@senguoyun/dsh-arkme 0.1.11 → 0.1.13

package/lib/{persistent-runtime-DInn3Zb1.js → persistent-runtime-Cki0XC3L.js}

@@ -1,12 +1,13 @@
 import { chmodSync, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, createHmac, createPublicKey, randomUUID, timingSafeEqual, verify } from "node:crypto";
 import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
 import { open } from "node:fs/promises";
 import OSS from "ali-oss";
+import { gunzipSync, gzipSync } from "node:zlib";
 import { createContext, runInContext } from "node:vm";
 import { Context } from "@deepseek-ai/cordis";
 import { defineTool } from "@deepseek-ai/dsh-tools";
-import { gunzipSync, gzipSync } from "node:zlib";
 import { parseDocument } from "yaml";
 //#region src/outgoing-call-contract.ts
 var ArkmeOutgoingCallError = class extends Error {
@@ -957,6 +958,17 @@ var ServiceRuntime = class {
 			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0], signal, false, requestOptions());
 		}
 	}
+	async authenticatedCalendarPost(path, body, initialSession, signal, options = {}) {
+		let session = initialSession ?? await this.requireSession();
+		const requestOptions = () => this.authenticatedRequestOptions(session, "record", "interactive-read", options);
+		try {
+			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0, 200], signal, false, requestOptions());
+		} catch (error) {
+			if (!(error instanceof ArkmePluginError) || !["auth-http-401", "auth-http-403"].includes(error.code)) throw error;
+			session = await this.refreshAccessToken(session);
+			return await this.post(this.config.recordBaseUrl, path, body, session.accessToken, [0, 200], signal, false, requestOptions());
+		}
+	}
 	async authenticatedAuthPost(path, body, initialSession, signal, options = {}) {
 		let session = initialSession ?? await this.requireSession();
 		const requestOptions = () => this.authenticatedRequestOptions(session, "auth", "write", options);
@@ -1060,7 +1072,7 @@ var ServiceRuntime = class {
 	}
 	async extensionPost(path, body, signal, options = {}) {
 		const baseUrl = this.config.extensionPublishBaseUrl?.trim() ?? "";
-		if (baseUrl === "") throw new ArkmePluginError("extension-service-disabled", "扩展市场服务尚未配置", false, 503);
+		if (baseUrl === "") throw new ArkmePluginError("extension-service-disabled", "市集服务尚未配置", false, 503);
 		let session = await this.requireSession();
 		const requestOptions = () => ({
 			...options,
@@ -1079,13 +1091,13 @@ var ServiceRuntime = class {
 };
 //#endregion
 //#region src/services/ai-video-service.ts
-function numberValue$20(value) {
+function numberValue$22(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$11(value) {
+function booleanValue$13(value) {
 	return value === true;
 }
-function listValue$20(value) {
+function listValue$21(value) {
 	return Array.isArray(value) ? value : [];
 }
 var AiVideoService = class {
@@ -1097,12 +1109,12 @@ var AiVideoService = class {
 		const session = await this.runtime.requireSession();
 		const data = await this.runtime.authenticatedIntelligentPost("/api/v1/ai-comic-video/preflight", this.aiVideoSelectionBody(sessionId, segments), session, signal);
 		return {
-			allowed: booleanValue$11(data.allowed),
+			allowed: booleanValue$13(data.allowed),
 			message: stringValue$1(data.message).trim() || "AI 视频内容检查已完成",
-			selectedDurationMillis: Math.max(0, numberValue$20(data.selected_duration_millis)),
-			minimumDurationMillis: Math.max(0, numberValue$20(data.minimum_duration_millis)),
-			selectedSegmentCount: Math.max(0, numberValue$20(data.selected_segment_count)),
-			retryable: booleanValue$11(data.retryable),
+			selectedDurationMillis: Math.max(0, numberValue$22(data.selected_duration_millis)),
+			minimumDurationMillis: Math.max(0, numberValue$22(data.minimum_duration_millis)),
+			selectedSegmentCount: Math.max(0, numberValue$22(data.selected_segment_count)),
+			retryable: booleanValue$13(data.retryable),
 			...stringValue$1(data.reason_code).trim() === "" ? {} : { reasonCode: stringValue$1(data.reason_code).trim() },
 			...stringValue$1(data.proof).trim() === "" ? {} : { proof: stringValue$1(data.proof).trim() }
 		};
@@ -1137,8 +1149,8 @@ var AiVideoService = class {
 			...options.statuses === void 0 || options.statuses.length === 0 ? {} : { statuses: options.statuses }
 		}, session, options.signal);
 		return {
-			items: listValue$20(data.items).map((raw) => this.aiVideoListItem(raw)).filter((item) => item !== void 0),
-			hasMore: booleanValue$11(data.has_more),
+			items: listValue$21(data.items).map((raw) => this.aiVideoListItem(raw)).filter((item) => item !== void 0),
+			hasMore: booleanValue$13(data.has_more),
 			...stringValue$1(data.next_cursor).trim() === "" ? {} : { nextCursor: stringValue$1(data.next_cursor).trim() }
 		};
 	}
@@ -1149,13 +1161,13 @@ var AiVideoService = class {
 			texts
 		}, session, signal);
 		return {
-			allowed: booleanValue$11(data.allowed),
+			allowed: booleanValue$13(data.allowed),
 			message: stringValue$1(data.message).trim() || "AI 视频内容检查已完成",
-			selectedDurationMillis: Math.max(0, numberValue$20(data.selected_duration_millis)),
-			minimumDurationMillis: Math.max(0, numberValue$20(data.minimum_duration_millis)),
-			selectedSegmentCount: Math.max(0, numberValue$20(data.selected_segment_count)),
-			selectedTextCount: Math.max(0, numberValue$20(data.selected_text_count)),
-			retryable: booleanValue$11(data.retryable),
+			selectedDurationMillis: Math.max(0, numberValue$22(data.selected_duration_millis)),
+			minimumDurationMillis: Math.max(0, numberValue$22(data.minimum_duration_millis)),
+			selectedSegmentCount: Math.max(0, numberValue$22(data.selected_segment_count)),
+			selectedTextCount: Math.max(0, numberValue$22(data.selected_text_count)),
+			retryable: booleanValue$13(data.retryable),
 			...stringValue$1(data.reason_code).trim() === "" ? {} : { reasonCode: stringValue$1(data.reason_code).trim() },
 			...stringValue$1(data.proof).trim() === "" ? {} : { proof: stringValue$1(data.proof).trim() }
 		};
@@ -1194,19 +1206,19 @@ var AiVideoService = class {
 			"canceled"
 		])).has(status)) throw new ArkmePluginError("ai-video-contract-invalid", "AI 视频服务返回了无效任务信息", true, 502);
 		const selection = objectValue$1(data.selection);
-		const segmentCount = listValue$20(selection.segments).length;
-		const textCount = listValue$20(selection.texts).length;
+		const segmentCount = listValue$21(selection.segments).length;
+		const textCount = listValue$21(selection.texts).length;
 		return {
 			jobId,
 			status,
 			stage: stringValue$1(data.stage).trim() || status,
-			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$20(data.progress)))),
+			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$22(data.progress)))),
 			selectedSegmentCount: segmentCount,
 			...textCount === 0 ? {} : { selectedTextCount: textCount },
-			retryable: booleanValue$11(data.retryable),
+			retryable: booleanValue$13(data.retryable),
 			...stringValue$1(data.video_asset_uid).trim() === "" ? {} : { videoAssetUid: stringValue$1(data.video_asset_uid).trim() },
 			...stringValue$1(data.cover_asset_uid).trim() === "" ? {} : { coverAssetUid: stringValue$1(data.cover_asset_uid).trim() },
-			...numberValue$20(data.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$20(data.video_duration_millis) },
+			...numberValue$22(data.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$22(data.video_duration_millis) },
 			...stringValue$1(data.error_code).trim() === "" ? {} : { errorCode: stringValue$1(data.error_code).trim() },
 			...stringValue$1(data.error_message).trim() === "" ? {} : { errorMessage: stringValue$1(data.error_message).trim() },
 			...stringValue$1(data.failure_stage).trim() === "" ? {} : { failureStage: stringValue$1(data.failure_stage).trim() }
@@ -1229,17 +1241,17 @@ var AiVideoService = class {
 			sessionId: stringValue$1(item.session_id).trim(),
 			status,
 			stage: stringValue$1(item.stage).trim() || status,
-			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$20(item.progress)))),
+			progress: Math.min(100, Math.max(0, Math.trunc(numberValue$22(item.progress)))),
 			title: stringValue$1(source.title).trim() || "长录音 AI 视频",
-			sourceStartedAtMillis: numberValue$20(source.started_at),
-			selectedDurationMillis: Math.max(0, numberValue$20(source.selected_duration_millis)),
-			selectedSegmentCount: Math.max(0, Math.trunc(numberValue$20(item.selected_segment_count))),
-			retryable: booleanValue$11(item.retryable),
-			createdAtMillis: numberValue$20(item.created_at),
-			updatedAtMillis: numberValue$20(item.updated_at),
+			sourceStartedAtMillis: numberValue$22(source.started_at),
+			selectedDurationMillis: Math.max(0, numberValue$22(source.selected_duration_millis)),
+			selectedSegmentCount: Math.max(0, Math.trunc(numberValue$22(item.selected_segment_count))),
+			retryable: booleanValue$13(item.retryable),
+			createdAtMillis: numberValue$22(item.created_at),
+			updatedAtMillis: numberValue$22(item.updated_at),
 			...stringValue$1(item.cover_asset_uid).trim() === "" ? {} : { coverAssetUid: stringValue$1(item.cover_asset_uid).trim() },
 			...stringValue$1(item.video_asset_uid).trim() === "" ? {} : { videoAssetUid: stringValue$1(item.video_asset_uid).trim() },
-			...numberValue$20(item.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$20(item.video_duration_millis) },
+			...numberValue$22(item.video_duration_millis) <= 0 ? {} : { videoDurationMillis: numberValue$22(item.video_duration_millis) },
 			...stringValue$1(item.error_code).trim() === "" ? {} : { errorCode: stringValue$1(item.error_code).trim() },
 			...stringValue$1(item.error_message).trim() === "" ? {} : { errorMessage: clippedText(item.error_message, 500) }
 		};
@@ -1265,13 +1277,13 @@ const ARKO_RUN_STATUSES = /* @__PURE__ */ new Set([
 	"expired"
 ]);
 const ARKO_PROFILE_DISPLAY_NAME_CACHE_TTL_MS = 10 * 6e4;
-function numberValue$19(value) {
+function numberValue$21(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$10(value) {
+function booleanValue$12(value) {
 	return value === true;
 }
-function listValue$19(value) {
+function listValue$20(value) {
 	return Array.isArray(value) ? value : [];
 }
 function optionalString$3(value) {
@@ -1300,7 +1312,7 @@ function joinUrlWithQuery(baseUrl, path, query) {
 }
 function arkoProfileFromData(data) {
 	const displayName = stringValue$1(data.display_name).trim();
-	const version = numberValue$19(data.version);
+	const version = numberValue$21(data.version);
 	if (displayName === "" || !Number.isSafeInteger(version) || version < 0) throw new ArkmePluginError("arko-profile-contract-invalid", "Arko 资料响应不完整", true, 502);
 	return {
 		displayName,
@@ -1324,15 +1336,15 @@ function arkoModelOptionFromData(value) {
 		displayName,
 		provider,
 		description,
-		recommended: booleanValue$10(data.recommended),
-		selected: booleanValue$10(data.selected)
+		recommended: booleanValue$12(data.recommended),
+		selected: booleanValue$12(data.selected)
 	};
 }
 function arkoModelCatalogFromData(data) {
 	const defaultRouteKey = arkoModelRouteKey(data.default_route_key);
 	const effectiveRouteKey = arkoModelRouteKey(data.effective_route_key);
 	const selectionSource = stringValue$1(data.selection_source);
-	const options = listValue$19(data.items).map(arkoModelOptionFromData);
+	const options = listValue$20(data.items).map(arkoModelOptionFromData);
 	const routeKeys = new Set(options.map((option) => option.routeKey));
 	const selected = options.filter((option) => option.selected);
 	if (selectionSource !== "default" && selectionSource !== "personal" || options.length === 0 || options.length > 16 || routeKeys.size !== options.length || !routeKeys.has(defaultRouteKey) || !routeKeys.has(effectiveRouteKey) || selected.length !== 1 || selected[0]?.routeKey !== effectiveRouteKey) throw new ArkmePluginError("arko-model-contract-invalid", "Arko 模型目录响应无效", true, 502);
@@ -1353,12 +1365,12 @@ function parsedJsonRecord(value) {
 }
 function arkoHistoryItemFromData(value) {
 	const data = objectValue$1(value);
-	const messageId = numberValue$19(data.id ?? data.msg_id ?? data.msgId);
-	const sessionId = numberValue$19(data.session_id ?? data.sessionId);
-	const roleCode = numberValue$19(data.role ?? data.sender_role ?? data.senderRole);
+	const messageId = numberValue$21(data.id ?? data.msg_id ?? data.msgId);
+	const sessionId = numberValue$21(data.session_id ?? data.sessionId);
+	const roleCode = numberValue$21(data.role ?? data.sender_role ?? data.senderRole);
 	if (!Number.isSafeInteger(messageId) || messageId <= 0 || !Number.isSafeInteger(sessionId) || sessionId <= 0 || roleCode !== 2 && roleCode !== 3) return void 0;
 	const extra = parsedJsonRecord(data.extra ?? data.metadata ?? data.meta);
-	const createdAt = numberValue$19(data.created_at ?? data.create_at ?? data.createdAt ?? data.createAt);
+	const createdAt = numberValue$21(data.created_at ?? data.create_at ?? data.createdAt ?? data.createAt);
 	const runUid = optionalString$3(extra.agent_run_uid);
 	const runStatus = optionalString$3(extra.agent_run_status);
 	const retryable = optionalBooleanValue$1(extra.agent_run_retryable);
@@ -1371,7 +1383,7 @@ function arkoHistoryItemFromData(value) {
 		text: stringValue$1(data.content ?? data.text_content ?? data.textContent),
 		reasoning: stringValue$1(data.reason_content ?? data.reason_text ?? data.reasonText),
 		createdAtMillis: createdAt > 0 && createdAt < 1e11 ? createdAt * 1e3 : createdAt,
-		status: numberValue$19(data.status ?? data.msg_status),
+		status: numberValue$21(data.status ?? data.msg_status),
 		...runUid === void 0 ? {} : { runUid },
 		...runStatus === void 0 ? {} : { runStatus },
 		...retryable === void 0 ? {} : { retryable },
@@ -1390,14 +1402,14 @@ function arkoRunProjectionFromData(data) {
 	return {
 		runUid,
 		status,
-		retryable: booleanValue$10(data.agent_run_retryable ?? data.retryable),
+		retryable: booleanValue$12(data.agent_run_retryable ?? data.retryable),
 		...errorCode === "" ? {} : { errorCode },
 		...retryOfRunUid === "" ? {} : { retryOfRunUid },
 		...clientAction === void 0 ? {} : { clientAction }
 	};
 }
 function arkoCreatedRecordUids(value) {
-	return listValue$19(value).map((item) => stringValue$1(item).trim()).filter((item) => item !== "");
+	return listValue$20(value).map((item) => stringValue$1(item).trim()).filter((item) => item !== "");
 }
 function arkoStreamFrame(raw) {
 	try {
@@ -1426,7 +1438,7 @@ var ArkoService = class {
 	async arkoEnsureSession(signal) {
 		const session = await this.runtime.requireSession();
 		const latest = await this.runtime.authenticatedIntelligentPost("/api/v1/qa/latest-session", { type: ARKO_AGENT_DIRECT_SESSION_TYPE }, session, signal);
-		const latestSessionId = numberValue$19(latest.id);
+		const latestSessionId = numberValue$21(latest.id);
 		if (Number.isSafeInteger(latestSessionId) && latestSessionId > 0) return {
 			sessionId: latestSessionId,
 			created: false,
@@ -1436,7 +1448,7 @@ var ArkoService = class {
 	}
 	async arkoCreateSession(signal) {
 		const session = await this.runtime.requireSession();
-		const createdSessionId = numberValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-session", {
+		const createdSessionId = numberValue$21((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-session", {
 			name: ARKO_DEFAULT_SESSION_NAME,
 			type: ARKO_AGENT_DIRECT_SESSION_TYPE
 		}, session, signal)).session_id);
@@ -1461,7 +1473,7 @@ var ArkoService = class {
 		const normalizedLimit = Math.min(ARKO_HISTORY_PAGE_LIMIT, Math.max(1, Math.trunc(limit)));
 		const normalizedOffset = Math.max(0, Math.trunc(offset));
 		const session = await this.runtime.requireSession();
-		const rawItems = listValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/message-list", {
+		const rawItems = listValue$20((await this.runtime.authenticatedIntelligentPost("/api/v1/qa/message-list", {
 			limit: normalizedLimit,
 			offset: normalizedOffset,
 			session_type: ARKO_AGENT_DIRECT_SESSION_TYPE
@@ -1504,9 +1516,9 @@ var ArkoService = class {
 		};
 		if (modelRouteKey !== "") body.model_route_key = modelRouteKey;
 		const accepted = await this.runtime.authenticatedIntelligentPost("/api/v1/qa/new-msg-v2", body, session, options.signal);
-		const userMsgId = numberValue$19(accepted.user_msg_id);
-		const assistantMsgId = numberValue$19(accepted.assistant_msg_id);
-		const acceptedSessionId = numberValue$19(accepted.session_id) || sessionId;
+		const userMsgId = numberValue$21(accepted.user_msg_id);
+		const assistantMsgId = numberValue$21(accepted.assistant_msg_id);
+		const acceptedSessionId = numberValue$21(accepted.session_id) || sessionId;
 		if (!Number.isSafeInteger(acceptedSessionId) || acceptedSessionId <= 0 || !Number.isSafeInteger(userMsgId) || userMsgId <= 0 || !Number.isSafeInteger(assistantMsgId) || assistantMsgId <= 0) throw new ArkmePluginError("arko-ask-contract-invalid", "Arko 消息响应不完整", true, 502);
 		const runUid = stringValue$1(accepted.run_uid).trim();
 		if (runUid === "") throw new ArkmePluginError("arko-ask-contract-invalid", "Arko 消息响应缺少运行标识", true, 502);
@@ -1542,8 +1554,8 @@ var ArkoService = class {
 		}, session, signal);
 		const status = stringValue$1(data.status).trim();
 		const normalizedRunUid = stringValue$1(data.run_uid).trim() || runUid.trim();
-		const sequence = numberValue$19(data.sequence);
-		const surfaceAssistantMsgId = numberValue$19(data.surface_assistant_msg_id);
+		const sequence = numberValue$21(data.sequence);
+		const surfaceAssistantMsgId = numberValue$21(data.surface_assistant_msg_id);
 		const clientAction = optionalRecord(data.client_action);
 		if (normalizedRunUid !== runUid.trim() || !ARKO_RUN_STATUSES.has(status) || !Number.isSafeInteger(sequence) || sequence < 0 || !Number.isSafeInteger(surfaceAssistantMsgId) || surfaceAssistantMsgId <= 0) throw new ArkmePluginError("arko-run-status-contract-invalid", "Arko 运行状态响应不完整", true, 502);
 		return {
@@ -1552,7 +1564,7 @@ var ArkoService = class {
 			status,
 			sequence,
 			surfaceAssistantMsgId,
-			retryable: booleanValue$10(data.retryable),
+			retryable: booleanValue$12(data.retryable),
 			...stringValue$1(data.error_code).trim() === "" ? {} : { errorCode: stringValue$1(data.error_code).trim() },
 			...stringValue$1(data.retry_of_run_uid).trim() === "" ? {} : { retryOfRunUid: stringValue$1(data.retry_of_run_uid).trim() },
 			...clientAction === void 0 ? {} : { clientAction }
@@ -1727,12 +1739,12 @@ var ArkoService = class {
 				if (tailRun !== void 0) {
 					run = tailRun;
 					status = tailRun.status;
-				} else if (booleanValue$10(tail.error) || stringValue$1(tail.status).trim() === "error") status = "failed";
+				} else if (booleanValue$12(tail.error) || stringValue$1(tail.status).trim() === "error") status = "failed";
 				else status = ARKO_COMPLETED_STATUS;
 				createdRecordUids = arkoCreatedRecordUids(tail.created_record_uids);
 				const nextProfile = optionalRecord(tail.agent_profile);
 				if (nextProfile !== void 0) profile = arkoProfileFromData(nextProfile);
-				if (booleanValue$10(tail.error) || stringValue$1(tail.status).trim() === "error") errorMessage = stringValue$1(tail.error_message).trim() || "Arko 执行失败";
+				if (booleanValue$12(tail.error) || stringValue$1(tail.status).trim() === "error") errorMessage = stringValue$1(tail.error_message).trim() || "Arko 执行失败";
 			}
 			const type = stringValue$1(frame.type ?? frame.event).trim();
 			const payload = optionalRecord(frame.payload) ?? frame;
@@ -1781,13 +1793,13 @@ const ARKME_ARRANGEMENT_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_ARRANGEMENT_REFS = 4096;
 const ARKME_ARRANGEMENT_REMINDER_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_ARRANGEMENT_REMINDER_REFS = 4096;
-function numberValue$18(value) {
+function numberValue$20(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$9(value) {
+function booleanValue$11(value) {
 	return value === true;
 }
-function listValue$18(value) {
+function listValue$19(value) {
 	return Array.isArray(value) ? value : [];
 }
 function arrangementStatusCode(status) {
@@ -1797,7 +1809,7 @@ function arrangementStatusCode(status) {
 	return -1;
 }
 function arrangementStatus(value) {
-	const code = Math.trunc(numberValue$18(value));
+	const code = Math.trunc(numberValue$20(value));
 	if (code === 1) return "identified";
 	if (code === 2) return "following";
 	if (code === 3) return "completed";
@@ -1846,9 +1858,9 @@ var ArrangementService = class {
 			limit,
 			offset
 		}, session, options.signal, { lane: "interactive-read" });
-		const rawItems = listValue$18(data.list);
+		const rawItems = listValue$19(data.list);
 		const items = await Promise.all(rawItems.map(async (raw) => await this.arrangementItem(raw, session.userId)));
-		const total = Math.max(0, Math.trunc(numberValue$18(data.total)));
+		const total = Math.max(0, Math.trunc(numberValue$20(data.total)));
 		const nextOffset = offset + rawItems.length;
 		const hasMore = rawItems.length > 0 && nextOffset < total;
 		return {
@@ -1872,9 +1884,9 @@ var ArrangementService = class {
 			offset,
 			unread_only: options.unreadOnly === true
 		}, session, options.signal, { lane: "interactive-read" });
-		const rawItems = listValue$18(data.list);
+		const rawItems = listValue$19(data.list);
 		const items = await Promise.all(rawItems.map(async (raw) => await this.arrangementReminderEvent(raw, session.userId)));
-		const total = Math.max(0, Math.trunc(numberValue$18(data.total)));
+		const total = Math.max(0, Math.trunc(numberValue$20(data.total)));
 		const nextOffset = offset + rawItems.length;
 		const hasMore = rawItems.length > 0 && nextOffset < total;
 		return {
@@ -1897,7 +1909,7 @@ var ArrangementService = class {
 			project(data.next_reminder)
 		]);
 		return {
-			unreadCount: Math.max(0, Math.trunc(numberValue$18(data.unread_count))),
+			unreadCount: Math.max(0, Math.trunc(numberValue$20(data.unread_count))),
 			...latestUnread === void 0 ? {} : { latestUnread },
 			...latestEvent === void 0 ? {} : { latestEvent },
 			...nextReminder === void 0 ? {} : { nextReminder }
@@ -2001,7 +2013,7 @@ var ArrangementService = class {
 				}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$20(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2019,7 +2031,7 @@ var ArrangementService = class {
 				}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$20(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2034,7 +2046,7 @@ var ArrangementService = class {
 				const data = await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/reminders/clear", {}, session, signal);
 				return {
 					outcome: "confirmed",
-					updatedCount: Math.max(0, Math.trunc(numberValue$18(data.updated_count)))
