@senguoyun/dsh-arkme 0.1.78 → 0.1.79

package/lib/{persistent-runtime-aiHgSAmj.js → persistent-runtime-CB7mEj3E.js}

@@ -1296,6 +1296,9 @@ var ServiceRuntime = class {
 	async deleteSession() {
 		await this.accountSessions.delete();
 	}
+	async deleteSessionIfCurrent(expected) {
+		return await this.accountSessions.deleteIfCurrent(expected);
+	}
 	async moveSessionToPendingBinding(expected) {
 		return await this.accountSessions.deleteIfCurrent(expected, async (current) => {
 			await this.writePendingBindingSession(current);
@@ -3863,7 +3866,7 @@ var ArkmeDesktopScreenshot = class {
 };
 //#endregion
 //#region src/services/record-edit-history-service.ts
-function invalid$9() {
+function invalid$10() {
 	throw new ArkmePluginError("record-edit-history-invalid", "编辑记录暂不可用，请刷新后重试", true, 502);
 }
 var RecordEditHistoryService = class {
@@ -3874,9 +3877,9 @@ var RecordEditHistoryService = class {
 		this.projector = projector;
 	}
 	async page(target, cursorEditAt = 0, signal) {
-		if (!Number.isSafeInteger(cursorEditAt) || cursorEditAt < 0 || target.recordUid.trim() === "") invalid$9();
+		if (!Number.isSafeInteger(cursorEditAt) || cursorEditAt < 0 || target.recordUid.trim() === "") invalid$10();
 		const session = await this.runtime.requireSession();
-		if (session.userId !== target.viewerUserId) invalid$9();
+		if (session.userId !== target.viewerUserId) invalid$10();
 		const window = {
 			limit: 50,
 			...cursorEditAt === 0 ? {} : { cursor_edit_at: cursorEditAt }
@@ -3889,22 +3892,22 @@ var RecordEditHistoryService = class {
 			rel_uid: target.relationUid,
 			...window
 		}, session, signal));
-		if (signal?.aborted || (await this.runtime.requireSession()).userId !== session.userId) invalid$9();
-		if (!Array.isArray(data.items) || typeof data.has_more !== "boolean") invalid$9();
+		if (signal?.aborted || (await this.runtime.requireSession()).userId !== session.userId) invalid$10();
+		if (!Array.isArray(data.items) || typeof data.has_more !== "boolean") invalid$10();
 		const next = data.next_cursor_edit_at;
-		if (data.has_more && (typeof next !== "number" || !Number.isSafeInteger(next) || next <= 0 || cursorEditAt > 0 && next >= cursorEditAt)) invalid$9();
+		if (data.has_more && (typeof next !== "number" || !Number.isSafeInteger(next) || next <= 0 || cursorEditAt > 0 && next >= cursorEditAt)) invalid$10();
 		const seen = /* @__PURE__ */ new Set();
 		const snapshots = data.items.flatMap((raw) => {
 			const revision = objectValue$2(raw);
-			if (revision.record_uid !== target.recordUid || typeof revision.revision_uid !== "string" || revision.revision_uid.trim() === "") invalid$9();
+			if (revision.record_uid !== target.recordUid || typeof revision.revision_uid !== "string" || revision.revision_uid.trim() === "") invalid$10();
 			if (revision.revision_type !== 1 && revision.revision_type !== 5) return [];
-			if (typeof revision.edit_at !== "number" || !Number.isSafeInteger(revision.edit_at) || revision.edit_at <= 0 || !Number.isFinite(new Date(revision.edit_at).getTime()) || typeof revision.text_content !== "string") invalid$9();
+			if (typeof revision.edit_at !== "number" || !Number.isSafeInteger(revision.edit_at) || revision.edit_at <= 0 || !Number.isFinite(new Date(revision.edit_at).getTime()) || typeof revision.text_content !== "string") invalid$10();
 			if (seen.has(revision.revision_uid)) return [];
 			seen.add(revision.revision_uid);
 			return [revision];
 		});
 		const contents = snapshots.length === 0 ? [] : await this.projector.projectPage(snapshots, target, signal);
-		if (signal?.aborted || (await this.runtime.requireSession()).userId !== session.userId || contents.length !== snapshots.length) invalid$9();
