@senguoyun/dsh-arkme 0.1.30 → 0.1.31

package/lib/{persistent-runtime-D-NwFt9z.js → persistent-runtime-BJ8konXI.js}

@@ -2,9 +2,10 @@ import { chmodSync, createReadStream, existsSync, lstatSync, mkdirSync, readFile
 import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicKey, randomBytes, randomUUID, timingSafeEqual, verify } from "node:crypto";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { open } from "node:fs/promises";
+import { chmod as chmod$1, copyFile, link, mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { pinyin } from "pinyin-pro";
 import OSS from "ali-oss";
+import { Readable } from "node:stream";
 import { gunzipSync, gzipSync } from "node:zlib";
 import { createContext, runInContext } from "node:vm";
 import { Context } from "@deepseek-ai/cordis";
@@ -3445,6 +3446,258 @@ function arkmeMentionMetadataMentionsViewer(record, payload, viewerUserId) {
 	return false;
 }
 //#endregion
+//#region src/file-transfer-contract.ts
+const ARKME_TOOL_FILE_MAX_BYTES = 64 * 1024;
+const mediaTypesByExtension = {
+	jpg: {
+		mimeType: "image/jpeg",
+		kind: "image"
+	},
+	jpeg: {
+		mimeType: "image/jpeg",
+		kind: "image"
+	},
+	png: {
+		mimeType: "image/png",
+		kind: "image"
+	},
+	gif: {
+		mimeType: "image/gif",
+		kind: "image"
+	},
+	webp: {
+		mimeType: "image/webp",
+		kind: "image"
+	},
+	avif: {
+		mimeType: "image/avif",
+		kind: "image"
+	},
+	bmp: {
+		mimeType: "image/bmp",
+		kind: "image"
+	},
+	heic: {
+		mimeType: "image/heic",
+		kind: "image"
+	},
+	heif: {
+		mimeType: "image/heif",
+		kind: "image"
+	},
+	svg: {
+		mimeType: "image/svg+xml",
+		kind: "image"
+	},
+	tif: {
+		mimeType: "image/tiff",
+		kind: "image"
+	},
+	tiff: {
+		mimeType: "image/tiff",
+		kind: "image"
+	},
+	mp4: {
+		mimeType: "video/mp4",
+		kind: "video"
+	},
+	m4v: {
+		mimeType: "video/mp4",
+		kind: "video"
+	},
+	mov: {
+		mimeType: "video/quicktime",
+		kind: "video"
+	},
+	webm: {
+		mimeType: "video/webm",
+		kind: "video"
+	},
+	ogv: {
+		mimeType: "video/ogg",
+		kind: "video"
+	},
+	mkv: {
+		mimeType: "video/x-matroska",
+		kind: "video"
+	},
+	avi: {
+		mimeType: "video/x-msvideo",
+		kind: "video"
+	},
+	mpg: {
+		mimeType: "video/mpeg",
+		kind: "video"
+	},
+	mpeg: {
+		mimeType: "video/mpeg",
+		kind: "video"
+	},
+	mp3: {
+		mimeType: "audio/mpeg",
+		kind: "audio"
+	},
+	m4a: {
+		mimeType: "audio/mp4",
+		kind: "audio"
+	},
+	aac: {
+		mimeType: "audio/aac",
+		kind: "audio"
+	},
+	wav: {
+		mimeType: "audio/wav",
+		kind: "audio"
+	},
+	ogg: {
+		mimeType: "audio/ogg",
+		kind: "audio"
+	},
+	oga: {
+		mimeType: "audio/ogg",
+		kind: "audio"
+	},
+	flac: {
+		mimeType: "audio/flac",
+		kind: "audio"
+	},
+	opus: {
+		mimeType: "audio/opus",
+		kind: "audio"
+	}
+};
+const safeVisualTypesByExtension = {
+	jpg: {
+		mimeType: "image/jpeg",
+		kind: "image"
+	},
+	jpeg: {
+		mimeType: "image/jpeg",
+		kind: "image"
+	},
+	png: {
+		mimeType: "image/png",
+		kind: "image"
+	},
+	gif: {
+		mimeType: "image/gif",
+		kind: "image"
+	},
+	webp: {
+		mimeType: "image/webp",
+		kind: "image"
+	},
+	avif: {
+		mimeType: "image/avif",
+		kind: "image"
+	},
+	bmp: {
+		mimeType: "image/bmp",
+		kind: "image"
+	},
+	mp4: {
+		mimeType: "video/mp4",
+		kind: "video"
+	},
+	m4v: {
+		mimeType: "video/mp4",
+		kind: "video"
+	},
+	mov: {
+		mimeType: "video/quicktime",
+		kind: "video"
+	},
+	webm: {
+		mimeType: "video/webm",
+		kind: "video"
+	},
+	ogv: {
+		mimeType: "video/ogg",
+		kind: "video"
+	}
+};
+const safeImageMimeTypes = /* @__PURE__ */ new Set([
+	"image/jpeg",
+	"image/png",
+	"image/gif",
+	"image/webp",
+	"image/avif",
+	"image/bmp"
+]);
+const safeVideoMimeTypes = /* @__PURE__ */ new Set([
+	"video/mp4",
+	"video/x-m4v",
+	"video/quicktime",
+	"video/webm",
+	"video/ogg"
+]);
+const safeAudioMimeTypes = /* @__PURE__ */ new Set([
+	"audio/mpeg",
+	"audio/mp4",
+	"audio/wav",
+	"audio/ogg"
+]);
+function fileExtension(fileName) {
+	return /\.([A-Za-z0-9]+)$/u.exec(fileName.trim())?.[1]?.toLowerCase();
+}
+/** Recover the real media MIME when the platform supplied no useful metadata. */
+function arkmeNormalizedFileMimeType(mimeType, fileName = "") {
+	const declared = mimeType.trim().toLowerCase();
+	if (declared !== "" && declared !== "application/octet-stream") return declared;
+	const extension = fileExtension(fileName);
+	return (extension === void 0 ? void 0 : mediaTypesByExtension[extension]?.mimeType) ?? (declared || "application/octet-stream");
+}
+/** Classify presentation independently from whether this browser can decode it inline. */
+function arkmeMediaKind(mimeType, fileName = "") {
+	const declared = mimeType.trim().toLowerCase();
+	const extension = fileExtension(fileName);
+	if (extension !== void 0) {
+		const byExtension = mediaTypesByExtension[extension];
+		if (byExtension === void 0) return void 0;
+		if (declared === "" || declared === "application/octet-stream") return byExtension.kind;
+		if (byExtension.kind === "image" && declared.startsWith("image/")) return "image";
+		if (byExtension.kind === "video" && declared.startsWith("video/")) return "video";
+		if (byExtension.kind === "audio" && declared.startsWith("audio/")) return "audio";
+		return;
+	}
+	if (declared.startsWith("image/")) return "image";
+	if (declared.startsWith("video/")) return "video";
+	if (declared.startsWith("audio/")) return "audio";
+}
+/** A filename suffix is authoritative when it contradicts legacy visual metadata. */
+function arkmeBrowserVisualKind(mimeType, fileName = "") {
+	const declared = mimeType.trim().toLowerCase();
+	const extension = fileExtension(fileName);
+	if (extension !== void 0) {
+		const byExtension = safeVisualTypesByExtension[extension];
+		if (byExtension === void 0) return void 0;
+		if (declared === "" || declared === "application/octet-stream") return byExtension.kind;
+		if (byExtension.kind === "image" && safeImageMimeTypes.has(declared)) return "image";
+		if (byExtension.kind === "video" && safeVideoMimeTypes.has(declared)) return "video";
+		return;
+	}
+	if (safeImageMimeTypes.has(declared)) return "image";
+	if (safeVideoMimeTypes.has(declared)) return "video";
+}
+function arkmeCanInlineLocalFile(mimeType, fileName = "") {
+	if (arkmeBrowserVisualKind(mimeType, fileName) !== void 0) return true;
+	const declared = mimeType.trim().toLowerCase();
+	const extension = fileExtension(fileName);
+	if (!safeAudioMimeTypes.has(declared)) return false;
+	return extension === void 0 || [
+		"mp3",
+		"m4a",
+		"wav",
+		"ogg",
+		"oga"
+	].includes(extension);
+}
+/** Picked audio keeps generic upload metadata; presentation still recognizes it as audio. */
+function arkmePickedFileKind(mimeType, fileName = "") {
+	const mediaKind = arkmeMediaKind(arkmeNormalizedFileMimeType(mimeType, fileName), fileName);
+	return mediaKind === "image" ? 1 : mediaKind === "video" ? 3 : 4;
+}
+//#endregion
 //#region src/services/source-service.ts
 const SOURCE_LIST_CACHE_TTL_MS = 3e4;
 const SOURCE_LIST_CACHE_MAX_ENTRIES = 200;
@@ -3539,17 +3792,47 @@ function chatMessageDnd$1(value) {
 	const policy = value;
 	return numberValue$20(policy.mute_state) === 2 || numberValue$20(policy.notify_state) === 2;
 }
-function textPreview(raw) {
+function attachmentPreviewKind(item) {
+	const fileName = stringValue$1(item.file_name ?? item.fileName).trim();
+	const detectedKind = arkmeMediaKind(stringValue$1(item.mime_type ?? item.mimeType).trim(), fileName);
+	if (detectedKind !== void 0) return detectedKind;
+	const fileKind = integerLikeValue$2(item.file_kind ?? item.fileKind);
+	if (fileKind === 1) return "image";
+	if (fileKind === 2) return "audio";
+	if (fileKind === 3) return "video";
+	return "file";
+}
+function arkmeChatConversationPreview(raw) {
 	const direct = stringValue$1(raw.text_content ?? raw.title ?? raw.summary).trim();
 	if (direct !== "") return direct.slice(0, 300);
 	const content = objectValue$1(raw.content_payload ?? raw.payload);
 	const nested = stringValue$1(content.text_content ?? content.title ?? content.summary).trim();
 	if (nested !== "") return nested.slice(0, 300);
 	if (objectValue$1(content.voice).duration !== void 0) return "[语音]";
-	if (listValue$21(content.media_refs).length > 0 || listValue$21(raw.media_display_items).length > 0) return "[图片]";
+	const displayItems = listValue$21(raw.media_display_items ?? raw.mediaDisplayItems).map(objectValue$1);
+	const displayByAsset = /* @__PURE__ */ new Map();
+	for (const item of displayItems) {
+		const fileAssetUid = stringValue$1(item.file_asset_uid ?? item.fileAssetUid).trim();
+		if (fileAssetUid !== "") displayByAsset.set(fileAssetUid, item);
+	}
+	const mediaRefs = listValue$21(content.media_refs ?? content.mediaRefs).map(objectValue$1);
+	const firstAttachment = (mediaRefs.length > 0 ? mediaRefs.map((ref) => ({
+		...displayByAsset.get(stringValue$1(ref.file_asset_uid ?? ref.fileAssetUid).trim()) ?? {},
+		...ref
+	})) : displayItems).filter((item) => integerLikeValue$2(item.content_file_role ?? item.contentFileRole) !== 4).sort((left, right) => integerLikeValue$2(left.sort_order ?? left.sortOrder) - integerLikeValue$2(right.sort_order ?? right.sortOrder))[0];
+	if (firstAttachment !== void 0) {
+		const kind = attachmentPreviewKind(firstAttachment);
+		return kind === "image" ? "[图片]" : kind === "video" ? "[视频]" : kind === "audio" ? "[语音]" : "[文件]";
+	}
 	if (Object.keys(objectValue$1(content.structured_anchor)).length > 0) return "[卡片]";
 	return "";
 }
+function arkmeTimelineConversationPreview(item) {
+	const text = item.textContent.trim() || item.title.trim();
+	if (text !== "") return text;
+	const kind = item.contentBlocks?.[0]?.kind;
+	return kind === "image" ? "[图片]" : kind === "video" ? "[视频]" : kind === "audio" ? "[语音]" : kind === "file" ? "[文件]" : "非文本内容";
+}
 function chunksOf$1(values, size) {
 	const chunks = [];
 	for (let index = 0; index < values.length; index += size) chunks.push(values.slice(index, index + size));
@@ -4262,7 +4545,7 @@ var SourceService = class {
 					...parentTopicUid === "" || parentTopicUid === topicUid ? {} : { parentTopicUid },
 					siblingOrder: numberValue$20(siblingOrderByChild.get(topicUid) ?? core.sibling_order ?? item.sibling_order),
 					title,
-					latestPreview: textPreview(latest),
+					latestPreview: arkmeChatConversationPreview(latest),
 					latestMessageAtMillis: numberValue$20(latest.send_at ?? summary.latest_send_at),
 					activeAtMillis: numberValue$20(latest.send_at ?? summary.latest_send_at ?? core.update_at),
 					recordCount: numberValue$20(summary.record_count)
@@ -4360,7 +4643,7 @@ var SourceService = class {
 			const kind = sessionKind === 2 ? "group_chat" : sessionKind === 1 || sessionKind === 3 ? "private_chat" : void 0;
 			if (uid === "" || kind === void 0) continue;
 			const displayName = (kind === "private_chat" ? stringValue$1(supplement.remark ?? supplement.counterpart_name_snapshot ?? counterpart.display_name_snapshot ?? supplement.pending_name ?? counterpart.visible_phone) : stringValue$1(chatSession.title)).trim() || "未命名会话";
-			const preview = textPreview(latestPayload);
+			const preview = arkmeChatConversationPreview(latestPayload);
 			const unreadCount = Math.max(0, Math.trunc(numberValue$20(unread.unread_count)));
 			const latestRelation = objectValue$1(latestPreview.relation);
 			const latestPreviewMentionsViewer = integerLikeValue$2(latestRelation.sender_user_id ?? latestRelation.senderUserId) !== session.userId && arkmeMentionMetadataMentionsViewer(latestRecord, latestPayload, session.userId);
@@ -4596,7 +4879,7 @@ var SourceService = class {
 		if (uid === "" || kind === void 0) throw new Error("invalid chat display snapshot");
 		const displayName = (kind === "private_chat" ? stringValue$1(supplement.remark ?? supplement.counterpart_name_snapshot ?? counterpart.display_name_snapshot ?? supplement.pending_name ?? counterpart.visible_phone) : stringValue$1(chatSession.title)).trim() || cached?.displayName || "未命名会话";
 		const latestItem = [...timelineItems].sort((left, right) => (right.sequence ?? 0) - (left.sequence ?? 0))[0];
-		const latestPreview = latestItem === void 0 ? cached?.latestPreview : latestItem.forwardRecords === void 0 ? latestItem.textContent || latestItem.title || "非文本内容" : `[转发] ${latestItem.forwardRecords.title}`;
