLine(line) {
 		const event = decodeArkmeChatReceiveDataLine(line);
 		if (event === void 0 || this.seenEventUids.has(event.eventUid)) return;
@@ -2984,11 +3207,15 @@ var ChatRealtimeService = class {
 	projectionReader;
 	chatRealtime;
 	chatClientListeners = /* @__PURE__ */ new Set();
-	pendingProjectionSequences = /* @__PURE__ */ new Map();
+	pendingChatProjections = /* @__PURE__ */ new Map();
 	projectionRetryCounts = /* @__PURE__ */ new Map();
 	projectionTimer;
 	projectionInFlight = false;
 	projectionFailureCount = 0;
+	notificationBaselineGeneration = 0;
+	notificationBaselineSequences = /* @__PURE__ */ new Map();
+	notificationBaselineRetryTimer;
+	notificationBaselineRetryCount = 0;
 	chatClientRevision = 0;
 	constructor(runtime, source, projectionReader) {
 		this.runtime = runtime;
@@ -3005,7 +3232,10 @@ var ChatRealtimeService = class {
 					return;
 				}
 			},
-			fetchImpl: runtime.fetchImpl
+			fetchImpl: runtime.fetchImpl,
+			diagnostic: (event, details) => {
+				console.info(`dsh-arkme: ${event}`, details);
+			}
 		});
 	}
 	reconnect() {
@@ -3013,9 +3243,13 @@ var ChatRealtimeService = class {
 	}
 	dispose() {
 		if (this.projectionTimer !== void 0) clearTimeout(this.projectionTimer);
+		if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
 		this.projectionTimer = void 0;
-		this.pendingProjectionSequences.clear();
+		this.notificationBaselineRetryTimer = void 0;
+		this.pendingChatProjections.clear();
 		this.projectionRetryCounts.clear();
+		this.notificationBaselineSequences.clear();
+		this.notificationBaselineGeneration = 0;
 		this.chatClientListeners.clear();
 	}
 	startChatRealtime() {
@@ -3027,9 +3261,13 @@ var ChatRealtimeService = class {
 			unsubscribe();
 			stop();
 			if (this.projectionTimer !== void 0) clearTimeout(this.projectionTimer);
+			if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
 			this.projectionTimer = void 0;
-			this.pendingProjectionSequences.clear();
+			this.notificationBaselineRetryTimer = void 0;
+			this.pendingChatProjections.clear();
 			this.projectionRetryCounts.clear();
+			this.notificationBaselineSequences.clear();
+			this.notificationBaselineGeneration = 0;
 		};
 	}
 	chatRealtimeState() {
@@ -3047,26 +3285,93 @@ var ChatRealtimeService = class {
 			type: "reconcile",
 			revision: this.chatClientRevision,
 			connected: state.connected,
+			connectionGeneration: state.connectionGeneration,
 			refresh: "if-stale"
 		};
 	}
 	handleChatRealtimeNotice(notice) {
 		if (notice.cause === "reconcile") {
+			const generation = notice.state.connectionGeneration;
+			this.notificationBaselineGeneration = 0;
+			this.notificationBaselineSequences.clear();
+			this.notificationBaselineRetryCount = 0;
+			if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
+			this.notificationBaselineRetryTimer = void 0;
 			this.emitChatClientEvent({
 				type: "reconcile",
 				revision: this.nextChatClientRevision(),
 				connected: notice.state.connected,
+				connectionGeneration: generation,
 				refresh: "none"
 			});
+			this.reconcileChatNotificationBaseline(generation);
 			return;
 		}
-		if (notice.cause === "hint" && notice.hint !== void 0) this.scheduleChatSessionProjection(notice.hint.chatSessionUid, notice.hint.latestSequence);
+		if (notice.cause === "hint" && notice.hint !== void 0) this.scheduleChatSessionProjection(notice.hint.chatSessionUid, notice.hint.latestSequence, {
+			hint: notice.hint,
+			connectionGeneration: notice.state.connectionGeneration,
+			attempts: 0
+		});
 	}
-	scheduleChatSessionProjection(chatSessionUid, latestSequence) {
+	async reconcileChatNotificationBaseline(connectionGeneration) {
+		try {
+			const session = await this.runtime.requireSession();
+			const sequences = /* @__PURE__ */ new Map();
+			let cursor;
+			for (let pageIndex = 0; pageIndex < 10; pageIndex += 1) {
+				const page = await this.source.listSources("root", {
+					limit: 50,
+					refresh: true,
+					...cursor === void 0 ? {} : { cursor }
+				});
+				for (const item of page.items) {
+					if (item.kind !== "private_chat" && item.kind !== "group_chat") continue;
+					const source = await this.source.openSourceRef(item.sourceRef, session.userId);
+					sequences.set(source.ownerRef, item.latestSequence ?? 0);
+				}
+				if (!page.hasMore || page.nextCursor === void 0) break;
+				cursor = page.nextCursor;
+			}
+			const state = this.chatRealtime.state();
+			if (!state.connected || state.connectionGeneration !== connectionGeneration) return;
+			this.notificationBaselineSequences.clear();
+			for (const [uid, sequence] of sequences) this.notificationBaselineSequences.set(uid, sequence);
+			this.notificationBaselineGeneration = connectionGeneration;
+			this.notificationBaselineRetryCount = 0;
+			console.info("dsh-arkme: reconcile_completed", {
+				connectionGeneration,
+				sessionCount: sequences.size
+			});
+			if (this.pendingChatProjections.size > 0 && this.projectionTimer === void 0 && !this.projectionInFlight) this.projectionTimer = setTimeout(() => {
+				this.projectionTimer = void 0;
+				this.flushChatSessionProjections();
+			}, 0);
+		} catch (error) {
+			const state = this.chatRealtime.state();
+			if (!state.connected || state.connectionGeneration !== connectionGeneration) return;
+			this.notificationBaselineRetryCount += 1;
+			const delay = Math.min(15e3, 1e3 * 2 ** Math.min(4, this.notificationBaselineRetryCount - 1));
+			console.warn("dsh-arkme: Chat reconnect reconciliation failed:", safeFailureMessage$6(error));
+			this.notificationBaselineRetryTimer = setTimeout(() => {
+				this.notificationBaselineRetryTimer = void 0;
+				this.reconcileChatNotificationBaseline(connectionGeneration);
+			}, delay);
+		}
+	}
+	scheduleChatSessionProjection(chatSessionUid, latestSequence, notificationHint) {
 		const uid = chatSessionUid.trim();
 		if (uid === "") return;
-		if (latestSequence > (this.pendingProjectionSequences.get(uid) ?? 0)) this.projectionRetryCounts.delete(uid);
-		this.pendingProjectionSequences.set(uid, Math.max(latestSequence, this.pendingProjectionSequences.get(uid) ?? 0));
+		const current = this.pendingChatProjections.get(uid);
+		if (latestSequence > (current?.latestSequence ?? 0)) this.projectionRetryCounts.delete(uid);
+		const notificationHints = current === void 0 ? [] : [...current.notificationHints];
+		if (notificationHint !== void 0 && !notificationHints.some((item) => item.hint.eventUid === notificationHint.hint.eventUid)) {
+			notificationHints.push(notificationHint);
+			if (notificationHints.length > 256) notificationHints.splice(0, notificationHints.length - 256);
+		}
+		this.pendingChatProjections.set(uid, {
+			latestSequence: Math.max(latestSequence, current?.latestSequence ?? 0),
+			notificationHints
+		});
 		if (this.projectionTimer !== void 0 || this.projectionInFlight) return;
 		this.projectionTimer = setTimeout(() => {
 			this.projectionTimer = void 0;
@@ -3074,10 +3379,10 @@ var ChatRealtimeService = class {
 		}, 200);
 	}
 	async flushChatSessionProjections() {
-		if (this.projectionInFlight || this.pendingProjectionSequences.size === 0) return;
+		if (this.projectionInFlight || this.pendingChatProjections.size === 0) return;
 		this.projectionInFlight = true;
-		const pending = [...this.pendingProjectionSequences.entries()].slice(0, 50);
-		for (const [uid] of pending) this.pendingProjectionSequences.delete(uid);
+		const pending = [...this.pendingChatProjections.entries()].slice(0, 50);
+		for (const [uid] of pending) this.pendingChatProjections.delete(uid);
 		try {
 			const failed = await this.refreshChatSessionProjectionBatch(pending);
 			for (const [uid] of pending) if (!failed.some(([failedUid]) => failedUid === uid)) this.projectionRetryCounts.delete(uid);
@@ -3092,7 +3397,7 @@ var ChatRealtimeService = class {
 			this.requeueProjectionFailures(pending);
 		} finally {
 			this.projectionInFlight = false;
-			if (this.pendingProjectionSequences.size > 0 && this.projectionTimer === void 0) {
+			if (this.pendingChatProjections.size > 0 && this.projectionTimer === void 0) {
 				const retryDelayBase = this.projectionFailureCount === 0 ? 200 : Math.min(5e3, 500 * 2 ** Math.min(3, this.projectionFailureCount - 1));
 				const retryDelay = Math.max(100, Math.round(retryDelayBase * (.8 + Math.random() * .4)));
 				this.projectionTimer = setTimeout(() => {
@@ -3103,7 +3408,7 @@ var ChatRealtimeService = class {
 		}
 	}
 	requeueProjectionFailures(failed) {
-		for (const [uid, sequence] of failed) {
+		for (const [uid, projection] of failed) {
 			const retries = (this.projectionRetryCounts.get(uid) ?? 0) + 1;
 			if (retries > MAX_PROJECTION_RETRIES) {
 				this.projectionRetryCounts.delete(uid);
@@ -3111,9 +3416,25 @@ var ChatRealtimeService = class {
 				continue;
 			}
 			this.projectionRetryCounts.set(uid, retries);
-			this.pendingProjectionSequences.set(uid, Math.max(sequence, this.pendingProjectionSequences.get(uid) ?? 0));
+			this.mergePendingChatProjection(uid, projection);
 		}
 	}
+	mergePendingChatProjection(uid, incoming) {
+		const current = this.pendingChatProjections.get(uid);
+		if (current === void 0) {
+			this.pendingChatProjections.set(uid, {
+				latestSequence: incoming.latestSequence,