+		if (signal?.aborted || (await this.runtime.requireSession()).userId !== session.userId || contents.length !== snapshots.length) invalid$10();
 		const items = snapshots.map((revision, index) => ({
 			revisionUid: revision.revision_uid,
 			kind: revision.revision_type === 5 ? "original" : "manual",
@@ -22457,7 +22460,7 @@ function arkmeArticleImageReference(value) {
 }
 //#endregion
 //#region src/services/archive-service.ts
-const invalid$8 = () => new ArkmePluginError("archive-contract-invalid", "归档数据无效，请刷新后重试", false, 502);
+const invalid$9 = () => new ArkmePluginError("archive-contract-invalid", "归档数据无效，请刷新后重试", false, 502);
 /** One Host owner for UI, Tools and SDK. Raw topic identities stay here. */
 var ArchiveService = class {
 	runtime;
@@ -22481,17 +22484,17 @@ var ArchiveService = class {
 				limit: 50,
 				...cursor === void 0 ? {} : { cursor }
 			}, session, readSignal, { lane: "interactive-read" });
-			if (!Array.isArray(data.items) || typeof data.has_more !== "boolean") throw invalid$8();
+			if (!Array.isArray(data.items) || typeof data.has_more !== "boolean") throw invalid$9();
 			const items = [];
 			for (const value of data.items) {
 				const raw = objectValue$2(value);
-				if (typeof raw.title !== "string" || typeof raw.privacy_locked !== "boolean") throw invalid$8();
+				if (typeof raw.title !== "string" || typeof raw.privacy_locked !== "boolean") throw invalid$9();
 				const title = raw.privacy_locked ? "隐私主题" : raw.title;
 				const state = await this.state(session, raw, title);
-				if (!state.ownerAvailable || !state.effectiveArchived) throw invalid$8();
+				if (!state.ownerAvailable || !state.effectiveArchived) throw invalid$9();
 				const inherited = raw.inherited_from_summary === void 0 ? void 0 : objectValue$2(raw.inherited_from_summary);
-				if (state.inheritedFrom !== void 0 !== (inherited !== void 0)) throw invalid$8();
-				if (inherited !== void 0 && (typeof inherited.title !== "string" || typeof inherited.privacy_locked !== "boolean")) throw invalid$8();
+				if (state.inheritedFrom !== void 0 !== (inherited !== void 0)) throw invalid$9();
+				if (inherited !== void 0 && (typeof inherited.title !== "string" || typeof inherited.privacy_locked !== "boolean")) throw invalid$9();
 				items.push({
 					...state,
 					privacyLocked: raw.privacy_locked,
@@ -22510,7 +22513,7 @@ var ArchiveService = class {
 					}
 				});
 			}
-			if (data.has_more && (typeof data.next_cursor !== "string" || data.next_cursor === "" || data.next_cursor === cursor)) throw invalid$8();
+			if (data.has_more && (typeof data.next_cursor !== "string" || data.next_cursor === "" || data.next_cursor === cursor)) throw invalid$9();
 			await this.assertSession(session);
 			return {
 				items,
@@ -22520,7 +22523,7 @@ var ArchiveService = class {
 		}, signal);
 	}
 	async states(sourceRefs, signal) {
-		if (sourceRefs.length === 0 || sourceRefs.length > 200 || new Set(sourceRefs).size !== sourceRefs.length) throw invalid$8();
+		if (sourceRefs.length === 0 || sourceRefs.length > 200 || new Set(sourceRefs).size !== sourceRefs.length) throw invalid$9();
 		return this.runtime.runOwnerRead("archives", {
 			operation: "states",
 			sourceRefs
@@ -22533,12 +22536,12 @@ var ArchiveService = class {
 				entity_type: 1,
 				entity_uid: ref.ownerRef
 			})) }, session, readSignal, { lane: "interactive-read" });
-			if (!Array.isArray(data.items) || data.items.length !== refs.length) throw invalid$8();
+			if (!Array.isArray(data.items) || data.items.length !== refs.length) throw invalid$9();
 			const byUID = new Map(data.items.map((value) => {
 				const raw = objectValue$2(value);
 				return [raw.entity_uid, raw];
 			}));
-			if (byUID.size !== refs.length) throw invalid$8();
+			if (byUID.size !== refs.length) throw invalid$9();