+					updatedCount: Math.max(0, Math.trunc(numberValue$20(data.updated_count)))
 				};
 			} catch (error) {
 				if (!isAmbiguousArrangementWriteError(error)) throw error;
@@ -2067,7 +2079,7 @@ var ArrangementService = class {
 	}
 	async reconcileArrangementDelete(arrangementRef, arrangementUid, session) {
 		try {
-			const visible = listValue$18((await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/list", {
+			const visible = listValue$19((await this.runtime.authenticatedIntelligentPost("/api/v1/arrangements/list", {
 				status: -1,
 				uids: [arrangementUid],
 				limit: 1,
@@ -2098,17 +2110,17 @@ var ArrangementService = class {
 		const item = objectValue$1(raw);
 		const arrangementUid = stringValue$1(item.uid).trim();
 		if (arrangementUid === "") throw new ArkmePluginError("arrangement-contract-invalid", "安排响应缺少业务身份", true, 502);
-		const dueAtMillis = Math.trunc(numberValue$18(item.due_at));
-		const remindAtMillis = Math.trunc(numberValue$18(item.remind_at));
+		const dueAtMillis = Math.trunc(numberValue$20(item.due_at));
+		const remindAtMillis = Math.trunc(numberValue$20(item.remind_at));
 		return {
 			arrangementRef: await this.arrangementRef(viewerUserId, arrangementUid),
 			title: stringValue$1(item.title),
 			description: stringValue$1(item.description),
 			status: arrangementStatus(item.status),
-			reminderEnabled: booleanValue$9(item.reminder_enabled),
+			reminderEnabled: booleanValue$11(item.reminder_enabled),
 			reminderState: stringValue$1(item.reminder_state),
-			createdAtMillis: Math.trunc(numberValue$18(item.create_at)),
-			updatedAtMillis: Math.trunc(numberValue$18(item.update_at)),
+			createdAtMillis: Math.trunc(numberValue$20(item.create_at)),
+			updatedAtMillis: Math.trunc(numberValue$20(item.update_at)),
 			...dueAtMillis > 0 ? { dueAtMillis } : {},
 			...remindAtMillis > 0 ? { remindAtMillis } : {}
 		};
@@ -2129,20 +2141,20 @@ var ArrangementService = class {
 		const eventUid = stringValue$1(item.uid).trim();
 		const arrangementUid = stringValue$1(item.arrangement_uid).trim();
 		if (eventUid === "" || arrangementUid === "") throw new ArkmePluginError("arrangement-reminder-contract-invalid", "安排提醒响应缺少有效身份", true, 502);
-		const dueAtMillis = Math.trunc(numberValue$18(item.due_at));
-		const remindAtMillis = Math.trunc(numberValue$18(item.remind_at));
-		const readAtMillis = Math.trunc(numberValue$18(item.read_at));
+		const dueAtMillis = Math.trunc(numberValue$20(item.due_at));
+		const remindAtMillis = Math.trunc(numberValue$20(item.remind_at));
+		const readAtMillis = Math.trunc(numberValue$20(item.read_at));
 		return {
 			eventRef: await this.arrangementReminderRef(viewerUserId, eventUid),
 			arrangementRef: await this.arrangementRef(viewerUserId, arrangementUid),
 			title: stringValue$1(item.title),
 			description: stringValue$1(item.description),
 			eventKind: stringValue$1(item.event_kind),
-			eventAtMillis: Math.trunc(numberValue$18(item.event_at)),
+			eventAtMillis: Math.trunc(numberValue$20(item.event_at)),
 			read: readAtMillis > 0,
 			reminderState: stringValue$1(item.reminder_state),
-			createdAtMillis: Math.trunc(numberValue$18(item.create_at)),
-			updatedAtMillis: Math.trunc(numberValue$18(item.update_at)),
+			createdAtMillis: Math.trunc(numberValue$20(item.create_at)),
+			updatedAtMillis: Math.trunc(numberValue$20(item.update_at)),
 			...dueAtMillis > 0 ? { dueAtMillis } : {},
 			...remindAtMillis > 0 ? { remindAtMillis } : {},
 			...readAtMillis > 0 ? { readAtMillis } : {}
@@ -2199,7 +2211,7 @@ var ArrangementService = class {
 const ARKME_PHONE_BIND_SUCCESS = 1;
 const ARKME_PHONE_BIND_REPEAT = 2;
 const ARKME_PHONE_BIND_CODE_ERR = 3;
-function numberValue$17(value) {
+function numberValue$19(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
 var AuthService = class {
@@ -2264,7 +2276,7 @@ var AuthService = class {
 		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/public/v1/auth/wechat-login-qrcode", {}, void 0, [200]);
 		const sceneStr = stringValue$1(data.scene_str).trim();
 		const qrContent = stringValue$1(data.url).trim();
-		const expireSeconds = Math.max(30, numberValue$17(data.expire_seconds) || 300);
+		const expireSeconds = Math.max(30, numberValue$19(data.expire_seconds) || 300);
 		if (qrContent === "" && sceneStr !== "") throw new ArkmePluginError("wechat-qr-unavailable", "测试环境当前未返回可用微信二维码，请使用手机号登录", true, 503);
 		if (sceneStr === "" || qrContent === "") throw new ArkmePluginError("login-contract-invalid", "Arkme 登录二维码响应不完整", true, 502);
 		const attemptId = crypto.randomUUID();
@@ -2300,7 +2312,7 @@ var AuthService = class {
 			ref: 0,
 			keep_cancel: true
 		}, void 0, [200]);
-		const userId = numberValue$17(data.user_id);
+		const userId = numberValue$19(data.user_id);
 		if (userId <= 0) return {
 			status: "pending",
 			environment: this.runtime.config.environment,
@@ -2344,7 +2356,7 @@ var AuthService = class {
 		const normalizedCaptcha = this.normalizedCaptcha(captcha);
 		const session = await this.runtime.sessionStore.read() ?? await this.runtime.readPendingBindingSession();
 		if (session !== void 0) {
-			if (numberValue$17((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/bind-phone-send-code", {
+			if (numberValue$19((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/bind-phone-send-code", {
 				phone: normalizedPhone,
 				pre: "86",
 				is_test: this.runtime.config.environment === "test",
@@ -2366,7 +2378,7 @@ var AuthService = class {
 		if (!/^[0-9]{6}$/.test(normalizedCode)) throw new ArkmePluginError("phone-code-invalid", "请输入有效的短信验证码", false);
 		const session = await this.runtime.sessionStore.read() ?? await this.runtime.readPendingBindingSession();
 		if (session !== void 0) {
-			const result = numberValue$17((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/verify-bind-phone", {
+			const result = numberValue$19((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/verify-bind-phone", {
 				phone: normalizedPhone,
 				pre: "86",
 				code: normalizedCode,
@@ -2387,7 +2399,7 @@ var AuthService = class {
 			keep_cancel: true
 		}, void 0, [200]);
 		if (data.ok === false) throw new ArkmePluginError("phone-code-rejected", "手机号或验证码错误", false, 401);
-		const userId = numberValue$17(data.user_id);
+		const userId = numberValue$19(data.user_id);
 		const accessToken = stringValue$1(data.access_token);
 		const refreshToken = stringValue$1(data.refresh_token);
 		if (userId <= 0 || accessToken === "" || refreshToken === "") throw new ArkmePluginError("login-contract-invalid", "Arkme手机号登录响应不完整", false, 502);
@@ -2454,19 +2466,19 @@ var SecretValue = class {
 };
 //#endregion
 //#region src/services/bot-service.ts
-function numberValue$16(value) {
+function numberValue$18(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$8(value) {
+function booleanValue$10(value) {
 	return value === true;
 }
-function listValue$17(value) {
+function listValue$18(value) {
 	return Array.isArray(value) ? value : [];
 }
-function encodeOpaqueJson$5(value) {
+function encodeOpaqueJson$6(value) {
 	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
 }
-function decodeOpaqueJson$5(value) {
+function decodeOpaqueJson$6(value) {
 	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
 }
 var BotService = class {
@@ -2501,7 +2513,7 @@ var BotService = class {
 		const session = await this.runtime.requireSession();
 		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/list", {}, session, options.signal);
 		const items = [];
-		for (const value of listValue$17(data.bots)) {
+		for (const value of listValue$18(data.bots)) {
 			const raw = objectValue$1(value);
 			const provider = stringValue$1(raw.provider).trim();
 			if (provider !== "openclaw" && provider !== "webhook") continue;
@@ -2540,6 +2552,10 @@ var BotService = class {
 			throw new ArkmePluginError("bot-create-outcome-unknown", "Bot 可能已创建，但响应不完整；请刷新 Bot 列表确认", false, 409, { cause: error });
 		}
 	}
+	/** Browser-safe result: the one-time credential never leaves the Host owner. */
+	async createBotSummary(input, options = {}) {
+		return (await this.createBot(input, options)).bot;
+	}
 	async revealBotSecret(botRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const reference = await this.openBotRef(botRef, session.userId);
@@ -2588,19 +2604,19 @@ var BotService = class {
 		const group = await this.openGroupSourceRef(groupSourceRef, session.userId);
 		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/group/list", { subject_uid: group.ownerRef }, session, options.signal);
 		const items = [];
-		for (const value of listValue$17(data.bots)) {
+		for (const value of listValue$18(data.bots)) {
 			const raw = objectValue$1(value);
 			if (stringValue$1(raw.provider).trim() !== "openclaw") continue;
 			const { directChatAvailable: _directChatAvailable, ...summary } = await this.botSummaryFromData(raw, session.userId);
 			items.push({
 				...summary,
-				installed: booleanValue$8(raw.installed)
+				installed: booleanValue$10(raw.installed)
 			});
 		}
 		return {
 			groupSourceRef,
 			displayName: stringValue$1(data.subject_title).trim() || group.displayName,
-			canAddBots: booleanValue$8(data.can_current_user_add_bots),
+			canAddBots: booleanValue$10(data.can_current_user_add_bots),
 			items
 		};
 	}
@@ -2653,7 +2669,7 @@ var BotService = class {
 		};
 	}
 	async sealBotRef(userId, botId) {
-		const payload = encodeOpaqueJson$5({
+		const payload = encodeOpaqueJson$6({
 			version: 1,
 			userId,
 			botId
@@ -2669,13 +2685,13 @@ var BotService = class {
 		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("bot-ref-invalid", "Bot 引用无效", false);
 		let raw;
 		try {
-			raw = objectValue$1(decodeOpaqueJson$5(payload));
+			raw = objectValue$1(decodeOpaqueJson$6(payload));
 		} catch (error) {
 			throw new ArkmePluginError("bot-ref-invalid", "Bot 引用无效", false, 400, { cause: error });
 		}
 		const reference = {
 			version: 1,
-			userId: numberValue$16(raw.userId),
+			userId: numberValue$18(raw.userId),
 			botId: stringValue$1(raw.botId).trim()
 		};
 		if (raw.version !== 1 || reference.userId !== expectedUserId || reference.botId === "") throw new ArkmePluginError("bot-ref-invalid", "Bot 引用与当前账号不匹配", false, 403);
@@ -2683,6 +2699,181 @@ var BotService = class {
 	}
 };
 //#endregion
+//#region src/services/calendar-service.ts
+const MAX_CALENDAR_RANGE_DAYS = 62;
+const MAX_DAY_RECORD_LIMIT = 50;
+function numberValue$17(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function booleanValue$9(value) {
+	if (typeof value === "boolean") return value;
+	if (typeof value === "number") return value !== 0;
+}
+function listValue$17(value) {
+	return Array.isArray(value) ? value : [];
+}
+function readCalendarDate(value, field) {
+	const normalized = value.trim();
+	const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(normalized);
+	if (match === null) throw new ArkmePluginError("calendar-date-invalid", `${field} 必须是 YYYY-MM-DD`, false);
+	const year = Number(match[1]);
+	const month = Number(match[2]);
+	const day = Number(match[3]);
+	const date = new Date(Date.UTC(year, month - 1, day));
+	if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day) throw new ArkmePluginError("calendar-date-invalid", `${field} 必须是真实日期`, false);
+	return normalized;
+}
+function calendarDayNumber(date) {
+	const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(date);
+	if (match === null) throw new ArkmePluginError("calendar-date-invalid", "日期格式无效", false);
+	const year = Number(match[1]);
+	const month = Number(match[2]);
+	const day = Number(match[3]);
+	return Math.trunc(Date.UTC(year, month - 1, day) / 864e5);
+}
+function readTimezone(value) {
+	const normalized = value?.trim() || Intl.DateTimeFormat().resolvedOptions().timeZone || "local";
+	if (normalized.length > 80) throw new ArkmePluginError("calendar-timezone-invalid", "timezone 无效", false);
+	return normalized;
+}
+function boundedLimit(value) {
+	const limit = Math.trunc(value ?? 20);
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_DAY_RECORD_LIMIT) throw new ArkmePluginError("calendar-limit-invalid", `limit 必须是 1-${MAX_DAY_RECORD_LIMIT} 的整数`, false);
+	return limit;
+}
+function contentAccessState(value) {
+	const code = Math.trunc(numberValue$17(value));
+	if (code === 1) return "available";
+	if (code === 2) return "protected";
+	return "unknown";
+}
+function sourceKind(raw) {
+	const topic = objectValue$1(raw.topic_core);
+	const chat = objectValue$1(raw.chat_core);
+	if (stringValue$1(topic.topic_uid).trim() !== "") return "topic";
+	if (stringValue$1(chat.chat_session_uid).trim() !== "") return "chat";
+	if (booleanValue$9(raw.is_uncategorized) === true) return "self";
+	return "unknown";
+}
+var CalendarService = class {
+	runtime;
+	constructor(runtime) {
+		this.runtime = runtime;
+	}
+	async bucketPage(options) {
+		const startDate = readCalendarDate(options.startDate, "start_date");
+		const endDate = readCalendarDate(options.endDate, "end_date");
+		const startDay = calendarDayNumber(startDate);
+		const endDay = calendarDayNumber(endDate);
+		if (startDay > endDay) throw new ArkmePluginError("calendar-range-invalid", "start_date 不能晚于 end_date", false);
+		if (endDay - startDay + 1 > MAX_CALENDAR_RANGE_DAYS) throw new ArkmePluginError("calendar-range-too-wide", `日历范围最多查询 ${MAX_CALENDAR_RANGE_DAYS} 天`, false);
+		const timezone = readTimezone(options.timezone);
+		const session = await this.runtime.requireSession();
+		const data = await this.runtime.authenticatedCalendarPost("/api/v1/calendar/buckets/query", {
+			bucket_scope_kind: 1,
+			bucket_scope_uid: "",
+			start_date: startDate,
+			end_date: endDate,
+			timezone
+		}, session, options.signal, {
+			key: `calendar:buckets:self:${startDate}:${endDate}:${timezone}`,
+			cacheMs: 3e4,
+			failureCooldownMs: 2e3
+		});
+		return {
+			scope: "self",
+			startDate,
+			endDate,
+			timezone: stringValue$1(data.timezone).trim() || timezone,
+			refreshedAtMillis: Date.now(),
+			days: listValue$17(data.daily_data).map((raw) => this.bucketDay(raw)).filter((day) => day !== void 0)
+		};
+	}
+	async dayRecords(options) {
+		const bucketDate = readCalendarDate(options.bucketDate, "bucket_date");
+		const timezone = readTimezone(options.timezone);
+		const limit = boundedLimit(options.limit);
+		const cursorSendAt = Math.trunc(options.cursor?.sendAtMillis ?? 0);
+		const cursorRecordUid = options.cursor?.recordUid.trim() ?? "";
+		const session = await this.runtime.requireSession();
+		const data = await this.runtime.authenticatedCalendarPost("/api/v1/calendar/records/query", {
+			bucket_scope_kind: 1,
+			bucket_scope_uid: "",
+			bucket_date: bucketDate,
+			timezone,
+			limit,
+			...cursorSendAt > 0 && cursorRecordUid !== "" ? {
+				cursor_send_at: cursorSendAt,
+				cursor_record_uid: cursorRecordUid
+			} : {}
+		}, session, options.signal, {
+			key: `calendar:records:self:${bucketDate}:${timezone}:${String(limit)}:${String(cursorSendAt)}:${cursorRecordUid}`,
+			cacheMs: 1e4,
+			failureCooldownMs: 2e3
+		});
+		const nextSendAt = Math.trunc(numberValue$17(data.next_cursor_send_at));
+		const nextUid = stringValue$1(data.next_cursor_record_uid).trim();
+		return {
+			scope: "self",
+			bucketDate,
+			timezone: stringValue$1(data.timezone).trim() || timezone,
+			refreshedAtMillis: Date.now(),
+			items: listValue$17(data.items).map((raw) => this.dayRecord(raw)).filter((item) => item !== void 0),
+			hasMore: data.has_more === true,
+			...nextSendAt > 0 && nextUid !== "" ? { nextCursor: {
+				sendAtMillis: nextSendAt,
+				recordUid: nextUid
+			} } : {}
+		};
+	}
+	bucketDay(raw) {
+		const item = objectValue$1(raw);
+		const bucketDate = stringValue$1(item.bucket_date).trim();
+		if (bucketDate === "") return void 0;
+		const count = Math.max(0, Math.trunc(numberValue$17(item.count)));
+		return {
+			bucketDate,
+			count,
+			protectedCount: Math.max(0, Math.trunc(numberValue$17(item.protected_count))),
+			hasRecords: count > 0,
+			...numberValue$17(item.first_send_at) > 0 ? { firstSendAtMillis: Math.trunc(numberValue$17(item.first_send_at)) } : {}
+		};
+	}
+	dayRecord(raw) {
+		const item = objectValue$1(raw);
+		const core = objectValue$1(item.record_core);
+		const recordUid = stringValue$1(item.record_uid ?? core.record_uid).trim();
+		const sendAtMillis = Math.trunc(numberValue$17(item.send_at ?? core.send_at));
+		if (recordUid === "" || sendAtMillis <= 0) return void 0;
+		const accessState = contentAccessState(core.content_access_state);
+		const available = accessState === "available";
+		const title = available ? clippedText(core.title, 500) : "";
+		const textContent = available ? clippedText(core.text_content, 4e3) : "";
+		const preview = title || clippedText(textContent, 160) || (available ? "无文字内容" : "受保护内容");
+		const topic = objectValue$1(item.topic_core);
+		const isUncategorized = booleanValue$9(item.is_uncategorized);
+		const hasManualEdit = booleanValue$9(core.has_manual_edit);
+		const hasPolish = booleanValue$9(core.has_polish);
+		return {
+			recordUid,
+			sendAtMillis,
+			accessState,
+			title,
+			textContent,
+			preview,
+			...stringValue$1(topic.title).trim() === "" ? {} : { topicTitle: stringValue$1(topic.title).trim() },
+			sourceKind: sourceKind(item),
+			creationSource: Math.trunc(numberValue$17(core.creation_source)),
+			templateKind: Math.trunc(numberValue$17(core.template_kind)),
+			displayKind: Math.trunc(numberValue$17(core.display_kind)),
+			protected: accessState === "protected",
+			...isUncategorized === void 0 ? {} : { isUncategorized },
+			...hasManualEdit === void 0 ? {} : { hasManualEdit },
+			...hasPolish === void 0 ? {} : { hasPolish }
+		};
+	}
+};
+//#endregion
 //#region src/chat-realtime.ts
 const ARKME_CHAT_SSE_PATH = "/api/v1/sse/chat/noty";
 const DEFAULT_CONNECT_TIMEOUT_MS = 15e3;
@@ -2690,7 +2881,7 @@ const DEFAULT_INACTIVITY_TIMEOUT_MS = 75e3;
 const DEFAULT_LEASE_DURATION_MS = 57e4;
 const DEFAULT_IDLE_POLL_MS = 2e3;
 const DEFAULT_RETRY_BASE_MS = 1e3;
-const DEFAULT_MAX_RETRY_MS = 6e4;
+const DEFAULT_MAX_RETRY_MS = 15e3;
 const DEFAULT_STABLE_CONNECTION_MS = 3e4;
 const MAX_SEEN_EVENTS = 256;
 var ArkmeChatRealtimeAuthError = class extends Error {};
@@ -2771,11 +2962,14 @@ var ArkmeChatRealtimeRuntime = class {
 	now;
 	rootController;
 	connectionController;
+	waitController;
 	loop;
 	revision = 0;
 	connected = false;
 	lastAcceptedAccessToken;
 	lastConnectionLifetimeMs = 0;
+	connectionGeneration = 0;
+	forceReconnectRequested = false;
 	lastEventAtMillis;
 	seenEventUids = /* @__PURE__ */ new Set();
 	listeners = /* @__PURE__ */ new Set();
@@ -2812,14 +3006,19 @@ var ArkmeChatRealtimeRuntime = class {
 	stop() {
 		this.rootController?.abort();
 		this.connectionController?.abort();
+		this.waitController?.abort();
 	}
 	reconnect() {
+		if (this.loop === void 0) return;
+		this.forceReconnectRequested = true;
 		this.connectionController?.abort();
+		this.waitController?.abort();
 	}
 	state() {
 		return {
 			revision: this.revision,
 			connected: this.connected,
+			connectionGeneration: this.connectionGeneration,
 			...this.lastEventAtMillis === void 0 ? {} : { lastEventAtMillis: this.lastEventAtMillis }
 		};
 	}
@@ -2841,16 +3040,17 @@ var ArkmeChatRealtimeRuntime = class {
 			if (session === void 0) {
 				this.connected = false;
 				blockedAccessToken = void 0;
-				await waitFor(this.idlePollMs, signal);
+				await this.wait(this.idlePollMs, signal);
 				continue;
 			}
 			if (blockedAccessToken === session.accessToken) {
 				this.connected = false;
-				await waitFor(this.idlePollMs, signal);
+				await this.wait(this.idlePollMs, signal);
 				continue;
 			}
 			blockedAccessToken = void 0;
 			let stableConnection = false;
+			this.options.diagnostic?.("reconnect_attempt", { connectionGeneration: this.connectionGeneration + 1 });
 			try {
 				await this.consume(session, signal);
 				stableConnection = this.lastConnectionLifetimeMs >= this.stableConnectionMs;
@@ -2865,7 +3065,7 @@ var ArkmeChatRealtimeRuntime = class {
 					if (refreshedButUnacceptedToken === session.accessToken) {
 						blockedAccessToken = session.accessToken;
 						refreshedButUnacceptedToken = void 0;
-						await waitFor(this.idlePollMs, signal);
+						await this.wait(this.idlePollMs, signal);
 						continue;
 					}
 					let refreshed;
@@ -2876,17 +3076,24 @@ var ArkmeChatRealtimeRuntime = class {
 					}
 					if (refreshed !== void 0 && refreshed.accessToken !== session.accessToken) {
 						refreshedButUnacceptedToken = refreshed.accessToken;
+						this.forceReconnectRequested = false;
 						retryMs = this.retryBaseMs;
 						continue;
 					}
 					blockedAccessToken = session.accessToken;
-					await waitFor(this.idlePollMs, signal);
+					await this.wait(this.idlePollMs, signal);
 					continue;
 				}
 			} finally {
+				if (this.connected && !signal.aborted) this.options.diagnostic?.("sse_disconnected", { connectionGeneration: this.connectionGeneration });
 				this.connected = false;
 			}
-			await waitFor(Math.max(1, Math.round(retryMs * (.8 + this.random() * .4))), signal);
+			if (this.forceReconnectRequested) {
+				this.forceReconnectRequested = false;
+				retryMs = this.retryBaseMs;
+				continue;
+			}
+			await this.wait(this.jitteredDelay(retryMs), signal);
 			if (!stableConnection) retryMs = Math.min(this.maxRetryMs, Math.max(this.retryBaseMs, retryMs * 2));
 		}
 	}
@@ -2922,6 +3129,7 @@ var ArkmeChatRealtimeRuntime = class {
 			acceptedAtMillis = this.now();
 			this.connected = true;
 			this.lastAcceptedAccessToken = session.accessToken;
+			this.connectionGeneration += 1;
 			this.advanceRevision("reconcile");
 			leaseTimer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("chat SSE lease rotation")), this.leaseDurationMs);
 			const reader = response.body.getReader();
@@ -2946,6 +3154,25 @@ var ArkmeChatRealtimeRuntime = class {
 			if (this.connectionController === controller) this.connectionController = void 0;
 		}
 	}
+	jitteredDelay(milliseconds) {
+		const random = Math.min(1, Math.max(0, this.random()));
+		return Math.max(0, Math.round(milliseconds * (.8 + random * .4)));
+	}
+	async wait(milliseconds, rootSignal) {
+		if (rootSignal.aborted) return;
+		const controller = new AbortController();
+		const abortFromRoot = () => {
+			controller.abort(rootSignal.reason);
+		};
+		rootSignal.addEventListener("abort", abortFromRoot, { once: true });
+		this.waitController = controller;
+		try {
+			await waitFor(milliseconds, controller.signal);
+		} finally {
+			rootSignal.removeEventListener("abort", abortFromRoot);
+			if (this.waitController === controller) this.waitController = void 0;
+		}
+	}