+				notificationHints: [...incoming.notificationHints]
+			});
+			return;
+		}
+		const byEventUid = new Map(current.notificationHints.map((item) => [item.hint.eventUid, item]));
+		for (const item of incoming.notificationHints) byEventUid.set(item.hint.eventUid, item);
+		this.pendingChatProjections.set(uid, {
+			latestSequence: Math.max(current.latestSequence, incoming.latestSequence),
+			notificationHints: [...byEventUid.values()].slice(-256)
+		});
+	}
 	async refreshChatSessionProjectionBatch(pending) {
 		const session = await this.runtime.requireSession();
 		const sessionUids = pending.map(([uid]) => uid).sort();
@@ -3130,16 +3451,19 @@ var ChatRealtimeService = class {
 		const failedUids = /* @__PURE__ */ new Set();
 		for (let offset = 0; offset < pending.length; offset += 3) {
 			const chunk = pending.slice(offset, offset + 3);
-			(await Promise.allSettled(chunk.map(async ([uid, hintedSequence]) => {
+			(await Promise.allSettled(chunk.map(async ([uid, projection]) => {
 				const cached = this.source.cachedChatSourceByKey(`${String(session.userId)}:${uid}`);
-				const afterSequence = Math.max(0, cached?.latestSequence ?? hintedSequence - 1);
+				const firstHintSequence = projection.notificationHints.reduce((minimum, item) => Math.min(minimum, item.hint.latestSequence), projection.latestSequence);
+				const requiredAfterSequence = Math.max(0, firstHintSequence - 1);
+				const afterSequence = Math.max(0, Math.min(cached?.latestSequence ?? requiredAfterSequence, requiredAfterSequence));
+				const notificationAttempt = projection.notificationHints.reduce((maximum, item) => Math.max(maximum, item.attempts), 0);
 				const data = await this.runtime.authenticatedChatPost("/api/v1/chat/timeline/tail", {
 					chat_session_uid: uid,
 					after_seq: afterSequence,
 					limit: 50
 				}, session, void 0, {
 					lane: "background-read",
-					key: `projection:tail:${uid}:${String(afterSequence)}`
+					key: `projection:tail:${uid}:${String(afterSequence)}:${String(notificationAttempt)}`
 				});
 				return [uid, await this.projectionReader.chatTimelineItems(data, session)];
 			}))).forEach((result, index) => {
@@ -3150,7 +3474,8 @@ var ChatRealtimeService = class {
 			});
 		}
 		const updates = [];
-		for (const [uid] of pending) {
+		const notifications = [];
+		for (const [uid, projection] of pending) {
 			const bundle = bundles.get(uid);
 			if (bundle === void 0 || failedUids.has(uid)) {
 				failedUids.add(uid);
@@ -3161,11 +3486,47 @@ var ChatRealtimeService = class {
 			try {
 				const source = await this.source.chatSourceFromBundle(bundle, session, this.source.cachedChatSourceByKey(cacheKey), timelineItems);
 				this.source.setChatSourceByKey(cacheKey, source);
+				const sourceKey = source.sourceKey ?? await this.source.chatDirectorySourceKey(session.userId, uid);
 				updates.push({
-					sourceKey: source.sourceKey ?? await this.source.chatDirectorySourceKey(session.userId, uid),
+					sourceKey,
 					source,
 					timelineItems
 				});
+				if (source.kind === "private_chat" || source.kind === "group_chat") for (const candidate of projection.notificationHints.sort((left, right) => left.hint.latestSequence - right.hint.latestSequence)) {
+					const state = this.chatRealtime.state();
+					if (candidate.connectionGeneration !== state.connectionGeneration) continue;
+					if (this.notificationBaselineGeneration !== candidate.connectionGeneration) {
+						this.mergePendingChatProjection(uid, {
+							latestSequence: projection.latestSequence,
+							notificationHints: [candidate]
+						});
+						continue;
+					}
+					const baselineSequence = this.notificationBaselineSequences.get(uid) ?? 0;
+					if (candidate.hint.latestSequence <= baselineSequence || candidate.hint.senderUserId === session.userId || source.isMuted === true) continue;
+					const message = timelineItems.find((item) => item.sequence === candidate.hint.latestSequence && !item.isMe);
+					if (message === void 0) {
+						if (candidate.attempts < 4) this.mergePendingChatProjection(uid, {
+							latestSequence: projection.latestSequence,
+							notificationHints: [{
+								...candidate,
+								attempts: candidate.attempts + 1
+							}]
+						});
+						else console.warn("dsh-arkme: Chat notification message was not projected:", candidate.hint.eventUid);
+						continue;
+					}
+					const preview = message.textContent.trim() || "非文本内容";
+					notifications.push({
+						eventUid: candidate.hint.eventUid,
+						sourceRef: source.sourceRef,
+						sourceKey,
+						sourceKind: source.kind,
+						title: source.displayName,
+						body: source.kind === "group_chat" ? `${message.senderName}：${preview}` : preview,
+						eventAtMillis: candidate.hint.eventAtMillis
+					});
+				}
 			} catch {
 				failedUids.add(uid);
 			}
@@ -3178,6 +3539,11 @@ var ChatRealtimeService = class {
 				updates
 			});
 		}
+		for (const notification of notifications) this.emitChatClientEvent({
+			type: "message-notification",
+			revision: this.nextChatClientRevision(),
+			notification
+		});
 		return pending.filter(([uid]) => failedUids.has(uid));
 	}
 	emitChatClientEvent(event) {
@@ -3242,10 +3608,10 @@ function timelineAgentSource(relation, record, payload) {
 		label: agentSourceLabel(displayName)
 	};
 }
-function encodeOpaqueJson$4(value) {
+function encodeOpaqueJson$5(value) {
 	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
 }
-function decodeOpaqueJson$4(value) {
+function decodeOpaqueJson$5(value) {
 	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
 }
 var ChatService = class {
@@ -3872,7 +4238,7 @@ var ChatService = class {
 		};
 	}
 	sealMessageRef(userId, chatSessionUid, relationUid, signingKey) {
-		const payload = encodeOpaqueJson$4({
+		const payload = encodeOpaqueJson$5({
 			version: 1,
 			userId,
 			chatSessionUid,
@@ -3889,7 +4255,7 @@ var ChatService = class {
 		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("message-ref-invalid", "Arkme 消息引用无效", false);
 		let parsed;
 		try {
-			parsed = objectValue$1(decodeOpaqueJson$4(payload));
+			parsed = objectValue$1(decodeOpaqueJson$5(payload));
 		} catch (error) {
 			throw new ArkmePluginError("message-ref-invalid", "Arkme 消息引用无效", false, 400, { cause: error });
 		}
@@ -4664,6 +5030,12 @@ function numberValue$12(value) {
 function listValue$12(value) {
 	return Array.isArray(value) ? value : [];
 }
+function encodeOpaqueJson$4(value) {
+	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
+}
+function decodeOpaqueJson$4(value) {
+	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+}
 function chatMessageDnd$1(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
 	const policy = value;
@@ -4685,10 +5057,304 @@ var GroupService = class {
 	runtime;
 	source;
 	profile;
-	constructor(runtime, source, profile) {
+	inviteSender;
+	constructor(runtime, source, profile, inviteSender) {
 		this.runtime = runtime;
 		this.source = source;
 		this.profile = profile;
+		this.inviteSender = inviteSender;
+	}
+	async groupInvitePreview(sourceRef, signal) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持邀请群聊协作者", false);
+		const preview = objectValue$1((await this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, signal)).preview);
+		const inviteLink = stringValue$1(preview.invite_link).trim();
+		if (inviteLink === "") throw new ArkmePluginError("group-invite-unavailable", "邀请链接生成失败，请重试", true);
+		return {
+			source: await this.source.sourceItem(source),
+			title: stringValue$1(preview.title).trim() || source.displayName,
+			inviterDisplayName: stringValue$1(preview.creator_display_name).trim() || "Arkme",
+			inviteLink,
+			expireAtMillis: numberValue$12(preview.expire_at),
+			mode: numberValue$12(preview.join_mode) === 2 ? "approval_invite" : "direct_add"
+		};
+	}
+	async listGroupMemberCandidates(sourceRef, options = {}) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持向群聊添加成员", false);
+		const limit = Math.min(50, Math.max(1, Math.trunc(options.limit ?? 20)));
+		const query = options.query?.trim().toLocaleLowerCase() ?? "";
+		const requestedGroupSourceRefs = [...new Set((options.groupSourceRefs ?? []).map((value) => value.trim()).filter((value) => value !== ""))].slice(0, 20);
+		const [membersData, directoryData, inviteData] = await Promise.all([
+			this.runtime.authenticatedChatPost("/api/v1/chats/members/list", {
+				chat_session_uid: source.ownerRef,
+				active_only: true
+			}, session, options.signal).catch(() => ({})),
+			this.runtime.authenticatedChatPost("/api/v1/chats/list", { limit: 50 }, session, options.signal),
+			this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, options.signal).catch(() => ({}))
+		]);
+		const directoryBundles = listValue$12(directoryData.items);
+		const privateBundles = directoryBundles.filter((raw) => {
+			const kind = numberValue$12(objectValue$1(objectValue$1(raw).session).session_kind);
+			return kind === 1 || kind === 3;
+		});
+		const privateTopicIds = privateBundles.map((raw) => {
+			const chatSession = objectValue$1(objectValue$1(raw).session);
+			return numberValue$12(chatSession.shared_topic_id ?? chatSession.subject_id);
+		}).filter((value) => Number.isSafeInteger(value) && value > 0);