+		const latestPreview = latestItem === void 0 ? cached?.latestPreview : latestItem.forwardRecords === void 0 ? arkmeTimelineConversationPreview(latestItem) : `[转发] ${latestItem.forwardRecords.title}`;
 		const latestSequence = Math.max(numberValue$20(unread.session_last_seq ?? chatSession.last_seq), latestItem?.sequence ?? 0, cached?.latestSequence ?? 0);
 		const unreadCount = Math.max(0, Math.trunc(numberValue$20(unread.unread_count)));
 		const latestMentionsViewer = latestItem?.isMe === false && latestItem.mentionsViewer === true;
@@ -4658,6 +4941,11 @@ var SourceService = class {
 };
 //#endregion
 //#region src/services/bot-service.ts
+const BOT_CONVERSATION_OWNER = {
+	subject: "jotmo-subject",
+	chat: "jotmo-chat",
+	unavailable: "unavailable"
+};
 const BOT_REF_TTL_MILLIS = 30 * 6e4;
 const BOT_REF_CAP = 2e3;
 const BOT_REF_PATTERN = /^arkme-bot-v2\.[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
@@ -4741,15 +5029,64 @@ function botProfileSubjectUid(data) {
 	const bot = botProfileSource(data);
 	return stringValue$1(bot.subject_uid ?? bot.topic_uid ?? data.subject_uid ?? data.topic_uid).trim();
 }
+function botConversationOwner(data) {
+	const hasSubjectOwner = stringValue$1(data.subject_uid).trim() !== "";
+	if (hasSubjectOwner === (stringValue$1(data.chat_session_uid).trim() !== "")) return BOT_CONVERSATION_OWNER.unavailable;
+	return hasSubjectOwner ? BOT_CONVERSATION_OWNER.subject : BOT_CONVERSATION_OWNER.chat;
+}
+function botConversationCapabilities(owner, provider) {
+	return {
+		directChatAvailable: owner !== BOT_CONVERSATION_OWNER.unavailable,
+		privateChatOutboundEnabled: owner === BOT_CONVERSATION_OWNER.chat || owner === BOT_CONVERSATION_OWNER.subject && provider === "openclaw",
+		refreshOnRecordChanges: owner === BOT_CONVERSATION_OWNER.subject
+	};
+}
+function botPrivateChatAttachments(value) {
+	return listValue$20(value).map(objectValue$1).flatMap((raw) => {
+		const kind = stringValue$1(raw.kind).trim();
+		const fileName = stringValue$1(raw.file_name ?? raw.fileName).trim();
+		const mimeType = stringValue$1(raw.mime_type ?? raw.mimeType).trim();
+		const hasSourceFile = stringValue$1(raw.file_id ?? raw.fileId).trim() !== "";
+		if (kind === "" && fileName === "" && mimeType === "" && !hasSourceFile) return [];
+		return [{
+			kind: kind || "file",
+			fileName,
+			mimeType,
+			size: Math.max(0, Math.trunc(numberValue$19(raw.size))),
+			durationMillis: Math.max(0, Math.trunc(numberValue$19(raw.duration_ms ?? raw.durationMillis))),
+			width: Math.max(0, Math.trunc(numberValue$19(raw.width))),
+			height: Math.max(0, Math.trunc(numberValue$19(raw.height))),
+			sortOrder: Math.max(0, Math.trunc(numberValue$19(raw.order ?? raw.sort_order ?? raw.sortOrder)))
+		}];
+	});
+}
 function botPrivateChatMessage(value, fallbackContent = "") {
 	const raw = objectValue$1(value);
+	const role = stringValue$1(raw.role).trim().toLowerCase() === "user" ? "user" : "assistant";
+	const recordUid = stringValue$1(raw.record_uid ?? raw.recordUid).trim();
+	const content = stringValue$1(raw.content);
 	return {
-		role: stringValue$1(raw.role).trim().toLowerCase() === "user" ? "user" : "assistant",
-		content: stringValue$1(raw.content).trim() || fallbackContent,
+		messageId: stringValue$1(raw.message_id ?? raw.messageId).trim(),
+		...recordUid === "" ? {} : { recordUid },
+		role,
+		content: content === "" ? fallbackContent : content,
 		status: stringValue$1(raw.status).trim() || "sent",
-		createdAtMillis: botPrivateChatTimestamp(raw.created_at ?? raw.createdAt)
+		createdAtMillis: botPrivateChatTimestamp(raw.created_at ?? raw.createdAt),
+		attachments: botPrivateChatAttachments(raw.attachments)
 	};
 }
+function dedupeBotPrivateChatMessages(messages) {
+	const seenMessageIds = /* @__PURE__ */ new Set();
+	const result = [];
+	for (const message of messages) {
+		if (message.messageId !== "") {
+			if (seenMessageIds.has(message.messageId)) continue;
+			seenMessageIds.add(message.messageId);
+		}
+		result.push(message);
+	}
+	return result;
+}
 function botWithPrivateChatActivity(bot, messages) {
 	const latest = messages.reduce((current, message) => {
 		if (current === void 0 || message.createdAtMillis >= current.createdAtMillis) return message;
@@ -4954,7 +5291,8 @@ var BotService = class {
 	}
 	async openBotPrivateChatForSummary(bot, session, signal) {
 		const reference = await this.openBotRef(bot.botRef, session.userId);
-		const messages = listValue$20((await this.runtime.authenticatedBotPost("/api/v1/bot/private-chat/open", { bot_id: reference.botId }, session, signal)).messages).map((message) => botPrivateChatMessage(message));
+		if (reference.conversationOwner === BOT_CONVERSATION_OWNER.unavailable) throw new ArkmePluginError("bot-private-chat-owner-unavailable", "当前 Bot 私聊归属信息不可用，请刷新后重试", false, 409);
+		const messages = dedupeBotPrivateChatMessages(listValue$20((await this.runtime.authenticatedBotPost("/api/v1/bot/private-chat/open", { bot_id: reference.botId }, session, signal)).messages).map((message) => botPrivateChatMessage(message)));
 		return {
 			bot: botWithPrivateChatActivity(bot, messages),
 			messages
@@ -4966,22 +5304,40 @@ var BotService = class {
 		if (content.length > 2e4) throw new ArkmePluginError("bot-private-chat-content-invalid", "消息不能超过 20000 个字符", false, 400);
 		const session = await this.runtime.requireSession();
 		const reference = await this.openBotRef(botRef, session.userId);
-		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/private-chat/message/send", {
-			bot_id: reference.botId,
-			content
-		}, session, options.signal);
-		const botMessages = [...listValue$20(data.bot_messages).map((message) => botPrivateChatMessage(message)), ...Object.keys(objectValue$1(data.bot_message)).length === 0 ? [] : [botPrivateChatMessage(data.bot_message)]];
+		if (reference.conversationOwner === BOT_CONVERSATION_OWNER.unavailable) throw new ArkmePluginError("bot-private-chat-owner-unavailable", "当前 Bot 私聊归属信息不可用，请刷新后重试", false, 409);
+		if (reference.conversationOwner === BOT_CONVERSATION_OWNER.subject && reference.provider === "webhook") throw new ArkmePluginError("bot-private-chat-send-unsupported", "Webhook Bot 仅接收外部系统推送", false, 400);
+		let data;
+		try {
+			data = await this.runtime.authenticatedBotPost("/api/v1/bot/private-chat/message/send", {
+				bot_id: reference.botId,
+				content
+			}, session, options.signal);
+		} catch (error) {
+			if (reference.conversationOwner === BOT_CONVERSATION_OWNER.subject && error instanceof ArkmePluginError && (error.retryable || [
+				"arkme-network-error",
+				"arkme-timeout",
+				"arkme-response-invalid"
+			].includes(error.code))) throw new ArkmePluginError("bot-private-chat-send-outcome-unknown", "消息发送结果未知，请刷新会话确认；不会自动重试", false, 409, { cause: error });
+			throw error;
+		}
+		if (reference.conversationOwner === BOT_CONVERSATION_OWNER.subject && stringValue$1(objectValue$1(data.user_message).message_id).trim() === "") throw new ArkmePluginError("bot-private-chat-send-outcome-unknown", "消息可能已发送，但响应缺少确认标识；请刷新会话确认", false, 409);
+		const botMessages = dedupeBotPrivateChatMessages([...listValue$20(data.bot_messages).map((message) => botPrivateChatMessage(message)), ...Object.keys(objectValue$1(data.bot_message)).length === 0 ? [] : [botPrivateChatMessage(data.bot_message)]]);
 		return {
-			userMessage: botPrivateChatMessage(data.user_message, content),
-			botMessages,
-			status: stringValue$1(data.status).trim() || "ok"
+			recordProjectionChanged: reference.conversationOwner === BOT_CONVERSATION_OWNER.subject,
+			result: {
+				userMessage: botPrivateChatMessage(data.user_message, content),
+				botMessages,
+				status: stringValue$1(data.status).trim() || "ok"
+			}
 		};
 	}
 	async openBotChat(botRef, options = {}) {
 		const session = await this.runtime.requireSession();
-		const reference = await this.openBotRef(botRef, session.userId);
+		await this.openBotRef(botRef, session.userId);
 		const bot = (await this.listBots(options)).items.find((item) => item.botRef === botRef);
 		if (bot === void 0) throw new ArkmePluginError("bot-ref-not-owned", "当前账号不存在该 OpenClaw Bot", false, 404);
+		const reference = await this.openBotRef(botRef, session.userId);
+		if (reference.conversationOwner !== BOT_CONVERSATION_OWNER.chat) throw new ArkmePluginError("bot-chat-source-unavailable", "当前 Bot 不属于 Chat 私聊链路", false, 409);
 		const data = await this.runtime.authenticatedBotPost("/api/v1/bot/private-chat/open", { bot_id: reference.botId }, session, options.signal);
 		const chatSessionUid = botChatSessionUid(data);
 		if (chatSessionUid !== void 0) {
@@ -5030,7 +5386,7 @@ var BotService = class {
 		for (const value of listValue$20(data.bots)) {
 			const raw = objectValue$1(value);
 			if (arkmeNormalizeBotProvider(raw.provider) !== "openclaw") continue;
-			const { directChatAvailable: _directChatAvailable, ...summary } = await this.botSummaryFromData(raw, session.userId);
+			const summary = await this.groupBotSummaryFromData(raw, session.userId);
 			items.push({
 				...summary,
 				installed: booleanValue$10(raw.installed)
@@ -5104,7 +5460,7 @@ var BotService = class {
 			botGroupTarget
 		});
 	}
-	async botSummaryFromData(raw, userId) {
+	async botSummaryBaseFromData(raw, userId, conversationOwner) {
 		const botId = stringValue$1(raw.bot_id).trim();
 		const name = stringValue$1(raw.name).trim();
 		const provider = arkmeNormalizeBotProvider(raw.provider);
@@ -5113,17 +5469,27 @@ var BotService = class {
 		const status = rawStatus === "online" || rawStatus === "offline" ? rawStatus : "unknown";
 		const createdAtMillis = botPrivateChatTimestamp(raw.created_at ?? raw.createdAt);
 		return {
-			botRef: this.sealBotRef(userId, botId, provider),
+			botRef: this.sealBotRef(userId, botId, provider, conversationOwner),
 			directoryKey: await this.botDirectoryKey(userId, botId),
 			name,
 			provider,
 			description: stringValue$1(raw.description).trim(),
 			status,
-			directChatAvailable: stringValue$1(raw.subject_uid).trim() !== "" || stringValue$1(raw.chat_session_uid).trim() !== "",
 			...createdAtMillis === 0 ? {} : { createdAtMillis },
 			...this.botAvatarProjection(raw, userId, botId)
 		};
 	}
+	async botSummaryFromData(raw, userId) {
+		const conversationOwner = botConversationOwner(raw);
+		const summary = await this.botSummaryBaseFromData(raw, userId, conversationOwner);
+		return {
+			...summary,
+			...botConversationCapabilities(conversationOwner, summary.provider)
+		};
+	}
+	async groupBotSummaryFromData(raw, userId) {
+		return await this.botSummaryBaseFromData(raw, userId, void 0);
+	}
 	async botManageProfileFromData(data, userId) {
 		const raw = botProfileSource(data);
 		const summary = await this.botSummaryFromData(raw, userId);
@@ -5199,7 +5565,7 @@ var BotService = class {
 			expiresAtMillis: entry.expiresAtMillis
 		};
 	}
-	sealBotRef(userId, botId, provider) {
+	sealBotRef(userId, botId, provider, conversationOwner) {
 		this.pruneBotRefs();
 		const key = `${String(userId)}\u0000${provider}\u0000${botId}`;
 		const existingRef = this.botRefByKey.get(key);
@@ -5207,6 +5573,7 @@ var BotService = class {
 		if (existing !== void 0) {
 			this.botRefs.set(existingRef, {
 				...existing,
+				...conversationOwner === void 0 ? {} : { conversationOwner },
 				expiresAtMillis: this.now() + (this.refOptions.ttlMillis ?? BOT_REF_TTL_MILLIS)
 			});
 			return existingRef;
@@ -5217,6 +5584,7 @@ var BotService = class {
 			userId,
 			botId,
 			provider,
+			conversationOwner: conversationOwner ?? BOT_CONVERSATION_OWNER.unavailable,
 			key,
 			expiresAtMillis: this.now() + (this.refOptions.ttlMillis ?? BOT_REF_TTL_MILLIS)
 		});
@@ -6265,8 +6633,18 @@ var CallHistoryService = class {
 	}
 };
 //#endregion
+//#region src/runtime-instance.ts
+/**
+* Arkme Host 进程生命周期身份。
+*
+* 模块只在当前 Node 进程内生成一次；SSE 重连与 provider.instance 共用该值。
+* 该值不持久化，也不参与用户、账号或设备鉴权。
+*/
+const ARKME_RUNTIME_INSTANCE_ID = randomUUID();
+//#endregion
 //#region src/chat-realtime.ts
 const ARKME_CHAT_SSE_PATH = "/api/v1/sse/chat/noty";
+const ARKME_RUNTIME_INSTANCE_ID_HEADER = "X-Jotmo-Runtime-Instance-Id";
 const DEFAULT_CONNECT_TIMEOUT_MS = 15e3;
 const DEFAULT_INACTIVITY_TIMEOUT_MS = 75e3;
 const DEFAULT_LEASE_DURATION_MS = 57e4;
@@ -6276,6 +6654,19 @@ const DEFAULT_MAX_RETRY_MS = 15e3;
 const DEFAULT_STABLE_CONNECTION_MS = 3e4;
 const MAX_SEEN_EVENTS = 256;