 	acceptLine(line) {
 		const event = decodeArkmeChatReceiveDataLine(line);
 		if (event === void 0 || this.seenEventUids.has(event.eventUid)) return;
@@ -2984,11 +3211,15 @@ var ChatRealtimeService = class {
 	projectionReader;
 	chatRealtime;
 	chatClientListeners = /* @__PURE__ */ new Set();
-	pendingProjectionSequences = /* @__PURE__ */ new Map();
+	pendingChatProjections = /* @__PURE__ */ new Map();
 	projectionRetryCounts = /* @__PURE__ */ new Map();
 	projectionTimer;
 	projectionInFlight = false;
 	projectionFailureCount = 0;
+	notificationBaselineGeneration = 0;
+	notificationBaselineSequences = /* @__PURE__ */ new Map();
+	notificationBaselineRetryTimer;
+	notificationBaselineRetryCount = 0;
 	chatClientRevision = 0;
 	constructor(runtime, source, projectionReader) {
 		this.runtime = runtime;
@@ -3005,7 +3236,10 @@ var ChatRealtimeService = class {
 					return;
 				}
 			},
-			fetchImpl: runtime.fetchImpl
+			fetchImpl: runtime.fetchImpl,
+			diagnostic: (event, details) => {
+				console.info(`dsh-arkme: ${event}`, details);
+			}
 		});
 	}
 	reconnect() {
@@ -3013,9 +3247,13 @@ var ChatRealtimeService = class {
 	}
 	dispose() {
 		if (this.projectionTimer !== void 0) clearTimeout(this.projectionTimer);
+		if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
 		this.projectionTimer = void 0;
-		this.pendingProjectionSequences.clear();
+		this.notificationBaselineRetryTimer = void 0;
+		this.pendingChatProjections.clear();
 		this.projectionRetryCounts.clear();
+		this.notificationBaselineSequences.clear();
+		this.notificationBaselineGeneration = 0;
 		this.chatClientListeners.clear();
 	}
 	startChatRealtime() {
@@ -3027,9 +3265,13 @@ var ChatRealtimeService = class {
 			unsubscribe();
 			stop();
 			if (this.projectionTimer !== void 0) clearTimeout(this.projectionTimer);
+			if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
 			this.projectionTimer = void 0;
-			this.pendingProjectionSequences.clear();
+			this.notificationBaselineRetryTimer = void 0;
+			this.pendingChatProjections.clear();
 			this.projectionRetryCounts.clear();
+			this.notificationBaselineSequences.clear();
+			this.notificationBaselineGeneration = 0;
 		};
 	}
 	chatRealtimeState() {
@@ -3047,26 +3289,93 @@ var ChatRealtimeService = class {
 			type: "reconcile",
 			revision: this.chatClientRevision,
 			connected: state.connected,
+			connectionGeneration: state.connectionGeneration,
 			refresh: "if-stale"
 		};
 	}
 	handleChatRealtimeNotice(notice) {
 		if (notice.cause === "reconcile") {
+			const generation = notice.state.connectionGeneration;
+			this.notificationBaselineGeneration = 0;
+			this.notificationBaselineSequences.clear();
+			this.notificationBaselineRetryCount = 0;
+			if (this.notificationBaselineRetryTimer !== void 0) clearTimeout(this.notificationBaselineRetryTimer);
+			this.notificationBaselineRetryTimer = void 0;
 			this.emitChatClientEvent({
 				type: "reconcile",
 				revision: this.nextChatClientRevision(),
 				connected: notice.state.connected,
+				connectionGeneration: generation,
 				refresh: "none"
 			});
+			this.reconcileChatNotificationBaseline(generation);
 			return;
 		}
-		if (notice.cause === "hint" && notice.hint !== void 0) this.scheduleChatSessionProjection(notice.hint.chatSessionUid, notice.hint.latestSequence);
+		if (notice.cause === "hint" && notice.hint !== void 0) this.scheduleChatSessionProjection(notice.hint.chatSessionUid, notice.hint.latestSequence, {
+			hint: notice.hint,
+			connectionGeneration: notice.state.connectionGeneration,
+			attempts: 0
+		});
 	}
-	scheduleChatSessionProjection(chatSessionUid, latestSequence) {
+	async reconcileChatNotificationBaseline(connectionGeneration) {
+		try {
+			const session = await this.runtime.requireSession();
+			const sequences = /* @__PURE__ */ new Map();
+			let cursor;
+			for (let pageIndex = 0; pageIndex < 10; pageIndex += 1) {
+				const page = await this.source.listSources("root", {
+					limit: 50,
+					refresh: true,
+					...cursor === void 0 ? {} : { cursor }
+				});
+				for (const item of page.items) {
+					if (item.kind !== "private_chat" && item.kind !== "group_chat") continue;
+					const source = await this.source.openSourceRef(item.sourceRef, session.userId);
+					sequences.set(source.ownerRef, item.latestSequence ?? 0);
+				}
+				if (!page.hasMore || page.nextCursor === void 0) break;
+				cursor = page.nextCursor;
+			}
+			const state = this.chatRealtime.state();
+			if (!state.connected || state.connectionGeneration !== connectionGeneration) return;
+			this.notificationBaselineSequences.clear();
+			for (const [uid, sequence] of sequences) this.notificationBaselineSequences.set(uid, sequence);
+			this.notificationBaselineGeneration = connectionGeneration;
+			this.notificationBaselineRetryCount = 0;
+			console.info("dsh-arkme: reconcile_completed", {
+				connectionGeneration,
+				sessionCount: sequences.size
+			});
+			if (this.pendingChatProjections.size > 0 && this.projectionTimer === void 0 && !this.projectionInFlight) this.projectionTimer = setTimeout(() => {
+				this.projectionTimer = void 0;
+				this.flushChatSessionProjections();
+			}, 0);
+		} catch (error) {
+			const state = this.chatRealtime.state();
+			if (!state.connected || state.connectionGeneration !== connectionGeneration) return;
+			this.notificationBaselineRetryCount += 1;
+			const delay = Math.min(15e3, 1e3 * 2 ** Math.min(4, this.notificationBaselineRetryCount - 1));
+			console.warn("dsh-arkme: Chat reconnect reconciliation failed:", safeFailureMessage$6(error));
+			this.notificationBaselineRetryTimer = setTimeout(() => {
+				this.notificationBaselineRetryTimer = void 0;
+				this.reconcileChatNotificationBaseline(connectionGeneration);
+			}, delay);
+		}
+	}
+	scheduleChatSessionProjection(chatSessionUid, latestSequence, notificationHint) {
 		const uid = chatSessionUid.trim();
 		if (uid === "") return;
-		if (latestSequence > (this.pendingProjectionSequences.get(uid) ?? 0)) this.projectionRetryCounts.delete(uid);
-		this.pendingProjectionSequences.set(uid, Math.max(latestSequence, this.pendingProjectionSequences.get(uid) ?? 0));
+		const current = this.pendingChatProjections.get(uid);
+		if (latestSequence > (current?.latestSequence ?? 0)) this.projectionRetryCounts.delete(uid);
+		const notificationHints = current === void 0 ? [] : [...current.notificationHints];
+		if (notificationHint !== void 0 && !notificationHints.some((item) => item.hint.eventUid === notificationHint.hint.eventUid)) {
+			notificationHints.push(notificationHint);
+			if (notificationHints.length > 256) notificationHints.splice(0, notificationHints.length - 256);
+		}
+		this.pendingChatProjections.set(uid, {
+			latestSequence: Math.max(latestSequence, current?.latestSequence ?? 0),
+			notificationHints
+		});
 		if (this.projectionTimer !== void 0 || this.projectionInFlight) return;
 		this.projectionTimer = setTimeout(() => {
 			this.projectionTimer = void 0;
@@ -3074,10 +3383,10 @@ var ChatRealtimeService = class {
 		}, 200);
 	}
 	async flushChatSessionProjections() {
-		if (this.projectionInFlight || this.pendingProjectionSequences.size === 0) return;
+		if (this.projectionInFlight || this.pendingChatProjections.size === 0) return;
 		this.projectionInFlight = true;
-		const pending = [...this.pendingProjectionSequences.entries()].slice(0, 50);
-		for (const [uid] of pending) this.pendingProjectionSequences.delete(uid);
+		const pending = [...this.pendingChatProjections.entries()].slice(0, 50);
+		for (const [uid] of pending) this.pendingChatProjections.delete(uid);
 		try {
 			const failed = await this.refreshChatSessionProjectionBatch(pending);
 			for (const [uid] of pending) if (!failed.some(([failedUid]) => failedUid === uid)) this.projectionRetryCounts.delete(uid);
@@ -3092,7 +3401,7 @@ var ChatRealtimeService = class {
 			this.requeueProjectionFailures(pending);
 		} finally {
 			this.projectionInFlight = false;
-			if (this.pendingProjectionSequences.size > 0 && this.projectionTimer === void 0) {
+			if (this.pendingChatProjections.size > 0 && this.projectionTimer === void 0) {
 				const retryDelayBase = this.projectionFailureCount === 0 ? 200 : Math.min(5e3, 500 * 2 ** Math.min(3, this.projectionFailureCount - 1));
 				const retryDelay = Math.max(100, Math.round(retryDelayBase * (.8 + Math.random() * .4)));
 				this.projectionTimer = setTimeout(() => {
@@ -3103,7 +3412,7 @@ var ChatRealtimeService = class {
 		}
 	}
 	requeueProjectionFailures(failed) {
-		for (const [uid, sequence] of failed) {
+		for (const [uid, projection] of failed) {
 			const retries = (this.projectionRetryCounts.get(uid) ?? 0) + 1;
 			if (retries > MAX_PROJECTION_RETRIES) {
 				this.projectionRetryCounts.delete(uid);
@@ -3111,8 +3420,24 @@ var ChatRealtimeService = class {
 				continue;
 			}
 			this.projectionRetryCounts.set(uid, retries);
-			this.pendingProjectionSequences.set(uid, Math.max(sequence, this.pendingProjectionSequences.get(uid) ?? 0));
+			this.mergePendingChatProjection(uid, projection);
+		}
+	}
+	mergePendingChatProjection(uid, incoming) {
+		const current = this.pendingChatProjections.get(uid);
+		if (current === void 0) {
+			this.pendingChatProjections.set(uid, {
+				latestSequence: incoming.latestSequence,
+				notificationHints: [...incoming.notificationHints]
+			});
+			return;
 		}
+		const byEventUid = new Map(current.notificationHints.map((item) => [item.hint.eventUid, item]));
+		for (const item of incoming.notificationHints) byEventUid.set(item.hint.eventUid, item);
+		this.pendingChatProjections.set(uid, {
+			latestSequence: Math.max(current.latestSequence, incoming.latestSequence),
+			notificationHints: [...byEventUid.values()].slice(-256)
+		});
 	}
 	async refreshChatSessionProjectionBatch(pending) {
 		const session = await this.runtime.requireSession();
@@ -3130,16 +3455,19 @@ var ChatRealtimeService = class {
 		const failedUids = /* @__PURE__ */ new Set();
 		for (let offset = 0; offset < pending.length; offset += 3) {
 			const chunk = pending.slice(offset, offset + 3);
-			(await Promise.allSettled(chunk.map(async ([uid, hintedSequence]) => {
+			(await Promise.allSettled(chunk.map(async ([uid, projection]) => {
 				const cached = this.source.cachedChatSourceByKey(`${String(session.userId)}:${uid}`);
-				const afterSequence = Math.max(0, cached?.latestSequence ?? hintedSequence - 1);
+				const firstHintSequence = projection.notificationHints.reduce((minimum, item) => Math.min(minimum, item.hint.latestSequence), projection.latestSequence);
+				const requiredAfterSequence = Math.max(0, firstHintSequence - 1);
+				const afterSequence = Math.max(0, Math.min(cached?.latestSequence ?? requiredAfterSequence, requiredAfterSequence));
+				const notificationAttempt = projection.notificationHints.reduce((maximum, item) => Math.max(maximum, item.attempts), 0);
 				const data = await this.runtime.authenticatedChatPost("/api/v1/chat/timeline/tail", {
 					chat_session_uid: uid,
 					after_seq: afterSequence,
 					limit: 50
 				}, session, void 0, {
 					lane: "background-read",
-					key: `projection:tail:${uid}:${String(afterSequence)}`
+					key: `projection:tail:${uid}:${String(afterSequence)}:${String(notificationAttempt)}`
 				});
 				return [uid, await this.projectionReader.chatTimelineItems(data, session)];
 			}))).forEach((result, index) => {
@@ -3150,7 +3478,8 @@ var ChatRealtimeService = class {
 			});
 		}
 		const updates = [];
-		for (const [uid] of pending) {
+		const notifications = [];
+		for (const [uid, projection] of pending) {
 			const bundle = bundles.get(uid);
 			if (bundle === void 0 || failedUids.has(uid)) {
 				failedUids.add(uid);
@@ -3161,11 +3490,47 @@ var ChatRealtimeService = class {
 			try {
 				const source = await this.source.chatSourceFromBundle(bundle, session, this.source.cachedChatSourceByKey(cacheKey), timelineItems);
 				this.source.setChatSourceByKey(cacheKey, source);
+				const sourceKey = source.sourceKey ?? await this.source.chatDirectorySourceKey(session.userId, uid);
 				updates.push({
-					sourceKey: source.sourceKey ?? await this.source.chatDirectorySourceKey(session.userId, uid),
+					sourceKey,
 					source,
 					timelineItems
 				});
+				if (source.kind === "private_chat" || source.kind === "group_chat") for (const candidate of projection.notificationHints.sort((left, right) => left.hint.latestSequence - right.hint.latestSequence)) {
+					const state = this.chatRealtime.state();
+					if (candidate.connectionGeneration !== state.connectionGeneration) continue;
+					if (this.notificationBaselineGeneration !== candidate.connectionGeneration) {
+						this.mergePendingChatProjection(uid, {
+							latestSequence: projection.latestSequence,
+							notificationHints: [candidate]
+						});
+						continue;
+					}
+					const baselineSequence = this.notificationBaselineSequences.get(uid) ?? 0;
+					if (candidate.hint.latestSequence <= baselineSequence || candidate.hint.senderUserId === session.userId || source.isMuted === true) continue;
+					const message = timelineItems.find((item) => item.sequence === candidate.hint.latestSequence && !item.isMe);
+					if (message === void 0) {
+						if (candidate.attempts < 4) this.mergePendingChatProjection(uid, {
+							latestSequence: projection.latestSequence,
+							notificationHints: [{
+								...candidate,
+								attempts: candidate.attempts + 1
+							}]
+						});
+						else console.warn("dsh-arkme: Chat notification message was not projected:", candidate.hint.eventUid);
+						continue;
+					}
+					const preview = message.textContent.trim() || "非文本内容";
+					notifications.push({
+						eventUid: candidate.hint.eventUid,
+						sourceRef: source.sourceRef,
+						sourceKey,
+						sourceKind: source.kind,
+						title: source.displayName,
+						body: source.kind === "group_chat" ? `${message.senderName}：${preview}` : preview,
+						eventAtMillis: candidate.hint.eventAtMillis
+					});
+				}
 			} catch {
 				failedUids.add(uid);
 			}
@@ -3178,6 +3543,11 @@ var ChatRealtimeService = class {
 				updates
 			});
 		}
+		for (const notification of notifications) this.emitChatClientEvent({
+			type: "message-notification",
+			revision: this.nextChatClientRevision(),
+			notification
+		});
 		return pending.filter(([uid]) => failedUids.has(uid));
 	}
 	emitChatClientEvent(event) {
@@ -3190,10 +3560,10 @@ var ChatRealtimeService = class {
 };
 //#endregion
 //#region src/services/chat-service.ts
-function numberValue$15(value) {
+function numberValue$16(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function booleanValue$7(value) {
+function booleanValue$8(value) {
 	return value === true;
 }
 function listValue$15(value) {
@@ -3242,10 +3612,10 @@ function timelineAgentSource(relation, record, payload) {
 		label: agentSourceLabel(displayName)
 	};
 }
-function encodeOpaqueJson$4(value) {
+function encodeOpaqueJson$5(value) {
 	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
 }
-function decodeOpaqueJson$4(value) {
+function decodeOpaqueJson$5(value) {
 	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
 }
 var ChatService = class {
@@ -3292,15 +3662,15 @@ var ChatService = class {
 		const uid = stringValue$1(chatSession.chat_session_uid).trim();
 		if (uid === "") throw new ArkmePluginError("private-chat-contract-invalid", "私聊会话响应不完整", true, 502);
 		const unread = objectValue$1(data.unread_snapshot);
-		const latestSequence = numberValue$15(unread.session_last_seq ?? chatSession.last_seq);
+		const latestSequence = numberValue$16(unread.session_last_seq ?? chatSession.last_seq);
 		const source = {
 			sourceRef: await this.source.sealSourceRef(session.userId, "private_chat", uid, displayName),
 			sourceKey: await this.source.chatDirectorySourceKey(session.userId, uid),
 			kind: "private_chat",
 			displayName,
 			...profile?.avatarUrl === void 0 ? {} : { avatarRef: await this.profile.sealProfileImageRef(session.userId, peerUserId) },
-			activeAtMillis: numberValue$15(chatSession.last_active_at) || Date.now(),
-			unreadCount: numberValue$15(unread.unread_count),
+			activeAtMillis: numberValue$16(chatSession.last_active_at) || Date.now(),
+			unreadCount: numberValue$16(unread.unread_count),
 			...latestSequence > 0 ? { latestSequence } : {}
 		};
 		this.source.setChatSourceByKey(`${String(session.userId)}:${uid}`, source);
@@ -3327,7 +3697,7 @@ var ChatService = class {
 					mediaUnavailable: media.unavailableRecordUids.has(recordUid)
 				});
 			}).filter((item) => item.itemUid !== "");
-			const nextSendAt = numberValue$15(data.next_cursor_send_at);
+			const nextSendAt = numberValue$16(data.next_cursor_send_at);
 			const nextUid = stringValue$1(data.next_cursor_record_uid).trim();
 			return {
 				source: await this.source.sourceItem(source),
@@ -3371,7 +3741,7 @@ var ChatService = class {
 					mediaUnavailable: media.unavailableRecordUids.has(recordUid)
 				});
 			});
-			const nextSendAt = numberValue$15(data.next_cursor_send_at);
+			const nextSendAt = numberValue$16(data.next_cursor_send_at);
 			const nextUid = stringValue$1(data.next_cursor_record_uid).trim();
 			return {
 				source: await this.source.sourceItem(source),
@@ -3401,14 +3771,14 @@ var ChatService = class {
 			const relation = objectValue$1(item.relation);
 			const record = objectValue$1(item.record);
 			const payload = objectValue$1(record.payload);
-			const recordStatus = numberValue$15(record.status);
+			const recordStatus = numberValue$16(record.status);
 			if (recordStatus !== 1) continue;
 			const uid = stringValue$1(relation.record_uid ?? payload.record_uid).trim();
 			if (uid === "") continue;
 			const relationUid = stringValue$1(relation.rel_uid).trim();
-			const senderUserId = numberValue$15(relation.sender_user_id);
+			const senderUserId = numberValue$16(relation.sender_user_id);
 			const aiPolish = this.aiPolish.timelineAiPolish(record, payload);
-			const sendAtMillis = numberValue$15(relation.attach_at ?? payload.send_at);
+			const sendAtMillis = numberValue$16(relation.attach_at ?? payload.send_at);
 			const forwardRecords = await this.chatForwardRecordsPreview(item, session.userId, sendAtMillis);
 			const rawAgentSource = timelineAgentSource(relation, record, payload);
 			const agentSource = senderUserId === session.userId ? this.arko.currentUserAgentSourceFallback(session.userId, rawAgentSource) : rawAgentSource;
@@ -3422,16 +3792,16 @@ var ChatService = class {
 				title: stringValue$1(payload.title),
 				textContent: stringValue$1(payload.text_content),
 				status: recordStatus,
-				sequence: numberValue$15(relation.seq),
-				...numberValue$15(record.version ?? payload.version) > 0 ? { recordVersion: numberValue$15(record.version ?? payload.version) } : {},
+				sequence: numberValue$16(relation.seq),
+				...numberValue$16(record.version ?? payload.version) > 0 ? { recordVersion: numberValue$16(record.version ?? payload.version) } : {},
 				...aiPolish === void 0 ? {} : { aiPolish },
 				...forwardRecords === void 0 ? {} : { forwardRecords },
-				templateKind: numberValue$15(payload.template_kind),
-				displayKind: numberValue$15(payload.display_kind),
-				version: numberValue$15(payload.version ?? record.version),
-				updateAtMillis: numberValue$15(payload.update_at ?? record.update_at),
-				recordDurationMillis: numberValue$15(payload.record_duration_millis),
-				editDurationMillis: numberValue$15(payload.edit_duration_millis),
+				templateKind: numberValue$16(payload.template_kind),
+				displayKind: numberValue$16(payload.display_kind),
+				version: numberValue$16(payload.version ?? record.version),
+				updateAtMillis: numberValue$16(payload.update_at ?? record.update_at),
+				recordDurationMillis: numberValue$16(payload.record_duration_millis),
+				editDurationMillis: numberValue$16(payload.edit_duration_millis),
 				contentBlocks: this.media.richContentBlocks(item, session.userId)
 			}) - 1;
 			if (Number.isSafeInteger(senderUserId) && senderUserId > 0) senderUserIdByIndex.set(itemIndex, senderUserId);
@@ -3443,7 +3813,7 @@ var ChatService = class {
 				items[index].avatarRef = await this.profile.sealProfileImageRef(session.userId, senderUserId);
 			}
 		} catch {}
-		const beforeSequence = numberValue$15(data.next_before_seq);
+		const beforeSequence = numberValue$16(data.next_before_seq);
 		let aiPolishSettings;
 		let aiPolishNotices;
 		if (aiPolishDecorations !== void 0) {
@@ -3482,7 +3852,7 @@ var ChatService = class {
 		return {
 			messageRef,
 			reportUid,
-			status: numberValue$15(report.status)
+			status: numberValue$16(report.status)
 		};
 	}
 	async sendSourceText(sourceRef, textContent, options = {}) {
@@ -3513,7 +3883,7 @@ var ChatService = class {
 			return {
 				sourceRef,
 				itemUid: stringValue$1(result.record_uid).trim() || recordUid,
-				status: numberValue$15(result.status),
+				status: numberValue$16(result.status),
 				localState: "synced"
 			};
 		}
@@ -3546,7 +3916,7 @@ var ChatService = class {
 			const raw = objectValue$1(value);
 			const botId = stringValue$1(raw.bot_id).trim();
 			if (!requestedById.has(botId)) continue;
-			if (stringValue$1(raw.provider).trim() !== "openclaw" || !booleanValue$7(raw.installed)) throw new ArkmePluginError("bot-mention-not-installed", "所选 Bot 未安装到该群聊", false, 409);
+			if (stringValue$1(raw.provider).trim() !== "openclaw" || !booleanValue$8(raw.installed)) throw new ArkmePluginError("bot-mention-not-installed", "所选 Bot 未安装到该群聊", false, 409);
 			const name = stringValue$1(raw.name).trim();
 			if (name === "") throw new ArkmePluginError("bot-contract-invalid", "Bot 响应不完整", true, 502);
 			const display = `@${name}`;
@@ -3598,8 +3968,8 @@ var ChatService = class {
 		return {
 			sourceRef,
 			itemUid: stringValue$1(result.record_uid).trim() || recordUid,
-			status: numberValue$15(result.audit_status),
-			sequence: numberValue$15(result.seq),
+			status: numberValue$16(result.audit_status),
+			sequence: numberValue$16(result.seq),
 			localState: "synced"
 		};
 	}
@@ -3655,7 +4025,7 @@ var ChatService = class {
 			return {
 				sourceRef,
 				itemUid: stringValue$1(result.record_uid).trim() || recordUid,
-				status: numberValue$15(result.status),
+				status: numberValue$16(result.status),
 				localState: "synced"
 			};
 		}
@@ -3667,7 +4037,7 @@ var ChatService = class {
 			return {
 				sourceRef,
 				itemUid: stringValue$1(result.record_uid).trim() || recordUid,
-				status: numberValue$15(result.status),
+				status: numberValue$16(result.status),
 				localState: "synced"
 			};
 		}
@@ -3679,8 +4049,8 @@ var ChatService = class {
 		return {
 			sourceRef,