+		const partnerData = privateTopicIds.length === 0 ? {} : await this.runtime.authenticatedSubjectPost("/api/v1/private/get-partner-info-v2", { rm_subject_ids: [...new Set(privateTopicIds)] }, session, options.signal).catch(() => ({}));
+		const contactByTopicId = /* @__PURE__ */ new Map();
+		for (const raw of listValue$12(partnerData.item_ls)) {
+			const item = objectValue$1(raw);
+			const topicId = numberValue$12(item.rm_subject_id ?? item.shared_topic_id);
+			if (topicId > 0 && typeof item.is_contact === "boolean") contactByTopicId.set(topicId, item.is_contact);
+		}
+		const existingMemberUserIds = new Set(listValue$12(objectValue$1(membersData).items).map((item) => numberValue$12(objectValue$1(item).user_id)));
+		const rawCandidates = /* @__PURE__ */ new Map();
+		for (const raw of privateBundles) {
+			const bundle = objectValue$1(raw);
+			const chatSession = objectValue$1(bundle.session);
+			if (numberValue$12(chatSession.session_kind) !== 1 && numberValue$12(chatSession.session_kind) !== 3) continue;
+			const counterpart = objectValue$1(bundle.private_counterpart);
+			const supplement = objectValue$1(bundle.private_supplement);
+			const targetUserId = numberValue$12(counterpart.user_id);
+			const privateChatSessionUid = stringValue$1(chatSession.chat_session_uid).trim();
+			const displayName = stringValue$1(supplement.remark ?? supplement.counterpart_name_snapshot ?? counterpart.display_name_snapshot ?? supplement.pending_name ?? counterpart.visible_phone).trim();
+			const privateTopicId = numberValue$12(chatSession.shared_topic_id ?? chatSession.subject_id);
+			const contactState = numberValue$12(supplement.contact_state);
+			const relation = contactByTopicId.get(privateTopicId) === true || contactState === 1 || contactState === 3 ? "contact" : "stranger";
+			if (!Number.isSafeInteger(targetUserId) || targetUserId <= 0 || targetUserId === session.userId || privateChatSessionUid === "" || displayName === "" || query !== "" && !displayName.toLocaleLowerCase().includes(query)) continue;
+			rawCandidates.set(targetUserId, {
+				targetUserId,
+				displayName,
+				privateChatSessionUid,
+				relation,
+				origin: "private_chat"
+			});
+		}
+		const selected = [...rawCandidates.entries()].slice(0, limit);
+		const sourceByGroupUid = /* @__PURE__ */ new Map();
+		const groupSessionUidByIndex = /* @__PURE__ */ new Map();
+		const groups = [];
+		for (const raw of directoryBundles) {
+			const bundle = objectValue$1(raw);
+			const chatSession = objectValue$1(bundle.session);
+			if (numberValue$12(chatSession.session_kind) !== 2) continue;
+			const groupSessionUid = stringValue$1(chatSession.chat_session_uid).trim();
+			if (groupSessionUid === "" || groupSessionUid === source.ownerRef) continue;
+			const displayName = stringValue$1(chatSession.title ?? chatSession.subject_title ?? objectValue$1(bundle.participant_summary).display_name).trim();
+			const groupItem = {
+				sourceRef: await this.source.sealSourceRef(session.userId, "group_chat", groupSessionUid, displayName || "群聊"),
+				sourceKey: await this.source.chatDirectorySourceKey(session.userId, groupSessionUid),
+				kind: "group_chat",
+				displayName: displayName || "群聊",
+				activeAtMillis: numberValue$12(chatSession.updated_at),
+				unreadCount: 0
+			};
+			const groupIndex = groups.push(groupItem) - 1;
+			groupSessionUidByIndex.set(groupIndex, groupSessionUid);
+			sourceByGroupUid.set(groupSessionUid, groupItem);
+			this.source.setChatSource(session.userId, groupSessionUid, groupItem);
+		}
+		try {
+			await this.source.hydrateSourceAvatars(groups, /* @__PURE__ */ new Map(), groupSessionUidByIndex, session, options.signal);
+		} catch {}
+		const requestedGroupSources = [];
+		for (const groupSourceRef of requestedGroupSourceRefs) {
+			const groupSource = await this.source.openSourceRef(groupSourceRef, session.userId);
+			if (groupSource.kind !== "group_chat" || groupSource.ownerRef === source.ownerRef) continue;
+			requestedGroupSources.push(groupSource);
+		}
+		const groupRawByUid = /* @__PURE__ */ new Map();
+		const groupTargetUserIds = /* @__PURE__ */ new Set();
+		for (const groupSource of requestedGroupSources) {
+			const group = sourceByGroupUid.get(groupSource.ownerRef) ?? await this.source.sourceItem(groupSource);
+			try {
+				const groupMembersData = await this.runtime.authenticatedChatPost("/api/v1/chats/members/list", {
+					chat_session_uid: groupSource.ownerRef,
+					active_only: true
+				}, session, options.signal);
+				const raws = [];
+				const seenUserIds = /* @__PURE__ */ new Set();
+				for (const rawMember of listValue$12(groupMembersData.items)) {
+					const member = objectValue$1(rawMember);
+					const targetUserId = numberValue$12(member.user_id);
+					if (!Number.isSafeInteger(targetUserId) || targetUserId <= 0 || targetUserId === session.userId || seenUserIds.has(targetUserId)) continue;
+					if (chatMemberStatus(member.status) !== "active") continue;
+					const privateCandidate = rawCandidates.get(targetUserId);
+					if (privateCandidate !== void 0) {
+						if (query === "" || privateCandidate.displayName.toLocaleLowerCase().includes(query)) {
+							raws.push(privateCandidate);
+							groupTargetUserIds.add(targetUserId);
+							seenUserIds.add(targetUserId);
+						}
+						continue;
+					}
+					const profileName = stringValue$1(member.profile_display_name).trim();
+					const displayName = [
+						stringValue$1(member.remark).trim(),
+						stringValue$1(member.display_name_snapshot).trim(),
+						profileName === `用户 ${String(targetUserId)}` ? "" : profileName,
+						stringValue$1(objectValue$1(member.user_info).nick_name).trim(),
+						String(targetUserId)
+					].find((value) => value !== "" && value !== "成员" && value !== "群成员") ?? "群成员";
+					if (query !== "" && !displayName.toLocaleLowerCase().includes(query)) continue;
+					raws.push({
+						targetUserId,
+						displayName,
+						relation: "group",
+						origin: "group_chat"
+					});
+					groupTargetUserIds.add(targetUserId);
+					seenUserIds.add(targetUserId);
+				}
+				groupRawByUid.set(groupSource.ownerRef, {
+					group,
+					raws: raws.slice(0, limit),
+					total: raws.length
+				});
+			} catch (error) {
+				groupRawByUid.set(groupSource.ownerRef, {
+					group,
+					raws: [],
+					total: 0,
+					error: error instanceof Error && error.message.trim() !== "" ? error.message : "群成员加载失败，请重试"
+				});
+			}
+		}
+		const profiles = await this.profile.publicProfileSummariesByUserIds([.../* @__PURE__ */ new Set([...selected.map(([userId]) => userId), ...groupTargetUserIds])], session, options.signal).catch(() => /* @__PURE__ */ new Map());
+		const preview = objectValue$1(objectValue$1(inviteData).preview);
+		const approvalRequired = numberValue$12(preview.join_mode) === 2;
+		const candidateItem = async (targetUserId, candidate) => {
+			const alreadyMember = existingMemberUserIds.has(targetUserId);
+			const cannotInvite = approvalRequired && candidate.privateChatSessionUid === void 0;
+			return {
+				candidateRef: await this.sealCandidateRef({
+					version: 1,
+					userId: session.userId,
+					groupChatSessionUid: source.ownerRef,
+					targetUserId,
+					origin: candidate.origin,
+					displayName: candidate.displayName,
+					...candidate.privateChatSessionUid === void 0 ? {} : { privateChatSessionUid: candidate.privateChatSessionUid }
+				}),
+				displayName: candidate.displayName,
+				...profiles.get(targetUserId)?.avatarUrl === void 0 ? {} : { avatarRef: await this.profile.sealProfileImageRef(session.userId, targetUserId) },
+				origin: candidate.origin,
+				relation: candidate.relation,
+				...alreadyMember ? {
+					disabled: true,
+					alreadyMember: true
+				} : {},
+				...!alreadyMember && cannotInvite ? {
+					disabled: true,
+					statusText: "无法邀请"
+				} : {}
+			};
+		};
+		const items = await Promise.all(selected.map(async ([targetUserId, candidate]) => candidateItem(targetUserId, candidate)));
+		const groupCandidates = await Promise.all([...groupRawByUid.values()].map(async (value) => ({
+			group: value.group,
+			items: await Promise.all(value.raws.map((raw) => candidateItem(raw.targetUserId, raw))),
+			total: value.total,
+			...value.error === void 0 ? {} : { error: value.error }
+		})));
+		return {
+			source: await this.source.sourceItem(source),
+			items,
+			total: rawCandidates.size,
+			hasMore: rawCandidates.size > items.length,
+			mode: numberValue$12(preview.join_mode) === 2 ? "approval_invite" : "direct_add",
+			groups,
+			groupCandidates,
+			contactCount: [...rawCandidates.values()].filter((item) => item.relation === "contact").length,
+			strangerCount: [...rawCandidates.values()].filter((item) => item.relation === "stranger").length
+		};
+	}
+	async addGroupMembers(sourceRef, candidateRefs, signal) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持向群聊添加成员", false);
+		const refs = candidateRefs.map((value) => value.trim());
+		if (refs.length === 0 || refs.length > 20 || refs.some((value) => value === "") || new Set(refs).size !== refs.length) throw new ArkmePluginError("group-member-candidates-invalid", "请选择 1-20 个不重复的成员候选项", false);
+		const preview = objectValue$1(objectValue$1(await this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, signal)).preview);