 			const states = await Promise.all(refs.map(async (ref, i) => ({
 				...await this.state(session, byUID.get(ref.ownerRef), ""),
 				sourceRef: sourceRefs[i]
@@ -22548,7 +22551,7 @@ var ArchiveService = class {
 		}, signal);
 	}
 	async set(input, signal) {
-		if (typeof input.selfArchived !== "boolean" || !Number.isSafeInteger(input.expectedRevision) || input.expectedRevision < 0) throw invalid$8();
+		if (typeof input.selfArchived !== "boolean" || !Number.isSafeInteger(input.expectedRevision) || input.expectedRevision < 0) throw invalid$9();
 		const session = await this.runtime.requireSession();
 		const ref = await this.sources.openSourceRef(input.sourceRef, session.userId);
 		if (ref.kind !== "topic") throw new ArkmePluginError("archive-target-invalid", "仅支持个人主题归档", false, 400);
@@ -22562,7 +22565,7 @@ var ArchiveService = class {
 					self_status: input.selfArchived ? 2 : 1,
 					expected_revision: input.expectedRevision
 				}, session, signal, { trackWriteOutcome: true });
-				if (data.entity_uid !== ref.ownerRef || data.self_status !== (input.selfArchived ? 2 : 1) || typeof data.state_changed !== "boolean" || !Number.isSafeInteger(data.effective_changed_count) || Number(data.effective_changed_count) < 0) throw invalid$8();
+				if (data.entity_uid !== ref.ownerRef || data.self_status !== (input.selfArchived ? 2 : 1) || typeof data.state_changed !== "boolean" || !Number.isSafeInteger(data.effective_changed_count) || Number(data.effective_changed_count) < 0) throw invalid$9();
 				const state = await this.state(session, data, "");
 				await this.assertSession(session);
 				return {
@@ -22578,9 +22581,9 @@ var ArchiveService = class {
 	}
 	async state(session, value, title) {
 		const raw = objectValue$2(value);
-		if (raw.entity_type !== 1 || typeof raw.entity_uid !== "string" || raw.entity_uid.trim() === "" || raw.self_status !== 1 && raw.self_status !== 2 || raw.effective_status !== 1 && raw.effective_status !== 2 || typeof raw.owner_available !== "boolean" || !Number.isSafeInteger(raw.revision) || Number(raw.revision) < 0 || !Number.isSafeInteger(raw.display_archive_at)) throw invalid$8();
+		if (raw.entity_type !== 1 || typeof raw.entity_uid !== "string" || raw.entity_uid.trim() === "" || raw.self_status !== 1 && raw.self_status !== 2 || raw.effective_status !== 1 && raw.effective_status !== 2 || typeof raw.owner_available !== "boolean" || !Number.isSafeInteger(raw.revision) || Number(raw.revision) < 0 || !Number.isSafeInteger(raw.display_archive_at)) throw invalid$9();
 		const parent = raw.inherited_from === void 0 ? void 0 : objectValue$2(raw.inherited_from);
-		if (parent !== void 0 && (parent.entity_type !== 1 || typeof parent.entity_uid !== "string" || parent.entity_uid === "")) throw invalid$8();
+		if (parent !== void 0 && (parent.entity_type !== 1 || typeof parent.entity_uid !== "string" || parent.entity_uid === "")) throw invalid$9();
 		return {
 			entityType: "topic",
 			sourceRef: await this.sources.sealSourceRef(session.userId, "topic", raw.entity_uid, title),
@@ -22599,23 +22602,23 @@ var ArchiveService = class {
 //#endregion
 //#region src/record-deletion-ref.ts
 const prefix$1 = "arkme-record-delete-v1";
-const invalid$7 = () => new ArkmePluginError("record-delete-reference-invalid", "删除引用已失效，请刷新后重新选择", false, 409);
+const invalid$8 = () => new ArkmePluginError("record-delete-reference-invalid", "删除引用已失效，请刷新后重新选择", false, 409);
 function sealRecordDeletionRef(ref, key) {
 	const payload = Buffer.from(JSON.stringify(ref)).toString("base64url");
 	return `${prefix$1}.${payload}.${createHmac("sha256", key).update(`${prefix$1}.${payload}`).digest("base64url")}`;
 }
 function openRecordDeletionRef(value, key) {