 			itemUid: stringValue$1(result.record_uid).trim() || recordUid,
-			status: numberValue$15(result.audit_status ?? result.status),
-			sequence: numberValue$15(result.seq),
+			status: numberValue$16(result.audit_status ?? result.status),
+			sequence: numberValue$16(result.seq),
 			localState: "synced"
 		};
 	}
@@ -3730,7 +4100,7 @@ var ChatService = class {
 			send_at: sendAtMillis
 		}, session, options.signal);
 		const chatSessionUid = stringValue$1(result.chat_session_uid).trim();
-		const sequence = numberValue$15(result.seq);
+		const sequence = numberValue$16(result.seq);
 		const targetKind = stringValue$1(result.target_kind).trim();
 		if (chatSessionUid === "" || !Number.isSafeInteger(sequence) || sequence <= 0 || targetKind !== "direct") throw new ArkmePluginError("direct-send-response-invalid", "Chat Agent 发送返回了无效响应", true, 502);
 		const responseRecordUid = stringValue$1(result.record_uid).trim() || recordUid;
@@ -3758,10 +4128,10 @@ var ChatService = class {
 			reason: "arkme_dsh_open_chat"
 		}, session);
 		const responseSessionUid = stringValue$1(data.chat_session_uid).trim();
-		const effectiveReadSequence = numberValue$15(data.effective_read_seq);
-		const readAt = numberValue$15(data.read_at);
-		const sessionLastSequence = numberValue$15(data.session_last_seq);
-		const unreadCount = numberValue$15(data.unread_count);
+		const effectiveReadSequence = numberValue$16(data.effective_read_seq);
+		const readAt = numberValue$16(data.read_at);
+		const sessionLastSequence = numberValue$16(data.session_last_seq);
+		const unreadCount = numberValue$16(data.unread_count);
 		if (responseSessionUid !== source.ownerRef || !Number.isSafeInteger(effectiveReadSequence) || effectiveReadSequence < readSequence || readAt <= 0 || sessionLastSequence < effectiveReadSequence || !Number.isSafeInteger(unreadCount) || unreadCount < 0) throw new ArkmePluginError("source-read-ack-invalid", "聊天已读响应不完整", true, 502);
 		const cacheKey = `${String(session.userId)}:${source.ownerRef}`;
 		const cached = this.source.cachedChatSourceByKey(cacheKey);
@@ -3796,9 +4166,9 @@ var ChatService = class {
 			const payload = objectValue$1(record.payload);
 			const uid = stringValue$1(relation.record_uid ?? payload.record_uid).trim();
 			if (uid === "") continue;
-			const senderUserId = numberValue$15(relation.sender_user_id);
+			const senderUserId = numberValue$16(relation.sender_user_id);
 			const aiPolish = this.aiPolish.timelineAiPolish(record, payload);
-			const sendAtMillis = numberValue$15(relation.attach_at ?? payload.send_at);
+			const sendAtMillis = numberValue$16(relation.attach_at ?? payload.send_at);
 			const forwardRecords = await this.chatForwardRecordsPreview(item, session.userId, sendAtMillis);
 			const rawAgentSource = timelineAgentSource(relation, record, payload);
 			const agentSource = senderUserId === session.userId ? this.arko.currentUserAgentSourceFallback(session.userId, rawAgentSource) : rawAgentSource;
@@ -3811,12 +4181,12 @@ var ChatService = class {
 				sendAtMillis,
 				title: stringValue$1(payload.title),
 				textContent: stringValue$1(payload.text_content),
-				status: numberValue$15(record.status),
-				sequence: numberValue$15(relation.seq),
-				...numberValue$15(record.version ?? payload.version) > 0 ? { recordVersion: numberValue$15(record.version ?? payload.version) } : {},
+				status: numberValue$16(record.status),
+				sequence: numberValue$16(relation.seq),
+				...numberValue$16(record.version ?? payload.version) > 0 ? { recordVersion: numberValue$16(record.version ?? payload.version) } : {},
 				...aiPolish === void 0 ? {} : { aiPolish },
 				...forwardRecords === void 0 ? {} : { forwardRecords },
-				displayKind: numberValue$15(payload.display_kind),
+				displayKind: numberValue$16(payload.display_kind),
 				contentBlocks: this.media.richContentBlocks(item, session.userId)
 			});
 		}
@@ -3832,7 +4202,7 @@ var ChatService = class {
 			const sorted = values.map((value, index) => ({
 				value,
 				index,
-				order: numberValue$15(objectValue$1(value).item_order)
+				order: numberValue$16(objectValue$1(value).item_order)
 			})).sort((left, right) => (left.order || left.index) - (right.order || right.index));
 			for (const entry of sorted) {
 				if (projectedItems.length >= 100) return;
@@ -3842,19 +4212,19 @@ var ChatService = class {
 					await appendItems(listValue$15(nestedForward.items), depth + 1);
 					continue;
 				}
-				const senderUserId = numberValue$15(item.source_sender_user_id ?? item.sourceSenderUserId ?? item.owner_id ?? item.ownerId);
+				const senderUserId = numberValue$16(item.source_sender_user_id ?? item.sourceSenderUserId ?? item.owner_id ?? item.ownerId);
 				const senderName = stringValue$1(item.owner_name ?? item.ownerName ?? item.source_display_name ?? item.sourceDisplayName).trim() || "Arkme用户";
 				const textContent = stringValue$1(item.text ?? item.text_preview ?? item.textPreview).trim();
 				const title = stringValue$1(item.title).trim();
-				const imageCount = Math.max(0, Math.trunc(numberValue$15(item.image_count ?? item.imageCount)));
-				const voiceCount = Math.max(0, Math.trunc(numberValue$15(item.voice_count ?? item.voiceCount)));
-				const fileCount = Math.max(0, Math.trunc(numberValue$15(item.file_count ?? item.fileCount)));
+				const imageCount = Math.max(0, Math.trunc(numberValue$16(item.image_count ?? item.imageCount)));
+				const voiceCount = Math.max(0, Math.trunc(numberValue$16(item.voice_count ?? item.voiceCount)));
+				const fileCount = Math.max(0, Math.trunc(numberValue$16(item.file_count ?? item.fileCount)));
 				const fileName = listValue$15(item.file_names ?? item.fileNames).map((value) => stringValue$1(value).trim()).find((value) => value !== "");
 				const contentLabel = imageCount > 0 ? imageCount > 1 ? `[${String(imageCount)}张图片]` : "[图片]" : voiceCount > 0 ? "[语音]" : fileCount > 0 ? fileName === void 0 ? "[文件]" : `[文件] ${fileName}` : stringValue$1(item.availability).trim() !== "" ? "原快记暂不可查看" : void 0;
 				projectedItems.push({
 					senderName,
 					...senderUserId > 0 ? { avatarRef: await this.profile.sealProfileImageRef(viewerUserId, senderUserId) } : {},
-					sendAtMillis: numberValue$15(item.send_at ?? item.sendAt),
+					sendAtMillis: numberValue$16(item.send_at ?? item.sendAt),
 					title,
 					textContent,
 					...contentLabel === void 0 ? {} : { contentLabel }
@@ -3863,7 +4233,7 @@ var ChatService = class {
 		};
 		await appendItems(listValue$15(payload.items), 0);
 		const summaryLines = listValue$15(payload.summary_lines ?? payload.summaryLines).map((value) => stringValue$1(value).trim()).filter((value) => value !== "");
-		const createdAtMillis = numberValue$15(payload.created_at ?? payload.createdAt) || fallbackCreatedAtMillis;
+		const createdAtMillis = numberValue$16(payload.created_at ?? payload.createdAt) || fallbackCreatedAtMillis;
 		return {
 			title: stringValue$1(payload.title).trim() || "转发快记",
 			createdAtMillis,
@@ -3872,7 +4242,7 @@ var ChatService = class {
 		};
 	}
 	sealMessageRef(userId, chatSessionUid, relationUid, signingKey) {
-		const payload = encodeOpaqueJson$4({
+		const payload = encodeOpaqueJson$5({
 			version: 1,
 			userId,
 			chatSessionUid,
@@ -3889,13 +4259,13 @@ var ChatService = class {
 		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("message-ref-invalid", "Arkme 消息引用无效", false);
 		let parsed;
 		try {
-			parsed = objectValue$1(decodeOpaqueJson$4(payload));
+			parsed = objectValue$1(decodeOpaqueJson$5(payload));
 		} catch (error) {
 			throw new ArkmePluginError("message-ref-invalid", "Arkme 消息引用无效", false, 400, { cause: error });
 		}
 		const result = {
 			version: 1,
-			userId: numberValue$15(parsed.userId),
+			userId: numberValue$16(parsed.userId),
 			chatSessionUid: stringValue$1(parsed.chatSessionUid).trim(),
 			relationUid: stringValue$1(parsed.relationUid).trim()
 		};
@@ -3904,6 +4274,167 @@ var ChatService = class {
 	}
 };
 //#endregion
+//#region src/services/contact-service.ts
+const CONTACT_REF_TTL_MS = 10 * 6e4;
+const MAX_CONTACT_REFS = 512;
+const CONTACT_REF_PATTERN = /^arkme-contact-v1\.[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function numberValue$15(value) {
+	const parsed = typeof value === "number" ? value : typeof value === "string" ? Number(value) : NaN;
+	return Number.isFinite(parsed) ? parsed : 0;
+}
+function booleanValue$7(value) {
+	return value === true;
+}
+function normalizeIdentifier(value) {
+	const trimmed = value.trim().replace(/^@/, "");
+	if (trimmed === "" || trimmed.length > 64) throw new ArkmePluginError("contact-identifier-invalid", "请输入手机号或即我号", false);
+	const compactPhone = trimmed.replace(/[\s()-]/g, "").replace(/^\+86/, "");
+	if (/^\d+$/.test(compactPhone)) {
+		if (!/^1[3-9]\d{9}$/.test(compactPhone)) throw new ArkmePluginError("contact-phone-invalid", "请输入有效的中国大陆手机号", false);
+		return {
+			kind: "phone",
+			identifierType: 1,
+			identifier: compactPhone,
+			phonePre: "86"
+		};
+	}
+	if (!/^[A-Za-z][A-Za-z0-9_-]{1,63}$/.test(trimmed)) throw new ArkmePluginError("contact-arkme-id-invalid", "即我号格式无效", false);
+	return {
+		kind: "arkme_id",
+		identifierType: 2,
+		identifier: trimmed,
+		phonePre: "86"
+	};
+}
+var ContactService = class {
+	runtime;
+	source;
+	profile;
+	realtime;
+	candidates = /* @__PURE__ */ new Map();
+	constructor(runtime, source, profile, realtime) {
+		this.runtime = runtime;
+		this.source = source;
+		this.profile = profile;
+		this.realtime = realtime;
+	}
+	dispose() {
+		this.candidates.clear();
+	}
+	async search(identifier, options = {}) {
+		const session = await this.runtime.requireSession();
+		const normalized = normalizeIdentifier(identifier);
+		const candidate = await this.lookup(normalized, session, options.signal);
+		this.prune();
+		this.candidates.set(candidate.result.contactRef, candidate);
+		this.prune();
+		return candidate.result;
+	}
+	async add(contactRef, options = {}) {
+		const session = await this.runtime.requireSession();
+		this.prune();
+		const normalizedContactRef = contactRef.trim();
+		if (!CONTACT_REF_PATTERN.test(normalizedContactRef)) throw new ArkmePluginError("contact-ref-invalid", "联系人搜索引用无效，请重新搜索", false);
+		const cached = this.candidates.get(normalizedContactRef);
+		if (cached === void 0 || cached.userId !== session.userId || cached.expiresAtMillis <= Date.now()) throw new ArkmePluginError("contact-ref-expired", "联系人搜索结果已过期，请重新搜索", false, 410);
+		const candidate = await this.lookup(cached.normalized, session, options.signal, normalizedContactRef);
+		if (candidate.targetUserId !== cached.targetUserId || candidate.result.registered !== cached.result.registered) {
+			this.candidates.delete(normalizedContactRef);
+			throw new ArkmePluginError("contact-candidate-changed", "联系人身份已发生变化，请重新搜索后确认", false, 409);
+		}
+		if (candidate.result.isSelf) throw new ArkmePluginError("contact-self-invalid", "不能添加自己为联系人", false);
+		if (!candidate.result.canAdd) throw new ArkmePluginError("contact-add-unavailable", "该账号当前无法添加", false, 409);
+		const remark = options.remark?.trim() ?? "";
+		if (Array.from(remark).length > 100) throw new ArkmePluginError("contact-remark-invalid", "备注不能超过 100 个字符", false);
+		const requestUid = options.requestUid?.trim() || randomUUID();
+		if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(requestUid)) throw new ArkmePluginError("contact-request-uid-invalid", "联系人添加请求标识无效", false);
+		const chatSessionUid = `chat_session_${requestUid}`;
+		const displayName = candidate.result.displayName;
+		const common = {
+			chat_session_uid: chatSessionUid,
+			create_at: Date.now(),
+			...remark === "" ? {} : { remark }
+		};
+		const registered = candidate.result.registered && candidate.targetUserId !== void 0;
+		const bundle = registered ? await this.runtime.authenticatedChatPost("/api/v1/chats/contacts/add-and-open-private", {
+			...common,
+			target_user_id: candidate.targetUserId,
+			target_display_name_snapshot: displayName
+		}, session, options.signal, { key: `contact:add:${requestUid}` }) : await this.runtime.authenticatedChatPost("/api/v1/chats/contacts/add-and-open-pending-phone", {
+			...common,
+			phone_pre: candidate.normalized.phonePre,
+			phone: candidate.phone ?? candidate.normalized.identifier,
+			display_name_snapshot: displayName
+		}, session, options.signal, { key: `contact:add:${requestUid}` });
+		let source = await this.source.chatSourceFromBundle(bundle, session, void 0, []);
+		if (registered && candidate.targetUserId !== void 0) source = {
+			...source,
+			avatarRef: await this.profile.sealProfileImageRef(session.userId, candidate.targetUserId)
+		};
+		const returnedUid = stringValue$1(objectValue$1(bundle.session).chat_session_uid).trim();
+		if (returnedUid === "") throw new ArkmePluginError("contact-add-contract-invalid", "联系人添加响应不完整", true, 502);
+		this.source.setChatSource(session.userId, returnedUid, source);
+		this.source.invalidateSourceListCache(session.userId, "root");
+		this.realtime.emitChatClientEvent({
+			type: "sessions-delta",
+			revision: this.realtime.nextChatClientRevision(),
+			updates: [{
+				sourceKey: source.sourceKey ?? await this.source.chatDirectorySourceKey(session.userId, returnedUid),
+				source,
+				timelineItems: []
+			}]
+		});
+		this.candidates.delete(normalizedContactRef);
+		return {
+			state: registered ? "ready" : "pending",
+			source
+		};
+	}
+	async lookup(normalized, session, signal, contactRef = `arkme-contact-v1.${randomUUID()}`) {
+		const data = await this.runtime.authenticatedAuthPost("/api/v1/auth/search-contact-account", {
+			identifier_type: normalized.identifierType,
+			identifier: normalized.identifier,
+			phone_pre: normalized.phonePre
+		}, session, signal, {
+			key: `contact:search:${normalized.identifierType}:${normalized.identifier}`,
+			bypassCache: true
+		});
+		const targetUserId = Math.trunc(numberValue$15(data.user_id));
+		const registered = booleanValue$7(data.is_registered) && targetUserId > 0;
+		const isSelf = booleanValue$7(data.is_self);
+		const canAdd = booleanValue$7(data.can_add) && !isSelf && (normalized.kind === "phone" || registered);
+		const displayName = stringValue$1(data.nick_name).trim() || stringValue$1(data.jotmo_id).trim() || (normalized.kind === "phone" ? `+${normalized.phonePre} ${normalized.identifier}` : normalized.identifier);
+		const result = {
+			contactRef,
+			identifierKind: normalized.kind,
+			displayName,
+			...stringValue$1(data.jotmo_id).trim() === "" ? {} : { arkmeId: stringValue$1(data.jotmo_id).trim() },
+			...registered ? { avatarRef: await this.profile.sealProfileImageRef(session.userId, targetUserId) } : {},
+			registered,
+			inviteBySms: booleanValue$7(data.invite_by_sms),
+			canAdd,
+			isSelf
+		};
+		return {
+			userId: session.userId,
+			expiresAtMillis: Date.now() + CONTACT_REF_TTL_MS,
+			normalized,
+			result,
+			...targetUserId > 0 ? { targetUserId } : {},
+			...normalized.kind === "phone" ? { phone: stringValue$1(data.phone).trim() || normalized.identifier } : {}
+		};
+	}
+	prune() {
+		const now = Date.now();
+		for (const [ref, candidate] of this.candidates) if (candidate.expiresAtMillis <= now) this.candidates.delete(ref);
+		while (this.candidates.size >= MAX_CONTACT_REFS) {
+			const oldest = this.candidates.keys().next().value;
+			if (oldest === void 0) break;
+			this.candidates.delete(oldest);
+		}
+	}
+};
+//#endregion
 //#region src/services/community-service.ts
 function numberValue$14(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
@@ -4119,7 +4650,7 @@ var ExtensionReviewService = class {
 				422
 			].includes(error.httpStatus)) {
 				await this.runtime.stateStore.removeExtensionReviewOperation(userId, operation.clientMutationId);
-				throw new ArkmePluginError("extension-review-registry-rejected", `评论已写入首页，但扩展市场未接受：${error.message}`, false, error.httpStatus, { cause: error });
+				throw new ArkmePluginError("extension-review-registry-rejected", `评论已写入首页，但市集未接受：${error.message}`, false, error.httpStatus, { cause: error });
 			}
 			await this.runtime.stateStore.markExtensionReviewOperation(userId, operation.clientMutationId, "failed", safeFailureMessage$5(error));
 			throw new ArkmePluginError("extension-review-registry-pending", "评论已写入首页，但同步到扩展详情失败；请保留当前内容并重试", true, 503, { cause: error });
@@ -4658,12 +5189,19 @@ var GroupAiPolishService = class {
 };
 //#endregion
 //#region src/services/group-service.ts
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function numberValue$12(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
 function listValue$12(value) {
 	return Array.isArray(value) ? value : [];
 }
+function encodeOpaqueJson$4(value) {
+	return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
+}
+function decodeOpaqueJson$4(value) {
+	return JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+}
 function chatMessageDnd$1(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
 	const policy = value;
@@ -4685,10 +5223,325 @@ var GroupService = class {
 	runtime;
 	source;
 	profile;
-	constructor(runtime, source, profile) {
+	inviteSender;
+	constructor(runtime, source, profile, inviteSender) {
 		this.runtime = runtime;
 		this.source = source;
 		this.profile = profile;
+		this.inviteSender = inviteSender;
+	}
+	async groupInvitePreview(sourceRef, signal) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持邀请群聊协作者", false);
+		const preview = objectValue$1((await this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, signal)).preview);
+		const inviteLink = stringValue$1(preview.invite_link).trim();
+		if (inviteLink === "") throw new ArkmePluginError("group-invite-unavailable", "邀请链接生成失败，请重试", true);
+		return {
+			source: await this.source.sourceItem(source),
+			title: stringValue$1(preview.title).trim() || source.displayName,
+			inviterDisplayName: stringValue$1(preview.creator_display_name).trim() || "Arkme",
+			inviteLink,
+			expireAtMillis: numberValue$12(preview.expire_at),
+			mode: numberValue$12(preview.join_mode) === 2 ? "approval_invite" : "direct_add"
+		};
+	}
+	async listGroupMemberCandidates(sourceRef, options = {}) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持向群聊添加成员", false);
+		const limit = Math.min(50, Math.max(1, Math.trunc(options.limit ?? 20)));
+		const query = options.query?.trim().toLocaleLowerCase() ?? "";
+		const requestedGroupSourceRefs = [...new Set((options.groupSourceRefs ?? []).map((value) => value.trim()).filter((value) => value !== ""))].slice(0, 20);
+		const [membersData, directoryData, inviteData] = await Promise.all([
+			this.runtime.authenticatedChatPost("/api/v1/chats/members/list", {
+				chat_session_uid: source.ownerRef,
+				active_only: true
+			}, session, options.signal).catch(() => ({})),
+			this.runtime.authenticatedChatPost("/api/v1/chats/list", { limit: 50 }, session, options.signal),
+			this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, options.signal).catch(() => ({}))
+		]);
+		const directoryBundles = listValue$12(directoryData.items);
+		const privateBundles = directoryBundles.filter((raw) => {
+			const kind = numberValue$12(objectValue$1(objectValue$1(raw).session).session_kind);
+			return kind === 1 || kind === 3;
+		});
+		const privateTopicIds = privateBundles.map((raw) => {
+			const chatSession = objectValue$1(objectValue$1(raw).session);
+			return numberValue$12(chatSession.shared_topic_id ?? chatSession.subject_id);
+		}).filter((value) => Number.isSafeInteger(value) && value > 0);
+		const partnerData = privateTopicIds.length === 0 ? {} : await this.runtime.authenticatedSubjectPost("/api/v1/private/get-partner-info-v2", { rm_subject_ids: [...new Set(privateTopicIds)] }, session, options.signal).catch(() => ({}));
+		const contactByTopicId = /* @__PURE__ */ new Map();
+		for (const raw of listValue$12(partnerData.item_ls)) {
+			const item = objectValue$1(raw);
+			const topicId = numberValue$12(item.rm_subject_id ?? item.shared_topic_id);
+			if (topicId > 0 && typeof item.is_contact === "boolean") contactByTopicId.set(topicId, item.is_contact);
+		}
+		const existingMemberUserIds = new Set(listValue$12(objectValue$1(membersData).items).map((item) => numberValue$12(objectValue$1(item).user_id)));
+		const rawCandidates = /* @__PURE__ */ new Map();
+		for (const raw of privateBundles) {
+			const bundle = objectValue$1(raw);
+			const chatSession = objectValue$1(bundle.session);
+			if (numberValue$12(chatSession.session_kind) !== 1 && numberValue$12(chatSession.session_kind) !== 3) continue;
+			const counterpart = objectValue$1(bundle.private_counterpart);
+			const supplement = objectValue$1(bundle.private_supplement);
+			const targetUserId = numberValue$12(counterpart.user_id);
+			const privateChatSessionUid = stringValue$1(chatSession.chat_session_uid).trim();
+			const displayName = stringValue$1(supplement.remark ?? supplement.counterpart_name_snapshot ?? counterpart.display_name_snapshot ?? supplement.pending_name ?? counterpart.visible_phone).trim();
+			const privateTopicId = numberValue$12(chatSession.shared_topic_id ?? chatSession.subject_id);
+			const contactState = numberValue$12(supplement.contact_state);
+			const relation = contactByTopicId.get(privateTopicId) === true || contactState === 1 || contactState === 3 ? "contact" : "stranger";
+			if (!Number.isSafeInteger(targetUserId) || targetUserId <= 0 || targetUserId === session.userId || privateChatSessionUid === "" || displayName === "" || query !== "" && !displayName.toLocaleLowerCase().includes(query)) continue;
+			rawCandidates.set(targetUserId, {
+				targetUserId,
+				displayName,
+				privateChatSessionUid,
+				relation,
+				origin: "private_chat"
+			});
+		}
+		const selected = [...rawCandidates.entries()].slice(0, limit);
+		const sourceByGroupUid = /* @__PURE__ */ new Map();
+		const groupSessionUidByIndex = /* @__PURE__ */ new Map();
+		const groups = [];
+		for (const raw of directoryBundles) {
+			const bundle = objectValue$1(raw);
+			const chatSession = objectValue$1(bundle.session);
+			if (numberValue$12(chatSession.session_kind) !== 2) continue;
+			const groupSessionUid = stringValue$1(chatSession.chat_session_uid).trim();
+			if (groupSessionUid === "" || groupSessionUid === source.ownerRef) continue;
+			const displayName = stringValue$1(chatSession.title ?? chatSession.subject_title ?? objectValue$1(bundle.participant_summary).display_name).trim();
+			const groupItem = {
+				sourceRef: await this.source.sealSourceRef(session.userId, "group_chat", groupSessionUid, displayName || "群聊"),
+				sourceKey: await this.source.chatDirectorySourceKey(session.userId, groupSessionUid),
+				kind: "group_chat",