 var ArkmeChatRealtimeAuthError = class extends Error {};
+var ArkmeChatRealtimeRetryAfterError = class extends Error {
+	retryAfterMillis;
+	constructor(retryAfterMillis) {
+		super("chat SSE capacity retry requested");
+		this.retryAfterMillis = retryAfterMillis;
+		this.name = "ArkmeChatRealtimeRetryAfterError";
+	}
+};
+function capacityRetryAfterMillis(value) {
+	if (value === null || value.trim() === "") return void 0;
+	const seconds = Number(value.trim());
+	return Number.isFinite(seconds) && seconds >= 0 ? Math.min(6e4, Math.round(seconds * 1e3)) : void 0;
+}
 function positiveInteger(value) {
 	const parsed = typeof value === "number" ? value : typeof value === "string" ? Number(value.trim()) : NaN;
 	return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
@@ -6429,6 +6820,7 @@ var ArkmeChatRealtimeRuntime = class {
 	connectionGeneration = 0;
 	forceReconnectRequested = false;
 	lastEventAtMillis;
+	lastIdentityVersion = "";
 	seenEventUids = /* @__PURE__ */ new Set();
 	listeners = /* @__PURE__ */ new Set();
 	constructor(options) {
@@ -6508,6 +6900,7 @@ var ArkmeChatRealtimeRuntime = class {
 			}
 			blockedAccessToken = void 0;
 			let stableConnection = false;
+			let retryAfterMillis = 0;
 			this.options.diagnostic?.("reconnect_attempt", { connectionGeneration: this.connectionGeneration + 1 });
 			try {
 				await this.consume(session, signal);
@@ -6519,6 +6912,7 @@ var ArkmeChatRealtimeRuntime = class {
 				stableConnection = this.lastConnectionLifetimeMs >= this.stableConnectionMs;
 				if (stableConnection) retryMs = this.retryBaseMs;
 				if (this.lastAcceptedAccessToken === session.accessToken) refreshedButUnacceptedToken = void 0;
+				if (error instanceof ArkmeChatRealtimeRetryAfterError) retryAfterMillis = error.retryAfterMillis;
 				if (error instanceof ArkmeChatRealtimeAuthError) {
 					if (refreshedButUnacceptedToken === session.accessToken) {
 						blockedAccessToken = session.accessToken;
@@ -6551,7 +6945,12 @@ var ArkmeChatRealtimeRuntime = class {
 				retryMs = this.retryBaseMs;
 				continue;
 			}
-			await this.wait(this.jitteredDelay(retryMs), signal);
+			await this.wait(Math.max(this.jitteredDelay(retryMs), retryAfterMillis), signal);
+			if (this.forceReconnectRequested) {
+				this.forceReconnectRequested = false;
+				retryMs = this.retryBaseMs;
+				continue;
+			}
 			if (!stableConnection) retryMs = Math.min(this.maxRetryMs, Math.max(this.retryBaseMs, retryMs * 2));
 		}
 	}
@@ -6572,18 +6971,29 @@ var ArkmeChatRealtimeRuntime = class {
 					"Accept-Language": "zh-CN",
 					Authorization: `Bearer ${session.accessToken}`,
 					"Content-Type": "application/json",
+					[ARKME_RUNTIME_INSTANCE_ID_HEADER]: ARKME_RUNTIME_INSTANCE_ID,
 					Usersource: "3"
 				},
 				body: "{}",
 				signal: controller.signal
 			});
 			clearTimeout(connectTimer);
-			if (response.status === 401 || response.status === 403) throw new ArkmeChatRealtimeAuthError();
-			if (!response.ok || response.body === null) throw new Error(`chat SSE returned HTTP ${String(response.status)}`);
+			if (response.status === 401 || response.status === 403) {
+				await response.body?.cancel().catch(() => void 0);
+				throw new ArkmeChatRealtimeAuthError();
+			}
+			if (!response.ok) {
+				const retryAfterMillis = response.status === 429 ? capacityRetryAfterMillis(response.headers.get("retry-after")) : void 0;
+				await response.body?.cancel().catch(() => void 0);
+				if (retryAfterMillis !== void 0) throw new ArkmeChatRealtimeRetryAfterError(retryAfterMillis);
+				throw new Error(`chat SSE returned HTTP ${String(response.status)}`);
+			}
+			if (response.body === null) throw new Error(`chat SSE returned HTTP ${String(response.status)}`);
 			if (!(response.headers.get("content-type")?.toLowerCase() ?? "").includes("text/event-stream")) {
 				await response.body.cancel().catch(() => void 0);
 				throw new Error("chat SSE returned a non-event-stream response");
 			}
+			this.reportIdentityCapability(response);
 			acceptedAtMillis = this.now();
 			this.connected = true;
 			this.lastAcceptedAccessToken = session.accessToken;
@@ -6612,6 +7022,15 @@ var ArkmeChatRealtimeRuntime = class {
 			if (this.connectionController === controller) this.connectionController = void 0;
 		}
 	}
+	reportIdentityCapability(response) {
+		const identityVersion = response.headers.get("X-Jotmo-SSE-Identity-Version")?.trim() || "legacy";
+		if (identityVersion === this.lastIdentityVersion) return;
+		this.lastIdentityVersion = identityVersion;
+		this.options.diagnostic?.("sse_identity_capability", {
+			connectionGeneration: this.connectionGeneration + 1,
+			identityVersion
+		});
+	}
 	jitteredDelay(milliseconds) {
 		const random = Math.min(1, Math.max(0, this.random()));
 		return Math.max(0, Math.round(milliseconds * (.8 + random * .4)));
@@ -8674,6 +9093,8 @@ var ChatService = class {
 	async sendSourceRich(sourceRef, input, options = {}) {
 		if (this.runtime.config.richMediaSendEnabled === false) throw new ArkmePluginError("rich-content-disabled", "富内容发送已被插件配置关闭", false, 403);
 		const session = await this.runtime.requireSession();
+		if (options.expectedUserId !== void 0 && options.expectedUserId !== session.userId) throw new ArkmePluginError("file-account-changed", "账号已切换", false, 403);
+		options.signal?.throwIfAborted();
 		const source = await this.source.openSourceRef(sourceRef, session.userId);
 		const title = input.title?.trim() ?? "";
 		const textContent = input.textContent?.trim() ?? "";
@@ -8702,7 +9123,10 @@ var ChatService = class {
 				content_file_role: 1,
 				render_role: 1,
 				sort_order: index,
-				file_name: asset.fileName
+				file_name: asset.fileName,
+				file_kind: asset.fileKind,
+				mime_type: asset.mimeType,
+				size: asset.size
 			}))
 		};
 		let contentPayload = mediaContentPayload;
@@ -8710,7 +9134,7 @@ var ChatService = class {
 			if ((input.humanMentions?.length ?? 0) > 0 && source.kind !== "group_chat") throw new ArkmePluginError("mention-group-required", "真人 mention 只能发送到群聊", false);
 			if ((input.botMentions?.length ?? 0) > 0 && source.kind !== "group_chat" && source.kind !== "private_chat") throw new ArkmePluginError("mention-chat-required", "Bot mention 只能发送到聊天", false);
 			if (longArticle) throw new ArkmePluginError("mention-rich-invalid", "长文暂不支持 mention", false);
-			const mentionPayload = await this.humanMentionContentPayload(source, input.textContent ?? "", textContent, input.humanMentions ?? [], session, void 0, input.botMentions ?? []);
+			const mentionPayload = await this.humanMentionContentPayload(source, input.textContent ?? "", textContent, input.humanMentions ?? [], session, options.signal, input.botMentions ?? []);
 			contentPayload = {
 				...mediaContentPayload ?? {},
 				...mentionPayload
@@ -8727,7 +9151,7 @@ var ChatService = class {
 			send_at: Date.now()
 		};
 		if (source.kind === "send_to_self" || source.kind === "default_category") {
-			const result = await this.runtime.authenticatedPost("/api/v1/records/create", commonBody, session);
+			const result = await this.runtime.authenticatedPost("/api/v1/records/create", commonBody, session, options.signal);
 			this.source.invalidateSourceListCache(session.userId, "send_to_self");
 			return {
 				sourceRef,
@@ -8740,7 +9164,7 @@ var ChatService = class {
 			const result = await this.runtime.authenticatedPost("/api/v1/topics/records/create", {
 				topic_uid: source.ownerRef,
 				...commonBody
-			}, session);
+			}, session, options.signal);
 			this.source.invalidateSourceListCache(session.userId, "send_to_self");
 			return {
 				sourceRef,
@@ -8753,7 +9177,7 @@ var ChatService = class {
 			chat_session_uid: source.ownerRef,
 			rel_uid: relationUid,
 			...commonBody
-		}, session);
+		}, session, options.signal);
 		const sequence = numberValue$16(result.seq);
 		this.realtime.scheduleChatSessionProjection(source.ownerRef, sequence);
 		return {
@@ -10372,6 +10796,37 @@ function booleanValue$4(value) {
 function listValue$13(value) {
 	return Array.isArray(value) ? value : [];
 }
+function aiPolishThreadMessages(value) {
+	let totalCharacters = 0;
+	const messages = [];
+	for (const raw of listValue$13(value).slice(-40)) {
+		const item = objectValue$1(raw);
+		const id = stringValue$1(item.id).trim();
+		const role = stringValue$1(item.role).trim();
+		const text = stringValue$1(item.text).trim().slice(0, 4e3);
+		if (id === "" || role !== "ai" && role !== "user" || text === "") continue;
+		totalCharacters += [...text].length;
+		if (totalCharacters > 2e4) break;
+		const ruleRef = stringValue$1(item.rule_uid ?? item.ruleRef).trim();
+		messages.push({
+			id,
+			role,
+			text,
+			...item.is_rule === true || item.isRule === true ? { isRule: true } : {},
+			...ruleRef === "" ? {} : { ruleRef }
+		});
+	}
+	return messages;
+}
+function serializeAiPolishThreadMessage(message) {
+	return {
+		id: message.id,
+		role: message.role,
+		text: message.text,
+		...message.isRule === true ? { is_rule: true } : {},
+		...message.ruleRef === void 0 || message.ruleRef === "" ? {} : { rule_uid: message.ruleRef }
+	};
+}
 function compactAiPolishActorLabel(value) {
 	const normalized = stringValue$1(value).replace(/\s+/g, " ").trim();
 	if (normalized === "") return "";
@@ -10426,7 +10881,11 @@ var GroupAiPolishService = class {
 		const instruction = requirement.trim();
 		if (source.kind !== "group_chat") throw new ArkmePluginError("group-ai-polish-source-invalid", "AI 表达润色仅支持群聊", false);
 		if (instruction === "" || [...instruction].length > 2e3) throw new ArkmePluginError("group-ai-polish-requirement-invalid", "请提供不超过 2000 字的润色要求", false);
-		if (!(await this.queryGroupAiPolishConfig(source.ownerRef, session, options.signal)).canManage) throw new ArkmePluginError("group-ai-polish-forbidden", "当前无法确认有效群成员身份，请稍后重试", false, 403);
+		const config = await this.queryGroupAiPolishConfig(source.ownerRef, session, options.signal, options.targetRuleRef?.trim() !== "");
+		if (!config.canManage) throw this.permissionDenied();
+		const targetRuleRef = options.targetRuleRef?.trim() ?? "";
+		const targetRule = targetRuleRef === "" ? void 0 : config.rules.find((rule) => rule.ruleUid === targetRuleRef);
+		if (targetRuleRef !== "" && targetRule === void 0) throw new ArkmePluginError("group-ai-polish-rule-not-found", "规则已删除或不可用，请重新读取规则列表", false, 404);
 		const generated = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/rules/generate", {
 			chat_session_uid: source.ownerRef,
 			instruction
@@ -10437,23 +10896,42 @@ var GroupAiPolishService = class {
 		if (ruleName === "" || ruleText === "") throw new ArkmePluginError("group-ai-polish-generate-invalid", "AI 没有生成可用的润色规则，请换一种描述重试", true, 502);
 		this.cleanupAiPolishState();
 		const confirmationRef = `arkme-ai-polish-confirm-v1.${randomUUID()}`;
+		const suppliedThread = aiPolishThreadMessages(options.threadMessages);
+		const candidateMessage = {
+			id: `arkme-${randomUUID()}`,
+			role: "ai",
+			text: ruleText,
+			isRule: true,
+			...(targetRule?.ruleUid ?? stringValue$1(candidate.candidate_uid).trim()) === "" ? {} : { ruleRef: targetRule?.ruleUid ?? stringValue$1(candidate.candidate_uid).trim() }
+		};
+		const threadMessages = suppliedThread.length === 0 ? [] : [...suppliedThread, candidateMessage];
+		const candidateExtra = objectValue$1(candidate.extra);
 		this.aiPolishConfirmations.set(confirmationRef, {
 			userId: session.userId,
 			chatSessionUid: source.ownerRef,
 			groupName: source.displayName,
 			action: "enable",
 			expiresAtMillis: Date.now() + 10 * 6e4,
-			candidateUid: stringValue$1(candidate.candidate_uid).trim(),
+			candidateUid: targetRule?.ruleUid ?? stringValue$1(candidate.candidate_uid).trim(),
+			...targetRule === void 0 ? {} : {
+				editingRuleUid: targetRule.ruleUid,
+				editingRuleVersion: targetRule.ruleVersion
+			},
 			ruleName,
 			ruleText,
 			promptVersion: stringValue$1(candidate.prompt_version).trim(),
-			extra: objectValue$1(candidate.extra)
+			extra: threadMessages.length === 0 ? candidateExtra : {
+				...candidateExtra,
+				rule_thread_messages: threadMessages.map(serializeAiPolishThreadMessage),
+				active_rule_message_id: candidateMessage.id
+			}
 		});
 		return {
 			groupName: source.displayName,
 			ruleName,
 			ruleText,
-			confirmationRef
+			confirmationRef,