-	if (typeof value !== "string" || value.length > 2048) throw invalid$7();
+	if (typeof value !== "string" || value.length > 2048) throw invalid$8();
 	const [kind, payload, signature, extra] = value.split(".");
-	if (kind !== prefix$1 || !payload || !signature || extra !== void 0) throw invalid$7();
+	if (kind !== prefix$1 || !payload || !signature || extra !== void 0) throw invalid$8();
 	const actual = Buffer.from(signature, "base64url");
 	const expected = createHmac("sha256", key).update(`${prefix$1}.${payload}`).digest();
-	if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) throw invalid$7();
+	if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) throw invalid$8();
 	let ref;
 	try {
 		ref = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
 	} catch {
-		throw invalid$7();
+		throw invalid$8();
 	}
 	if (!ref || !Number.isSafeInteger(ref.userId) || ref.userId <= 0 || !Number.isSafeInteger(ref.recordVersion) || ref.recordVersion <= 0 || ![
 		"private_chat",
@@ -22623,7 +22626,7 @@ function openRecordDeletionRef(value, key) {
 		"send_to_self",
 		"default_category",
 		"topic"
-	].includes(ref.sourceKind) || typeof ref.sourceOwnerRef !== "string" || !ref.sourceOwnerRef.trim() || typeof ref.recordUid !== "string" || !ref.recordUid.trim()) throw invalid$7();
+	].includes(ref.sourceKind) || typeof ref.sourceOwnerRef !== "string" || !ref.sourceOwnerRef.trim() || typeof ref.recordUid !== "string" || !ref.recordUid.trim()) throw invalid$8();
 	return ref;
 }
 /** Only authoritative Record snapshots can grant deletion; missing versions never fall back to a relation version. */
@@ -22736,31 +22739,31 @@ var RecordDeletionService = class {
 };
 //#endregion
 //#region src/record-topic-assignment-ref.ts
-const invalid$6 = () => new ArkmePluginError("record-topic-reference-invalid", "快记归属引用已失效，请刷新后重新选择", false, 409);
+const invalid$7 = () => new ArkmePluginError("record-topic-reference-invalid", "快记归属引用已失效，请刷新后重新选择", false, 409);
 const prefix = "arkme-record-topic-v1";
 function sealRecordTopicAssignmentRef(reference, key) {
 	const payload = Buffer.from(JSON.stringify(reference)).toString("base64url");
 	return `${prefix}.${payload}.${createHmac("sha256", key).update(`${prefix}.${payload}`).digest("base64url")}`;
 }
 function openRecordTopicAssignmentRef(value, key) {
-	if (typeof value !== "string" || value.length > 2048) throw invalid$6();
+	if (typeof value !== "string" || value.length > 2048) throw invalid$7();
 	const parts = value.split(".");
-	if (parts.length !== 3 || parts[0] !== prefix) throw invalid$6();
+	if (parts.length !== 3 || parts[0] !== prefix) throw invalid$7();
 	const payload = parts[1];
 	const signature = Buffer.from(parts[2], "base64url");
 	const expected = createHmac("sha256", key).update(`${prefix}.${payload}`).digest();
-	if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) throw invalid$6();
+	if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) throw invalid$7();
 	let parsed;
 	try {
 		parsed = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
 	} catch {
-		throw invalid$6();
+		throw invalid$7();
 	}
 	if (!parsed || !Number.isSafeInteger(parsed.userId) || parsed.userId <= 0 || ![
 		"send_to_self",
 		"default_category",
 		"topic"
-	].includes(parsed.sourceKind) || typeof parsed.sourceOwnerRef !== "string" || parsed.sourceOwnerRef.trim() === "" || typeof parsed.recordUid !== "string" || parsed.recordUid.trim() === "" || typeof parsed.sourceTopicUid !== "string") throw invalid$6();
+	].includes(parsed.sourceKind) || typeof parsed.sourceOwnerRef !== "string" || parsed.sourceOwnerRef.trim() === "" || typeof parsed.recordUid !== "string" || parsed.recordUid.trim() === "" || typeof parsed.sourceTopicUid !== "string") throw invalid$7();
 	return parsed;
 }