+				displayName: displayName || "群聊",
+				activeAtMillis: numberValue$12(chatSession.updated_at),
+				unreadCount: 0
+			};
+			const groupIndex = groups.push(groupItem) - 1;
+			groupSessionUidByIndex.set(groupIndex, groupSessionUid);
+			sourceByGroupUid.set(groupSessionUid, groupItem);
+			this.source.setChatSource(session.userId, groupSessionUid, groupItem);
+		}
+		try {
+			await this.source.hydrateSourceAvatars(groups, /* @__PURE__ */ new Map(), groupSessionUidByIndex, session, options.signal);
+		} catch {}
+		const requestedGroupSources = [];
+		for (const groupSourceRef of requestedGroupSourceRefs) {
+			const groupSource = await this.source.openSourceRef(groupSourceRef, session.userId);
+			if (groupSource.kind !== "group_chat" || groupSource.ownerRef === source.ownerRef) continue;
+			requestedGroupSources.push(groupSource);
+		}
+		const groupRawByUid = /* @__PURE__ */ new Map();
+		const groupTargetUserIds = /* @__PURE__ */ new Set();
+		for (const groupSource of requestedGroupSources) {
+			const group = sourceByGroupUid.get(groupSource.ownerRef) ?? await this.source.sourceItem(groupSource);
+			try {
+				const groupMembersData = await this.runtime.authenticatedChatPost("/api/v1/chats/members/list", {
+					chat_session_uid: groupSource.ownerRef,
+					active_only: true
+				}, session, options.signal);
+				const raws = [];
+				const seenUserIds = /* @__PURE__ */ new Set();
+				for (const rawMember of listValue$12(groupMembersData.items)) {
+					const member = objectValue$1(rawMember);
+					const targetUserId = numberValue$12(member.user_id);
+					if (!Number.isSafeInteger(targetUserId) || targetUserId <= 0 || targetUserId === session.userId || seenUserIds.has(targetUserId)) continue;
+					if (chatMemberStatus(member.status) !== "active") continue;
+					const privateCandidate = rawCandidates.get(targetUserId);
+					if (privateCandidate !== void 0) {
+						if (query === "" || privateCandidate.displayName.toLocaleLowerCase().includes(query)) {
+							raws.push(privateCandidate);
+							groupTargetUserIds.add(targetUserId);
+							seenUserIds.add(targetUserId);
+						}
+						continue;
+					}
+					const profileName = stringValue$1(member.profile_display_name).trim();
+					const displayName = [
+						stringValue$1(member.remark).trim(),
+						stringValue$1(member.display_name_snapshot).trim(),
+						profileName === `用户 ${String(targetUserId)}` ? "" : profileName,
+						stringValue$1(objectValue$1(member.user_info).nick_name).trim(),
+						String(targetUserId)
+					].find((value) => value !== "" && value !== "成员" && value !== "群成员") ?? "群成员";
+					if (query !== "" && !displayName.toLocaleLowerCase().includes(query)) continue;
+					raws.push({
+						targetUserId,
+						displayName,
+						relation: "group",
+						origin: "group_chat"
+					});
+					groupTargetUserIds.add(targetUserId);
+					seenUserIds.add(targetUserId);
+				}
+				groupRawByUid.set(groupSource.ownerRef, {
+					group,
+					raws: raws.slice(0, limit),
+					total: raws.length
+				});
+			} catch (error) {
+				groupRawByUid.set(groupSource.ownerRef, {
+					group,
+					raws: [],
+					total: 0,
+					error: error instanceof Error && error.message.trim() !== "" ? error.message : "群成员加载失败，请重试"
+				});
+			}
+		}
+		const profiles = await this.profile.publicProfileSummariesByUserIds([.../* @__PURE__ */ new Set([...selected.map(([userId]) => userId), ...groupTargetUserIds])], session, options.signal).catch(() => /* @__PURE__ */ new Map());
+		const preview = objectValue$1(objectValue$1(inviteData).preview);
+		const approvalRequired = numberValue$12(preview.join_mode) === 2;
+		const candidateItem = async (targetUserId, candidate) => {
+			const alreadyMember = existingMemberUserIds.has(targetUserId);
+			const cannotInvite = approvalRequired && candidate.privateChatSessionUid === void 0;
+			return {
+				candidateRef: await this.sealCandidateRef({
+					version: 1,
+					userId: session.userId,
+					groupChatSessionUid: source.ownerRef,
+					targetUserId,
+					origin: candidate.origin,
+					displayName: candidate.displayName,
+					...candidate.privateChatSessionUid === void 0 ? {} : { privateChatSessionUid: candidate.privateChatSessionUid }
+				}),
+				displayName: candidate.displayName,
+				...profiles.get(targetUserId)?.avatarUrl === void 0 ? {} : { avatarRef: await this.profile.sealProfileImageRef(session.userId, targetUserId) },
+				origin: candidate.origin,
+				relation: candidate.relation,
+				...alreadyMember ? {
+					disabled: true,
+					alreadyMember: true
+				} : {},
+				...!alreadyMember && cannotInvite ? {
+					disabled: true,
+					statusText: "无法邀请"
+				} : {}
+			};
+		};
+		const items = await Promise.all(selected.map(async ([targetUserId, candidate]) => candidateItem(targetUserId, candidate)));
+		const groupCandidates = await Promise.all([...groupRawByUid.values()].map(async (value) => ({
+			group: value.group,
+			items: await Promise.all(value.raws.map((raw) => candidateItem(raw.targetUserId, raw))),
+			total: value.total,
+			...value.error === void 0 ? {} : { error: value.error }
+		})));
+		return {
+			source: await this.source.sourceItem(source),
+			items,
+			total: rawCandidates.size,
+			hasMore: rawCandidates.size > items.length,
+			mode: numberValue$12(preview.join_mode) === 2 ? "approval_invite" : "direct_add",
+			groups,
+			groupCandidates,
+			contactCount: [...rawCandidates.values()].filter((item) => item.relation === "contact").length,
+			strangerCount: [...rawCandidates.values()].filter((item) => item.relation === "stranger").length
+		};
+	}
+	async addGroupMembers(sourceRef, candidateRefs, signal) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-source-invalid", "仅支持向群聊添加成员", false);
+		const refs = candidateRefs.map((value) => value.trim());
+		if (refs.length === 0 || refs.length > 20 || refs.some((value) => value === "") || new Set(refs).size !== refs.length) throw new ArkmePluginError("group-member-candidates-invalid", "请选择 1-20 个不重复的成员候选项", false);
+		const preview = objectValue$1(objectValue$1(await this.runtime.authenticatedChatPost("/api/v1/chats/governance/invite-preview", { chat_session_uid: source.ownerRef }, session, signal)).preview);
+		const approvalRequired = numberValue$12(preview.join_mode) === 2;
+		const inviteLink = stringValue$1(preview.invite_link).trim();
+		const results = [];
+		for (const candidateRef of refs) {
+			let candidate;
+			try {
+				candidate = await this.openCandidateRef(candidateRef, session.userId, source.ownerRef);
+				if (approvalRequired) {
+					if (candidate.privateChatSessionUid === void 0) throw new ArkmePluginError("group-candidate-invite-unavailable", "该对象暂时无法发送群聊邀请", false);
+					if (this.inviteSender === void 0 || inviteLink === "") throw new ArkmePluginError("group-invite-unavailable", "该群需要发送邀请，但邀请链接暂不可用", true);
+					const privateSourceRef = await this.source.sealSourceRef(session.userId, "private_chat", candidate.privateChatSessionUid, candidate.displayName);
+					await this.inviteSender.sendPrivateText(privateSourceRef, candidate.privateChatSessionUid, `邀请你加入群聊“${source.displayName}”：${inviteLink}`, `chat_record_${randomUUID()}`, `chat_rel_${randomUUID()}`, session, signal);
+					results.push({
+						candidateRef,
+						displayName: candidate.displayName,
+						status: "invite_sent"
+					});
+					continue;
+				}
+				const outcome = stringValue$1(objectValue$1((await this.runtime.authenticatedChatPost("/api/v1/chats/members/add", {
+					chat_session_uid: source.ownerRef,
+					target_user_id: candidate.targetUserId,
+					join_at: Date.now(),
+					display_name_snapshot: candidate.displayName,
+					extra: { source: "dsh_arkme_candidate" }
+				}, session, signal)).item).outcome);
+				results.push({
+					candidateRef,
+					displayName: candidate.displayName,
+					status: outcome === "idempotent_hit" ? "already_member" : outcome === "updated" ? "reactivated" : "added"
+				});
+			} catch (error) {
+				results.push({
+					candidateRef,
+					displayName: candidate?.displayName ?? "成员",
+					status: "failed",
+					error: error instanceof Error && error.message.trim() !== "" ? error.message : "添加成员失败"
+				});
+			}
+		}
+		return {
+			source: await this.source.sourceItem(source),
+			results,
+			succeededCount: results.filter((item) => item.status !== "failed").length,
+			failedCount: results.filter((item) => item.status === "failed").length
+		};
+	}
+	async sealCandidateRef(payload) {
+		const encoded = encodeOpaqueJson$4(payload);
+		return `arkme-group-candidate-v1.${encoded}.${createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(encoded).digest("base64url")}`;
+	}
+	async openCandidateRef(candidateRef, expectedUserId, expectedGroupChatSessionUid) {
+		const parts = candidateRef.split(".");
+		if (parts.length !== 3 || parts[0] !== "arkme-group-candidate-v1") throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false);
+		const encoded = parts[1] ?? "";
+		const supplied = Buffer.from(parts[2] ?? "", "base64url");
+		const expected = createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(encoded).digest();
+		if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false);
+		let raw;
+		try {
+			raw = objectValue$1(decodeOpaqueJson$4(encoded));
+		} catch (error) {
+			throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用无效", false, 400, { cause: error });
+		}
+		const result = {
+			version: 1,
+			userId: numberValue$12(raw.userId),
+			groupChatSessionUid: stringValue$1(raw.groupChatSessionUid).trim(),
+			targetUserId: numberValue$12(raw.targetUserId),
+			displayName: stringValue$1(raw.displayName).trim(),
+			...stringValue$1(raw.privateChatSessionUid).trim() === "" ? {} : { privateChatSessionUid: stringValue$1(raw.privateChatSessionUid).trim() },
+			origin: raw.origin === "group_chat" ? "group_chat" : "private_chat"
+		};
+		if (raw.version !== 1 || result.userId !== expectedUserId || result.groupChatSessionUid !== expectedGroupChatSessionUid || !Number.isSafeInteger(result.targetUserId) || result.targetUserId <= 0 || result.targetUserId === expectedUserId || result.displayName === "") throw new ArkmePluginError("group-candidate-ref-invalid", "群成员候选引用与当前账号不匹配", false, 403);
+		return result;
+	}
+	async createGroup(title, clientMutationId, options = {}) {
+		const normalizedTitle = title.trim();
+		if (normalizedTitle === "" || Array.from(normalizedTitle).length > 80) throw new ArkmePluginError("group-title-invalid", "群聊名称需为 1-80 个字符", false);
+		if (!UUID.test(clientMutationId)) throw new ArkmePluginError("client-mutation-id-invalid", "群聊操作标识无效", false);
+		const session = await this.runtime.requireSession();
+		let data;
+		try {
+			data = await this.runtime.authenticatedChatPost("/api/v1/chats/create-group", {
+				chat_session_uid: clientMutationId,
+				title: normalizedTitle,
+				member_user_ids: [],
+				create_at: Date.now()
+			}, session, options.signal);
+		} catch (error) {
+			if (error instanceof ArkmePluginError && ["arkme-network-error", "arkme-timeout"].includes(error.code)) throw new ArkmePluginError("group-create-outcome-unknown", "群聊创建结果未知，请刷新会话列表确认；不会自动重试", false, 409, { cause: error });
+			throw error;
+		}
+		const source = await this.source.chatSourceFromBundle(data, session, void 0, []);
+		this.source.setChatSourceByKey(`${String(session.userId)}:${clientMutationId}`, source);
+		return source;
 	}
 	async listGroupMembers(sourceRef, options = {}) {
 		const session = await this.runtime.requireSession();
@@ -4731,7 +5584,8 @@ var GroupService = class {
 				status,
 				isSelf: userId === session.userId,
 				isOwner: role === "owner",
-				joinedAtMillis: numberValue$12(item.join_at)
+				joinedAtMillis: numberValue$12(item.join_at),
+				recordCount: Math.max(0, Math.trunc(numberValue$12(objectValue$1(item.extra).record_count)))
 			});
 		}
 		const roleRank = (role) => role === "owner" ? 0 : role === "admin" ? 1 : role === "member" ? 2 : 3;
@@ -5174,6 +6028,33 @@ function md5Text(value) {
 function allowedSignedImageHost$2(environment, hostname) {
 	return (environment === "prod" ? ["jotmo-userfiles.oss-cn-hangzhou.aliyuncs.com", "userfiles.jotmo.cc"] : ["jotmo-userfiles-test.oss-cn-hangzhou.aliyuncs.com", "jotmo-userfiles.senguo.me"]).includes(hostname.toLowerCase());
 }
+function allowedSignedAudioHost(environment, hostname) {
+	return (environment === "prod" ? ["jotmo-useraudio.oss-cn-hangzhou.aliyuncs.com"] : ["jotmo-useraudio-test.oss-cn-hangzhou.aliyuncs.com"]).includes(hostname.toLowerCase());
+}
+function trustedWorldVoiceprintAudioUrl(environment, raw) {
+	let parsed;
+	try {
+		parsed = new URL(raw.trim());
+	} catch (error) {
+		throw new ArkmePluginError("world-voiceprint-audio-invalid", "世界声纹音频地址无效", true, 502, { cause: error });
+	}
+	const signature = parsed.searchParams.get("x-oss-signature")?.trim() ?? "";
+	if (parsed.protocol !== "https:" || parsed.username !== "" || parsed.password !== "" || parsed.hash !== "" || !allowedSignedAudioHost(environment, parsed.hostname) || parsed.pathname.replace(/^\/+/, "") === "" || signature === "") throw new ArkmePluginError("world-voiceprint-audio-rejected", "世界声纹音频来源不受信任", false, 502);
+	return parsed;
+}
+function worldVoiceprintFileName(mimeType) {
+	const extension = {
+		wav: "wav",
+		"x-wav": "wav",
+		mpeg: "mp3",
+		mp4: "m4a",
+		aac: "aac",
+		ogg: "ogg",
+		webm: "webm",
+		flac: "flac"
+	}[mimeType.split(";", 1)[0].trim().toLowerCase().replace(/^audio\//, "")];
+	return extension === void 0 ? "世界声纹" : `世界声纹.${extension}`;
+}
 function trustedSignedImageUrl$1(environment, raw) {
 	let parsed;
 	try {
@@ -5234,6 +6115,7 @@ var MediaService = class {
 	worldImages;
 	recordIdentity;
 	mediaRefs = /* @__PURE__ */ new Map();
+	stableMediaRefs = /* @__PURE__ */ new Map();
 	imageCache = /* @__PURE__ */ new Map();
 	imageInFlight = /* @__PURE__ */ new Map();
 	imageCacheBytes = 0;
@@ -5247,6 +6129,7 @@ var MediaService = class {
 	}
 	dispose() {
 		this.mediaRefs.clear();
+		this.stableMediaRefs.clear();
 		this.imageCache.clear();
 		this.imageInFlight.clear();
 		this.imageCacheBytes = 0;
@@ -5353,18 +6236,20 @@ var MediaService = class {
 			throw error;
 		}
 	}
-	async fetchMedia(mediaRef, range) {
+	async fetchMedia(mediaRef, range, signal) {
 		const session = await this.runtime.requireSession();
 		const descriptor = this.mediaRefs.get(mediaRef);
 		if (descriptor === void 0 || descriptor.viewerUserId !== session.userId || descriptor.expiresAtMillis <= Date.now()) {
 			this.mediaRefs.delete(mediaRef);
+			if (descriptor?.stableKey !== void 0) this.stableMediaRefs.delete(descriptor.stableKey);
 			throw new ArkmePluginError("media-ref-invalid", "媒体引用已失效，请刷新对话后重试", false, 404);
 		}
 		const url = new URL(descriptor.remoteUrl);
-		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || !allowedSignedImageHost$2(this.runtime.config.environment, url.hostname)) throw new ArkmePluginError("media-host-rejected", "媒体来源不受信任", false, 403);
+		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || !(allowedSignedImageHost$2(this.runtime.config.environment, url.hostname) || allowedSignedAudioHost(this.runtime.config.environment, url.hostname))) throw new ArkmePluginError("media-host-rejected", "媒体来源不受信任", false, 403);
 		const response = await this.runtime.fetchImpl(url, {
 			headers: range === void 0 ? {} : { Range: range },
-			redirect: "error"
+			redirect: "error",
+			...signal === void 0 ? {} : { signal }
 		});
 		if (!response.ok && response.status !== 206) throw new ArkmePluginError("media-fetch-failed", `媒体读取失败（${String(response.status)}）`, true, 502);
 		return {
@@ -5372,6 +6257,17 @@ var MediaService = class {
 			descriptor
 		};
 	}
+	issueWorldVoiceprintMediaRef(viewerUserId, input) {
+		const remoteUrl = trustedWorldVoiceprintAudioUrl(this.runtime.config.environment, input.remoteUrl).toString();
+		const mimeType = input.mimeType.trim() || "audio/wav";
+		if (!mimeType.startsWith("audio/")) throw new ArkmePluginError("world-voiceprint-mime-invalid", "世界声纹音频格式无效", true, 502);
+		return this.issueMediaRef(viewerUserId, {
+			remoteUrl,
+			mimeType,
+			fileName: worldVoiceprintFileName(mimeType),
+			size: 0
+		});
+	}
 	async readImage(imageRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const maximumBytes = imageRef.trim().startsWith("arkme-profile-image-v1.") ? MAX_ARKME_PROFILE_IMAGE_BYTES : MAX_ARKME_IMAGE_BYTES;
@@ -5434,6 +6330,11 @@ var MediaService = class {
 		}
 	}
 	async readImageUncached(session, imageRef, byteLimit, signal) {
+		if (imageRef.trim().startsWith("arkme-media-v1.")) {
+			const { response, descriptor } = await this.fetchMedia(imageRef.trim(), void 0, signal);
+			if (!descriptor.mimeType.trim().toLowerCase().startsWith("image/")) throw new ArkmePluginError("image-type-unsupported", "该媒体引用不是图片", false, 415);
+			return await this.imageBytesFromResponse(response, byteLimit);
+		}
 		if (imageRef.trim().startsWith("arkme-profile-image-v1.")) {
 			const reference = await this.profile.openProfileImageRef(imageRef, session.userId);
 			if (reference.targetUserId === session.userId) {
@@ -5563,20 +6464,33 @@ var MediaService = class {
 			unavailableRecordUids
 		};
 	}
-	issueMediaRef(viewerUserId, descriptor) {
+	issueImageMediaRef(viewerUserId, descriptor, stableIdentity) {
+		return this.issueMediaRef(viewerUserId, descriptor, stableIdentity);
+	}
+	issueMediaRef(viewerUserId, descriptor, stableIdentity) {
 		const now = Date.now();
-		for (const [key, value] of this.mediaRefs) if (value.expiresAtMillis <= now) this.mediaRefs.delete(key);
+		for (const [key, value] of this.mediaRefs) if (value.expiresAtMillis <= now) {
+			this.mediaRefs.delete(key);
+			if (value.stableKey !== void 0) this.stableMediaRefs.delete(value.stableKey);
+		}
 		while (this.mediaRefs.size >= 2e3) {
 			const oldest = this.mediaRefs.keys().next().value;
 			if (oldest === void 0) break;
+			const oldestDescriptor = this.mediaRefs.get(oldest);
 			this.mediaRefs.delete(oldest);
+			if (oldestDescriptor?.stableKey !== void 0) this.stableMediaRefs.delete(oldestDescriptor.stableKey);
 		}
-		const ref = `arkme-media-v1.${randomUUID()}`;
+		const stableKey = stableIdentity === void 0 ? void 0 : createHash("sha256").update(`${String(viewerUserId)}\0${stableIdentity}`).digest("base64url");
+		const ref = (stableKey === void 0 ? void 0 : this.stableMediaRefs.get(stableKey)) ?? `arkme-media-v1.${randomUUID()}`;
+		this.mediaRefs.delete(ref);
+		const lifetimeMillis = stableKey === void 0 ? 30 * 6e4 : 1440 * 6e4;
 		this.mediaRefs.set(ref, {
 			...descriptor,
 			viewerUserId,
-			expiresAtMillis: now + 30 * 6e4
+			expiresAtMillis: now + lifetimeMillis,
+			...stableKey === void 0 ? {} : { stableKey }
 		});
+		if (stableKey !== void 0) this.stableMediaRefs.set(stableKey, ref);
 		return ref;
 	}
 	richContentBlocks(raw, viewerUserId, hydratedDisplayItems = []) {
@@ -5619,7 +6533,7 @@ var MediaService = class {
 					mimeType,
 					fileName,
 					size: Math.max(0, Math.trunc(numberValue$10(item.size)))
-				}),
+				}, kind === "image" && fileAssetUid !== "" ? fileAssetUid : void 0),
 				...fileAssetUid === "" ? {} : { fileAssetUid },
 				fileName,
 				mimeType,
@@ -5663,36 +6577,7 @@ var MediaService = class {
 				signal: controller.signal
 			});
 			if (!response.ok) throw new ArkmePluginError("image-download-failed", `Arkme 图片读取返回 HTTP ${response.status}`, true, 502);
-			const declaredLength = Number(response.headers.get("content-length") ?? 0);
-			if (Number.isFinite(declaredLength) && declaredLength > byteLimit) throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
-			if (response.body === null) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
-			const chunks = [];
-			let bytes = 0;
-			const reader = response.body.getReader();
-			while (true) {
-				const next = await reader.read();
-				if (next.done) break;
-				bytes += next.value.byteLength;
-				if (bytes > byteLimit) {
-					await reader.cancel();
-					throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
-				}
-				chunks.push(next.value);
-			}
-			if (bytes === 0) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
-			const data = new Uint8Array(bytes);
-			let offset = 0;
-			for (const chunk of chunks) {
-				data.set(chunk, offset);
-				offset += chunk.byteLength;
-			}
-			const mediaType = imageMediaType(data);
-			if (mediaType === void 0) throw new ArkmePluginError("image-type-unsupported", "Arkme 图片不是受支持的 PNG、JPEG、WebP 或 GIF", false, 415);
-			return {
-				mediaType,
-				bytes,
-				data
-			};
+			return await this.imageBytesFromResponse(response, byteLimit);
 		} catch (error) {
 			if (error instanceof ArkmePluginError) throw error;
 			if (error.name === "AbortError") throw new ArkmePluginError("image-download-timeout", "Arkme 图片读取超时或已取消", true, 504, { cause: error });
@@ -5702,6 +6587,38 @@ var MediaService = class {
 			signal?.removeEventListener("abort", abort);
 		}
 	}
+	async imageBytesFromResponse(response, byteLimit) {
+		const declaredLength = Number(response.headers.get("content-length") ?? 0);
+		if (Number.isFinite(declaredLength) && declaredLength > byteLimit) throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
+		if (response.body === null) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
+		const chunks = [];
+		let bytes = 0;
+		const reader = response.body.getReader();
+		while (true) {
+			const next = await reader.read();
+			if (next.done) break;
+			bytes += next.value.byteLength;
+			if (bytes > byteLimit) {
+				await reader.cancel();
+				throw new ArkmePluginError("image-too-large", "Arkme 图片超过读取大小限制", false, 413);
+			}
+			chunks.push(next.value);
+		}
+		if (bytes === 0) throw new ArkmePluginError("image-response-empty", "Arkme 图片响应为空", true, 502);
+		const data = new Uint8Array(bytes);
+		let offset = 0;
+		for (const chunk of chunks) {
+			data.set(chunk, offset);
+			offset += chunk.byteLength;
+		}
+		const mediaType = imageMediaType(data);
+		if (mediaType === void 0) throw new ArkmePluginError("image-type-unsupported", "Arkme 图片不是受支持的 PNG、JPEG、WebP 或 GIF", false, 415);
+		return {
+			mediaType,
+			bytes,
+			data
+		};
+	}
 };
 //#endregion
 //#region src/services/outgoing-call-service.ts
@@ -6615,7 +7532,7 @@ function displayTimestamp(value) {
 	const parsed = Date.parse(stringValue(value));
 	return Number.isFinite(parsed) ? parsed : 0;
 }
-function projectRecordingTranscripts(response, speakerResponse) {
+function projectRecordingTranscripts(response, speakerResponse, source = "system") {
 	const data = objectValue(response);
 	const sessions = /* @__PURE__ */ new Map();
 	const sessionSpeakerColorIndexes = /* @__PURE__ */ new Map();