+			...threadMessages.length === 0 ? {} : { threadMessages }
 		};
 	}
 	async generateGroupAiPolishRule(groupName, requirement, options = {}) {
@@ -10463,42 +10941,134 @@ var GroupAiPolishService = class {
 	async confirmEnableGroupAiPolish(confirmationRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const pending = this.requireAiPolishConfirmation(confirmationRef, session.userId, "enable");
-		if (!(await this.queryGroupAiPolishConfig(pending.chatSessionUid, session, options.signal)).canManage) throw new ArkmePluginError("group-ai-polish-forbidden", "当前无法确认有效群成员身份，请稍后重试", false, 403);
-		const updateAt = Date.now();
-		const upserted = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/rules/upsert", {
-			chat_session_uid: pending.chatSessionUid,
-			...pending.candidateUid === void 0 || pending.candidateUid === "" ? {} : { rule_uid: pending.candidateUid },
-			name: pending.ruleName,
-			rule_text: pending.ruleText,
-			...pending.promptVersion === void 0 || pending.promptVersion === "" ? {} : { prompt_version: pending.promptVersion },
-			update_at: updateAt,
-			...pending.extra === void 0 || Object.keys(pending.extra).length === 0 ? {} : { extra: pending.extra }
-		}, session, options.signal);
-		const ruleUid = stringValue$1(objectValue$1(upserted.rule ?? upserted).rule_uid).trim();
-		if (ruleUid === "") throw new ArkmePluginError("group-ai-polish-rule-invalid", "保存润色规则后未返回有效规则", true, 502);
-		const updated = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/settings/update", {
-			chat_session_uid: pending.chatSessionUid,
-			enabled: true,
-			active_rule_uid: ruleUid,
-			update_at: Math.max(Date.now(), updateAt + 1)
-		}, session, options.signal);
-		const savedConfig = objectValue$1(updated.config ?? updated);
-		if (!booleanValue$4(savedConfig.enabled) || stringValue$1(savedConfig.active_rule_uid).trim() !== ruleUid) throw new ArkmePluginError("group-ai-polish-enable-invalid", "润色规则已保存，但开启状态确认失败，请重试", true, 502);
-		this.invalidateAiPolishReadCache(session.userId, pending.chatSessionUid);
-		this.aiPolishConfirmations.delete(confirmationRef.trim());
+		if (pending.confirming) throw new ArkmePluginError("group-ai-polish-confirm-busy", "此操作正在确认，请稍后重试", true, 409);
+		pending.confirming = true;
+		try {
+			const current = await this.queryGroupAiPolishConfig(pending.chatSessionUid, session, options.signal, true);
+			if (!current.canManage) throw this.permissionDenied();
+			const updateAt = Date.now();
+			let ruleUid = pending.savedRuleUid ?? "";
+			let ruleChanged = false;
+			if (ruleUid !== "") {
+				const saved = current.rules.find((rule) => rule.ruleUid === ruleUid);
+				if (saved === void 0 || saved.name !== pending.ruleName || saved.ruleText !== pending.ruleText) throw new ArkmePluginError("group-ai-polish-preview-stale", "规则已被修改或删除，请重新预览并确认", false, 409);
+			} else {
+				if (pending.editingRuleUid !== void 0) {
+					const currentRule = current.rules.find((rule) => rule.ruleUid === pending.editingRuleUid);
+					if (currentRule === void 0 || currentRule.ruleVersion !== pending.editingRuleVersion) throw new ArkmePluginError("group-ai-polish-preview-stale", "规则已被其他成员修改或删除，请重新读取后再编辑", false, 409);
+				}
+				const upserted = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/rules/upsert", {
+					chat_session_uid: pending.chatSessionUid,
+					...pending.candidateUid === void 0 || pending.candidateUid === "" ? {} : { rule_uid: pending.candidateUid },
+					name: pending.ruleName,
+					rule_text: pending.ruleText,
+					...pending.promptVersion === void 0 || pending.promptVersion === "" ? {} : { prompt_version: pending.promptVersion },
+					update_at: updateAt,
+					...pending.extra === void 0 || Object.keys(pending.extra).length === 0 ? {} : { extra: pending.extra }
+				}, session, options.signal);
+				ruleUid = stringValue$1(objectValue$1(upserted.rule ?? upserted).rule_uid).trim();
+				if (ruleUid === "") throw new ArkmePluginError("group-ai-polish-rule-invalid", "保存润色规则后未返回有效规则", true, 502);
+				ruleChanged = true;
+				pending.savedRuleUid = ruleUid;
+				this.invalidateAiPolishReadCache(session.userId, pending.chatSessionUid);
+			}
+			try {
+				if (!current.enabled || current.activeRuleUid !== ruleUid) await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/settings/update", {
+					chat_session_uid: pending.chatSessionUid,
+					enabled: true,
+					active_rule_uid: ruleUid,
+					update_at: Math.max(Date.now(), updateAt + 1)
+				}, session, options.signal);
+				this.invalidateAiPolishReadCache(session.userId, pending.chatSessionUid);
+				const verified = await this.queryGroupAiPolishConfig(pending.chatSessionUid, session, options.signal, true);
+				const verifiedRule = verified.rules.find((rule) => rule.ruleUid === ruleUid);
+				if (!verified.enabled || verified.activeRuleUid !== ruleUid || verifiedRule === void 0 || verifiedRule.name !== pending.ruleName || verifiedRule.ruleText !== pending.ruleText) throw new Error("AI polish state did not match the approved preview");
+			} catch {
+				this.invalidateAiPolishReadCache(session.userId, pending.chatSessionUid);
+				throw new ArkmePluginError("group-ai-polish-enable-unverified", "规则已保存，但未能确认开启生效；请查询当前状态后重试，不需要重新生成规则", true, 502);
+			}
+			this.aiPolishConfirmations.delete(confirmationRef.trim());
+			return {
+				groupName: pending.groupName,
+				enabled: true,
+				ruleName: pending.ruleName ?? "",
+				changed: ruleChanged || !current.enabled || current.activeRuleUid !== ruleUid
+			};
+		} finally {
+			pending.confirming = false;
+		}
+	}
+	permissionDenied() {
+		return new ArkmePluginError("group-ai-polish-forbidden", "服务端未授予当前账号该群的 AI 润色设置权限；请确认账号仍在群内，以及服务端已支持全体群成员设置", false, 403);
+	}
+	async prepareEnableGroupAiPolishForSource(sourceRef, ruleName = "", options = {}) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-ai-polish-source-invalid", "AI 表达润色仅支持群聊", false);
+		const config = await this.queryGroupAiPolishConfig(source.ownerRef, session, options.signal, true);
+		if (!config.canManage) throw this.permissionDenied();
+		const name = ruleName.trim();
+		const matches = name !== "" ? config.rules.filter((rule) => rule.name === name) : config.activeRuleUid !== "" ? config.rules.filter((rule) => rule.ruleUid === config.activeRuleUid) : config.rules;
+		if (matches.length === 0) throw new ArkmePluginError("group-ai-polish-rule-not-found", "没有找到可开启的规则，请先查询规则或提供新的润色要求", false, 404);
+		if (matches.length !== 1) throw new ArkmePluginError("group-ai-polish-rule-ambiguous", "存在多个候选规则，请查询并指定唯一的规则名称", false, 409);
+		const rule = matches[0];
+		this.cleanupAiPolishState();
+		const confirmationRef = `arkme-ai-polish-confirm-v1.${randomUUID()}`;
+		this.aiPolishConfirmations.set(confirmationRef, {
+			userId: session.userId,
+			chatSessionUid: source.ownerRef,
+			groupName: source.displayName,
+			action: "enable",
+			expiresAtMillis: Date.now() + 10 * 6e4,
+			savedRuleUid: rule.ruleUid,
+			ruleName: rule.name,
+			ruleText: rule.ruleText
+		});
 		return {
-			groupName: pending.groupName,
-			enabled: true,
-			ruleName: pending.ruleName ?? "",
-			changed: true
+			groupName: source.displayName,
+			ruleName: rule.name,
+			ruleText: rule.ruleText,
+			confirmationRef
 		};
 	}
+	async prepareEnableGroupAiPolishRuleForSource(sourceRef, ruleRef, options = {}) {
+		const session = await this.runtime.requireSession();
+		const source = await this.source.openSourceRef(sourceRef, session.userId);
+		if (source.kind !== "group_chat") throw new ArkmePluginError("group-ai-polish-source-invalid", "AI 表达润色仅支持群聊", false);
+		const config = await this.queryGroupAiPolishConfig(source.ownerRef, session, options.signal, true);
+		if (!config.canManage) throw this.permissionDenied();
+		const normalizedRuleRef = ruleRef.trim();
+		const rule = config.rules.find((candidate) => candidate.ruleUid === normalizedRuleRef);
+		if (normalizedRuleRef === "" || rule === void 0) throw new ArkmePluginError("group-ai-polish-rule-not-found", "规则已删除或不可用，请重新读取规则列表", false, 404);
+		this.cleanupAiPolishState();
+		const confirmationRef = `arkme-ai-polish-confirm-v1.${randomUUID()}`;
+		this.aiPolishConfirmations.set(confirmationRef, {
+			userId: session.userId,
+			chatSessionUid: source.ownerRef,
+			groupName: source.displayName,
+			action: "enable",
+			expiresAtMillis: Date.now() + 10 * 6e4,
+			savedRuleUid: rule.ruleUid,
+			ruleName: rule.name,
+			ruleText: rule.ruleText
+		});
+		return {
+			groupName: source.displayName,
+			ruleName: rule.name,
+			ruleText: rule.ruleText,
+			confirmationRef
+		};
+	}
+	async prepareEnableGroupAiPolish(groupName, ruleName = "", options = {}) {
+		const source = await this.resolveUniqueGroupByName(groupName, options.signal);
+		return await this.prepareEnableGroupAiPolishForSource(source.sourceRef, ruleName, options);
+	}
 	async prepareDisableGroupAiPolishForSource(sourceRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const source = await this.source.openSourceRef(sourceRef, session.userId);
 		if (source.kind !== "group_chat") throw new ArkmePluginError("group-ai-polish-source-invalid", "AI 表达润色仅支持群聊", false);
 		const config = await this.queryGroupAiPolishConfig(source.ownerRef, session, options.signal);
-		if (!config.canManage) throw new ArkmePluginError("group-ai-polish-forbidden", "当前无法确认有效群成员身份，请稍后重试", false, 403);
+		if (!config.canManage) throw this.permissionDenied();
 		this.cleanupAiPolishState();
 		const confirmationRef = `arkme-ai-polish-confirm-v1.${randomUUID()}`;
 		this.aiPolishConfirmations.set(confirmationRef, {
@@ -10523,8 +11093,8 @@ var GroupAiPolishService = class {
 	async confirmDisableGroupAiPolish(confirmationRef, options = {}) {
 		const session = await this.runtime.requireSession();
 		const pending = this.requireAiPolishConfirmation(confirmationRef, session.userId, "disable");
-		const current = await this.queryGroupAiPolishConfig(pending.chatSessionUid, session, options.signal);
-		if (!current.canManage) throw new ArkmePluginError("group-ai-polish-forbidden", "当前无法确认有效群成员身份，请稍后重试", false, 403);
+		const current = await this.queryGroupAiPolishConfig(pending.chatSessionUid, session, options.signal, true);
+		if (!current.canManage) throw this.permissionDenied();
 		const updated = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/settings/update", {
 			chat_session_uid: pending.chatSessionUid,
 			enabled: false,
@@ -10685,8 +11255,8 @@ var GroupAiPolishService = class {
 			polishedText
 		};
 	}
-	async queryGroupAiPolishConfig(chatSessionUid, session, signal) {
-		const data = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/settings/query", { chat_session_uid: chatSessionUid }, session, signal, {
+	async queryGroupAiPolishConfig(chatSessionUid, session, signal, fresh = false) {
+		const data = await this.runtime.authenticatedChatPost("/api/v1/chats/ai-polish/settings/query", { chat_session_uid: chatSessionUid }, session, signal, fresh ? { lane: "interactive-read" } : {
 			lane: "background-read",
 			key: `ai-polish:settings:${chatSessionUid}`,
 			cacheMs: 15e3,
@@ -10694,12 +11264,16 @@ var GroupAiPolishService = class {
 		});
 		const config = objectValue$1(data.config ?? data.setting ?? data.settings ?? data);
 		const activeRuleUid = stringValue$1(config.active_rule_uid).trim();
-		const rules = listValue$13(data.rules).map((raw) => objectValue$1(raw)).map((rule) => ({
-			ruleUid: stringValue$1(rule.rule_uid).trim(),
-			name: stringValue$1(rule.name).trim() || "未命名规则",
-			ruleText: stringValue$1(rule.rule_text).trim(),
-			ruleVersion: numberValue$12(rule.rule_version)
-		})).filter((rule) => rule.ruleUid !== "" && rule.ruleText !== "");
+		const rules = listValue$13(data.rules).map((raw) => objectValue$1(raw)).map((rule) => {
+			const extra = objectValue$1(rule.extra);
+			return {
+				ruleUid: stringValue$1(rule.rule_uid).trim(),
+				name: stringValue$1(rule.name).trim() || "未命名规则",
+				ruleText: stringValue$1(rule.rule_text).trim(),
+				ruleVersion: numberValue$12(rule.rule_version),
+				threadMessages: aiPolishThreadMessages(extra.rule_thread_messages)
+			};
+		}).filter((rule) => rule.ruleUid !== "" && rule.ruleText !== "");
 		return {
 			enabled: booleanValue$4(config.enabled ?? config.is_enabled),
 			canManage: booleanValue$4(data.can_manage),
@@ -10722,7 +11296,8 @@ var GroupAiPolishService = class {
 				ruleRef: rule.ruleUid,