+		const approvalRequired = numberValue$12(preview.join_mode) === 2;
+		const inviteLink = stringValue$1(preview.invite_link).trim();
+		const results = [];
+		for (const candidateRef of refs) {
+			let candidate;
+			try {
+				candidate = await this.openCandidateRef(candidateRef, session.userId, source.ownerRef);
+				if (approvalRequired) {
+					if (candidate.privateChatSessionUid === void 0) throw new ArkmePluginError("group-candidate-invite-unavailable", "该对象暂时无法发送群聊邀请", false);
+					if (this.inviteSender === void 0 || inviteLink === "") throw new ArkmePluginError("group-invite-unavailable", "该群需要发送邀请，但邀请链接暂不可用", true);
+					const privateSourceRef = await this.source.sealSourceRef(session.userId, "private_chat", candidate.privateChatSessionUid, candidate.displayName);
+					await this.inviteSender.sendPrivateText(privateSourceRef, candidate.privateChatSessionUid, `邀请你加入群聊“${source.displayName}”：${inviteLink}`, `chat_record_${randomUUID()}`, `chat_rel_${randomUUID()}`, session, signal);
+					results.push({
+						candidateRef,
+						displayName: candidate.displayName,
+						status: "invite_sent"
+					});
+					continue;
+				}
+				const outcome = stringValue$1(objectValue$1((await this.runtime.authenticatedChatPost("/api/v1/chats/members/add", {
+					chat_session_uid: source.ownerRef,
+					target_user_id: candidate.targetUserId,
+					join_at: Date.now(),
+					display_name_snapshot: candidate.displayName,
+					extra: { source: "dsh_arkme_candidate" }
+				}, session, signal)).item).outcome);
+				results.push({
+					candidateRef,
+					displayName: candidate.displayName,
+					status: outcome === "idempotent_hit" ? "already_member" : outcome === "updated" ? "reactivated" : "added"
+				});
+			} catch (error) {
+				results.push({
+					candidateRef,
+					displayName: candidate?.displayName ?? "成员",
+					status: "failed",
+					error: error instanceof Error && error.message.trim() !== "" ? error.message : "添加成员失败"
+				});
+			}
+		}
+		return {
+			source: await this.source.sourceItem(source),
+			results,
+			succeededCount: results.filter((item) => item.status !== "failed").length,
+			failedCount: results.filter((item) => item.status === "failed").length
+		};
+	}
+	async sealCandidateRef(payload) {
+		const encoded = encodeOpaqueJson$4(payload);
+		return `arkme-group-candidate-v1.${encoded}.${createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(encoded).digest("base64url")}`;
+	}
+	async openCandidateRef(candidateRef, expectedUserId, expectedGroupChatSessionUid) {
+		const parts = candidateRef.split(".");
+		if (parts.length !== 3 || parts[0] !== "arkme-group-candidate-v1") throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false);
+		const encoded = parts[1] ?? "";
+		const supplied = Buffer.from(parts[2] ?? "", "base64url");
+		const expected = createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(encoded).digest();
+		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false);
+		let raw;
+		try {
+			raw = objectValue$1(decodeOpaqueJson$4(encoded));
+		} catch (error) {
+			throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false, 400, { cause: error });
+		}
+		const result = {
+			version: 1,
+			userId: numberValue$12(raw.userId),
+			groupChatSessionUid: stringValue$1(raw.groupChatSessionUid).trim(),
+			targetUserId: numberValue$12(raw.targetUserId),
+			displayName: stringValue$1(raw.displayName).trim(),
+			...stringValue$1(raw.privateChatSessionUid).trim() === "" ? {} : { privateChatSessionUid: stringValue$1(raw.privateChatSessionUid).trim() },
+			origin: raw.origin === "group_chat" ? "group_chat" : "private_chat"
+		};
+		if (raw.version !== 1 || result.userId !== expectedUserId || result.groupChatSessionUid !== expectedGroupChatSessionUid || !Number.isSafeInteger(result.targetUserId) || result.targetUserId <= 0 || result.targetUserId === expectedUserId || result.displayName === "") throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用与当前账号不匹配", false, 403);
+		return result;
 	}
 	async listGroupMembers(sourceRef, options = {}) {
 		const session = await this.runtime.requireSession();
@@ -4731,7 +5397,8 @@ var GroupService = class {
 				status,
 				isSelf: userId === session.userId,
 				isOwner: role === "owner",
-				joinedAtMillis: numberValue$12(item.join_at)
+				joinedAtMillis: numberValue$12(item.join_at),
+				recordCount: Math.max(0, Math.trunc(numberValue$12(objectValue$1(item.extra).record_count)))
 			});
 		}
 		const roleRank = (role) => role === "owner" ? 0 : role === "admin" ? 1 : role === "member" ? 2 : 3;
@@ -5174,6 +5841,33 @@ function md5Text(value) {
 function allowedSignedImageHost$2(environment, hostname) {
 	return (environment === "prod" ? ["jotmo-userfiles.oss-cn-hangzhou.aliyuncs.com", "userfiles.jotmo.cc"] : ["jotmo-userfiles-test.oss-cn-hangzhou.aliyuncs.com", "jotmo-userfiles.senguo.me"]).includes(hostname.toLowerCase());
 }
+function allowedSignedAudioHost(environment, hostname) {
+	return (environment === "prod" ? ["jotmo-useraudio.oss-cn-hangzhou.aliyuncs.com"] : ["jotmo-useraudio-test.oss-cn-hangzhou.aliyuncs.com"]).includes(hostname.toLowerCase());
+}
+function trustedWorldVoiceprintAudioUrl(environment, raw) {
+	let parsed;
+	try {
+		parsed = new URL(raw.trim());
+	} catch (error) {
+		throw new ArkmePluginError("world-voiceprint-audio-invalid", "世界声纹音频地址无效", true, 502, { cause: error });
+	}
+	const signature = parsed.searchParams.get("x-oss-signature")?.trim() ?? "";
+	if (parsed.protocol !== "https:" || parsed.username !== "" || parsed.password !== "" || parsed.hash !== "" || !allowedSignedAudioHost(environment, parsed.hostname) || parsed.pathname.replace(/^\/+/, "") === "" || signature === "") throw new ArkmePluginError("world-voiceprint-audio-rejected", "世界声纹音频来源不受信任", false, 502);
+	return parsed;
+}
+function worldVoiceprintFileName(mimeType) {
+	const extension = {
+		wav: "wav",
+		"x-wav": "wav",
+		mpeg: "mp3",
+		mp4: "m4a",
+		aac: "aac",
+		ogg: "ogg",
+		webm: "webm",
+		flac: "flac"
+	}[mimeType.split(";", 1)[0].trim().toLowerCase().replace(/^audio\//, "")];
+	return extension === void 0 ? "世界声纹" : `世界声纹.${extension}`;
+}
 function trustedSignedImageUrl$1(environment, raw) {
 	let parsed;
 	try {
@@ -5234,6 +5928,7 @@ var MediaService = class {
 	worldImages;
 	recordIdentity;
 	mediaRefs = /* @__PURE__ */ new Map();
+	stableMediaRefs = /* @__PURE__ */ new Map();
 	imageCache = /* @__PURE__ */ new Map();
 	imageInFlight = /* @__PURE__ */ new Map();
 	imageCacheBytes = 0;
@@ -5247,6 +5942,7 @@ var MediaService = class {
 	}
 	dispose() {
 		this.mediaRefs.clear();
+		this.stableMediaRefs.clear();
 		this.imageCache.clear();
 		this.imageInFlight.clear();
 		this.imageCacheBytes = 0;
@@ -5353,18 +6049,20 @@ var MediaService = class {
 			throw error;
 		}
 	}
-	async fetchMedia(mediaRef, range) {
+	async fetchMedia(mediaRef, range, signal) {
 		const session = await this.runtime.requireSession();
 		const descriptor = this.mediaRefs.get(mediaRef);
 		if (descriptor === void 0 || descriptor.viewerUserId !== session.userId || descriptor.expiresAtMillis <= Date.now()) {
 			this.mediaRefs.delete(mediaRef);
+			if (descriptor?.stableKey !== void 0) this.stableMediaRefs.delete(descriptor.stableKey);
 			throw new ArkmePluginError("media-ref-invalid", "媒体引用已失效，请刷新对话后重试", false, 404);
 		}
 		const url = new URL(descriptor.remoteUrl);
-		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || !allowedSignedImageHost$2(this.runtime.config.environment, url.hostname)) throw new ArkmePluginError("media-host-rejected", "媒体来源不受信任", false, 403);
+		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || !(allowedSignedImageHost$2(this.runtime.config.environment, url.hostname) || allowedSignedAudioHost(this.runtime.config.environment, url.hostname))) throw new ArkmePluginError("media-host-rejected", "媒体来源不受信任", false, 403);
 		const response = await this.runtime.fetchImpl(url, {
 			headers: range === void 0 ? {} : { Range: range },
-			redirect: "error"
+			redirect: "error",
+			...signal === void 0 ? {} : { signal }
 		});
 		if (!response.ok && response.status !== 206) throw new ArkmePluginError("media-fetch-failed", `媒体读取失败（${String(response.status)}）`, true, 502);
 		return {
@@ -5372,6 +6070,17 @@ var MediaService = class {
 			descriptor
 		};
 	}
+	issueWorldVoiceprintMediaRef(viewerUserId, input) {
+		const remoteUrl = trustedWorldVoiceprintAudioUrl(this.runtime.config.environment, input.remoteUrl).toString();
+		const mimeType = input.mimeType.trim() || "audio/wav";
+		if (!mimeType.startsWith("audio/")) throw new ArkmePluginError("world-voiceprint-mime-invalid", "世界声纹音频格式无效", true, 502);
+		return this.issueMediaRef(viewerUserId, {
+			remoteUrl,
+			mimeType,
+			fileName: worldVoiceprintFileName(mimeType),
+			size: 0
+		});
+	}
 	async readImage(imageRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const maximumBytes = imageRef.trim().startsWith("arkme-profile-image-v1.") ? MAX_ARKME_PROFILE_IMAGE_BYTES : MAX_ARKME_IMAGE_BYTES;
@@ -5434,6 +6143,11 @@ var MediaService = class {
 		}
 	}
 	async readImageUncached(session, imageRef, byteLimit, signal) {
+		if (imageRef.trim().startsWith("arkme-media-v1.")) {