@@ -6659,7 +7576,32 @@ function projectRecordingTranscripts(response, speakerResponse) {
 		const sessionSpeakers = listValue$6(session.spk_ls ?? session.speakers).map(objectValue);
 		const childOffset = numberValue$6(child.start_at);
 		const childStart = childOffset >= 1e11 ? childOffset : numberValue$6(session.start_at) + childOffset;
-		const rows = listValue$6(child.asr);
+		const rows = listValue$6(source === "doubao" ? child.doubao_asr : child.asr);
+		const doubaoStatus = numberValue$6(child.doubao_asr_status);
+		if (source === "doubao" && (doubaoStatus === 1 || doubaoStatus === 2 || doubaoStatus === 4 || doubaoStatus === 5)) {
+			const transcriptStatus = doubaoStatus === 1 || doubaoStatus === 2 ? "processing" : doubaoStatus === 4 ? "silent" : "failed";
+			const text = transcriptStatus === "processing" ? "豆包转写中..." : transcriptStatus === "silent" ? "豆包未识别到人声" : "豆包转写失败";
+			const label = transcriptStatus === "processing" ? "豆包转写中" : transcriptStatus === "silent" ? "豆包静音" : "豆包失败";
+			projected.push({
+				itemId: `${childId || sessionId}:doubao:status`,
+				sessionId,
+				childId,
+				asrItemIndex: 0,
+				transcriptSource: "doubao",
+				startAtMillis: childStart,
+				endAtMillis: childStart + Math.max(0, numberValue$6(child.duration)),
+				speakerNumber: -1,
+				speakerColorIndex: -1,
+				speakerLabel: label,
+				isSelf: false,
+				isBackground: false,
+				text,
+				transcriptStatus,
+				sourceIndex
+			});
+			sourceIndex += 1;
+			continue;
+		}
 		for (let index = 0; index < rows.length; index += 1) {
 			const row = objectValue(rows[index]);
 			const isBackground = numberValue$6(row.b ?? row.background) === 1 || row.background === true;
@@ -6673,15 +7615,15 @@ function projectRecordingTranscripts(response, speakerResponse) {
 			const persistentSpeakerNumber = optionalNumberValue(sessionSpeaker.speaker_display_number ?? sessionSpeaker.speakerDisplayNumber);
 			const speakerNumber = persistentSpeakerNumber !== void 0 && persistentSpeakerNumber > 0 ? persistentSpeakerNumber : rawSpeakerNumber;
 			const speakerColorIndex = sessionSpeakerColorIndexes.get(`${sessionId}:${rawSpeakerNumber}`) ?? Math.max(0, rawSpeakerNumber);
-			const speakerLabel = speakerNumber >= 0 ? `说话人 ${speakerNumber}` : "未知说话人";
+			const speakerLabel = source === "doubao" ? rawSpeakerNumber >= 0 ? `豆包说话人 ${rawSpeakerNumber + 1}` : "豆包说话人" : speakerNumber >= 0 ? `说话人 ${speakerNumber}` : "未知说话人";
 			const startOffset = numberValue$6(row.s ?? row.start_at);
 			const endOffset = Math.max(startOffset, numberValue$6(row.e ?? row.end_at));
 			projected.push({
-				itemId: `${childId || sessionId}:${index}`,
+				itemId: source === "system" ? `${childId || sessionId}:${index}` : `${childId || sessionId}:doubao:${index}`,
 				sessionId,
 				childId,
 				asrItemIndex: index,
-				transcriptSource: "system",
+				transcriptSource: source,
 				startAtMillis: childStart + startOffset,
 				endAtMillis: childStart + endOffset,
 				speakerNumber,
@@ -6690,6 +7632,7 @@ function projectRecordingTranscripts(response, speakerResponse) {
 				isSelf,
 				isBackground,
 				text,
+				...source === "doubao" ? { transcriptStatus: "ready" } : {},
 				sourceIndex
 			});
 			sourceIndex += 1;
@@ -6936,7 +7879,21 @@ var RecordingService = class {
 			days
 		};
 	}
-	async recordingTranscript(dateStamp, signal) {
+	async recordingTranscript(dateStamp, signal, source = "system") {
+		const sections = await this.recordingTranscriptSections(dateStamp, signal);
+		return source === "doubao" ? sections.doubao : sections.system;
+	}
+	async startRecordingDoubaoBackfill(dateStamp, signal) {
+		const date = this.recordingDayStart(dateStamp).getTime();
+		const session = await this.runtime.requireSession();
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/doubao-asr/backfill-day", { start_at: date }, session, signal);
+		return {
+			queuedChildCount: Math.max(0, Math.trunc(numberValue$5(data.queued_child_count))),
+			inFlightChildCount: Math.max(0, Math.trunc(numberValue$5(data.in_flight_child_count))),
+			missingAudioChildCount: Math.max(0, Math.trunc(numberValue$5(data.missing_audio_child_count)))
+		};
+	}
+	async recordingTranscriptSections(dateStamp, signal) {
 		const dayStart = this.recordingDayStart(dateStamp);
 		const date = dayStart.getTime();
 		const session = await this.runtime.requireSession();
@@ -6948,14 +7905,29 @@ var RecordingService = class {
 		let totalDurationMillis = 0;
 		for (const rawSession of listValue$5(transcriptResult.value.session_ls)) totalDurationMillis += Math.max(0, numberValue$5(objectValue$1(rawSession).duration));
 		const speakerData = speakerResult.status === "fulfilled" ? listValue$5(speakerResult.value.spk_ls) : [];
-		const items = projectRecordingTranscripts(transcriptResult.value, speakerData);
-		return {
-			state: items.length > 0 ? "ready" : "empty",
-			items,
-			message: items.length > 0 ? "" : "当天无录音",
-			identityCoverage: speakerResult.status === "fulfilled" ? "complete" : "partial",
+		const identityCoverage = speakerResult.status === "fulfilled" ? "complete" : "partial";
+		const systemItems = projectRecordingTranscripts(transcriptResult.value, speakerData, "system");
+		const doubaoItems = projectRecordingTranscripts(transcriptResult.value, speakerData, "doubao");
+		const system = {
+			state: systemItems.length > 0 ? "ready" : "empty",
+			items: systemItems,
+			message: systemItems.length > 0 ? "" : "当天无录音",
+			identityCoverage,
 			totalDurationMillis
 		};
+		const hasProcessing = doubaoItems.some((item) => item.transcriptStatus === "processing");
+		const hasReady = doubaoItems.some((item) => item.transcriptStatus === "ready" || item.transcriptStatus === "silent" || item.transcriptStatus === void 0);
+		const hasFailed = doubaoItems.some((item) => item.transcriptStatus === "failed");
+		return {
+			system,
+			doubao: {
+				state: hasProcessing ? "processing" : hasReady ? "ready" : hasFailed ? "failed" : "empty",
+				items: doubaoItems,
+				message: hasProcessing ? "豆包转写中" : hasReady ? "" : hasFailed ? "豆包转写失败" : "豆包转写尚未生成",
+				identityCoverage,
+				totalDurationMillis
+			}
+		};
 	}
 	async recordingProjection(dateStamp, kind, signal) {
 		const dayStart = this.recordingDayStart(dateStamp);
@@ -6993,6 +7965,7 @@ var RecordingService = class {
 			version: 1,
 			dateStamp: numberValue$5(raw.dateStamp),
 			content: content === "summary" || content === "timeline" ? content : "transcript",
+			...content === "transcript" && (raw.transcriptSource === "system" || raw.transcriptSource === "doubao") ? { transcriptSource: raw.transcriptSource } : {},
 			itemOffset: numberValue$5(raw.itemOffset),
 			textOffset: numberValue$5(raw.textOffset),
 			fingerprint: stringValue$1(raw.fingerprint),
@@ -7002,25 +7975,31 @@ var RecordingService = class {
 			"transcript",
 			"summary",
 			"timeline"
-		].includes(String(content)) || !Number.isSafeInteger(payload.dateStamp) || payload.dateStamp <= 0 || !Number.isSafeInteger(payload.itemOffset) || payload.itemOffset < 0 || !Number.isSafeInteger(payload.textOffset) || payload.textOffset < 0 || payload.fingerprint === "") throw new ArkmePluginError("recording-cursor-invalid", "录音分页游标无效", false);
+		].includes(String(content)) || content === "transcript" && raw.transcriptSource !== void 0 && raw.transcriptSource !== "system" && raw.transcriptSource !== "doubao" || !Number.isSafeInteger(payload.dateStamp) || payload.dateStamp <= 0 || !Number.isSafeInteger(payload.itemOffset) || payload.itemOffset < 0 || !Number.isSafeInteger(payload.textOffset) || payload.textOffset < 0 || payload.fingerprint === "") throw new ArkmePluginError("recording-cursor-invalid", "录音分页游标无效", false);
 		return payload;
 	}
 	async recordingDay(dateStamp) {
 		const date = this.recordingDayStart(dateStamp).getTime();
 		const [transcriptResult, summaryResult, timelineResult] = await Promise.allSettled([
-			this.recordingTranscript(date),
+			this.recordingTranscriptSections(date),
 			this.recordingProjection(date, "summary"),
 			this.recordingProjection(date, "timeline")
 		]);
-		const transcript = transcriptResult.status === "fulfilled" ? transcriptResult.value : {
+		const transcript = transcriptResult.status === "fulfilled" ? transcriptResult.value.system : {
+			state: "error",
+			items: [],
+			message: safeFailureMessage$2(transcriptResult.reason)
+		};
+		const doubaoTranscript = transcriptResult.status === "fulfilled" ? transcriptResult.value.doubao : {
 			state: "error",
 			items: [],
 			message: safeFailureMessage$2(transcriptResult.reason)
 		};
 		return {
 			dateStamp: date,
-			totalDurationMillis: transcriptResult.status === "fulfilled" ? transcriptResult.value.totalDurationMillis : 0,
+			totalDurationMillis: transcriptResult.status === "fulfilled" ? transcriptResult.value.system.totalDurationMillis : 0,
 			transcript,
+			doubaoTranscript,
 			summary: summaryResult.status === "fulfilled" ? summaryResult.value : {
 				state: "error",
 				items: [],
@@ -7248,9 +8227,11 @@ function listValue$3(value) {
 var SearchService = class {
 	runtime;
 	record;
-	constructor(runtime, record) {
+	media;
+	constructor(runtime, record, media) {
 		this.runtime = runtime;
 		this.record = record;
+		this.media = media;
 	}
 	async searchRecords(options) {
 		const query = options.query.trim();
@@ -7326,6 +8307,85 @@ var SearchService = class {
 		}, session, options.signal);
 		return this.recordSearchResult(data);
 	}
+	/** Build the desktop image library from the mixed image/video scene. */
+	async searchImages(options) {
+		const session = await this.runtime.requireSession();
+		const pageLimit = Math.min(50, Math.max(1, Math.trunc(options.limit)));
+		const seenCursors = /* @__PURE__ */ new Set();
+		let cursor = options.cursor?.trim() ?? "";
+		if (cursor !== "") seenCursors.add(cursor);
+		let lastPage;
+		for (let pageIndex = 0; pageIndex < 8; pageIndex += 1) {
+			const page = await this.searchScene({
+				scene: "image_video",
+				limit: pageLimit,
+				...cursor === "" ? {} : { cursor },
+				...options.signal === void 0 ? {} : { signal: options.signal }
+			});
+			lastPage = page;
+			const candidates = page.items.flatMap((record) => record.media.flatMap((asset) => {
+				const mimeType = asset.mimeType?.trim().toLowerCase() ?? "";
+				return mimeType.startsWith("image/") || mimeType === "" && (asset.fileKind === void 0 || asset.fileKind === 1) ? [{
+					record,
+					asset
+				}] : [];
+			}));
+			const uniqueAssetUids = [...new Set(candidates.map((candidate) => candidate.asset.fileAssetUid))];
+			const displayItems = [];
+			for (let offset = 0; offset < uniqueAssetUids.length; offset += 50) displayItems.push(...await this.media.queryFileAssets(uniqueAssetUids.slice(offset, offset + 50), options.signal));
+			const displayByUid = new Map(displayItems.map((item) => [item.fileAssetUid, item]));
+			const emitted = /* @__PURE__ */ new Set();
+			const items = candidates.flatMap(({ record, asset }) => {
+				const itemIdentity = `${record.recordUid}\0${asset.fileAssetUid}`;
+				if (emitted.has(itemIdentity)) return [];
+				const display = displayByUid.get(asset.fileAssetUid);
+				if (display === void 0) return [];
+				const mimeType = (display.mimeType ?? asset.mimeType ?? "").trim().toLowerCase();
+				if (!mimeType.startsWith("image/")) return [];
+				const remoteUrl = display.previewUrl ?? display.downloadUrl;
+				if (remoteUrl === void 0) return [];
+				emitted.add(itemIdentity);
+				const fileName = display.fileName ?? asset.fileName ?? "图片";
+				return [{
+					itemKey: createHash("sha256").update(itemIdentity).digest("base64url"),
+					mediaRef: this.media.issueImageMediaRef(session.userId, {
+						remoteUrl,
+						mimeType: mimeType || "application/octet-stream",
+						fileName,
+						size: Math.max(0, Math.trunc(asset.size ?? 0))
+					}, asset.fileAssetUid),
+					recordUid: record.recordUid,
+					sendAtMillis: record.sendAtMillis,
+					fileName,
+					mimeType: mimeType || "application/octet-stream",
+					size: Math.max(0, Math.trunc(asset.size ?? 0)),
+					recordTitle: record.title || record.nickname || "快记",
+					...record.sourceTitle === void 0 ? {} : { sourceTitle: record.sourceTitle }
+				}];
+			});
+			const nextCursor = page.nextCursor?.trim() ?? "";
+			const canContinue = page.hasMore && nextCursor !== "" && !seenCursors.has(nextCursor);
+			if (items.length > 0 || !canContinue) return {
+				items,
+				hasMore: canContinue,
+				...canContinue ? { nextCursor } : {},
+				queryGuard: page.queryGuard
+			};
+			if (pageIndex === 7) return {
+				items: [],
+				hasMore: true,
+				nextCursor,
+				queryGuard: page.queryGuard
+			};
+			seenCursors.add(nextCursor);
+			cursor = nextCursor;
+		}
+		return {
+			items: [],
+			hasMore: false,
+			queryGuard: lastPage?.queryGuard ?? { state: "complete" }
+		};
+	}
 	async searchRecordings(options) {
 		const query = options.query.trim();
 		if (query === "") throw new ArkmePluginError("recording-query-empty", "搜索关键词不能为空", false);
@@ -8372,6 +9432,8 @@ const ARKME_WORLD_IMAGE_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_WORLD_IMAGE_REFS = 2048;
 const ARKME_WORLD_RECORD_REF_TTL_MILLIS = 900 * 1e3;
 const MAX_ARKME_WORLD_RECORD_REFS = 4096;
+const ARKME_VOICEPRINT_PLAY_SCOPE = 2;
+const ARKME_VOICEPRINT_INVITE_TOKEN_MAX_LENGTH = 2048;
 function numberValue(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
@@ -8383,6 +9445,27 @@ function safeFailureMessage(error) {
 	if (error instanceof Error && error.message.trim() !== "") return error.message;
 	return "未知错误";
 }
+function optionalTrimmedText(value, limit) {
+	const normalized = value?.replace(/\s+/g, " ").trim();
+	if (normalized === void 0 || normalized === "") return void 0;
+	return normalized.length <= limit ? normalized : `${normalized.slice(0, limit).trimEnd()}...`;
+}
+function buildVoiceprintInviteShareUrl(environment, token) {
+	const url = new URL("/app/voiceprint/invite", environment === "prod" ? "https://jiwo.cc" : "https://jotmo-app.senguo.me");
+	url.hash = `t=${encodeURIComponent(token)}`;
+	return url.toString();
+}
+function validVoiceprintInviteToken(token) {
+	if (token === "" || token.length > ARKME_VOICEPRINT_INVITE_TOKEN_MAX_LENGTH) return false;
+	let byteLength = 0;
+	for (const char of token) {
+		const codePoint = char.codePointAt(0) ?? 0;
+		if (codePoint <= 31 || codePoint === 127) return false;
+		byteLength += codePoint <= 127 ? 1 : codePoint <= 2047 ? 2 : codePoint <= 65535 ? 3 : 4;
+		if (byteLength > ARKME_VOICEPRINT_INVITE_TOKEN_MAX_LENGTH) return false;
+	}
+	return true;
+}
 function worldVisibility(checkStatus) {
 	if (checkStatus === 1) return "pending_review";
 	if (checkStatus === 4) return "rejected";
@@ -8485,6 +9568,110 @@ var WorldService = class {
 			...hasMore ? { nextOffset } : {}
 		};
 	}
+	async listMyWorldFeed(options = {}) {
+		const session = await this.runtime.requireSession();
+		const limit = Math.min(20, Math.max(1, Math.trunc(options.limit ?? 20)));
+		const offset = Math.max(0, Math.trunc(options.offset ?? 0));
+		const data = await this.runtime.authenticatedWorldPost("/api/v1/public-record/my-list", {
+			limit,
+			offset
+		}, session, options.signal);
+		const rawItems = listValue(data.list);
+		const resolvedAvatars = await this.resolveWorldAvatarUrls(rawItems, session, options.signal);
+		const items = (await Promise.all(rawItems.map((raw) => this.worldFeedItem(raw, session.userId, resolvedAvatars)))).filter((item) => item !== void 0);
+		const total = Math.max(0, Math.trunc(numberValue(data.total)));
+		const nextOffset = offset + rawItems.length;
+		const hasMore = rawItems.length > 0 && nextOffset < total;
+		return {
+			items,
+			total,
+			hasMore,
+			...hasMore ? { nextOffset } : {}
+		};
+	}
+	async worldVoiceprintPlaybackAvailability(recordRefs, signal) {
+		const session = await this.runtime.requireSession();
+		const normalizedRefs = [...new Set(recordRefs.map((value) => value.trim()).filter((value) => value !== ""))].slice(0, 20);
+		if (normalizedRefs.length === 0) return { items: [] };
+		const entries = normalizedRefs.map((recordRef) => ({
+			recordRef,
+			entry: this.openWorldRecordRef(recordRef, session.userId)
+		}));
+		const ownerUserIds = [...new Set(entries.map((value) => value.entry.ownerUserId ?? 0).filter((userId) => Number.isSafeInteger(userId) && userId > 0))].sort((left, right) => left - right);
+		if (ownerUserIds.length === 0) return { items: entries.map(({ recordRef }) => ({
+			recordRef,
+			playable: false
+		})) };
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/voiceprint/world-playback-availability", { user_ids: ownerUserIds }, session, signal, {
+			key: ownerUserIds.join(","),
+			cacheMs: 5e3
+		});
+		const playableByOwner = /* @__PURE__ */ new Map();
+		for (const raw of listValue(data.items)) {
+			const item = objectValue$1(raw);
+			const userId = Math.trunc(numberValue(item.user_id));
+			if (userId > 0) playableByOwner.set(userId, item.playable === true);
+		}
+		return { items: entries.map(({ recordRef, entry }) => ({
+			recordRef,
+			playable: playableByOwner.get(entry.ownerUserId ?? 0) === true
+		})) };
+	}
+	async generateWorldVoiceprintPlayback(input) {
+		const session = await this.runtime.requireSession();
+		const entry = this.openWorldRecordRef(input.recordRef, session.userId);
+		const chunkIndex = Math.trunc(input.chunkIndex ?? 0);
+		if (!Number.isSafeInteger(chunkIndex) || chunkIndex < 0 || chunkIndex >= 334) throw new ArkmePluginError("world-voiceprint-playback-input-invalid", "世界声纹播放参数无效，请刷新后重试", false);
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/voiceprint/generate-playback", {
+			source_scene: 4,
+			source_id: entry.recordUid,
+			source_chunk_index: chunkIndex
+		}, session, input.signal, {
+			lane: "write",
+			bypassCache: true
+		});
+		const mimeType = stringValue$1(data.mime_type).trim() || "audio/wav";
+		const responseChunkIndex = Math.trunc(numberValue(data.source_chunk_index));
+		const chunkCount = Math.trunc(numberValue(data.source_chunk_count));
+		const chunkStartRune = Math.trunc(numberValue(data.source_chunk_start_rune));
+		const chunkEndRune = Math.trunc(numberValue(data.source_chunk_end_rune));
+		if (responseChunkIndex !== chunkIndex || chunkCount <= 0 || chunkCount > 334 || chunkIndex >= chunkCount || chunkStartRune < 0 || chunkEndRune <= chunkStartRune) throw new ArkmePluginError("world-voiceprint-playback-response-invalid", "世界声纹播放响应无效，请重试", true, 502);
+		return {
+			mediaRef: this.media.issueWorldVoiceprintMediaRef(session.userId, {
+				remoteUrl: stringValue$1(data.audio_url),
+				mimeType
+			}),
+			mimeType,
+			durationMillis: Math.max(0, Math.trunc(numberValue(data.duration_ms))),
+			cacheHit: data.cache_hit === true,
+			chunkIndex: responseChunkIndex,
+			chunkCount,
+			chunkStartRune,
+			chunkEndRune
+		};
+	}
+	async createWorldVoiceprintInviteIntent(recordRef, signal) {
+		const session = await this.runtime.requireSession();
+		const entry = this.openWorldRecordRef(recordRef, session.userId);
+		const peerUserId = entry.ownerUserId ?? 0;
+		if (!Number.isSafeInteger(peerUserId) || peerUserId <= 0) throw new ArkmePluginError("world-voiceprint-invite-target-missing", "无法确认这条世界动态的作者，请刷新后重试", false);
+		if (peerUserId === session.userId) throw new ArkmePluginError("world-voiceprint-invite-self-invalid", "这是你自己的动态，不需要提醒自己开启声纹", false, 409);
+		const data = await this.runtime.authenticatedAudioPost("/api/v1/audio/voiceprint/invites/create", { scope: ARKME_VOICEPRINT_PLAY_SCOPE }, session, signal, {
+			lane: "write",
+			bypassCache: true
+		});
+		const token = stringValue$1(data.invite_token).trim();
+		const expiresAtMillis = Math.trunc(numberValue(data.expires_at));
+		const scope = Math.trunc(numberValue(data.scope));
+		if (!validVoiceprintInviteToken(token) || expiresAtMillis <= 0 || scope !== ARKME_VOICEPRINT_PLAY_SCOPE) throw new ArkmePluginError("world-voiceprint-invite-contract-invalid", "声纹邀请响应不完整，请稍后重试", true, 502);
+		return {
+			peerUserId,
+			peerDisplayName: optionalTrimmedText(entry.authorName, 64) ?? "这位用户",
+			inviteUrl: buildVoiceprintInviteShareUrl(this.runtime.config.environment, token),
+			expiresAtMillis,
+			...entry.textPreview === void 0 ? {} : { textPreview: entry.textPreview }
+		};
+	}
 	async listWorldInteractions(recordRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const root = this.openWorldRecordRef(recordRef, session.userId);
@@ -8695,7 +9882,14 @@ var WorldService = class {
 		}
 		const avatarRef = this.isTrustedWorldImageUrl(avatarUrl) ? await this.sealWorldImageRef(viewerUserId, avatarUrl) : void 0;
 		return {
-			recordRef: await this.worldRecordRef(viewerUserId, recordUid),
+			recordRef: await this.worldRecordRef(viewerUserId, recordUid, {
+				ownerUserId,
+				authorName: stringValue$1(item.nick_name ?? item.nickname).trim() || "Arkme用户",
+				...(() => {
+					const textPreview = optionalTrimmedText(headline || textContent, 80);
+					return textPreview === void 0 ? {} : { textPreview };
+				})()
+			}),
 			authorName: stringValue$1(item.nick_name ?? item.nickname).trim() || "Arkme用户",
 			...avatarRef === void 0 ? {} : { avatarRef },
 			...avatarRef === void 0 && avatarFallback !== void 0 ? { avatarFallback } : {},
@@ -8765,7 +9959,14 @@ var WorldService = class {
 		const avatarFallback = worldPhoneDefaultAvatar(rawAvatar);
 		const avatarRef = this.isTrustedWorldImageUrl(avatarUrl) ? await this.sealWorldImageRef(viewerUserId, avatarUrl) : void 0;
 		return {
-			interactionRef: await this.worldRecordRef(viewerUserId, recordUid),
+			interactionRef: await this.worldRecordRef(viewerUserId, recordUid, {
+				ownerUserId,
+				authorName: stringValue$1(item.nick_name ?? item.nickname).trim() || "Arkme用户",
+				...(() => {
+					const textPreview = optionalTrimmedText(textContent, 80);
+					return textPreview === void 0 ? {} : { textPreview };
+				})()
+			}),
 			parentRef: await this.worldRecordRef(viewerUserId, parentRecordUid),
 			authorName: stringValue$1(item.nick_name ?? item.nickname).trim() || "Arkme用户",
 			...avatarRef === void 0 ? {} : { avatarRef },
@@ -8778,13 +9979,20 @@ var WorldService = class {
 			voiceCount
 		};
 	}
-	async worldRecordRef(viewerUserId, recordUid) {
+	async worldRecordRef(viewerUserId, recordUid, metadata = {}) {
 		const recordRef = `arkme-world-record-v1.${createHmac("sha256", await this.runtime.stateStore.uniqueCode()).update(`world-record-v1:${String(viewerUserId)}:${recordUid}`).digest("base64url")}`;
 		const now = Date.now();
 		this.pruneWorldRecordRefs(now);
+		const previous = this.worldRecordRefs.get(recordRef);
+		const resolvedOwnerUserId = metadata.ownerUserId ?? previous?.ownerUserId;