 //#endregion
@@ -36846,6 +36849,10 @@ var AuthService = class {
 	runtime;
 	profile;
 	lifecycle;
+	cancellationNotice;
+	pendingCancellationLogin;
+	pendingCancellationCleanup;
+	cancellationTask;
 	pendingPhoneUnbindSession;
 	attempts = /* @__PURE__ */ new Map();
 	jiwoAttemptGeneration = 0;
@@ -36860,6 +36867,7 @@ var AuthService = class {
 		for (const [attemptId, attempt] of this.attempts) if (attempt.kind === "wechat") this.attempts.delete(attemptId);
 	}
 	async logout() {
+		this.pendingCancellationLogin = void 0;
 		this.pendingPhoneUnbindSession = void 0;
 		const activeSession = await this.runtime.sessionStore.read();
 		const pendingSession = await this.runtime.readPendingBindingSession();
@@ -36882,7 +36890,24 @@ var AuthService = class {
 		};
 	}
 	async authStatus() {
+		if (this.pendingCancellationLogin !== void 0) return this.cancellationLoginSnapshot();
 		const activeSession = await this.runtime.sessionStore.read();
+		const completion = await this.runtime.stateStore.readCancellationCompletion?.();
+		if (completion !== void 0) {
+			if (activeSession === void 0) this.cancellationNotice = completion.result.status === "done" ? "done" : "waiting";
+			else if (completion.userId === activeSession.userId && completion.sessionHash === this.cancellationSessionHash(activeSession)) {
+				this.pendingCancellationCleanup = {
+					session: activeSession,
+					result: completion.result
+				};
+				await this.submitCancellation(activeSession.userId, completion.result.mode);
+				return {
+					status: "logged-out",
+					environment: this.runtime.config.environment,
+					cancellationNotice: completion.result.status === "done" ? "done" : "waiting"
+				};
+			}
+		}
 		if (activeSession !== void 0) {
 			const cachedProfile = await this.runtime.stateStore.cachedProfile(activeSession.userId);
 			const snapshot = cachedProfile.profile === null ? await this.authSnapshotForSession(activeSession) : {
@@ -36900,7 +36925,8 @@ var AuthService = class {
 		const pendingSession = await this.runtime.readPendingBindingSession();
 		return pendingSession === void 0 ? {
 			status: "logged-out",
-			environment: this.runtime.config.environment
+			environment: this.runtime.config.environment,
+			...this.cancellationNotice === void 0 ? {} : { cancellationNotice: this.cancellationNotice }
 		} : {
 			status: "binding-required",
 			environment: this.runtime.config.environment,
@@ -36908,6 +36934,7 @@ var AuthService = class {
 		};
 	}
 	async beginWechatLogin() {
+		this.pendingCancellationLogin = void 0;
 		this.jiwoAttemptGeneration += 1;
 		await this.cancelAllJiwoLoginAttempts();
 		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/public/v1/auth/wechat-oauth-login-qrcode", {}, void 0, [200]);
@@ -36970,10 +36997,11 @@ var AuthService = class {
 			userId
 		};
 		this.attempts.delete(attemptId);
-		return await this.acceptLoginSession(session);
+		return await this.acceptLoginSession(session, numberValue$27(data.rest_days_cancel));
 	}
 	async beginJiwoLogin() {
 		if (!jiwoScanLoginAvailable(this.runtime.config)) throw new ArkmePluginError("jiwo-scan-login-disabled", "即我扫码登录当前未启用", false, 403);
+		this.pendingCancellationLogin = void 0;
 		const attemptGeneration = ++this.jiwoAttemptGeneration;
 		await this.cancelAllJiwoLoginAttempts();
 		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/public/v1/auth/app-scan-login/start", {
@@ -37042,7 +37070,7 @@ var AuthService = class {
 			accessToken,
 			refreshToken,
 			userId
-		});
+		}, numberValue$27(data.rest_days_cancel));
 	}
 	async cancelJiwoLogin(attemptId) {
 		if (attemptId.trim() === "") return { canceled: true };
@@ -37080,6 +37108,7 @@ var AuthService = class {
 	async testLogin(userId) {