+			const { response, descriptor } = await this.fetchMedia(imageRef.trim(), void 0, signal);
+			if (!descriptor.mimeType.trim().toLowerCase().startsWith("image/")) throw new ArkmePluginError("image-type-unsupported", "该媒体引用不是图片", false, 415);
+			return await this.imageBytesFromResponse(response, byteLimit);
+		}
 		if (imageRef.trim().startsWith("arkme-profile-image-v1.")) {
 			const reference = await this.profile.openProfileImageRef(imageRef, session.userId);
 			if (reference.targetUserId === session.userId) {
@@ -5563,20 +6277,33 @@ var MediaService = class {
 			unavailableRecordUids
 		};
 	}
-	issueMediaRef(viewerUserId, descriptor) {
+	issueImageMediaRef(viewerUserId, descriptor, stableIdentity) {
+		return this.issueMediaRef(viewerUserId, descriptor, stableIdentity);
+	}
+	issueMediaRef(viewerUserId, descriptor, stableIdentity) {
 		const now = Date.now();
-		for (const [key, value] of this.mediaRefs) if (value.expiresAtMillis <= now) this.mediaRefs.delete(key);
+		for (const [key, value] of this.mediaRefs) if (value.expiresAtMillis <= now) {
+			this.mediaRefs.delete(key);
+			if (value.stableKey !== void 0) this.stableMediaRefs.delete(value.stableKey);
+		}
 		while (this.mediaRefs.size >= 2e3) {
 			const oldest = this.mediaRefs.keys().next().value;
 			if (oldest === void 0) break;
+			const oldestDescriptor = this.mediaRefs.get(oldest);
 			this.mediaRefs.delete(oldest);
+			if (oldestDescriptor?.stableKey !== void 0) this.stableMediaRefs.delete(oldestDescriptor.stableKey);
 		}
-		const ref = `arkme-media-v1.${randomUUID()}`;
+		const stableKey = stableIdentity === void 0 ? void 0 : createHash("sha256").update(`${String(viewerUserId)}\0${stableIdentity}`).digest("base64url");
+		const ref = (stableKey === void 0 ? void 0 : this.stableMediaRefs.get(stableKey)) ?? `arkme-media-v1.${randomUUID()}`;
+		this.mediaRefs.delete(ref);
+		const lifetimeMillis = stableKey === void 0 ? 30 * 6e4 : 1440 * 6e4;
 		this.mediaRefs.set(ref, {
 			...descriptor,
 			viewerUserId,
-			expiresAtMillis: now + 30 * 6e4
+			expiresAtMillis: now + lifetimeMillis,
+			...stableKey === void 0 ? {} : { stableKey }
 		});
+		if (stableKey !== void 0) this.stableMediaRefs.set(stableKey, ref);
 		return ref;
 	}
 	richContentBlocks(raw, viewerUserId, hydratedDisplayItems = []) {
@@ -5619,7 +6346,7 @@ var MediaService = class {
 					mimeType,
 					fileName,
 					size: Math.max(0, Math.trunc(numberValue$10(item.size)))
-				}),
+				}, kind === "image" && fileAssetUid !== "" ? fileAssetUid : void 0),
 				...fileAssetUid === "" ? {} : { fileAssetUid },
 				fileName,
 				mimeType,
@@ -5663,36 +6390,7 @@ var MediaService = class {
 				signal: controller.signal
 			});
 			if (!response.ok) throw new ArkmePluginError("image-download-failed", `Arkme 图片读取返回 HTTP ${response.status}`, true, 502);
-			const declaredLength = Number(response.headers.get("content-length") ?? 0);
-			if (Number.isFinite(declaredLength) && declaredLength > byteLimit) throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
-			if (response.body === null) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
-			const chunks = [];
-			let bytes = 0;
-			const reader = response.body.getReader();
-			while (true) {
-				const next = await reader.read();
-				if (next.done) break;
-				bytes += next.value.byteLength;
-				if (bytes > byteLimit) {
-					await reader.cancel();
-					throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
-				}
-				chunks.push(next.value);
-			}
-			if (bytes === 0) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
-			const data = new Uint8Array(bytes);
-			let offset = 0;
-			for (const chunk of chunks) {
-				data.set(chunk, offset);
-				offset += chunk.byteLength;
-			}
-			const mediaType = imageMediaType(data);
-			if (mediaType === void 0) throw new ArkmePluginError("image-type-unsupported", "Arkme 图片不是受支持的 PNG、JPEG、WebP 或 GIF", false, 415);
-			return {
-				mediaType,
-				bytes,
-				data
-			};
+			return await this.imageBytesFromResponse(response, byteLimit);
 		} catch (error) {
 			if (error instanceof ArkmePluginError) throw error;
 			if (error.name === "AbortError") throw new ArkmePluginError("image-download-timeout", "Arkme 图片读取超时或已取消", true, 504, { cause: error });
@@ -5702,6 +6400,38 @@ var MediaService = class {
 			signal?.removeEventListener("abort", abort);
 		}
 	}
+	async imageBytesFromResponse(response, byteLimit) {
+		const declaredLength = Number(response.headers.get("content-length") ?? 0);
+		if (Number.isFinite(declaredLength) && declaredLength > byteLimit) throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
+		if (response.body === null) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
+		const chunks = [];
+		let bytes = 0;
+		const reader = response.body.getReader();
+		while (true) {
+			const next = await reader.read();
+			if (next.done) break;
+			bytes += next.value.byteLength;
+			if (bytes > byteLimit) {
+				await reader.cancel();
+				throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
+			}
+			chunks.push(next.value);
+		}
+		if (bytes === 0) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
+		const data = new Uint8Array(bytes);
+		let offset = 0;
+		for (const chunk of chunks) {
+			data.set(chunk, offset);
+			offset += chunk.byteLength;
+		}
+		const mediaType = imageMediaType(data);
+		if (mediaType === void 0) throw new ArkmePluginError("image-type-unsupported", "Arkme 图片不是受支持的 PNG、JPEG、WebP 或 GIF", false, 415);
+		return {
+			mediaType,
+			bytes,
+			data
+		};
+	}
 };
 //#endregion
 //#region src/services/outgoing-call-service.ts
@@ -7248,9 +7978,11 @@ function listValue$3(value) {
 var SearchService = class {
 	runtime;
 	record;
-	constructor(runtime, record) {
+	media;
+	constructor(runtime, record, media) {
 		this.runtime = runtime;
 		this.record = record;
+		this.media = media;
 	}
 	async searchRecords(options) {
 		const query = options.query.trim();
@@ -7326,6 +8058,85 @@ var SearchService = class {
 		}, session, options.signal);
 		return this.recordSearchResult(data);
 	}
+	/** Build the desktop image library from the mixed image/video scene. */
+	async searchImages(options) {
+		const session = await this.runtime.requireSession();
+		const pageLimit = Math.min(50, Math.max(1, Math.trunc(options.limit)));
+		const seenCursors = /* @__PURE__ */ new Set();
+		let cursor = options.cursor?.trim() ?? "";
+		if (cursor !== "") seenCursors.add(cursor);
+		let lastPage;
+		for (let pageIndex = 0; pageIndex < 8; pageIndex += 1) {
+			const page = await this.searchScene({
+				scene: "image_video",
+				limit: pageLimit,
+				...cursor === "" ? {} : { cursor },
+				...options.signal === void 0 ? {} : { signal: options.signal }
+			});
+			lastPage = page;
+			const candidates = page.items.flatMap((record) => record.media.flatMap((asset) => {
+				const mimeType = asset.mimeType?.trim().toLowerCase() ?? "";
+				return mimeType.startsWith("image/") || mimeType === "" && (asset.fileKind === void 0 || asset.fileKind === 1) ? [{
+					record,
+					asset
+				}] : [];
+			}));
+			const uniqueAssetUids = [...new Set(candidates.map((candidate) => candidate.asset.fileAssetUid))];
+			const displayItems = [];
+			for (let offset = 0; offset < uniqueAssetUids.length; offset += 50) displayItems.push(...await this.media.queryFileAssets(uniqueAssetUids.slice(offset, offset + 50), options.signal));
+			const displayByUid = new Map(displayItems.map((item) => [item.fileAssetUid, item]));
+			const emitted = /* @__PURE__ */ new Set();
+			const items = candidates.flatMap(({ record, asset }) => {
+				const itemIdentity = `${record.recordUid}\0${asset.fileAssetUid}`;
+				if (emitted.has(itemIdentity)) return [];
+				const display = displayByUid.get(asset.fileAssetUid);
+				if (display === void 0) return [];
+				const mimeType = (display.mimeType ?? asset.mimeType ?? "").trim().toLowerCase();
+				if (!mimeType.startsWith("image/")) return [];
+				const remoteUrl = display.previewUrl ?? display.downloadUrl;
+				if (remoteUrl === void 0) return [];
+				emitted.add(itemIdentity);
+				const fileName = display.fileName ?? asset.fileName ?? "图片";
+				return [{
+					itemKey: createHash("sha256").update(itemIdentity).digest("base64url"),
+					mediaRef: this.media.issueImageMediaRef(session.userId, {
+						remoteUrl,
+						mimeType: mimeType || "application/octet-stream",
+						fileName,
+						size: Math.max(0, Math.trunc(asset.size ?? 0))
+					}, asset.fileAssetUid),
+					recordUid: record.recordUid,
+					sendAtMillis: record.sendAtMillis,
+					fileName,
+					mimeType: mimeType || "application/octet-stream",
+					size: Math.max(0, Math.trunc(asset.size ?? 0)),
+					recordTitle: record.title || record.nickname || "快记",
+					...record.sourceTitle === void 0 ? {} : { sourceTitle: record.sourceTitle }
+				}];
+			});
+			const nextCursor = page.nextCursor?.trim() ?? "";
+			const canContinue = page.hasMore && nextCursor !== "" && !seenCursors.has(nextCursor);
+			if (items.length > 0 || !canContinue) return {
+				items,
+				hasMore: canContinue,
+				...canContinue ? { nextCursor } : {},
+				queryGuard: page.queryGuard
+			};
+			if (pageIndex === 7) return {
+				items: [],
+				hasMore: true,
+				nextCursor,
+				queryGuard: page.queryGuard