+		const authorName = optionalTrimmedText(metadata.authorName, 64) ?? previous?.authorName;
+		const textPreview = optionalTrimmedText(metadata.textPreview, 80) ?? previous?.textPreview;
 		this.worldRecordRefs.set(recordRef, {
 			viewerUserId,
 			recordUid,
+			...resolvedOwnerUserId === void 0 || resolvedOwnerUserId <= 0 ? {} : { ownerUserId: resolvedOwnerUserId },
+			...authorName === void 0 ? {} : { authorName },
+			...textPreview === void 0 ? {} : { textPreview },
 			expiresAtMillis: now + ARKME_WORLD_RECORD_REF_TTL_MILLIS
 		});
 		return recordRef;
@@ -8866,8 +10074,18 @@ var WorldService = class {
 //#endregion
 //#region src/types.ts
 const ARKME_PROVIDER_CONTRACT_VERSION = 1;
+const ARKME_DEFAULT_SHARE_WEBSITE = "https://app.arkme.ai";
 //#endregion
 //#region src/arkme-service.ts
+function worldVoiceprintInviteMessage(input) {
+	return `${input.textPreview === void 0 ? "我想邀请你开启声纹。" : `我看到你在世界里发的「${input.textPreview}」，想邀请你开启声纹。`}\n以后看到你的世界动态时，可以直接听到你的声音。\n${input.inviteUrl}`;
+}
+function voiceprintInviteRateLimitMessage(error) {
+	if (!(error instanceof ArkmePluginError)) return void 0;
+	if (error.upstreamStatus !== 429 && error.httpStatus !== 429 && !/\bHTTP\s*429\b/.test(error.message)) return void 0;
+	const seconds = error.retryAfterMillis === void 0 ? 0 : Math.ceil(error.retryAfterMillis / 1e3);
+	return seconds > 0 ? `提醒发送太频繁了，请 ${String(seconds)} 秒后再试。` : "提醒发送太频繁了，稍后再试。";
+}
 var ArkmeService = class {
 	config;
 	sessionStore;
@@ -8877,6 +10095,7 @@ var ArkmeService = class {
 	runtime;
 	aiVideo;
 	arrangement;
+	calendar;
 	wechat;
 	recording;
 	profile;
@@ -8897,6 +10116,7 @@ var ArkmeService = class {
 	interwoven;
 	aiPolish;
 	chat;
+	contact;
 	constructor(config, sessionStore, stateStore, fetchImpl = fetch, pendingSessionStore, outgoingCallBroker = new ArkmeOutgoingCallBroker()) {
 		this.config = config;
 		this.sessionStore = sessionStore;
@@ -8906,6 +10126,7 @@ var ArkmeService = class {
 		this.runtime = new ServiceRuntime(config, sessionStore, stateStore, fetchImpl, pendingSessionStore);
 		this.aiVideo = new AiVideoService(this.runtime);
 		this.arrangement = new ArrangementService(this.runtime);
+		this.calendar = new CalendarService(this.runtime);
 		this.wechat = new WechatService(this.runtime);
 		this.recording = new RecordingService(this.runtime);
 		this.profile = new ProfileService(this.runtime);
@@ -8918,18 +10139,21 @@ var ArkmeService = class {
 			recordItem: (raw) => this.recordItem(raw)
 		});
 		this.record = new RecordService(this.runtime, this.media, this.source);
-		this.search = new SearchService(this.runtime, this.record);
+		this.search = new SearchService(this.runtime, this.record, this.media);
 		this.bot = new BotService(this.runtime, this.source);
 		this.outgoingCall = new OutgoingCallService(this.runtime, this.source, this.profile, outgoingCallBroker);
 		this.world = new WorldService(this.runtime, { refreshProfile: async () => await this.refreshProfile() }, this.media, this.record);
 		this.arko = new ArkoService(this.runtime, this.profile);
-		this.group = new GroupService(this.runtime, this.source, this.profile);
+		this.group = new GroupService(this.runtime, this.source, this.profile, { sendPrivateText: async (sourceRef, chatSessionUid, text, recordUid, relationUid, session, signal) => {
+			await this.chat.sendChatSourceTextRaw(sourceRef, chatSessionUid, text, recordUid, relationUid, session, void 0, void 0, signal);
+		} });
 		this.relatedRecording = new RelatedRecordingService(this.runtime, this.source);
 		this.community = new CommunityService(this.runtime, this.source, this.profile);
 		this.interwoven = new InterwovenService(this.runtime, this.source, this.profile);
 		this.aiPolish = new GroupAiPolishService(this.runtime, this.source, { sendChatSourceTextRaw: async (...args) => await this.chat.sendChatSourceTextRaw(...args) });
 		this.realtime = new ChatRealtimeService(this.runtime, this.source, { chatTimelineItems: async (data, session) => await this.chat.chatTimelineItems(data, session) });
 		this.chat = new ChatService(this.runtime, this.source, this.profile, this.media, this.record, this.bot, this.arko, this.aiPolish, this.realtime);
+		this.contact = new ContactService(this.runtime, this.source, this.profile, this.realtime);
 		this.auth = new AuthService(this.runtime, this.profile, {
 			reconnectChatRealtime: () => {
 				this.realtime.reconnect();
@@ -8947,6 +10171,7 @@ var ArkmeService = class {
 		this.interwoven.dispose();
 		this.world.dispose();
 		this.arrangement.dispose();
+		this.contact.dispose();
 	}
 	startChatRealtime() {
 		return this.realtime.startChatRealtime();
@@ -8964,7 +10189,10 @@ var ArkmeService = class {
 		this.realtime.handleChatRealtimeNotice(notice);
 	}
 	async refreshChatSessionProjectionBatch(pending) {
-		return await this.realtime.refreshChatSessionProjectionBatch(pending);
+		return (await this.realtime.refreshChatSessionProjectionBatch(pending.map(([uid, latestSequence]) => [uid, {
+			latestSequence,
+			notificationHints: []
+		}]))).map(([uid, projection]) => [uid, projection.latestSequence]);
 	}
 	attachOpenClawProvisioner(provisioner) {
 		this.bot.attachOpenClawProvisioner(provisioner);
@@ -8978,6 +10206,9 @@ var ArkmeService = class {
 	async createBot(input, options = {}) {
 		return await this.bot.createBot(input, options);
 	}
+	async createBotSummary(input, options = {}) {
+		return await this.bot.createBotSummary(input, options);
+	}
 	async revealBotSecret(botRef, options = {}) {
 		return await this.bot.revealBotSecret(botRef, options);
 	}
@@ -9004,7 +10235,8 @@ var ArkmeService = class {
 			captchaId: this.config.geetestCaptchaId,
 			environment: this.config.environment,
 			testLoginEnabled: this.config.environment === "test",
-			callAssetBasePath: `${this.config.routePath}/call`
+			callAssetBasePath: `${this.config.routePath}/call`,
+			shareWebsite: this.config.shareWebsite ?? "https://app.arkme.ai"
 		};
 	}
 	providerCapabilities() {
@@ -9023,6 +10255,8 @@ var ArkmeService = class {
 				revisionPolling: true,
 				userProfile: true,
 				imageRead: true,
+				recordCalendar: true,
+				imageLibrary: true,
 				sourceDirectory: true,
 				sourceTimeline: true,
 				sourceTextSend: true,
@@ -9031,8 +10265,11 @@ var ArkmeService = class {
 				fileUpload: this.config.richMediaSendEnabled !== false,
 				outgoingCall: true,
 				groupMembers: true,
+				groupMemberAdd: true,
 				userCard: true,
 				openPrivateChat: true,
+				contactAdd: true,
+				conversationQuickAdd: true,
 				groupSettings: true,
 				extensionManagement: true,
 				extensionMetadataEdit: true,
@@ -9040,9 +10277,13 @@ var ArkmeService = class {
 				extensionPreviews: true,
 				worldFeed: true,
 				worldInteractions: true,
+				worldVoiceprintPlayback: true,
+				worldVoiceprintInvite: true,
 				arrangements: true,
 				myExtensions: true,
 				extensionPublish: true,
+				recordingTranscripts: true,
+				recordingDoubaoBackfill: true,
 				extensionReviews: true,
 				...this.relatedRecording.isEnabled() ? { relatedRecordings: true } : {}
 			},
@@ -9088,6 +10329,7 @@ var ArkmeService = class {
 		return await this.outgoingCall.releaseOutgoingCall(callRequestId);
 	}
 	dispose() {
+		this.contact.dispose();
 		this.realtime.dispose();
 		this.arko.dispose();
 		this.auth.dispose();
@@ -9108,6 +10350,12 @@ var ArkmeService = class {
 	async cachedProfile() {
 		return await this.profile.cachedProfile();
 	}
+	async searchContact(identifier, options = {}) {
+		return await this.contact.search(identifier, options);
+	}
+	async addContact(contactRef, options = {}) {
+		return await this.contact.add(contactRef, options);
+	}
 	async extensionAuthors(userIds, signal) {
 		return await this.extensionReview.extensionAuthors(userIds, signal);
 	}
@@ -9122,8 +10370,12 @@ var ArkmeService = class {
 		return await this.recording.recordingCalendar(fromStamp, toStamp, signal);
 	}
 	/** Read-only Audio capability shared by the built-in UI and Arkme recording tools. */
-	async recordingTranscript(dateStamp, signal) {
-		return await this.recording.recordingTranscript(dateStamp, signal);
+	async recordingTranscript(dateStamp, signal, source = "system") {
+		return await this.recording.recordingTranscript(dateStamp, signal, source);
+	}
+	/** Queue Doubao backfill only after an explicit UI, SDK, or Tool request. */
+	async startRecordingDoubaoBackfill(dateStamp, signal) {
+		return await this.recording.startRecordingDoubaoBackfill(dateStamp, signal);
 	}
 	/** Read-only Audio capability shared by the built-in UI and Arkme recording tools. */
 	async recordingProjection(dateStamp, kind, signal) {
@@ -9246,6 +10498,18 @@ var ArkmeService = class {
 	async listGroupMembers(sourceRef, options = {}) {
 		return await this.group.listGroupMembers(sourceRef, options);
 	}
+	async listGroupMemberCandidates(sourceRef, options = {}) {
+		return await this.group.listGroupMemberCandidates(sourceRef, options);
+	}
+	async groupInvitePreview(sourceRef, signal) {
+		return await this.group.groupInvitePreview(sourceRef, signal);
+	}
+	async addGroupMembers(sourceRef, candidateRefs, signal) {
+		return await this.group.addGroupMembers(sourceRef, candidateRefs, signal);
+	}
+	async createGroup(title, clientMutationId, options = {}) {
+		return await this.group.createGroup(title, clientMutationId, options);
+	}
 	async groupSettings(sourceRef, signal) {
 		return await this.group.groupSettings(sourceRef, signal);
 	}
@@ -9394,6 +10658,13 @@ var ArkmeService = class {
 	async searchScene(options) {
 		return await this.search.searchScene(options);
 	}
+	/**
+	* Build the desktop image library from the owner's mixed image/video scene.
+	* Signed storage URLs stay inside the Provider and are replaced by account-bound media refs.
+	*/
+	async searchImages(options) {
+		return await this.search.searchImages(options);
+	}
 	async searchRecordings(options) {
 		return await this.search.searchRecordings(options);
 	}
@@ -9406,6 +10677,12 @@ var ArkmeService = class {
 	async list(limit, cursor) {
 		return await this.record.list(limit, cursor);
 	}
+	async calendarBuckets(options) {
+		return await this.calendar.bucketPage(options);
+	}
+	async calendarRecords(options) {
+		return await this.calendar.dayRecords(options);
+	}
 	async listWorldRecords(options = {}) {
 		return await this.world.listWorldRecords(options);
 	}
@@ -9445,6 +10722,41 @@ var ArkmeService = class {
 	async listWorldFeed(options = {}) {
 		return await this.world.listWorldFeed(options);
 	}
+	/** Build the signed-in account's World projection without exposing owner IDs. */
+	async listMyWorldFeed(options = {}) {
+		return await this.world.listMyWorldFeed(options);
+	}
+	async worldVoiceprintPlaybackAvailability(recordRefs, signal) {
+		return await this.world.worldVoiceprintPlaybackAvailability(recordRefs, signal);
+	}
+	async generateWorldVoiceprintPlayback(input) {
+		return await this.world.generateWorldVoiceprintPlayback(input);
+	}
+	async inviteWorldVoiceprint(recordRef, signal) {
+		try {
+			const intent = await this.world.createWorldVoiceprintInviteIntent(recordRef, signal);
+			const privateChat = await this.chat.openPrivateChatFromUser(intent.peerUserId, {
+				displayName: intent.peerDisplayName,
+				...signal === void 0 ? {} : { signal }
+			});
+			const sent = await this.chat.sendSourceText(privateChat.source.sourceRef, worldVoiceprintInviteMessage(intent), signal === void 0 ? {} : { signal });
+			if (sent.localState !== "synced") throw new ArkmePluginError("world-voiceprint-invite-send-pending", sent.error ?? "声纹邀请已进入发送队列，请稍后在私聊中确认", true);
+			return {
+				sent: true,
+				peerDisplayName: intent.peerDisplayName,
+				messageItemUid: sent.itemUid,
+				expiresAtMillis: intent.expiresAtMillis
+			};
+		} catch (error) {
+			const message = voiceprintInviteRateLimitMessage(error);
+			if (message !== void 0) throw new ArkmePluginError("world-voiceprint-invite-rate-limited", message, true, 429, {
+				cause: error,
+				upstreamStatus: 429,
+				...!(error instanceof ArkmePluginError) || error.retryAfterMillis === void 0 ? {} : { retryAfterMillis: error.retryAfterMillis }
+			});
+			throw error;
+		}
+	}
 	/** Read the authenticated comment/reply tree behind one account-bound World reference. */
 	async listWorldInteractions(recordRef, options = {}) {
 		return await this.world.listWorldInteractions(recordRef, options);
@@ -9495,6 +10807,8 @@ const ARKME_EXTENSION_FORMAT = "arkme-cordis-extension";
 const ARKME_EXTENSION_MAX_BYTES = 100 * 1024 * 1024;
 const ARKME_EXTENSION_ICON_MAX_BYTES = 2 * 1024 * 1024;
 const ARKME_EXTENSION_PREVIEW_MAX_BYTES = 5 * 1024 * 1024;
+/** Browser/model-safe projection. Host filesystem paths and Dynamic Cordis IDs stay private. */
+const ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE = "插件运行失败，已自动停用。";
 //#endregion
 //#region src/extensions/artifact.ts
 const TAR_BLOCK_BYTES$1 = 512;
@@ -9611,6 +10925,7 @@ function canonicalExtensionSignatureMessage(input) {
 	}), "utf8");
 }
 const ARKME_BUNDLE_ARTIFACT_KIND = "dsh-bundle-tgz";
+const ARKME_NATIVE_BUNDLE_ARTIFACT_KIND = "dsh-native-package-tgz";
 const ARKME_BUNDLE_MAX_BYTES = 100 * 1024 * 1024;
 const TAR_BLOCK_BYTES = 512;
 const MAX_ARCHIVE_FILES = 1024;
@@ -9657,9 +10972,22 @@ function writeOctal(header, offset, length, value) {
 	header.write(octal.slice(-(length - 1)), offset, length - 1, "ascii");
 	header[offset + length - 1] = 0;
 }
+function splitTarPath(path) {
+	const direct = Buffer.from(path, "utf8");
+	if (direct.byteLength <= 100) return { name: direct };
+	const separators = [...path.matchAll(/\//g)].map((match) => match.index).reverse();
+	for (const separator of separators) {
+		const prefix = Buffer.from(path.slice(0, separator), "utf8");
+		const name = Buffer.from(path.slice(separator + 1), "utf8");
+		if (prefix.byteLength <= 155 && name.byteLength <= 100) return {
+			name,
+			prefix
+		};
+	}
+	throw new ArkmeBundleArtifactError("bundle-path-too-long", `Bundle 路径过长：${path}`);
+}
 function tarHeader(path, size) {
-	const name = Buffer.from(path, "utf8");
-	if (name.byteLength > 100) throw new ArkmeBundleArtifactError("bundle-path-too-long", `Bundle 路径过长：${path}`);
+	const { name, prefix } = splitTarPath(path);
 	const header = Buffer.alloc(TAR_BLOCK_BYTES);
 	name.copy(header, 0);
 	writeOctal(header, 100, 8, 420);
@@ -9671,6 +10999,7 @@ function tarHeader(path, size) {
 	header[156] = "0".charCodeAt(0);
 	header.write("ustar\0", 257, 6, "ascii");
 	header.write("00", 263, 2, "ascii");
+	prefix?.copy(header, 345);
 	writeOctal(header, 148, 8, [...header].reduce((sum, byte) => sum + byte, 0));
 	return header;
 }
@@ -9705,7 +11034,9 @@ function readTar(tar) {
 	while (offset + TAR_BLOCK_BYTES <= tar.byteLength) {
 		const header = tar.subarray(offset, offset + TAR_BLOCK_BYTES);
 		if (header.every((byte) => byte === 0)) break;
-		const path = header.subarray(0, 100).toString("utf8").replace(/\0.*$/, "");
+		const name = header.subarray(0, 100).toString("utf8").replace(/\0.*$/, "");
+		const prefix = header.subarray(345, 500).toString("utf8").replace(/\0.*$/, "");
+		const path = prefix === "" ? name : `${prefix}/${name}`;
 		validateArchivePath(path);
 		if (files.has(path)) throw new ArkmeBundleArtifactError("bundle-duplicate-path", `Bundle 包含重复路径：${path}`);
 		const type = header[156];
@@ -9790,6 +11121,105 @@ function validatePatch(raw, packageName, executionModel) {
 	if (ids.size === 0) throw new ArkmeBundleArtifactError("bundle-patch-empty", "Bundle patch 至少需要一条 row");
 	return [...ids].sort();
 }
+const NATIVE_LIFECYCLE_SCRIPTS = /* @__PURE__ */ new Set([
+	"preinstall",
+	"install",
+	"postinstall",
+	"prepare",
+	"prepublish",
+	"prepublishOnly",
+	"prepack",
+	"postpack"
+]);
+function nonEmptyManifestValue(value) {
+	if (value === void 0 || value === null) return false;
+	if (typeof value === "string") return value.trim() !== "";
+	if (Array.isArray(value)) return value.length > 0;
+	if (typeof value === "object") return Object.keys(value).length > 0;
+	if (typeof value === "boolean") return value;
+	return true;
+}
+function inspectNativePatch(raw, packageName) {
+	const document = parseDocument(raw.toString("utf8"), { uniqueKeys: true });
+	if (document.errors.length > 0) throw new ArkmeBundleArtifactError("bundle-patch-invalid", "Bundle patch YAML 格式无效");
+	const value = document.toJS();
+	if (!Array.isArray(value)) throw new ArkmeBundleArtifactError("bundle-patch-invalid", "Bundle patch 必须是操作数组");
+	const patchIds = /* @__PURE__ */ new Set();
+	const capabilities = /* @__PURE__ */ new Set();
+	for (const operation of value) {
+		if (operation === null || typeof operation !== "object" || Array.isArray(operation)) {
+			capabilities.add("profile_patch_override");
+			continue;
+		}
+		const record = operation;
+		if (!(Object.keys(record).length === 1 && Array.isArray(record.insert))) {
+			capabilities.add("profile_patch_override");
+			if (typeof record.id === "string" && record.id.trim() !== "") patchIds.add(record.id.trim());
+			continue;
+		}
+		for (const row of record.insert) {
+			if (row === null || typeof row !== "object" || Array.isArray(row)) continue;
+			const item = row;
+			if (typeof item.id === "string" && item.id.trim() !== "") patchIds.add(item.id.trim());
+			if (typeof item.name === "string" && item.name !== packageName && !item.name.startsWith(`${packageName}/`)) capabilities.add("external_package_reference");
+		}
+	}
+	return {
+		patchIds: [...patchIds].sort(),
+		capabilities: [...capabilities].sort()
+	};
+}
+function inspectNativeManifest(manifest, files) {
+	if (typeof manifest.name !== "string" || manifest.name.length > 214 || !PACKAGE_NAME.test(manifest.name) || manifest.name.startsWith("@deepseek-ai/") || manifest.name === "@senguoyun/dsh-arkme" || manifest.name.startsWith("@arkme-local/")) throw new ArkmeBundleArtifactError("bundle-package-name-invalid", "Bundle package name 无效或属于保留集合");
+	if (typeof manifest.version !== "string" || !SEMVER.test(manifest.version)) throw new ArkmeBundleArtifactError("bundle-version-invalid", "Bundle version 必须是严格 SemVer");
+	if (manifest.dsh?.arkme !== void 0 && manifest.dsh.arkme !== null) throw new ArkmeBundleArtifactError("bundle-execution-model-invalid", "原生 DSH V3 Bundle 不允许声明 Arkme sandbox marker");
+	const patch = manifest.dsh?.bundle?.patch;
+	if (typeof patch !== "string" || patch.trim() === "" || patch.includes("\\") || patch.startsWith("/")) throw new ArkmeBundleArtifactError("bundle-patch-missing", "Bundle 必须声明包内 dsh.bundle.patch");
+	const patchPath = `package/${posix.normalize(patch.replace(/^\.\//, ""))}`;
+	if (!files.has(patchPath) || patchPath.includes("/../")) throw new ArkmeBundleArtifactError("bundle-patch-missing", "Bundle patch 不在包内");
+	const capabilities = /* @__PURE__ */ new Set();
+	if (nonEmptyManifestValue(manifest.dependencies)) capabilities.add("runtime_dependencies");
+	if (nonEmptyManifestValue(manifest.optionalDependencies)) capabilities.add("optional_dependencies");
+	if (nonEmptyManifestValue(manifest.bundledDependencies) || nonEmptyManifestValue(manifest.bundleDependencies)) capabilities.add("bundled_dependencies");
+	for (const name of Object.keys(manifest.peerDependencies ?? {})) if (!name.startsWith("@deepseek-ai/") && name !== "@senguoyun/dsh-arkme" && name !== "react" && name !== "react-dom") {
+		capabilities.add("peer_dependencies");
+		break;
+	}
+	if (Object.entries(manifest.scripts ?? {}).some(([name, value]) => NATIVE_LIFECYCLE_SCRIPTS.has(name) && nonEmptyManifestValue(value))) capabilities.add("lifecycle_scripts");
+	if (nonEmptyManifestValue(manifest.bin)) capabilities.add("bin");
+	if ([...files.keys()].some((name) => name.toLowerCase().endsWith(".node"))) capabilities.add("native_addon");
+	return {
+		patchPath,
+		capabilities: [...capabilities].sort()
+	};
+}
+function inspectNativeBundleArtifactV3(bytes) {
+	assertArchiveSize(bytes.byteLength, "Bundle");
+	let tar;
+	try {
+		tar = gunzipSync(bytes, { maxOutputLength: 105907200 });
+	} catch {
+		throw new ArkmeBundleArtifactError("bundle-gzip-invalid", "Bundle 不是有效 gzip");
+	}
+	const files = readTar(tar);
+	const packageJSON = files.get("package/package.json");
+	if (packageJSON === void 0) throw new ArkmeBundleArtifactError("bundle-package-json-missing", "Bundle 缺少 package.json");
+	const manifest = readManifest(packageJSON);
+	const inspected = inspectNativeManifest(manifest, files);
+	const patch = inspectNativePatch(files.get(inspected.patchPath), manifest.name);
+	const nativeCapabilities = [.../* @__PURE__ */ new Set([...inspected.capabilities, ...patch.capabilities])].sort();
+	return {
+		bytes: Buffer.from(bytes),
+		bundleSha256: bundleSha256(bytes),
+		packageJsonSha256: bundleSha256(packageJSON),
+		packageName: manifest.name,
+		version: manifest.version,
+		executionModel: "dsh-native",
+		nativeCapabilities,
+		files,
+		patchIds: patch.patchIds
+	};
+}
 function inspectBundleArtifact(bytes) {
 	assertArchiveSize(bytes.byteLength, "Bundle");
 	let tar;
@@ -9820,29 +11250,114 @@ function pathInside(root, target) {
 	const fromRoot = relative(root, target);
 	return fromRoot === "" || !fromRoot.startsWith(`..${sep}`) && fromRoot !== ".." && !isAbsolute(fromRoot);
 }
-function collectPackageFiles(root, manifest) {
+function globPattern(pattern) {
+	let expression = "^";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const character = pattern[index];
+		if (character === "*") if (pattern[index + 1] === "*") {
+			index += 1;
+			if (pattern[index + 1] === "/") {
+				index += 1;
+				expression += "(?:.*/)?";
+			} else expression += ".*";
+		} else expression += "[^/]*";
+		else if (character === "?") expression += "[^/]";
+		else expression += character.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
+	}
+	return new RegExp(`${expression}$`);
+}
+function collectPackageFiles(root, manifest, nativeV3 = false) {
 	const canonicalRoot = realpathSync(root);
 	const selected = /* @__PURE__ */ new Map();
-	const add = (absolute) => {
+	const ignoredNativeRootEntries = /* @__PURE__ */ new Set([
+		".git",
+		".hg",
+		".svn",
+		"node_modules"
+	]);
+	const ignoredNativeFiles = /* @__PURE__ */ new Set([
+		".npmrc",
+		".yarnrc",
+		".yarnrc.yml",
+		".pnpmfile.cjs"
+	]);
+	const add = (absolute, allowIgnore = false) => {
 		const stat = lstatSync(absolute);
-		if (stat.isSymbolicLink()) throw new ArkmeBundleArtifactError("bundle-link-forbidden", "Bundle source 不允许符号链接");
+		const rel = relative(canonicalRoot, absolute).split(sep).join("/");
+		const first = rel.split("/")[0] ?? "";
+		const basename = rel.split("/").at(-1) ?? "";