 				name: rule.name,
 				ruleText: rule.ruleText,
-				isActive: rule.ruleUid === config.activeRuleUid
+				isActive: rule.ruleUid === config.activeRuleUid,
+				...rule.threadMessages.length === 0 ? {} : { threadMessages: rule.threadMessages }
 			})),
 			updatedAtMillis: config.updatedAtMillis
 		};
@@ -10802,7 +11377,7 @@ var GroupAiPolishService = class {
 };
 //#endregion
 //#region src/services/group-service.ts
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const UUID$1 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function numberValue$11(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
@@ -11138,7 +11713,7 @@ var GroupService = class {
 	async createGroup(title, clientMutationId, options = {}) {
 		const normalizedTitle = title.trim();
 		if (normalizedTitle === "" || Array.from(normalizedTitle).length > 80) throw new ArkmePluginError("group-title-invalid", "群聊名称需为 1-80 个字符", false);
-		if (!UUID.test(clientMutationId)) throw new ArkmePluginError("client-mutation-id-invalid", "群聊操作标识无效", false);
+		if (!UUID$1.test(clientMutationId)) throw new ArkmePluginError("client-mutation-id-invalid", "群聊操作标识无效", false);
 		const session = await this.runtime.requireSession();
 		let data;
 		try {
@@ -11794,11 +12369,19 @@ var MediaService = class {
 			};
 		}).filter((item) => item.fileAssetUid !== "");
 	}
-	async uploadLocalFile(filePath, metadata) {
+	async uploadLocalFile(filePath, metadata, options = {}) {
 		if (this.runtime.config.richMediaSendEnabled === false) throw new ArkmePluginError("rich-content-disabled", "文件上传已被插件配置关闭", false, 403);
 		const maxBytes = this.runtime.config.maxUploadBytes ?? 100 * 1024 * 1024;
 		if (!Number.isSafeInteger(metadata.size) || metadata.size <= 0 || metadata.size > maxBytes || !/^[a-f0-9]{64}$/.test(metadata.sha256) || metadata.fileName.trim() === "") throw new ArkmePluginError("upload-metadata-invalid", "文件为空、过大或元数据无效", false, 400);
 		const session = await this.runtime.requireSession();
+		if (options.expectedUserId !== void 0 && session.userId !== options.expectedUserId) throw new ArkmePluginError("file-account-changed", "账号已切换", false, 403);
+		options.signal?.throwIfAborted();
+		const progress = (phase, sentBytes) => options.onProgress?.({
+			phase,
+			sentBytes,
+			totalBytes: metadata.size
+		});
+		progress("preparing", 0);
 		const uploadMode = metadata.size > 16 * 1024 * 1024 ? 2 : 1;
 		const prepared = await this.runtime.authenticatedPost("/api/v1/files/prepare-upload", {
 			planned_size: metadata.size,
@@ -11807,7 +12390,7 @@ var MediaService = class {
 			file_kind: metadata.fileKind,
 			upload_mode: uploadMode,
 			display_name: metadata.fileName
-		}, session);
+		}, session, options.signal);
 		const uploadSessionUid = stringValue$1(prepared.upload_session_uid).trim();
 		if (uploadSessionUid === "") throw new ArkmePluginError("upload-prepare-invalid", "上传准备响应无效", true, 502);
 		try {
@@ -11816,12 +12399,23 @@ var MediaService = class {
 			if (uploadMode === 1) {
 				const uploadUrl = stringValue$1(prepared.upload_url).trim();
 				if (uploadUrl === "") throw new ArkmePluginError("upload-url-missing", "对象存储上传地址缺失", true, 502);
+				const signal = options.signal;
+				const body = options.onProgress === void 0 ? createReadStream(filePath) : Readable.from((async function* () {
+					let sent = 0;
+					for await (const chunk of createReadStream(filePath)) {
+						signal?.throwIfAborted();
+						sent += chunk.length;
+						progress("uploading", sent);
+						yield chunk;
+					}
+				})());
 				const response = await this.runtime.fetchImpl(uploadUrl, {
 					method: "PUT",
 					headers: Object.fromEntries(Object.entries(objectValue$1(prepared.upload_headers)).map(([key, value]) => [key, stringValue$1(value)])),
-					body: createReadStream(filePath),
+					body,
 					duplex: "half",
-					redirect: "error"
+					redirect: "error",
+					...signal === void 0 ? {} : { signal }
 				});
 				if (!response.ok) throw new ArkmePluginError("upload-storage-failed", `对象存储上传失败（${String(response.status)}）`, true, 502);
 				storageETag = response.headers.get("etag") ?? "";
@@ -11832,6 +12426,7 @@ var MediaService = class {
 				const handle = await open(filePath, "r");
 				try {
 					for (const part of parts) {
+						options.signal?.throwIfAborted();
 						const partNumber = Math.trunc(numberValue$9(part.part_number));
 						const uploadUrl = stringValue$1(part.upload_url).trim();
 						const offset = (partNumber - 1) * partSize;
@@ -11843,26 +12438,30 @@ var MediaService = class {
 							method: "PUT",
 							headers: Object.fromEntries(Object.entries(objectValue$1(part.upload_headers)).map(([key, value]) => [key, stringValue$1(value)])),
 							body: buffer,
-							redirect: "error"
+							redirect: "error",
+							...options.signal === void 0 ? {} : { signal: options.signal }
 						});
 						if (!response.ok) throw new ArkmePluginError("upload-storage-failed", `对象存储分片上传失败（${String(response.status)}）`, true, 502);
 						completedParts.push({
 							part_number: partNumber,
 							etag: response.headers.get("etag") ?? ""
 						});
+						progress("uploading", Math.min(metadata.size, offset + length));
 					}
 				} finally {
 					await handle.close();
 				}
 			}
+			progress("completing", metadata.size);
 			const completed = await this.runtime.authenticatedPost("/api/v1/files/complete-upload", {
 				upload_session_uid: uploadSessionUid,
 				uploaded_size: metadata.size,
 				storage_etag: storageETag,
 				multipart_parts: completedParts
-			}, session);
+			}, session, options.signal);
 			const fileAssetUid = stringValue$1(completed.file_asset_uid).trim();
 			if (fileAssetUid === "") throw new ArkmePluginError("upload-complete-invalid", "上传完成响应无效", true, 502);
+			progress("ready", metadata.size);
 			return {
 				fileAssetUid,
 				fileName: metadata.fileName,
@@ -11875,7 +12474,7 @@ var MediaService = class {
 			throw error;
 		}
 	}
-	async fetchMedia(mediaRef, range, signal) {
+	async fetchMedia(mediaRef, range, signal, originalOnly = false) {
 		const session = await this.runtime.requireSession();
 		const descriptor = this.mediaRefs.get(mediaRef);
 		if (descriptor === void 0 || descriptor.viewerUserId !== session.userId || descriptor.expiresAtMillis <= Date.now()) {
@@ -11883,6 +12482,7 @@ var MediaService = class {
 			if (descriptor?.stableKey !== void 0) this.stableMediaRefs.delete(descriptor.stableKey);
 			throw new ArkmePluginError("media-ref-invalid", "媒体引用已失效，请刷新对话后重试", false, 404);
 		}
+		if (originalOnly && descriptor.purpose !== "original") throw new ArkmePluginError("original-unavailable", "原文件不可用，请刷新后重试；不会用预览图代替原文件", false, 404);
 		const url = new URL(descriptor.remoteUrl);
 		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || !(allowedSignedImageHost$2(this.runtime.config.environment, url.hostname) || allowedSignedAudioHost(this.runtime.config.environment, url.hostname))) throw new ArkmePluginError("media-host-rejected", "媒体来源不受信任", false, 403);
 		const response = await this.runtime.fetchImpl(url, {
@@ -12044,6 +12644,15 @@ var MediaService = class {
 				if ((snapshot.profile?.avatarRef.trim() ?? "") === "") try {
 					snapshot = await this.profile.refreshProfileForSession(session);
 				} catch {}
+				const ownAvatarUrl = snapshot.profile?.avatarUrl;
+				if (ownAvatarUrl !== void 0 && ownAvatarUrl !== "") return await this.downloadSignedImage(trustedSignedImageUrl$1(this.runtime.config.environment, ownAvatarUrl), byteLimit, signal, this.runtime.requestScope(session.userId));
+				const ownAvatarAssetRef = snapshot.profile?.avatarAssetRef?.trim() ?? "";
+				const assetMatch = /^file_asset:\/\/([A-Za-z0-9_-]{8,128})$/.exec(ownAvatarAssetRef);
+				if (assetMatch !== null) {
+					const asset = (await this.queryFileAssets([assetMatch[1]], signal)).find((item) => item.fileAssetUid === assetMatch[1]);
+					const assetUrl = asset?.previewUrl ?? asset?.downloadUrl;
+					if (assetUrl !== void 0) return await this.downloadSignedImage(trustedSignedImageUrl$1(this.runtime.config.environment, assetUrl), byteLimit, signal, this.runtime.requestScope(session.userId));
+				}
 				const ownAvatarRef = snapshot.profile?.avatarRef.trim() ?? "";
 				if (ownAvatarRef !== "" && !ownAvatarRef.startsWith("arkme-profile-image-v1.")) return await this.readImage(ownAvatarRef, {
 					maxBytes: byteLimit,
@@ -12109,10 +12718,14 @@ var MediaService = class {
 		if (signedUrl.protocol !== "https:" || signedUrl.username !== "" || signedUrl.password !== "" || !allowedSignedImageHost$2(this.runtime.config.environment, signedUrl.hostname) || signedPath !== objectPath) throw new ArkmePluginError("image-sign-target-rejected", "Arkme 图片授权目标不受信任", false, 502);
 		return await this.downloadSignedImage(signedUrl, byteLimit, signal, this.runtime.requestScope(session.userId));
 	}
-	mediaKind(fileKind, mimeType) {
-		if (fileKind === 1 || mimeType.startsWith("image/")) return "image";
-		if (fileKind === 2 || mimeType.startsWith("audio/")) return "audio";
-		if (fileKind === 3 || mimeType.startsWith("video/")) return "video";
+	mediaKind(fileKind, mimeType, fileName) {
+		const detectedKind = arkmeMediaKind(mimeType, fileName);
+		if (detectedKind !== void 0) return detectedKind;
+		if (fileKind === 2) return "audio";
+		if (!/\.[A-Za-z0-9]+$/u.test(fileName.trim())) {
+			if (fileKind === 1) return "image";
+			if (fileKind === 3) return "video";
+		}
 		return "file";
 	}
 	recordContentPayload(raw) {
@@ -12229,6 +12842,29 @@ var MediaService = class {
 		}
 		return mediaRefs;
 	}
+	async issueSearchFileMediaRefs(requests, signal) {
+		const normalized = [...new Map(requests.filter((item) => item.recordUid !== "" && item.fileAssetUid !== "").map((item) => [`${item.recordUid}\0${item.fileAssetUid}`, item])).values()].slice(0, 50);
+		const refs = /* @__PURE__ */ new Map();
+		if (normalized.length === 0 || this.runtime.config.richMediaRenderEnabled === false) return refs;
+		const session = await this.runtime.requireSession();
+		const display = await this.queryRecordMediaDisplayItems(normalized.map((item) => item.recordUid), session, signal);
+		for (const request of normalized) {
+			const item = objectValue$1((display.get(request.recordUid) ?? []).find((raw) => stringValue$1(objectValue$1(raw).file_asset_uid) === request.fileAssetUid));
+			const remoteUrl = safeHttpsUrl(item.download_url);
+			if (remoteUrl === void 0) continue;
+			const host = new URL(remoteUrl).hostname;
+			if (!allowedSignedImageHost$2(this.runtime.config.environment, host) && !allowedSignedAudioHost(this.runtime.config.environment, host)) continue;
+			const key = `${request.recordUid}\0${request.fileAssetUid}`;
+			refs.set(key, this.issueMediaRef(session.userId, {
+				remoteUrl,
+				purpose: "original",
+				mimeType: stringValue$1(item.mime_type) || "application/octet-stream",
+				fileName: stringValue$1(item.file_name) || "文件",
+				size: Math.max(0, numberValue$9(item.size))
+			}, `search-file\0${key}`));
+		}
+		return refs;
+	}
 	async hydrateRecordMediaPage(rawItems, session, signal) {
 		const displayItemsByRecordUid = /* @__PURE__ */ new Map();
 		const expectedRecordUids = [...new Set(rawItems.flatMap((raw) => {
@@ -12355,14 +12991,23 @@ var MediaService = class {
 			return Math.trunc(numberValue$9(item.content_file_role)) !== RECORD_CONTENT_FILE_ROLE_BACKGROUND_SOUND;
 		}).flatMap((item, index) => {
 			const fileAssetUid = stringValue$1(item.file_asset_uid).trim();
-			const mimeType = stringValue$1(item.mime_type).trim() || "application/octet-stream";
 			const fileName = stringValue$1(item.file_name).trim() || `附件-${String(index + 1)}`;
 			const fileKind = Math.trunc(numberValue$9(item.file_kind));
-			const kind = this.mediaKind(fileKind, mimeType);
+			const mimeType = arkmeNormalizedFileMimeType(stringValue$1(item.mime_type).trim().toLowerCase(), fileName);
+			const kind = this.mediaKind(fileKind, mimeType, fileName);
 			const remoteUrl = stringValue$1(kind === "image" ? item.preview_url ?? item.download_url : item.download_url).trim();
 			if (remoteUrl === "") return [];
+			const originalUrl = stringValue$1(item.download_url).trim();
+			const originalRef = originalUrl === "" ? void 0 : this.issueMediaRef(viewerUserId, {
+				remoteUrl: originalUrl,
+				purpose: "original",
+				mimeType,