+			};
+			seenCursors.add(nextCursor);
+			cursor = nextCursor;
+		}
+		return {
+			items: [],
+			hasMore: false,
+			queryGuard: lastPage?.queryGuard ?? { state: "complete" }
+		};
+	}
 	async searchRecordings(options) {
 		const query = options.query.trim();
 		if (query === "") throw new ArkmePluginError("recording-query-empty", "搜索关键词不能为空", false);
@@ -8485,6 +9296,67 @@ var WorldService = class {
 			...hasMore ? { nextOffset } : {}
 		};
 	}
+	async worldVoiceprintPlaybackAvailability(recordRefs, signal) {
+		const session = await this.runtime.requireSession();
+		const normalizedRefs = [...new Set(recordRefs.map((value) => value.trim()).filter((value) => value !== ""))].slice(0, 20);
+		if (normalizedRefs.length === 0) return { items: [] };
+		const entries = normalizedRefs.map((recordRef) => ({
+			recordRef,
+			entry: this.openWorldRecordRef(recordRef, session.userId)
+		}));
+		const ownerUserIds = [...new Set(entries.map((value) => value.entry.ownerUserId ?? 0).filter((userId) => Number.isSafeInteger(userId) && userId > 0))].sort((left, right) => left - right);
+		if (ownerUserIds.length === 0) return { items: entries.map(({ recordRef }) => ({
+			recordRef,
+			playable: false
+		})) };
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/voiceprint/world-playback-availability", { user_ids: ownerUserIds }, session, signal, {
+			key: ownerUserIds.join(","),
+			cacheMs: 5e3
+		});
+		const playableByOwner = /* @__PURE__ */ new Map();
+		for (const raw of listValue(data.items)) {
+			const item = objectValue$1(raw);
+			const userId = Math.trunc(numberValue(item.user_id));
+			if (userId > 0) playableByOwner.set(userId, item.playable === true);
+		}
+		return { items: entries.map(({ recordRef, entry }) => ({
+			recordRef,
+			playable: playableByOwner.get(entry.ownerUserId ?? 0) === true
+		})) };
+	}
+	async generateWorldVoiceprintPlayback(input) {
+		const session = await this.runtime.requireSession();
+		const entry = this.openWorldRecordRef(input.recordRef, session.userId);
+		const chunkIndex = Math.trunc(input.chunkIndex ?? 0);
+		if (!Number.isSafeInteger(chunkIndex) || chunkIndex < 0 || chunkIndex >= 334) throw new ArkmePluginError("world-voiceprint-playback-input-invalid", "世界声纹播放参数无效，请刷新后重试", false);
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/voiceprint/generate-playback", {
+			source_scene: 4,
+			source_id: entry.recordUid,
+			source_chunk_index: chunkIndex
+		}, session, input.signal, {
+			lane: "write",
+			bypassCache: true
+		});
+		const mimeType = stringValue$1(data.mime_type).trim() || "audio/wav";
+		const responseChunkIndex = Math.trunc(numberValue(data.source_chunk_index));
+		const chunkCount = Math.trunc(numberValue(data.source_chunk_count));
+		const chunkStartRune = Math.trunc(numberValue(data.source_chunk_start_rune));
+		const chunkEndRune = Math.trunc(numberValue(data.source_chunk_end_rune));
+		if (responseChunkIndex !== chunkIndex || chunkCount <= 0 || chunkCount > 334 || chunkIndex >= chunkCount || chunkStartRune < 0 || chunkEndRune <= chunkStartRune) throw new ArkmePluginError("world-voiceprint-playback-response-invalid", "世界声纹播放响应无效，请重试", true, 502);
+		return {
+			mediaRef: this.media.issueWorldVoiceprintMediaRef(session.userId, {
+				remoteUrl: stringValue$1(data.audio_url),
+				mimeType
+			}),
+			mimeType,
+			durationMillis: Math.max(0, Math.trunc(numberValue(data.duration_ms))),
+			cacheHit: data.cache_hit === true,
+			chunkIndex: responseChunkIndex,
+			chunkCount,
+			chunkStartRune,
+			chunkEndRune
+		};
+	}
 	async listWorldInteractions(recordRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const root = this.openWorldRecordRef(recordRef, session.userId);
@@ -8695,7 +9567,7 @@ var WorldService = class {
 		}
 		const avatarRef = this.isTrustedWorldImageUrl(avatarUrl) ? await this.sealWorldImageRef(viewerUserId, avatarUrl) : void 0;
 		return {
-			recordRef: await this.worldRecordRef(viewerUserId, recordUid),
+			recordRef: await this.worldRecordRef(viewerUserId, recordUid, ownerUserId),
 			authorName: stringValue$1(item.nick_name ?? item.nickname).trim() || "Arkme用户",
 			...avatarRef === void 0 ? {} : { avatarRef },
 			...avatarRef === void 0 && avatarFallback !== void 0 ? { avatarFallback } : {},
@@ -8778,13 +9650,16 @@ var WorldService = class {
 			voiceCount
 		};
 	}
-	async worldRecordRef(viewerUserId, recordUid) {
+	async worldRecordRef(viewerUserId, recordUid, ownerUserId) {
 		const recordRef = `arkme-world-record-v1.${createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(`world-record-v1:${String(viewerUserId)}:${recordUid}`).digest("base64url")}`;
 		const now = Date.now();
 		this.pruneWorldRecordRefs(now);
+		const previous = this.worldRecordRefs.get(recordRef);
+		const resolvedOwnerUserId = ownerUserId ?? previous?.ownerUserId;
 		this.worldRecordRefs.set(recordRef, {
 			viewerUserId,
 			recordUid,
+			...resolvedOwnerUserId === void 0 || resolvedOwnerUserId <= 0 ? {} : { ownerUserId: resolvedOwnerUserId },
 			expiresAtMillis: now + ARKME_WORLD_RECORD_REF_TTL_MILLIS
 		});
 		return recordRef;
@@ -8877,6 +9752,7 @@ var ArkmeService = class {
 	runtime;
 	aiVideo;
 	arrangement;
+	calendar;
 	wechat;
 	recording;
 	profile;
@@ -8906,6 +9782,7 @@ var ArkmeService = class {
 		this.runtime = new ServiceRuntime(config, sessionStore, stateStore, fetchImpl, pendingSessionStore);
 		this.aiVideo = new AiVideoService(this.runtime);
 		this.arrangement = new ArrangementService(this.runtime);
+		this.calendar = new CalendarService(this.runtime);
 		this.wechat = new WechatService(this.runtime);
 		this.recording = new RecordingService(this.runtime);
 		this.profile = new ProfileService(this.runtime);
@@ -8918,12 +9795,14 @@ var ArkmeService = class {
 			recordItem: (raw) => this.recordItem(raw)
 		});
 		this.record = new RecordService(this.runtime, this.media, this.source);
-		this.search = new SearchService(this.runtime, this.record);
+		this.search = new SearchService(this.runtime, this.record, this.media);
 		this.bot = new BotService(this.runtime, this.source);
 		this.outgoingCall = new OutgoingCallService(this.runtime, this.source, this.profile, outgoingCallBroker);
 		this.world = new WorldService(this.runtime, { refreshProfile: async () => await this.refreshProfile() }, this.media, this.record);
 		this.arko = new ArkoService(this.runtime, this.profile);
-		this.group = new GroupService(this.runtime, this.source, this.profile);
+		this.group = new GroupService(this.runtime, this.source, this.profile, { sendPrivateText: async (sourceRef, chatSessionUid, text, recordUid, relationUid, session, signal) => {
+			await this.chat.sendChatSourceTextRaw(sourceRef, chatSessionUid, text, recordUid, relationUid, session, void 0, void 0, signal);
+		} });
 		this.relatedRecording = new RelatedRecordingService(this.runtime, this.source);
 		this.community = new CommunityService(this.runtime, this.source, this.profile);
 		this.interwoven = new InterwovenService(this.runtime, this.source, this.profile);
@@ -8964,7 +9843,10 @@ var ArkmeService = class {
 		this.realtime.handleChatRealtimeNotice(notice);
 	}
 	async refreshChatSessionProjectionBatch(pending) {
-		return await this.realtime.refreshChatSessionProjectionBatch(pending);
+		return (await this.realtime.refreshChatSessionProjectionBatch(pending.map(([uid, latestSequence]) => [uid, {
+			latestSequence,
+			notificationHints: []
+		}]))).map(([uid, projection]) => [uid, projection.latestSequence]);
 	}
 	attachOpenClawProvisioner(provisioner) {
 		this.bot.attachOpenClawProvisioner(provisioner);
@@ -9023,6 +9905,8 @@ var ArkmeService = class {
 				revisionPolling: true,
 				userProfile: true,
 				imageRead: true,
+				recordCalendar: true,
+				imageLibrary: true,
 				sourceDirectory: true,
 				sourceTimeline: true,
 				sourceTextSend: true,
@@ -9031,6 +9915,7 @@ var ArkmeService = class {
 				fileUpload: this.config.richMediaSendEnabled !== false,
 				outgoingCall: true,
 				groupMembers: true,
+				groupMemberAdd: true,
 				userCard: true,
 				openPrivateChat: true,
 				groupSettings: true,
@@ -9040,6 +9925,7 @@ var ArkmeService = class {
 				extensionPreviews: true,
 				worldFeed: true,
 				worldInteractions: true,
+				worldVoiceprintPlayback: true,
 				arrangements: true,
 				myExtensions: true,
 				extensionPublish: true,
@@ -9246,6 +10132,15 @@ var ArkmeService = class {
 	async listGroupMembers(sourceRef, options = {}) {
 		return await this.group.listGroupMembers(sourceRef, options);
 	}
+	async listGroupMemberCandidates(sourceRef, options = {}) {
+		return await this.group.listGroupMemberCandidates(sourceRef, options);
+	}
+	async groupInvitePreview(sourceRef, signal) {
+		return await this.group.groupInvitePreview(sourceRef, signal);
+	}
+	async addGroupMembers(sourceRef, candidateRefs, signal) {
+		return await this.group.addGroupMembers(sourceRef, candidateRefs, signal);
+	}
 	async groupSettings(sourceRef, signal) {
 		return await this.group.groupSettings(sourceRef, signal);
 	}
@@ -9394,6 +10289,13 @@ var ArkmeService = class {
 	async searchScene(options) {
 		return await this.search.searchScene(options);
 	}
+	/**
+	* Build the desktop image library from the owner's mixed image/video scene.