+		if (allowIgnore && (ignoredNativeRootEntries.has(first) || ignoredNativeFiles.has(basename) || basename === ".env" || basename.startsWith(".env."))) return;
+		if (stat.isSymbolicLink()) {
+			if (allowIgnore) return;
+			throw new ArkmeBundleArtifactError("bundle-link-forbidden", "Bundle source 不允许符号链接");
+		}
 		const canonical = realpathSync(absolute);
 		if (!pathInside(canonicalRoot, canonical)) throw new ArkmeBundleArtifactError("bundle-path-invalid", "Bundle source 逃逸 package root");
 		if (stat.isDirectory()) {
-			for (const child of readdirSync(canonical).sort()) add(join(canonical, child));
+			for (const child of readdirSync(canonical).sort()) add(join(canonical, child), allowIgnore);
 			return;
 		}
 		if (!stat.isFile()) throw new ArkmeBundleArtifactError("bundle-file-type-forbidden", "Bundle source 只允许普通文件");
-		const rel = relative(canonicalRoot, canonical).split(sep).join("/");
-		selected.set(`package/${rel}`, readFileSync(canonical));
+		const canonicalRel = relative(canonicalRoot, canonical).split(sep).join("/");
+		selected.set(`package/${canonicalRel}`, readFileSync(canonical));
+	};
+	const addNativePackageExtras = () => {
+		if (!nativeV3) return;
+		for (const child of readdirSync(canonicalRoot).sort()) if (/^(?:readme|licen[cs]e|copying|notice)(?:\.|$)/i.test(child)) add(join(canonicalRoot, child), true);
+		const paths = /* @__PURE__ */ new Set();
+		if (typeof manifest.main === "string") paths.add(manifest.main);
+		const bin = manifest.bin;
+		if (typeof bin === "string") paths.add(bin);
+		else if (bin !== null && typeof bin === "object" && !Array.isArray(bin)) {
+			for (const value of Object.values(bin)) if (typeof value === "string") paths.add(value);
+		}
+		const patch = manifest.dsh?.bundle?.patch;
+		if (typeof patch === "string") paths.add(patch);
+		for (const entry of paths) {
+			const target = resolve(canonicalRoot, entry);
+			if (pathInside(canonicalRoot, target) && existsSync(target)) add(target, true);
+		}
 	};
 	add(join(canonicalRoot, "package.json"));
-	for (const entry of manifest.files) {
-		if (entry.includes("*") || entry.includes("?") || entry.includes("[") || entry.includes("\\")) throw new ArkmeBundleArtifactError("bundle-files-invalid", "Bundle files 暂不接受 glob 或反斜杠");
+	const entries = manifest.files ?? [];
+	if (entries.length === 0) {
+		if (!nativeV3) throw new ArkmeBundleArtifactError("bundle-files-missing", "Bundle 必须显式声明 files");
+		for (const child of readdirSync(canonicalRoot).sort()) if (child !== "package.json") add(join(canonicalRoot, child), true);
+		addNativePackageExtras();
+		return selected;
+	}
+	let candidates;
+	const listCandidates = () => {
+		if (candidates !== void 0) return candidates;
+		candidates = [];
+		const walk = (directory) => {
+			for (const child of readdirSync(directory).sort()) {
+				const absolute = join(directory, child);
+				const stat = lstatSync(absolute);
+				if (stat.isSymbolicLink()) continue;
+				if (stat.isDirectory()) walk(absolute);
+				else if (stat.isFile()) candidates.push(relative(canonicalRoot, absolute).split(sep).join("/"));
+			}
+		};
+		walk(canonicalRoot);
+		return candidates;
+	};
+	for (const entry of entries) {
+		if (entry.includes("\\") || entry.startsWith("/") || entry.split("/").includes("..")) throw new ArkmeBundleArtifactError("bundle-files-invalid", `Bundle files 路径无效：${entry}`);
+		const hasGlob = entry.includes("*") || entry.includes("?") || entry.includes("[");
+		if (hasGlob && !nativeV3) throw new ArkmeBundleArtifactError("bundle-files-invalid", "Bundle files 暂不接受 glob 或反斜杠");
+		if (hasGlob) {
+			const matcher = globPattern(entry.replace(/^\.\//, ""));
+			const matches = listCandidates().filter((candidate) => matcher.test(candidate));
+			if (matches.length === 0) throw new ArkmeBundleArtifactError("bundle-files-invalid", `Bundle files 路径无效：${entry}`);
+			for (const match of matches) add(resolve(canonicalRoot, match), true);
+			continue;
+		}
 		const target = resolve(canonicalRoot, entry);
-		if (!pathInside(canonicalRoot, target) || !statSync(target).isFile() && !statSync(target).isDirectory()) throw new ArkmeBundleArtifactError("bundle-files-invalid", `Bundle files 路径无效：${entry}`);
-		add(target);
+		if (!pathInside(canonicalRoot, target) || !existsSync(target) || !statSync(target).isFile() && !statSync(target).isDirectory()) throw new ArkmeBundleArtifactError("bundle-files-invalid", `Bundle files 路径无效：${entry}`);
+		add(target, nativeV3);
 	}
+	addNativePackageExtras();
 	return selected;
 }
 function packBundleFiles(files) {
@@ -9856,14 +11371,25 @@ function packBundleFiles(files) {
 		}
 	};
 }
-function packLocalBundleDirectory(directory) {
-	return packBundleFiles(collectPackageFiles(directory, readManifest(readFileSync(join(directory, "package.json")))));
+function packNativeBundleFiles(files) {
+	const bytes = gzipSync(createTar(files), { level: 9 });
+	assertArchiveSize(bytes.byteLength, "Bundle");
+	return {
+		bundle: inspectNativeBundleArtifactV3(bytes),
+		source: {
+			bytes: Buffer.from(bytes),
+			sourceSha256: bundleSha256(bytes)
+		}
+	};
+}
+function packLocalNativeBundleDirectoryV3(directory) {
+	return packNativeBundleFiles(collectPackageFiles(directory, readManifest(readFileSync(join(directory, "package.json"))), true));
 }
-function readLocalBundleTarball(path) {
+function readNativeBundleTarballV3(path) {
 	if (!lstatSync(path).isFile()) throw new ArkmeBundleArtifactError("bundle-tarball-invalid", "本地 Bundle tgz 必须是普通文件");
 	const bytes = readFileSync(path);
 	return {
-		bundle: inspectBundleArtifact(bytes),
+		bundle: inspectNativeBundleArtifactV3(bytes),
 		source: {
 			bytes: Buffer.from(bytes),
 			sourceSha256: bundleSha256(bytes)
@@ -9938,6 +11464,39 @@ function verifyBundleResolutionSignature(resolution, trustedKeys) {
 	}
 	if (!valid) throw new ArkmePluginError("extension-signature-invalid", "扩展 Bundle 平台签名验证失败", false, 403);
 }
+function canonicalNativeBundleSignatureMessage(input) {
+	return Buffer.from(JSON.stringify({
+		format_version: input.artifact_contract_version,
+		artifact_kind: input.artifact_kind,
+		extension_id: input.extension_id,
+		package_name: input.package_name,
+		version: input.version,
+		execution_model: input.execution_model,
+		bundle_sha256: input.bundle_sha256,
+		package_json_sha256: input.package_json_sha256,
+		source_sha256: input.source_sha256,
+		...input.native_capabilities.length === 0 ? {} : { native_capabilities: input.native_capabilities },
+		published_at: input.published_at,
+		signing_key_id: input.signing_key_id
+	}), "utf8");
+}
+function verifyNativeBundleResolutionSignature(resolution, trustedKeys) {
+	const capabilities = resolution.native_capabilities;
+	if (resolution.artifact_contract_version !== 3 || resolution.artifact_kind !== "dsh-native-package-tgz" || resolution.package_name.trim() === "" || resolution.execution_model !== "dsh-native" || ![
+		resolution.bundle_sha256,
+		resolution.package_json_sha256,
+		resolution.source_sha256
+	].every((value) => /^[a-f0-9]{64}$/.test(value)) || !Array.isArray(capabilities) || capabilities.some((value) => typeof value !== "string" || value.trim() === "") || capabilities.some((value, index) => index > 0 && capabilities[index - 1] >= value) || !Number.isSafeInteger(resolution.published_at) || resolution.published_at <= 0 || resolution.signature.trim() === "") throw new ArkmePluginError("extension-signature-envelope-invalid", "原生 DSH V3 签名 envelope 字段无效", false, 502);
+	const key = trustedKeys.get(resolution.signing_key_id);
+	if (key === void 0) throw new ArkmePluginError("extension-signing-key-untrusted", `不信任扩展签名密钥 ${resolution.signing_key_id}`, false, 403);
+	let valid = false;
+	try {
+		valid = verify(null, canonicalNativeBundleSignatureMessage(resolution), publicKey(key), Buffer.from(resolution.signature, "base64"));
+	} catch (error) {
+		throw new ArkmePluginError("extension-signature-invalid", "原生 DSH V3 签名格式无效", false, 403, { cause: error });
+	}
+	if (!valid) throw new ArkmePluginError("extension-signature-invalid", "原生 DSH V3 平台签名验证失败", false, 403);
+}
 //#endregion
 //#region src/extensions/persistent-client-bundle.ts
 /** This function is serialized into each generated browser bundle. It must stay closure-free. */
@@ -9977,14 +11536,29 @@ function persistentClientFactory(requireModule, spec) {
 			})
 		});
 		const envelope = await response.json();
-		if (!response.ok || envelope.ok !== true) throw new Error(envelope.error?.message ?? `Arkme Host returned HTTP ${String(response.status)}`);
+		if (!response.ok || envelope.ok !== true) {
+			const error = new Error(envelope.error?.message ?? `Arkme Host returned HTTP ${String(response.status)}`);
+			if (envelope.error?.code !== void 0) error.code = envelope.error.code;
+			throw error;
+		}
 		return envelope.value;
 	};
-	const callHost = async (method, args = null) => await callOperation(spec.operation ?? "extensions.persistent.invoke", {
-		...spec.identityKey === "packageName" ? { packageName: spec.extensionId } : { extensionId: spec.extensionId },
-		method,
-		args: jsonValue(args)
-	});
+	let deactivateClient;
+	const callHost = async (method, args = null) => {
+		try {
+			return await callOperation(spec.operation ?? "extensions.persistent.invoke", {
+				...spec.identityKey === "packageName" ? { packageName: spec.extensionId } : {
+					extensionId: spec.extensionId,
+					version: spec.version
+				},
+				method,
+				args: jsonValue(args)
+			});
+		} catch (error) {
+			if (error.code === "extension-runtime-unavailable") deactivateClient?.();
+			throw error;
+		}
+	};
 	const guardedService = (service, name) => new Proxy(service, { get(target, property) {
 		const member = Reflect.get(target, property, target);
 		if (typeof member !== "function") return member;
@@ -10044,8 +11618,10 @@ function persistentClientFactory(requireModule, spec) {
 		name: `arkme-extension-client:${spec.extensionId}`,
 		async apply(ctx) {
 			if (spec.identityKey !== "packageName") {
-				const state = await callOperation("extensions.enabled-state", { extensionId: spec.extensionId });
-				if (state.installed !== true || state.enabled !== true) return;
+				if ((await callOperation("extensions.persistent.client-state", {
+					extensionId: spec.extensionId,
+					version: spec.version
+				})).mount !== true) return;
 			}
 			const styles = new Styles();
 			const traps = {
@@ -10089,7 +11665,16 @@ function persistentClientFactory(requireModule, spec) {
 				}
 			};
 			ctx.effect(() => () => styles.dispose(), `arkme-extension:${spec.extensionId}:styles`);
-			await ctx.plugin(guarded);
+			const fiber = ctx.plugin(guarded);
+			const deactivate = () => {
+				styles.dispose();
+				Promise.resolve(fiber.dispose?.()).catch(() => void 0);
+			};
+			deactivateClient = deactivate;
+			ctx.effect(() => () => {
+				if (deactivateClient === deactivate) deactivateClient = void 0;
+			}, `arkme-extension:${spec.extensionId}:client-fiber`);
+			await fiber;
 		}
 	};
 }
@@ -10125,18 +11710,18 @@ function writeSecure(path, content) {
 	});
 	chmodSync(path, 384);
 }
-function activationText(extensionId, enabled) {
+function activationText(extensionId, enabled, quarantine) {
 	return `${JSON.stringify({
 		schema_version: 1,
 		extension_id: extensionId,
-		enabled
+		enabled,
+		...quarantine === void 0 ? {} : { quarantine }
 	}, void 0, 2)}\n`;
 }
-function writePersistentExtensionActivation(bundleDirectory, extensionId, enabled) {
-	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+function writeActivationState(bundleDirectory, state) {
 	const target = join(bundleDirectory, "activation.json");
 	const temporary = join(bundleDirectory, `.activation.${randomUUID()}.tmp`);
-	writeSecure(temporary, activationText(extensionId, enabled));
+	writeSecure(temporary, activationText(state.extension_id, state.enabled, state.quarantine));
 	try {
 		renameSync(temporary, target);
 		chmodSync(target, 384);
@@ -10145,6 +11730,27 @@ function writePersistentExtensionActivation(bundleDirectory, extensionId, enable
 	}
 	return target;
 }
+function writePersistentExtensionActivation(bundleDirectory, extensionId, enabled) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+	return writeActivationState(bundleDirectory, {
+		schema_version: 1,
+		extension_id: extensionId,
+		enabled
+	});
+}
+function quarantinePersistentExtension(bundleDirectory, extensionId, error, failedAtMillis = Date.now()) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(extensionId)) throw new Error("扩展身份无效");
+	return writeActivationState(bundleDirectory, {
+		schema_version: 1,
+		extension_id: extensionId,
+		enabled: false,
+		quarantine: {
+			code: "runtime-load-failed",
+			failed_at_millis: failedAtMillis,
+			message: ((error instanceof Error ? error.message : String(error)).trim() || "persistent extension failed to load").slice(0, 2e3)
+		}
+	});
+}
 function readPersistentExtensionActivation(installationUrl) {
 	const activationUrl = new URL("./activation.json", installationUrl);
 	let value;
@@ -10164,6 +11770,10 @@ function readPersistentExtensionActivation(installationUrl) {
 	if (value === null || typeof value !== "object") throw new Error("Arkme persistent extension activation state is invalid");
 	const state = value;
 	if (state.schema_version !== 1 || typeof state.extension_id !== "string" || typeof state.enabled !== "boolean") throw new Error("Arkme persistent extension activation state is invalid");
+	if (state.quarantine !== void 0) {
+		const quarantine = state.quarantine;
+		if (state.enabled || quarantine.code !== "runtime-load-failed" || !Number.isSafeInteger(quarantine.failed_at_millis) || (quarantine.failed_at_millis ?? 0) < 0 || typeof quarantine.message !== "string" || quarantine.message.trim() === "" || quarantine.message.length > 2e3) throw new Error("Arkme persistent extension quarantine state is invalid");
+	}
 	return state;
 }
 function materializePersistentExtensionBundle(input) {
@@ -10192,7 +11802,8 @@ function materializePersistentExtensionBundle(input) {
 		if (existing !== void 0) if (existing.artifact_sha256 === installation.artifact_sha256 && existing.version === installation.version) {
 			try {
 				const manifest = JSON.parse(readFileSync(join(bundleDirectory, "package.json"), "utf8"));
-				const clientReady = input.clientCode === void 0 || manifest.exports?.["./client"] === "./lib/client.js" && manifest.dsh?.client?.inject?.length === 0 && readFileSync(join(bundleDirectory, "lib", "client.js"), "utf8").includes("extensions.persistent.invoke");
+				const clientBundle = input.clientCode === void 0 ? void 0 : readFileSync(join(bundleDirectory, "lib", "client.js"), "utf8");
+				const clientReady = input.clientCode === void 0 || manifest.exports?.["./client"] === "./lib/client.js" && manifest.dsh?.client?.inject?.length === 0 && clientBundle?.includes("extensions.persistent.invoke") === true && clientBundle.includes("extensions.persistent.client-state");
 				if (manifest.exports?.["."] === "./lib/index.js" && manifest.exports?.["./package.json"] === "./package.json" && clientReady) {
 					if (!existsSync(activationPath)) writeSecure(activationPath, activationText(input.resolution.extension_id, true));
 					return {
@@ -10453,8 +12064,22 @@ async function mountPersistentArkmeHostExtension(installation, registration) {
 		throw error;
 	}
 }
+function quarantineRuntimeFailure(installation, installationUrl, error) {
+	try {
+		quarantinePersistentExtension(dirname(fileURLToPath(installationUrl)), installation.extension_id, error);
+	} catch (quarantineError) {
+		console.error(`[arkme-extension:${installation.extension_id}] failed to persist quarantine state`, quarantineError);
+	}
+	console.error(`[arkme-extension:${installation.extension_id}] disabled after runtime load failure`, error);
+}
 async function applyPersistentArkmeHostExtension(ctx, installationUrl) {
-	const installation = readInstallation(installationUrl);
+	let installation;
+	try {
+		installation = readInstallation(installationUrl);
+	} catch (error) {
+		console.error("[arkme-extension:unknown] ignored invalid persistent installation metadata", error);
+		return;
+	}
 	const previous = persistentRegistrations.get(installation.extension_id);
 	if (previous?.ctx === ctx && previous.installationUrl.href === installationUrl.href) return;
 	if (previous !== void 0) await deactivatePersistentArkmeExtension(installation.extension_id);
@@ -10463,27 +12088,55 @@ async function applyPersistentArkmeHostExtension(ctx, installationUrl) {
 		installationUrl
 	};
 	persistentRegistrations.set(installation.extension_id, registration);
-	ctx.effect(() => () => {
-		if (persistentRegistrations.get(installation.extension_id) !== registration) return;
-		persistentRegistrations.delete(installation.extension_id);
-		persistentHandlers.delete(installation.extension_id);
-	}, `arkme-extension:${installation.extension_id}:registration`);
-	ctx.effect(() => () => {
-		if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
-	}, `arkme-extension:${installation.extension_id}:handlers`);
-	const activation = readPersistentExtensionActivation(installationUrl);
-	if (activation.extension_id !== installation.extension_id) throw new Error("Arkme persistent extension activation identity mismatch");
-	if (!activation.enabled) return;
-	await mountPersistentArkmeHostExtension(installation, registration);
+	try {
+		ctx.effect(() => () => {
+			if (persistentRegistrations.get(installation.extension_id) !== registration) return;
+			persistentRegistrations.delete(installation.extension_id);
+			persistentHandlers.delete(installation.extension_id);
+		}, `arkme-extension:${installation.extension_id}:registration`);
+		ctx.effect(() => () => {
+			if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
+		}, `arkme-extension:${installation.extension_id}:handlers`);
+		const activation = readPersistentExtensionActivation(installationUrl);
+		if (activation.extension_id !== installation.extension_id) throw new Error("Arkme persistent extension activation identity mismatch");
+		if (!activation.enabled) return;
+		await mountPersistentArkmeHostExtension(installation, registration);
+	} catch (error) {
+		if (persistentRegistrations.get(installation.extension_id) === registration) {
+			persistentRegistrations.delete(installation.extension_id);
+			if (persistentHandlers.get(installation.extension_id) === registration.handlers) persistentHandlers.delete(installation.extension_id);
+			if (persistentClientActivations.get(installation.extension_id) === registration.clientActivation) persistentClientActivations.delete(installation.extension_id);
+		}
+		quarantineRuntimeFailure(installation, installationUrl, error);
+	}
 }
 function persistentArkmeExtensionActive(extensionId) {
 	return persistentRegistrations.get(extensionId)?.fiber !== void 0 || persistentClientActivations.has(extensionId);
 }
+function persistentArkmeExtensionRuntimeState(extensionId) {
+	const registration = persistentRegistrations.get(extensionId);
+	if (registration === void 0) return void 0;
+	try {
+		return {
+			version: readInstallation(registration.installationUrl).version,
+			installationUrl: registration.installationUrl.href,
+			active: registration.fiber !== void 0 || registration.clientActivation !== void 0
+		};
+	} catch {
+		return;
+	}
+}
 /** Re-mount a verified Host half when its wrapper is already present in the current DSH process. */
 async function activatePersistentArkmeExtension(extensionId) {
 	const registration = persistentRegistrations.get(extensionId);
 	if (registration === void 0) return false;
-	return await mountPersistentArkmeHostExtension(readInstallation(registration.installationUrl), registration);
+	const installation = readInstallation(registration.installationUrl);
+	try {
+		return await mountPersistentArkmeHostExtension(installation, registration);
+	} catch (error) {
+		quarantineRuntimeFailure(installation, registration.installationUrl, error);
+		throw error;
+	}
 }
 async function deactivatePersistentArkmeExtension(extensionId) {
 	const registration = persistentRegistrations.get(extensionId);
@@ -10503,4 +12156,4 @@ async function invokePersistentArkmeExtension(extensionId, method, args) {
 	return jsonValue(await handler(jsonValue(args)));
 }
 //#endregion
-export { ArkmeService as A, canonicalExtensionJson as C, ARKME_EXTENSION_ICON_MAX_BYTES as D, ARKME_EXTENSION_FORMAT as E, ArkmePluginError as M, ArkmeOutgoingCallError as N, ARKME_EXTENSION_MAX_BYTES as O, assertExtensionArtifactSize as S, unpackArkmeExtension as T, inspectBundleArtifact as _, persistentArkmeExtensionActive as a, readLocalBundleTarball as b, renderArkmeBundleClientBundle as c, ARKME_BUNDLE_ARTIFACT_KIND as d, ARKME_BUNDLE_MAX_BYTES as f, canonicalBundleJson as g, bundleSha256 as h, invokePersistentArkmeExtension as i, ARKME_PROVIDER_CONTRACT_VERSION as j, ARKME_EXTENSION_PREVIEW_MAX_BYTES as k, verifyBundleResolutionSignature as l, arkmeSandboxEntryId as m, applyPersistentArkmeHostExtension as n, materializePersistentExtensionBundle as o, ArkmeBundleArtifactError as p, deactivatePersistentArkmeExtension as r, writePersistentExtensionActivation as s, activatePersistentArkmeExtension as t, verifyExtensionResolutionSignature as u, packBundleFiles as v, sha256Hex as w, renderArkmeSandboxHostEntry as x, packLocalBundleDirectory as y };
+export { unpackArkmeExtension as A, ArkmeOutgoingCallError as B, packBundleFiles as C, assertExtensionArtifactSize as D, renderArkmeSandboxHostEntry as E, ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE as F, ArkmeService as I, ARKME_DEFAULT_SHARE_WEBSITE as L, ARKME_EXTENSION_ICON_MAX_BYTES as M, ARKME_EXTENSION_MAX_BYTES as N, canonicalExtensionJson as O, ARKME_EXTENSION_PREVIEW_MAX_BYTES as P, ARKME_PROVIDER_CONTRACT_VERSION as R, inspectNativeBundleArtifactV3 as S, readNativeBundleTarballV3 as T, ArkmeBundleArtifactError as _, persistentArkmeExtensionActive as a, canonicalBundleJson as b, readPersistentExtensionActivation as c, verifyBundleResolutionSignature as d, verifyExtensionResolutionSignature as f, ARKME_NATIVE_BUNDLE_ARTIFACT_KIND as g, ARKME_BUNDLE_MAX_BYTES as h, invokePersistentArkmeExtension as i, ARKME_EXTENSION_FORMAT as j, sha256Hex as k, writePersistentExtensionActivation as l, ARKME_BUNDLE_ARTIFACT_KIND as m, applyPersistentArkmeHostExtension as n, persistentArkmeExtensionRuntimeState as o, verifyNativeBundleResolutionSignature as p, deactivatePersistentArkmeExtension as r, materializePersistentExtensionBundle as s, activatePersistentArkmeExtension as t, renderArkmeBundleClientBundle as u, arkmeSandboxEntryId as v, packLocalNativeBundleDirectoryV3 as w, inspectBundleArtifact as x, bundleSha256 as y, ArkmePluginError as z };