+				fileName,
+				size: Math.max(0, Math.trunc(numberValue$9(item.size)))
+			}, fileAssetUid === "" ? void 0 : `original\0${fileAssetUid}`);
 			return [{
 				kind,
+				...originalRef === void 0 ? {} : { originalRef },
 				mediaRef: this.issueMediaRef(viewerUserId, {
 					remoteUrl,
 					mimeType,
@@ -12765,6 +13410,10 @@ function phoneDefaultAvatarFallback(raw) {
 		label
 	};
 }
+function fileAssetAvatarRef(raw) {
+	const normalized = raw.trim();
+	return /^file_asset:\/\/[A-Za-z0-9_-]{8,128}$/.test(normalized) ? normalized : void 0;
+}
 function allowedSignedImageHost$1(environment, hostname) {
 	return (environment === "prod" ? ["jotmo-userfiles.oss-cn-hangzhou.aliyuncs.com", "userfiles.jotmo.cc"] : ["jotmo-userfiles-test.oss-cn-hangzhou.aliyuncs.com", "jotmo-userfiles.senguo.me"]).includes(hostname.toLowerCase());
 }
@@ -12816,7 +13465,9 @@ var ProfileService = class {
 	}
 	async cachedProfile() {
 		const session = await this.runtime.requireAuthFlowSession();
-		return await this.runtime.stateStore.cachedProfile(session.userId);
+		const cached = await this.runtime.stateStore.cachedProfile(session.userId);
+		if (this.profileNeedsAvatarRefresh(cached, session.userId)) return await this.refreshProfileForSession(session);
+		return cached;
 	}
 	async refreshProfile() {
 		const session = await this.runtime.requireAuthFlowSession();
@@ -12895,6 +13546,7 @@ var ProfileService = class {
 		if (memory !== void 0 && memory.expiresAtMillis > Date.now()) return memory.value;
 		const persisted = await this.runtime.stateStore.cachedProfile(session.userId).catch(() => void 0);
 		if (persisted?.profile?.userId === session.userId && persisted.cachedAtMillis > 0 && Date.now() - persisted.cachedAtMillis < PROFILE_CACHE_TTL_MS) {
+			if (this.profileNeedsAvatarRefresh(persisted, session.userId)) return await this.refreshProfileForSession(session);
 			this.profileCache.set(session.userId, {
 				value: persisted,
 				expiresAtMillis: persisted.cachedAtMillis + PROFILE_CACHE_TTL_MS
@@ -12916,16 +13568,21 @@ var ProfileService = class {
 			if (userId <= 0 || userId !== session.userId) throw new ArkmePluginError("profile-contract-invalid", "Arkme 个人资料响应缺少有效用户标识", false, 502);
 			const nickname = stringValue$1(data.nick_name).trim();
 			const displayName = nickname || stringValue$1(data.apple_nick_name).trim() || stringValue$1(data.wechat_nick_name).trim() || stringValue$1(data.google_given_name).trim() || stringValue$1(data.name_slug).trim() || "Arkme用户";
-			const avatarRef = stringValue$1(data.head_img).trim();
+			const rawAvatarRef = stringValue$1(data.head_img).trim();
+			const avatarAssetRef = fileAssetAvatarRef(rawAvatarRef);
+			const avatarUrl = await this.publicProfilesByUserIds([session.userId], session).then((profiles) => profiles.get(session.userId)?.avatarUrl).catch(() => void 0) ?? (/^https?:\/\//i.test(rawAvatarRef) ? rawAvatarRef : void 0);
+			const avatarRef = avatarUrl !== void 0 || avatarAssetRef !== void 0 ? await this.sealProfileImageRef(session.userId, session.userId) : rawAvatarRef;
 			const phone = maskedPhone(stringValue$1(data.phone));
 			const email = maskedEmail(stringValue$1(data.email));
+			const wechatName = stringValue$1(data.wechat_nick_name).trim();
 			const canUpdateArkmeId = optionalBooleanValue(data.can_update_jotmo_id);
 			const profile = {
 				userId,
 				displayName,
 				nickname,
 				avatarRef,
-				.../^https?:\/\//i.test(avatarRef) ? { avatarUrl: avatarRef } : {},
+				...avatarAssetRef === void 0 ? {} : { avatarAssetRef },
+				...avatarUrl === void 0 ? {} : { avatarUrl },
 				arkmeId: stringValue$1(data.jotmo_id).trim() || stringValue$1(data.name_slug).trim(),
 				...canUpdateArkmeId === void 0 ? {} : { canUpdateArkmeId },
 				accountType: numberValue$7(data.type),
@@ -12935,6 +13592,7 @@ var ProfileService = class {
 					wechat: booleanValue$2(data.has_bind_wechat),
 					google: booleanValue$2(data.has_bind_google)
 				},
+				...wechatName === "" ? {} : { bindingNames: { wechat: wechatName } },
 				contact: {
 					...phone === void 0 ? {} : { phoneMasked: phone },
 					...email === void 0 ? {} : { emailMasked: email }
@@ -12954,6 +13612,12 @@ var ProfileService = class {
 			if (this.profileInFlight.get(session.userId) === pending) this.profileInFlight.delete(session.userId);
 		}
 	}
+	profileNeedsAvatarRefresh(snapshot, userId) {
+		const profile = snapshot.profile;
+		if (profile?.userId !== userId) return false;
+		const avatarRef = profile.avatarRef.trim();
+		return /^https?:\/\//i.test(avatarRef) || fileAssetAvatarRef(avatarRef) !== void 0;
+	}
 	async publicProfileSummariesByUserIds(userIds, session, signal) {
 		const normalized = [...new Set(userIds.filter((userId) => Number.isSafeInteger(userId) && userId > 0))].sort((left, right) => left - right);
 		const profiles = /* @__PURE__ */ new Map();
@@ -14287,6 +14951,38 @@ var SearchService = class {
 		}, session, options.signal);
 		return await this.withNavigationTargets(this.recordSearchResult(data, lockedRecordUids), options.signal);
 	}
+	async searchFiles(options) {
+		const page = options.query?.trim() ? await this.searchRemote({
+			...options,
+			query: options.query
+		}) : await this.searchScene({
+			...options,
+			scene: "file"
+		});
+		const items = page.items.filter((item) => item.files.length > 0);
+		const requests = items.flatMap((item) => item.files.map((file) => ({
+			recordUid: item.recordUid,
+			fileAssetUid: file.fileAssetUid
+		})));
+		const refs = /* @__PURE__ */ new Map();
+		for (let offset = 0; offset < requests.length; offset += 50) {
+			const part = await this.media.issueSearchFileMediaRefs(requests.slice(offset, offset + 50), options.signal);
+			for (const [key, value] of part) refs.set(key, value);
+		}
+		return {
+			...page,
+			items: items.map((item) => ({
+				...item,
+				files: item.files.map((file) => {
+					const mediaRef = refs.get(`${item.recordUid}\0${file.fileAssetUid}`);
+					return mediaRef === void 0 ? file : {
+						...file,
+						mediaRef
+					};
+				})
+			}))
+		};
+	}
 	async withAudioMediaRefs(result, signal) {
 		const requests = result.items.flatMap((item) => item.voice === void 0 || item.sourceKind === 3 ? [] : [{
 			recordUid: item.recordUid,
@@ -14589,6 +15285,561 @@ var SearchService = class {
 	}
 };
 //#endregion
+//#region src/services/file-transfers.ts
+const REF = /^arkme-file-v1\.[0-9a-f-]{36}$/;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const fail = (code, message) => new ArkmePluginError(code, message, false, 400);
+const clone = (value) => structuredClone(value);
+const publicFile = (file) => ({
+	fileRef: file.fileRef,
+	fileName: file.fileName,
+	mimeType: file.mimeType,
+	size: file.size,
+	fileKind: file.fileKind
+});
+const nativeOpenFileName = (fileName) => {
+	const cleaned = fileName.replace(/[<>:"/\\|?*\u0000-\u001f\u007f]/g, "_").trim().replace(/^[. ]+|[. ]+$/g, "");
+	const extension = /\.[a-zA-Z0-9]{1,16}$/.exec(cleaned)?.[0] ?? "";
+	let stem = (extension === "" ? cleaned : cleaned.slice(0, -extension.length)).replace(/[. ]+$/g, "");
+	if (stem === "" || stem === "." || stem === "..") stem = "file";
+	stem = stem.slice(0, Math.max(1, 180 - extension.length));
+	if (/^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$/i.test(stem)) stem = `_${stem}`;
+	return `${stem}${extension}`;
+};
+/** Plugin-owned files, not DSH session attachments. No client-controlled path is persisted. */
+var FileTransfers = class {
+	directory;
+	ports;
+	states = /* @__PURE__ */ new Map();
+	writes = Promise.resolve();
+	mutations = Promise.resolve();
+	queue = Promise.resolve();
+	jobs = /* @__PURE__ */ new Set();
+	controllers = /* @__PURE__ */ new Set();
+	receptions = /* @__PURE__ */ new Map();
+	policy;
+	constructor(directory, ports, maxBytes) {
+		this.directory = directory;
+		this.ports = ports;
+		this.policy = {
+			version: 1,
+			maxFileBytes: maxBytes,
+			maxImageBytes: Math.min(maxBytes, 50 * 1024 * 1024),
+			maxAttachments: 9
+		};
+	}
+	capabilities() {
+		return { ...this.policy };
+	}
+	cancelActive() {
+		for (const controller of this.controllers) controller.abort();
+		this.receptions.clear();
+	}
+	async settled() {
+		await this.queue;
+		await Promise.all(this.jobs);
+		await this.writes;
+	}
+	root(userId) {
+		return join(this.directory, String(userId));
+	}
+	path(userId, ref) {
+		if (!REF.test(ref)) throw fail("file-ref-invalid", "文件引用无效或不属于当前账号");
+		return join(this.root(userId), ref);
+	}
+	openDirectory(userId, ref) {
+		if (!REF.test(ref)) throw fail("file-ref-invalid", "文件引用无效或不属于当前账号");
+		return join(this.root(userId), ".open", ref);
+	}
+	async nativeOpenPath(userId, ref, file) {
+		const source = this.path(userId, ref);
+		const directory = this.openDirectory(userId, ref);
+		const target = join(directory, nativeOpenFileName(file.fileName));
+		await mkdir(directory, {
+			recursive: true,
+			mode: 448
+		});
+		try {
+			await link(source, target);
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+			const info = await stat(target).catch(() => void 0);
+			if (!info?.isFile() || info.size !== file.size) {
+				await unlink(target).catch(() => {});
+				await link(source, target);
+			}
+		}
+		await chmod$1(target, 384);
+		return target;
+	}
+	async assertUser(userId, signal) {
+		signal?.throwIfAborted();
+		if (await this.ports.currentUser() !== userId) throw fail("file-account-changed", "账号已切换，请在原账号中重试");
+		signal?.throwIfAborted();
+	}
+	state(userId) {
+		let loaded = this.states.get(userId);
+		if (loaded === void 0) {
+			loaded = (async () => {
+				await mkdir(this.root(userId), {
+					recursive: true,
+					mode: 448
+				});
+				let state;
+				try {
+					state = JSON.parse(await readFile(join(this.root(userId), "state.json"), "utf8"));
+				} catch (error) {
+					if (error.code !== "ENOENT") throw fail("file-state-invalid", "本地文件状态无法读取，请勿重复发送");
+					return {
+						version: 1,
+						files: {},
+						tasks: [],
+						originals: {}
+					};
+				}
+				if (state.version !== 1 || !state.files || !Array.isArray(state.tasks) || !state.originals) throw fail("file-state-invalid", "本地文件状态版本无效");
+				for (const task of state.tasks) if (task.state === "sending") {
+					task.state = "uncertain";
+					task.error = "发送结果待确认，请先核对会话，避免重复发送";
+				} else if (task.state === "queued" || task.state === "uploading") {
+					task.state = "failed";
+					task.error = "上次传输已中断，请重试";
+				}
+				return state;
+			})();
+			this.states.set(userId, loaded);
+		}
+		return loaded;
+	}
+	save(userId, state) {
+		const data = JSON.stringify(state);
+		const write = this.writes.catch(() => {}).then(async () => {
+			const target = join(this.root(userId), "state.json");
+			const temporary = `${target}.${randomUUID()}.tmp`;
+			try {
+				await writeFile(temporary, data, { mode: 384 });
+				await rename(temporary, target);
+			} finally {
+				await unlink(temporary).catch(() => {});
+			}
+		});
+		this.writes = write;
+		return write;
+	}
+	exclusive(action) {
+		const work = this.mutations.catch(() => {}).then(action);
+		this.mutations = work;
+		return work;
+	}
+	validateMetadata(metadata) {
+		const limit = metadata.mimeType.startsWith("image/") ? this.policy.maxImageBytes : this.policy.maxFileBytes;
+		if (!metadata.fileName.trim() || metadata.fileName.length > 255 || /[\u0000-\u001f]/.test(metadata.fileName) || metadata.mimeType.length > 200 || !/^[a-zA-Z0-9!#$&^_.+-]+\/[a-zA-Z0-9!#$&^_.+-]+$/.test(metadata.mimeType) || !Number.isSafeInteger(metadata.size) || metadata.size <= 0 || metadata.size > limit) throw fail("file-input-invalid", `文件为空或超出限制（${Math.floor(limit / 1024 / 1024)} MiB）`);
+	}
+	async stage(temporaryPath, metadata, expectedUserId) {
+		const userId = await this.ports.currentUser();
+		if (expectedUserId !== void 0 && expectedUserId !== userId) throw fail("file-account-changed", "账号已切换，本次文件导入已取消");
+		const normalizedMetadata = {
+			...metadata,
+			mimeType: arkmeNormalizedFileMimeType(metadata.mimeType, metadata.fileName)
+		};
+		this.validateMetadata(normalizedMetadata);
+		return this.exclusive(async () => {
+			const state = await this.state(userId);
+			await this.prune(userId, state);
+			if (Object.values(state.files).reduce((sum, file) => sum + file.size, 0) + metadata.size > Math.max(this.policy.maxFileBytes, 1024 * 1024 * 1024) || Object.keys(state.files).length >= 256) throw fail("file-cache-full", "本地附件空间不足，请移除不再需要的草稿或失败任务");