+	* Signed storage URLs stay inside the Provider and are replaced by account-bound media refs.
+	*/
+	async searchImages(options) {
+		return await this.search.searchImages(options);
+	}
 	async searchRecordings(options) {
 		return await this.search.searchRecordings(options);
 	}
@@ -9406,6 +10308,12 @@ var ArkmeService = class {
 	async list(limit, cursor) {
 		return await this.record.list(limit, cursor);
 	}
+	async calendarBuckets(options) {
+		return await this.calendar.bucketPage(options);
+	}
+	async calendarRecords(options) {
+		return await this.calendar.dayRecords(options);
+	}
 	async listWorldRecords(options = {}) {
 		return await this.world.listWorldRecords(options);
 	}
@@ -9445,6 +10353,12 @@ var ArkmeService = class {
 	async listWorldFeed(options = {}) {
 		return await this.world.listWorldFeed(options);
 	}
+	async worldVoiceprintPlaybackAvailability(recordRefs, signal) {
+		return await this.world.worldVoiceprintPlaybackAvailability(recordRefs, signal);
+	}
+	async generateWorldVoiceprintPlayback(input) {
+		return await this.world.generateWorldVoiceprintPlayback(input);
+	}
 	/** Read the authenticated comment/reply tree behind one account-bound World reference. */
 	async listWorldInteractions(recordRef, options = {}) {
 		return await this.world.listWorldInteractions(recordRef, options);
@@ -9495,6 +10409,8 @@ const ARKME_EXTENSION_FORMAT = "arkme-cordis-extension";
 const ARKME_EXTENSION_MAX_BYTES = 100 * 1024 * 1024;
 const ARKME_EXTENSION_ICON_MAX_BYTES = 2 * 1024 * 1024;
 const ARKME_EXTENSION_PREVIEW_MAX_BYTES = 5 * 1024 * 1024;
+/** Browser/model-safe projection. Host filesystem paths and Dynamic Cordis IDs stay private. */
+const ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE = "插件运行失败，已自动停用。";
 //#endregion
 //#region src/extensions/artifact.ts
 const TAR_BLOCK_BYTES$1 = 512;
@@ -9977,14 +10893,29 @@ function persistentClientFactory(requireModule, spec) {
 			})
 		});
 		const envelope = await response.json();
-		if (!response.ok || envelope.ok !== true) throw new Error(envelope.error?.message ?? `Arkme Host returned HTTP ${String(response.status)}`);
+		if (!response.ok || envelope.ok !== true) {
+			const error = new Error(envelope.error?.message ?? `Arkme Host returned HTTP ${String(response.status)}`);
+			if (envelope.error?.code !== void 0) error.code = envelope.error.code;
+			throw error;
+		}
 		return envelope.value;
 	};
-	const callHost = async (method, args = null) => await callOperation(spec.operation ?? "extensions.persistent.invoke", {
-		...spec.identityKey === "packageName" ? { packageName: spec.extensionId } : { extensionId: spec.extensionId },
-		method,
-		args: jsonValue(args)
-	});
+	let deactivateClient;
+	const callHost = async (method, args = null) => {
+		try {
+			return await callOperation(spec.operation ?? "extensions.persistent.invoke", {
+				...spec.identityKey === "packageName" ? { packageName: spec.extensionId } : {
+					extensionId: spec.extensionId,
+					version: spec.version
+				},
+				method,
+				args: jsonValue(args)
+			});
+		} catch (error) {
+			if (error.code === "extension-runtime-unavailable") deactivateClient?.();
+			throw error;
+		}
+	};
 	const guardedService = (service, name) => new Proxy(service, { get(target, property) {
 		const member = Reflect.get(target, property, target);
 		if (typeof member !== "function") return member;
@@ -10044,8 +10975,10 @@ function persistentClientFactory(requireModule, spec) {
 		name: `arkme-extension-client:${spec.extensionId}`,
 		async apply(ctx) {
 			if (spec.identityKey !== "packageName") {
-				const state = await callOperation("extensions.enabled-state", { extensionId: spec.extensionId });
-				if (state.installed !== true || state.enabled !== true) return;
+				if ((await callOperation("extensions.persistent.client-state", {
+					extensionId: spec.extensionId,
+					version: spec.version
+				})).mount !== true) return;
 			}
 			const styles = new Styles();
 			const traps = {
@@ -10089,7 +11022,16 @@ function persistentClientFactory(requireModule, spec) {
 				}
 			};
 			ctx.effect(() => () => styles.dispose(), `arkme-extension:${spec.extensionId}:styles`);
-			await ctx.plugin(guarded);
+			const fiber = ctx.plugin(guarded);
+			const deactivate = () => {
+				styles.dispose();
+				Promise.resolve(fiber.dispose?.()).catch(() => void 0);
+			};
+			deactivateClient = deactivate;
+			ctx.effect(() => () => {
+				if (deactivateClient === deactivate) deactivateClient = void 0;
+			}, `arkme-extension:${spec.extensionId}:client-fiber`);
+			await fiber;
 		}
 	};
 }
@@ -10125,18 +11067,18 @@ function writeSecure(path, content) {
 	});
 	chmodSync(path, 384);
 }
-function activationText(extensionId, enabled) {
+function activationText(extensionId, enabled, quarantine) {
 	return `${JSON.stringify({
 		schema_version: 1,
 		extension_id: extensionId,
-		enabled
+		enabled,
+		...quarantine === void 0 ? {} : { quarantine }
 	}, void 0, 2)}\n`;
 }
-function writePersistentExtensionActivation(bundleDirectory, extensionId, enabled) {
-	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+function writeActivationState(bundleDirectory, state) {
 	const target = join(bundleDirectory, "activation.json");
 	const temporary = join(bundleDirectory, `.activation.${randomUUID()}.tmp`);
-	writeSecure(temporary, activationText(extensionId, enabled));
+	writeSecure(temporary, activationText(state.extension_id, state.enabled, state.quarantine));
 	try {
 		renameSync(temporary, target);
 		chmodSync(target, 384);
@@ -10145,6 +11087,27 @@ function writePersistentExtensionActivation(bundleDirectory, extensionId, enable
 	}
 	return target;
 }
+function writePersistentExtensionActivation(bundleDirectory, extensionId, enabled) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+	return writeActivationState(bundleDirectory, {
+		schema_version: 1,
+		extension_id: extensionId,
+		enabled
+	});
+}
+function quarantinePersistentExtension(bundleDirectory, extensionId, error, failedAtMillis = Date.now()) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+	return writeActivationState(bundleDirectory, {
+		schema_version: 1,
+		extension_id: extensionId,
+		enabled: false,
+		quarantine: {
+			code: "runtime-load-failed",
+			failed_at_millis: failedAtMillis,
+			message: ((error instanceof Error ? error.message : String(error)).trim() || "persistent extension failed to load").slice(0, 2e3)
+		}
+	});
+}
 function readPersistentExtensionActivation(installationUrl) {
 	const activationUrl = new URL("./activation.json", installationUrl);
 	let value;
@@ -10164,6 +11127,10 @@ function readPersistentExtensionActivation(installationUrl) {
 	if (value === null || typeof value !== "object") throw new Error("Arkme persistent extension activation state is invalid");
 	const state = value;
 	if (state.schema_version !== 1 || typeof state.extension_id !== "string" || typeof state.enabled !== "boolean") throw new Error("Arkme persistent extension activation state is invalid");
+	if (state.quarantine !== void 0) {
+		const quarantine = state.quarantine;
+		if (state.enabled || quarantine.code !== "runtime-load-failed" || !Number.isSafeInteger(quarantine.failed_at_millis) || (quarantine.failed_at_millis ?? 0) < 0 || typeof quarantine.message !== "string" || quarantine.message.trim() === "" || quarantine.message.length > 2e3) throw new Error("Arkme persistent extension quarantine state is invalid");
+	}
 	return state;
 }
 function materializePersistentExtensionBundle(input) {
@@ -10192,7 +11159,8 @@ function materializePersistentExtensionBundle(input) {
 		if (existing !== void 0) if (existing.artifact_sha256 === installation.artifact_sha256 && existing.version === installation.version) {
 			try {
 				const manifest = JSON.parse(readFileSync(join(bundleDirectory, "package.json"), "utf8"));
-				const clientReady = input.clientCode === void 0 || manifest.exports?.["./client"] === "./lib/client.js" && manifest.dsh?.client?.inject?.length === 0 && readFileSync(join(bundleDirectory, "lib", "client.js"), "utf8").includes("extensions.persistent.invoke");