+			const info = await stat(temporaryPath);
+			if (!info.isFile() || info.size !== metadata.size) throw fail("file-size-mismatch", "本地文件不完整");
+			const hash = createHash("sha256");
+			for await (const chunk of createReadStream(temporaryPath)) hash.update(chunk);
+			await this.assertUser(userId);
+			const ref = `arkme-file-v1.${randomUUID()}`;
+			const file = {
+				...normalizedMetadata,
+				fileRef: ref,
+				fileKind: arkmePickedFileKind(normalizedMetadata.mimeType, normalizedMetadata.fileName),
+				sha256: hash.digest("hex"),
+				createdAtMillis: Date.now()
+			};
+			await copyFile(temporaryPath, this.path(userId, ref));
+			await chmod$1(this.path(userId, ref), 384);
+			state.files[ref] = file;
+			try {
+				await this.save(userId, state);
+			} catch (error) {
+				delete state.files[ref];
+				await unlink(this.path(userId, ref)).catch(() => {});
+				throw error;
+			}
+			return publicFile(file);
+		});
+	}
+	async prune(userId, state) {
+		const retained = new Set(state.tasks.filter((task) => task.state !== "sent").flatMap((task) => task.fileRefs));
+		const completed = new Set(state.tasks.filter((task) => task.state === "sent").flatMap((task) => task.fileRefs));
+		for (const file of Object.values(state.files)) {
+			if (Date.now() - file.createdAtMillis < 168 * 36e5 || retained.has(file.fileRef) || !completed.has(file.fileRef)) continue;
+			delete state.files[file.fileRef];
+			await unlink(this.path(userId, file.fileRef)).catch(() => {});
+			await rm(this.openDirectory(userId, file.fileRef), {
+				recursive: true,
+				force: true
+			});
+		}
+		state.tasks = state.tasks.filter((task) => task.state !== "sent" || Date.now() - task.createdAtMillis < 168 * 36e5);
+	}
+	async readLocal(ref) {
+		const userId = await this.ports.currentUser();
+		const file = (await this.state(userId)).files[ref];
+		if (file === void 0) throw fail("file-ref-invalid", "文件引用无效或不属于当前账号");
+		const path = this.path(userId, ref);
+		const info = await stat(path).catch(() => void 0);
+		if (!info?.isFile() || info.size !== file.size) throw fail("file-local-missing", "本地文件已不存在，请重新添加或接收");
+		await this.assertUser(userId);
+		return {
+			path,
+			file: publicFile(file)
+		};
+	}
+	async openLocal(ref) {
+		if (this.ports.openPath === void 0) throw fail("file-open-unavailable", "当前宿主不能使用本机应用打开文件");
+		const controller = new AbortController();
+		this.controllers.add(controller);
+		try {
+			const userId = await this.ports.currentUser();
+			const { file } = await this.readLocal(ref);
+			await this.assertUser(userId, controller.signal);
+			const path = await this.nativeOpenPath(userId, ref, file);
+			await this.assertUser(userId, controller.signal);
+			await this.ports.openPath(path, controller.signal);
+			await this.assertUser(userId, controller.signal);
+			return {
+				opened: true,
+				file
+			};
+		} catch (error) {
+			if (error instanceof ArkmePluginError) throw error;
+			throw fail("file-open-failed", "文件打开失败，请重试");
+		} finally {
+			this.controllers.delete(controller);
+		}
+	}
+	async files() {
+		const state = await this.state(await this.ports.currentUser());
+		return Object.values(state.files).map(publicFile);
+	}
+	async remove(ref) {
+		const userId = await this.ports.currentUser();
+		await this.exclusive(async () => {
+			const state = await this.state(userId);
+			await this.assertUser(userId);
+			if (state.tasks.some((task) => task.fileRefs.includes(ref))) throw fail("file-in-use", "文件仍被本地发送任务引用，请先移除该任务");
+			if (!state.files[ref]) return;
+			delete state.files[ref];
+			await this.save(userId, state);
+			await unlink(this.path(userId, ref)).catch(() => {});
+			await rm(this.openDirectory(userId, ref), {
+				recursive: true,
+				force: true
+			});
+		});
+	}
+	async tasks(sourceRef) {
+		const state = await this.state(await this.ports.currentUser());
+		return clone(state.tasks.filter((task) => !sourceRef || task.sourceRef === sourceRef));
+	}
+	async stageBytes(contentBase64, metadata) {
+		if (contentBase64.length > Math.ceil(65536 / 3) * 4 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(contentBase64)) throw fail("file-tool-input-invalid", "工具暂存只接受最多 64 KiB 的 Base64 内容，不接受本机路径");
+		const data = Buffer.from(contentBase64, "base64");
+		if (data.length > 65536) throw fail("file-tool-input-invalid", "工具暂存文件超过 64 KiB");
+		const userId = await this.ports.currentUser();
+		await this.state(userId);
+		const temporary = join(this.root(userId), `${randomUUID()}.import`);
+		try {
+			await writeFile(temporary, data, {
+				mode: 384,
+				flag: "wx"
+			});
+			await this.assertUser(userId);
+			return await this.stage(temporary, {
+				...metadata,
+				size: data.length
+			}, userId);
+		} finally {
+			await unlink(temporary).catch(() => {});
+		}
+	}
+	async discard(taskRef) {
+		const userId = await this.ports.currentUser();
+		await this.exclusive(async () => {
+			const state = await this.state(userId);
+			await this.assertUser(userId);
+			const task = state.tasks.find((value) => value.taskRef === taskRef);
+			if (!task) return;
+			if ([
+				"queued",
+				"uploading",
+				"sending"
+			].includes(task.state)) throw fail("file-task-active", "任务仍在进行中，不能移除");
+			state.tasks = state.tasks.filter((value) => value !== task);
+			await this.save(userId, state);
+		});
+	}
+	async reconcile(taskRef) {
+		const userId = await this.ports.currentUser();
+		return this.exclusive(async () => {
+			const state = await this.state(userId);
+			const task = state.tasks.find((value) => value.taskRef === taskRef);
+			if (!task) throw fail("file-task-missing", "发送任务不存在");
+			if (task.state !== "uncertain") return clone(task);
+			const controller = new AbortController();
+			this.controllers.add(controller);
+			try {
+				await this.assertUser(userId, controller.signal);
+				const result = await this.ports.reconcile?.(task, controller.signal);
+				await this.assertUser(userId, controller.signal);
+				if (result) {
+					task.result = result;
+					task.state = "sent";
+					delete task.error;
+					await this.save(userId, state);
+				}
+				return clone(task);
+			} finally {
+				this.controllers.delete(controller);
+			}
+		});
+	}
+	async enqueue(input) {
+		const userId = await this.ports.currentUser();
+		if (!UUID.test(input.recordUid) || !UUID.test(input.relationUid) || !input.sourceRef.trim() || input.fileRefs.length < 1 || input.fileRefs.length > this.policy.maxAttachments || new Set(input.fileRefs).size !== input.fileRefs.length || (input.content.textContent?.length ?? 0) > 2e4) throw fail("file-send-invalid", "发送标识、正文或附件数量无效");
+		await this.ports.validateSource(input.sourceRef);
+		return this.exclusive(async () => {
+			await this.assertUser(userId);
+			const state = await this.state(userId);
+			const prior = state.tasks.find((task) => task.recordUid === input.recordUid);
+			if (prior) {
+				if (prior.sourceRef !== input.sourceRef || prior.relationUid !== input.relationUid || JSON.stringify(prior.fileRefs) !== JSON.stringify(input.fileRefs) || JSON.stringify(prior.content) !== JSON.stringify(input.content)) throw fail("file-send-conflict", "发送标识已用于另一份内容");
+				return clone(prior);
+			}
+			if (state.tasks.filter((task) => task.state !== "sent").length >= 100) throw fail("file-queue-full", "待发送文件过多，请先处理失败任务");
+			const files = [];
+			for (const ref of input.fileRefs) {
+				const { file } = await this.readLocal(ref);
+				files.push({
+					...file,
+					progress: {
+						phase: "preparing",
+						sentBytes: 0,
+						totalBytes: file.size
+					}
+				});
+			}
+			await this.assertUser(userId);
+			const task = {
+				...clone(input),
+				taskRef: `arkme-send-v1.${randomUUID()}`,
+				createdAtMillis: Date.now(),
+				state: "queued",
+				files
+			};
+			state.tasks.push(task);
+			try {
+				await this.save(userId, state);
+			} catch (error) {
+				state.tasks = state.tasks.filter((value) => value !== task);
+				throw error;
+			}
+			this.schedule(userId, state, task);
+			return clone(task);
+		});
+	}
+	async retry(taskRef) {
+		const userId = await this.ports.currentUser();
+		return this.exclusive(async () => {
+			const state = await this.state(userId);
+			const task = state.tasks.find((value) => value.taskRef === taskRef);
+			if (!task) throw fail("file-task-missing", "发送任务不存在");
+			await this.assertUser(userId);
+			if (task.state === "uncertain") throw fail("file-send-uncertain", "发送结果待确认，请先核对原会话，不能自动重复发送");
+			if (task.state !== "failed") return clone(task);
+			task.state = "queued";
+			delete task.error;
+			for (const file of task.files) if (!file.asset) file.progress = {
+				phase: "preparing",
+				sentBytes: 0,
+				totalBytes: file.size
+			};
+			await this.save(userId, state);
+			this.schedule(userId, state, task);
+			return clone(task);
+		});
+	}
+	schedule(userId, state, task) {
+		const controller = new AbortController();
+		this.controllers.add(controller);
+		this.queue = this.queue.catch(() => {}).then(async () => {
+			try {
+				await this.assertUser(userId, controller.signal);
+				task.state = "uploading";
+				await this.save(userId, state);
+				for (const file of task.files) {
+					await this.assertUser(userId, controller.signal);
+					const stored = state.files[file.fileRef];
+					if (!stored) throw fail("file-local-missing", "本地附件已不存在");
+					if (!file.asset) {
+						const cached = stored.asset ?? Object.values(state.files).find((other) => other.sha256 === stored.sha256 && other.fileKind === stored.fileKind && other.asset)?.asset;
+						if (cached) file.asset = cached;
+						if (!file.asset) file.asset = await this.ports.upload(this.path(userId, file.fileRef), stored, (progress) => {
+							file.progress = progress;
+						}, userId, controller.signal);
+						file.asset = {
+							...file.asset,
+							fileName: file.fileName
+						};
+						stored.asset = file.asset;
+						file.progress = {
+							phase: "ready",
+							sentBytes: file.size,
+							totalBytes: file.size
+						};
+						await this.save(userId, state);
+					}
+				}
+				await this.assertUser(userId, controller.signal);
+				task.state = "sending";
+				await this.save(userId, state);
+				task.result = await this.ports.send(task, task.files.map((file) => file.asset), userId, controller.signal);
+				task.state = "sent";
+				delete task.error;
+			} catch (error) {
+				const sending = task.state === "sending";
+				task.state = sending ? "uncertain" : "failed";
+				task.error = sending ? "发送结果待确认，请先核对会话，避免重复发送" : error instanceof ArkmePluginError ? error.message : "文件传输中断，请重试";
+			} finally {
+				this.controllers.delete(controller);
+				await this.save(userId, state);
+			}
+		}).catch(() => {
+			task.state = "uncertain";
+			task.error = "本地发送状态保存失败，请先核对会话";
+		});
+	}
+	async reception(mediaRef, start = false) {
+		const userId = await this.ports.currentUser();
+		if (!mediaRef.startsWith("arkme-media-v1.") || mediaRef.length > 100) throw fail("media-ref-invalid", "原文件引用无效");
+		const state = await this.state(userId);
+		const key = `${userId}:${mediaRef}`;
+		const localRef = state.originals[mediaRef];
+		if (localRef) try {
+			const { file } = await this.readLocal(localRef);
+			return {
+				state: "ready",
+				receivedBytes: file.size,
+				totalBytes: file.size,
+				file
+			};
+		} catch {
+			delete state.originals[mediaRef];
+		}
+		const existing = this.receptions.get(key);
+		if (existing?.state === "receiving" || !start) return clone(existing ?? {
+			state: "missing",
+			receivedBytes: 0,
+			totalBytes: 0
+		});
+		if ([...this.receptions.values()].filter((value) => value.state === "receiving").length >= 2) throw fail("file-download-busy", "已有两个文件正在接收，请稍后重试");
+		const progress = {
+			state: "receiving",
+			receivedBytes: 0,
+			totalBytes: 0
+		};
+		this.receptions.set(key, progress);
+		const controller = new AbortController();
+		this.controllers.add(controller);
+		const temporary = join(this.root(userId), `${randomUUID()}.download`);
+		const job = (async () => {
+			try {
+				const { response, descriptor } = await this.ports.fetchMedia(mediaRef, controller.signal);
+				if (!response.ok || !response.body) throw fail("file-download-failed", "原文件接收失败");