+				const clientBundle = input.clientCode === void 0 ? void 0 : readFileSync(join(bundleDirectory, "lib", "client.js"), "utf8");
+				const clientReady = input.clientCode === void 0 || manifest.exports?.["./client"] === "./lib/client.js" && manifest.dsh?.client?.inject?.length === 0 && clientBundle?.includes("extensions.persistent.invoke") === true && clientBundle.includes("extensions.persistent.client-state");
 				if (manifest.exports?.["."] === "./lib/index.js" && manifest.exports?.["./package.json"] === "./package.json" && clientReady) {
 					if (!existsSync(activationPath)) writeSecure(activationPath, activationText(input.resolution.extension_id, true));
 					return {
@@ -10453,8 +11421,22 @@ async function mountPersistentArkmeHostExtension(installation, registration) {
 		throw error;
 	}
 }
+function quarantineRuntimeFailure(installation, installationUrl, error) {
+	try {
+		quarantinePersistentExtension(dirname(fileURLToPath(installationUrl)), installation.extension_id, error);
+	} catch (quarantineError) {
+		console.error(`[arkme-extension:${installation.extension_id}] failed to persist quarantine state`, quarantineError);
+	}
+	console.error(`[arkme-extension:${installation.extension_id}] disabled after runtime load failure`, error);
+}
 async function applyPersistentArkmeHostExtension(ctx, installationUrl) {
-	const installation = readInstallation(installationUrl);
+	let installation;
+	try {
+		installation = readInstallation(installationUrl);
+	} catch (error) {
+		console.error("[arkme-extension:unknown] ignored invalid persistent installation metadata", error);
+		return;
+	}
 	const previous = persistentRegistrations.get(installation.extension_id);
 	if (previous?.ctx === ctx && previous.installationUrl.href === installationUrl.href) return;
 	if (previous !== void 0) await deactivatePersistentArkmeExtension(installation.extension_id);
@@ -10463,27 +11445,55 @@ async function applyPersistentArkmeHostExtension(ctx, installationUrl) {
 		installationUrl
 	};
 	persistentRegistrations.set(installation.extension_id, registration);
-	ctx.effect(() => () => {
-		if (persistentRegistrations.get(installation.extension_id) !== registration) return;
-		persistentRegistrations.delete(installation.extension_id);
-		persistentHandlers.delete(installation.extension_id);
-	}, `arkme-extension:${installation.extension_id}:registration`);
-	ctx.effect(() => () => {
-		if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
-	}, `arkme-extension:${installation.extension_id}:handlers`);
-	const activation = readPersistentExtensionActivation(installationUrl);
-	if (activation.extension_id !== installation.extension_id) throw new Error("Arkme persistent extension activation identity mismatch");
-	if (!activation.enabled) return;
-	await mountPersistentArkmeHostExtension(installation, registration);
+	try {
+		ctx.effect(() => () => {
+			if (persistentRegistrations.get(installation.extension_id) !== registration) return;
+			persistentRegistrations.delete(installation.extension_id);
+			persistentHandlers.delete(installation.extension_id);
+		}, `arkme-extension:${installation.extension_id}:registration`);
+		ctx.effect(() => () => {
+			if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
+		}, `arkme-extension:${installation.extension_id}:handlers`);
+		const activation = readPersistentExtensionActivation(installationUrl);
+		if (activation.extension_id !== installation.extension_id) throw new Error("Arkme persistent extension activation identity mismatch");
+		if (!activation.enabled) return;
+		await mountPersistentArkmeHostExtension(installation, registration);
+	} catch (error) {
+		if (persistentRegistrations.get(installation.extension_id) === registration) {
+			persistentRegistrations.delete(installation.extension_id);
+			if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
+			if (persistentClientActivations.get(installation.extension_id) === registration.clientActivation) persistentClientActivations.delete(installation.extension_id);
+		}
+		quarantineRuntimeFailure(installation, installationUrl, error);
+	}
 }
 function persistentArkmeExtensionActive(extensionId) {
 	return persistentRegistrations.get(extensionId)?.fiber !== void 0 || persistentClientActivations.has(extensionId);
 }
+function persistentArkmeExtensionRuntimeState(extensionId) {
+	const registration = persistentRegistrations.get(extensionId);
+	if (registration === void 0) return void 0;
+	try {
+		return {
+			version: readInstallation(registration.installationUrl).version,
+			installationUrl: registration.installationUrl.href,
+			active: registration.fiber !== void 0 || registration.clientActivation !== void 0
+		};
+	} catch {
+		return;
+	}
+}
 /** Re-mount a verified Host half when its wrapper is already present in the current DSH process. */
 async function activatePersistentArkmeExtension(extensionId) {
 	const registration = persistentRegistrations.get(extensionId);
 	if (registration === void 0) return false;
-	return await mountPersistentArkmeHostExtension(readInstallation(registration.installationUrl), registration);
+	const installation = readInstallation(registration.installationUrl);
+	try {
+		return await mountPersistentArkmeHostExtension(installation, registration);
+	} catch (error) {
+		quarantineRuntimeFailure(installation, registration.installationUrl, error);
+		throw error;
+	}
 }
 async function deactivatePersistentArkmeExtension(extensionId) {
 	const registration = persistentRegistrations.get(extensionId);
@@ -10503,4 +11513,4 @@ async function invokePersistentArkmeExtension(extensionId, method, args) {
 	return jsonValue(await handler(jsonValue(args)));
 }
 //#endregion
-export { ArkmeService as A, canonicalExtensionJson as C, ARKME_EXTENSION_ICON_MAX_BYTES as D, ARKME_EXTENSION_FORMAT as E, ArkmePluginError as M, ArkmeOutgoingCallError as N, ARKME_EXTENSION_MAX_BYTES as O, assertExtensionArtifactSize as S, unpackArkmeExtension as T, inspectBundleArtifact as _, persistentArkmeExtensionActive as a, readLocalBundleTarball as b, renderArkmeBundleClientBundle as c, ARKME_BUNDLE_ARTIFACT_KIND as d, ARKME_BUNDLE_MAX_BYTES as f, canonicalBundleJson as g, bundleSha256 as h, invokePersistentArkmeExtension as i, ARKME_PROVIDER_CONTRACT_VERSION as j, ARKME_EXTENSION_PREVIEW_MAX_BYTES as k, verifyBundleResolutionSignature as l, arkmeSandboxEntryId as m, applyPersistentArkmeHostExtension as n, materializePersistentExtensionBundle as o, ArkmeBundleArtifactError as p, deactivatePersistentArkmeExtension as r, writePersistentExtensionActivation as s, activatePersistentArkmeExtension as t, verifyExtensionResolutionSignature as u, packBundleFiles as v, sha256Hex as w, renderArkmeSandboxHostEntry as x, packLocalBundleDirectory as y };
+export { ARKME_EXTENSION_MAX_BYTES as A, renderArkmeSandboxHostEntry as C, unpackArkmeExtension as D, sha256Hex as E, ArkmePluginError as F, ArkmeOutgoingCallError as I, ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE as M, ArkmeService as N, ARKME_EXTENSION_FORMAT as O, ARKME_PROVIDER_CONTRACT_VERSION as P, readLocalBundleTarball as S, canonicalExtensionJson as T, bundleSha256 as _, persistentArkmeExtensionActive as a, packBundleFiles as b, readPersistentExtensionActivation as c, verifyBundleResolutionSignature as d, verifyExtensionResolutionSignature as f, arkmeSandboxEntryId as g, ArkmeBundleArtifactError as h, invokePersistentArkmeExtension as i, ARKME_EXTENSION_PREVIEW_MAX_BYTES as j, ARKME_EXTENSION_ICON_MAX_BYTES as k, writePersistentExtensionActivation as l, ARKME_BUNDLE_MAX_BYTES as m, applyPersistentArkmeHostExtension as n, persistentArkmeExtensionRuntimeState as o, ARKME_BUNDLE_ARTIFACT_KIND as p, deactivatePersistentArkmeExtension as r, materializePersistentExtensionBundle as s, activatePersistentArkmeExtension as t, renderArkmeBundleClientBundle as u, canonicalBundleJson as v, assertExtensionArtifactSize as w, packLocalBundleDirectory as x, inspectBundleArtifact as y };