+				const declared = Number(response.headers.get("content-length")) || descriptor.size;
+				if (declared > this.policy.maxFileBytes) throw fail("file-download-too-large", "原文件超出本地文件大小限制");
+				progress.totalBytes = Math.max(0, declared);
+				const handle = await open(temporary, "wx", 384);
+				try {
+					for await (const chunk of response.body) {
+						await this.assertUser(userId, controller.signal);
+						progress.receivedBytes += chunk.length;
+						if (progress.receivedBytes > this.policy.maxFileBytes) throw fail("file-download-too-large", "原文件超出本地文件大小限制");
+						await handle.write(chunk);
+					}
+				} finally {
+					await handle.close();
+				}
+				if (!progress.receivedBytes || declared > 0 && progress.receivedBytes !== declared || descriptor.size > 0 && progress.receivedBytes !== descriptor.size) throw fail("file-download-incomplete", "原文件接收不完整，请重试");
+				await this.assertUser(userId, controller.signal);
+				const file = await this.stage(temporary, {
+					fileName: descriptor.fileName,
+					mimeType: descriptor.mimeType,
+					size: progress.receivedBytes
+				}, userId);
+				state.originals[mediaRef] = file.fileRef;
+				await this.save(userId, state);
+				progress.file = file;
+				progress.state = "ready";
+			} catch (error) {
+				progress.state = "failed";
+				progress.error = error instanceof ArkmePluginError ? error.message : "文件接收失败，请重试";
+			} finally {
+				await unlink(temporary).catch(() => {});
+				this.controllers.delete(controller);
+			}
+		})();
+		this.jobs.add(job);
+		job.finally(() => this.jobs.delete(job));
+		return clone(progress);
+	}
+};
+//#endregion
+//#region src/file-transfer-owner.ts
+function createArkmeFileTransfers(options) {
+	if (options.directory === void 0) return void 0;
+	return new FileTransfers(options.directory, {
+		currentUser: async () => (await options.runtime.requireSession()).userId,
+		validateSource: async (sourceRef) => {
+			await options.source.openSourceRef(sourceRef, (await options.runtime.requireSession()).userId);
+		},
+		upload: async (path, metadata, onProgress, expectedUserId, signal) => await options.media.uploadLocalFile(path, metadata, {
+			onProgress,
+			expectedUserId,
+			signal
+		}),
+		send: async (input, assets, expectedUserId, signal) => await options.chat.sendSourceRich(input.sourceRef, {
+			...input.content,
+			assets
+		}, {
+			recordUid: input.recordUid,
+			relationUid: input.relationUid,
+			expectedUserId,
+			signal
+		}),
+		fetchMedia: async (ref, signal) => await options.media.fetchMedia(ref, void 0, signal, true),
+		...options.openPath === void 0 ? {} : { openPath: options.openPath },
+		reconcile: async (input, signal) => {
+			const item = (await options.chat.readSource(input.sourceRef, {
+				limit: 100,
+				signal
+			})).items.find((value) => value.itemUid === input.recordUid && value.isMe);
+			return item === void 0 ? void 0 : {
+				sourceRef: input.sourceRef,
+				itemUid: item.itemUid,
+				status: item.status,
+				...item.sequence === void 0 ? {} : { sequence: item.sequence },
+				localState: "synced"
+			};
+		}
+	}, options.maxUploadBytes ?? 100 * 1024 * 1024);
+}
+//#endregion
 //#region src/services/unmarked-speaker-service.ts
 const REF_TTL_MS = 30 * 6e4;
 const REF_CAP = 2e3;
@@ -17259,6 +18510,8 @@ var ArkmeService = class {
 	contactDirectory;
 	unmarkedSpeaker;
 	voiceprint;
+	fileTransfers;
+	localFileOpener;
 	worldVoiceprintInviteVariantIndex = 0;
 	constructor(config, sessionStore, stateStore, fetchImpl = fetch, pendingSessionStore, outgoingCallBroker = new ArkmeOutgoingCallBroker(), billingGateway) {
 		this.config = config;
@@ -17313,9 +18566,74 @@ var ArkmeService = class {
 				this.clearAccountState(userIds);
 			}
 		});
+		this.fileTransfers = createArkmeFileTransfers({
+			directory: config.fileStateDirectory,
+			maxUploadBytes: config.maxUploadBytes,
+			runtime: this.runtime,
+			source: this.source,
+			media: this.media,
+			chat: this.chat,
+			openPath: async (path, signal) => {
+				if (this.localFileOpener === void 0) throw new Error("当前 DSH 宿主未提供本机文件打开能力");
+				await this.localFileOpener(path, signal);
+			}
+		});
+	}
+	filesOwner() {
+		if (!this.fileTransfers) throw new ArkmePluginError("file-flow-unavailable", "当前宿主不支持本地文件流程，请升级插件", false, 501);
+		return this.fileTransfers;
+	}
+	fileCapabilities() {
+		return this.filesOwner().capabilities();
+	}
+	async fileSearch(options) {
+		return await this.search.searchFiles(options);
+	}
+	async fileSessionUser() {
+		return (await this.runtime.requireSession()).userId;
+	}
+	async fileStage(path, metadata, expectedUserId) {
+		return await this.filesOwner().stage(path, metadata, expectedUserId);
+	}
+	async fileList() {
+		return await this.filesOwner().files();
+	}
+	async fileReadLocal(ref) {
+		return await this.filesOwner().readLocal(ref);
+	}
+	attachLocalFileOpener(openPath) {
+		this.localFileOpener = openPath;
+	}
+	async fileOpenLocal(ref) {
+		return await this.filesOwner().openLocal(ref);
+	}
+	async fileRemove(ref) {
+		await this.filesOwner().remove(ref);
+	}
+	async fileSend(input) {
+		return await this.filesOwner().enqueue(input);
+	}
+	async fileSendTasks(sourceRef) {
+		return await this.filesOwner().tasks(sourceRef);
+	}
+	async fileSendRetry(taskRef) {
+		return await this.filesOwner().retry(taskRef);
+	}
+	async fileStageBytes(contentBase64, metadata) {
+		return await this.filesOwner().stageBytes(contentBase64, metadata);
+	}
+	async fileSendDiscard(taskRef) {
+		return await this.filesOwner().discard(taskRef);
+	}
+	async fileSendReconcile(taskRef) {
+		return await this.filesOwner().reconcile(taskRef);
+	}
+	async fileReceive(mediaRef, start = false) {
+		return await this.filesOwner().reception(mediaRef, start);
 	}
 	clearAccountState(userIds) {
 		for (const userId of userIds) this.privacy.clear(userId);
+		this.fileTransfers?.cancelActive();
 		for (const userId of userIds) this.outgoingCall.clearUser(userId, "账号已退出，呼叫已取消");
 		this.source.dispose();
 		this.media.dispose();
@@ -17398,7 +18716,9 @@ var ArkmeService = class {
 		return await this.bot.openBotPrivateChat(botRef, options);
 	}
 	async sendBotPrivateChatMessage(botRef, content, options = {}) {
-		return await this.bot.sendBotPrivateChatMessage(botRef, content, options);
+		const outcome = await this.bot.sendBotPrivateChatMessage(botRef, content, options);
+		if (outcome.recordProjectionChanged) await this.realtime.invalidateRecordProjection();
+		return outcome.result;
 	}
 	async listGroupBots(groupSourceRef, options = {}) {
 		return await this.bot.listGroupBots(groupSourceRef, options);
@@ -17461,6 +18781,7 @@ var ArkmeService = class {
 				retryOutbox: true,
 				revisionPolling: true,
 				userProfile: true,
+				accountSettings: true,
 				imageRead: true,
 				recordCalendar: true,
 				imageLibrary: true,
@@ -17481,6 +18802,7 @@ var ArkmeService = class {
 				contactAdd: true,
 				conversationQuickAdd: true,
 				groupSettings: true,
+				groupAiPolish: true,
 				extensionManagement: true,
 				extensionMetadataEdit: true,
 				extensionIcons: true,
@@ -17550,6 +18872,7 @@ var ArkmeService = class {
 		return await this.callHistory.retryCallSummary(callRef, signal);
 	}
 	dispose() {
+		this.fileTransfers?.cancelActive();
 		this.contact.dispose();
 		this.contactDirectory.dispose();
 		this.unmarkedSpeaker.dispose();
@@ -17747,6 +19070,12 @@ var ArkmeService = class {
 	async generateGroupAiPolishRule(groupName, requirement, options = {}) {
 		return await this.aiPolish.generateGroupAiPolishRule(groupName, requirement, options);
 	}
+	prepareEnableGroupAiPolish(groupName, ruleName = "", options = {}) {
+		return this.aiPolish.prepareEnableGroupAiPolish(groupName, ruleName, options);
+	}
+	prepareEnableGroupAiPolishRuleForSource(sourceRef, ruleRef, options = {}) {
+		return this.aiPolish.prepareEnableGroupAiPolishRuleForSource(sourceRef, ruleRef, options);
+	}
 	async confirmEnableGroupAiPolish(confirmationRef, options = {}) {
 		return await this.aiPolish.confirmEnableGroupAiPolish(confirmationRef, options);
 	}
@@ -19768,4 +21097,4 @@ async function invokePersistentArkmeExtension(extensionId, method, args) {
 	return jsonValue(await handler(jsonValue(args)));
 }
 //#endregion
-export { isArkmeBotAvatarRef as $, inspectNativeBundleArtifactV3 as A, ARKME_EXTENSION_ICON_MAX_BYTES as B, ARKME_BUNDLE_MAX_BYTES as C, bundleSha256 as D, arkmeSandboxEntryId as E, assertExtensionArtifactSize as F, validateVoiceprintPcm16Wav as G, ARKME_EXTENSION_PREVIEW_MAX_BYTES as H, canonicalExtensionJson as I, ARKME_VOICEPRINT_ENROLLMENT_MAX_AUDIO_BYTES as J, ARKME_DEFAULT_SHARE_WEBSITE as K, sha256Hex as L, packLocalNativeBundleDirectoryV3 as M, readNativeBundleTarballV3 as N, canonicalBundleJson as O, renderArkmeSandboxHostEntry as P, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES as Q, unpackArkmeExtension as R, ARKME_BUNDLE_ARTIFACT_KIND as S, ArkmeBundleArtifactError as T, ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE as U, ARKME_EXTENSION_MAX_BYTES as V, ArkmeService as W, ARKME_VOICEPRINT_ENROLLMENT_MIN_DURATION_MS as X, ARKME_VOICEPRINT_ENROLLMENT_MAX_DURATION_MS as Y, ARKME_WORLD_PUBLISH_MAX_IMAGES as Z, arkmeClientContentDigest as _, persistentArkmeExtensionActive as a, verifyExtensionResolutionSignature as b, persistentExtensionBundleDirectory as c, readPersistentExtensionActivation as d, ArkmePluginError as et, refreshPersistentClientWrapper as f, activeProfileExtensionOwnerConflicts as g, renderArkmeBundleClientBundle as h, invokePersistentArkmeExtension as i, packBundleFiles as j, inspectBundleArtifact as k, persistentExtensionPackageIdentity as l, writePersistentExtensionActivation as m, applyPersistentArkmeHostExtension as n, persistentArkmeExtensionRuntimeState as o, repairPersistentExtensionInstallation as p, ARKME_PROVIDER_CONTRACT_VERSION as q, deactivatePersistentArkmeExtension as r, materializePersistentExtensionBundle as s, activatePersistentArkmeExtension as t, ArkmeOutgoingCallError as tt, quarantinePersistentExtension as u, arkmeClientContentDigestFromSource as v, ARKME_NATIVE_BUNDLE_ARTIFACT_KIND as w, verifyNativeBundleResolutionSignature as x, verifyBundleResolutionSignature as y, ARKME_EXTENSION_FORMAT as z };
+export { ARKME_RUNTIME_INSTANCE_ID as $, inspectNativeBundleArtifactV3 as A, ARKME_EXTENSION_ICON_MAX_BYTES as B, ARKME_BUNDLE_MAX_BYTES as C, bundleSha256 as D, arkmeSandboxEntryId as E, assertExtensionArtifactSize as F, validateVoiceprintPcm16Wav as G, ARKME_EXTENSION_PREVIEW_MAX_BYTES as H, canonicalExtensionJson as I, ARKME_VOICEPRINT_ENROLLMENT_MAX_AUDIO_BYTES as J, ARKME_DEFAULT_SHARE_WEBSITE as K, sha256Hex as L, packLocalNativeBundleDirectoryV3 as M, readNativeBundleTarballV3 as N, canonicalBundleJson as O, renderArkmeSandboxHostEntry as P, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES as Q, unpackArkmeExtension as R, ARKME_BUNDLE_ARTIFACT_KIND as S, ArkmeBundleArtifactError as T, ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE as U, ARKME_EXTENSION_MAX_BYTES as V, ArkmeService as W, ARKME_VOICEPRINT_ENROLLMENT_MIN_DURATION_MS as X, ARKME_VOICEPRINT_ENROLLMENT_MAX_DURATION_MS as Y, ARKME_WORLD_PUBLISH_MAX_IMAGES as Z, arkmeClientContentDigest as _, persistentArkmeExtensionActive as a, ArkmePluginError as at, verifyExtensionResolutionSignature as b, persistentExtensionBundleDirectory as c, readPersistentExtensionActivation as d, ARKME_TOOL_FILE_MAX_BYTES as et, refreshPersistentClientWrapper as f, activeProfileExtensionOwnerConflicts as g, renderArkmeBundleClientBundle as h, invokePersistentArkmeExtension as i, isArkmeBotAvatarRef as it, packBundleFiles as j, inspectBundleArtifact as k, persistentExtensionPackageIdentity as l, writePersistentExtensionActivation as m, applyPersistentArkmeHostExtension as n, arkmeNormalizedFileMimeType as nt, persistentArkmeExtensionRuntimeState as o, ArkmeOutgoingCallError as ot, repairPersistentExtensionInstallation as p, ARKME_PROVIDER_CONTRACT_VERSION as q, deactivatePersistentArkmeExtension as r, arkmePickedFileKind as rt, materializePersistentExtensionBundle as s, activatePersistentArkmeExtension as t, arkmeCanInlineLocalFile as tt, quarantinePersistentExtension as u, arkmeClientContentDigestFromSource as v, ARKME_NATIVE_BUNDLE_ARTIFACT_KIND as w, verifyNativeBundleResolutionSignature as x, verifyBundleResolutionSignature as y, ARKME_EXTENSION_FORMAT as z };