 		if (this.runtime.config.environment !== "test") throw new ArkmePluginError("test-login-disabled", "测试账号登录仅允许测试环境使用", false, 403);
 		if (!Number.isSafeInteger(userId) || userId <= 0) throw new ArkmePluginError("test-user-id-invalid", "请输入有效的测试账号 user_id", false);
+		this.pendingCancellationLogin = void 0;
 		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/public/v1/auth/the-best-api-for-testing", {
 			user_id: userId,
 			unique_code: await this.runtime.stateStore.uniqueCode(),
@@ -37095,7 +37124,30 @@ var AuthService = class {
 			userId
 		};
 		this.attempts.clear();
-		return await this.acceptLoginSession(session);
+		return await this.acceptLoginSession(session, numberValue$27(data.rest_days_cancel));
+	}
+	async emailBindingRequest(expectedUserId, email, code) {
+		const session = await this.runtime.requireSession();
+		if (session.userId !== expectedUserId) throw new ArkmePluginError("email-session-changed", "账号已切换，请重新打开账号设置", false);
+		const normalizedEmail = email.trim();
+		if (normalizedEmail.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(normalizedEmail)) throw new ArkmePluginError("email-invalid", "请输入有效的邮箱地址", false);
+		if (code !== void 0 && !/^[0-9]{4}$/.test(code.trim())) throw new ArkmePluginError("email-code-invalid", "请输入4位邮箱验证码", false);
+		const data = await this.runtime.post(this.runtime.config.authBaseUrl, code === void 0 ? "/api/v1/auth/email-bind-send-code" : "/api/v1/auth/email-bind", {
+			email: normalizedEmail,
+			...code === void 0 ? {} : { code: code.trim() }
+		}, session.accessToken, [200]);
+		const current = await this.runtime.requireSession();
+		if (current.userId !== session.userId || current.refreshToken !== session.refreshToken) throw new ArkmePluginError("email-session-changed", "账号已切换，请重新打开账号设置", false);
+		if (data.result !== 1) throw new ArkmePluginError("email-bind-rejected", data.result === 2 ? "该邮箱已绑定其他账号" : data.result === 3 ? "当前账号已绑定邮箱，请刷新账号信息" : code !== void 0 && data.result === 4 ? "邮箱或验证码错误" : "邮箱绑定响应异常，请重试", false);
+		if (code !== void 0) this.profile.invalidate(session.userId);
+	}
+	async sendEmailBindCode(expectedUserId, email) {
+		await this.emailBindingRequest(expectedUserId, email);
+		return { sent: true };
+	}
+	async bindEmail(expectedUserId, email, code) {
+		await this.emailBindingRequest(expectedUserId, email, code);
+		return { bound: true };
 	}
 	async sendPhoneCode(phone, captcha) {
 		const normalizedPhone = this.normalizedPhone(phone);
@@ -37122,6 +37174,7 @@ var AuthService = class {
 		const normalizedPhone = this.normalizedPhone(phone);
 		const normalizedCode = code.trim();
 		if (!/^[0-9]{6}$/.test(normalizedCode)) throw new ArkmePluginError("phone-code-invalid", "请输入有效的短信验证码", false);
+		this.pendingCancellationLogin = void 0;
 		const session = await this.runtime.sessionStore.read() ?? await this.runtime.readPendingBindingSession();
 		if (session !== void 0) {
 			const result = numberValue$27((await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/verify-bind-phone", {
@@ -37155,7 +37208,7 @@ var AuthService = class {
 			userId
 		};
 		this.attempts.clear();
-		return await this.acceptLoginSession(sessionAfterPhoneLogin);
+		return await this.acceptLoginSession(sessionAfterPhoneLogin, numberValue$27(data.rest_days_cancel));
 	}
 	async checkPhoneUnbindEligibility(expectedUserId) {
 		const session = await this.runtime.requireSession();
@@ -37250,21 +37303,144 @@ var AuthService = class {
 	profileHasBoundPhone(snapshot) {
 		return (snapshot.profile?.contact.phoneMasked?.trim() ?? "") !== "";
 	}
-	async acceptLoginSession(session) {
+	async acceptLoginSession(session, restDaysCancel = 0, assertCurrent) {
+		if (assertCurrent === void 0) this.pendingCancellationLogin = void 0;
+		if (restDaysCancel > 0) {
+			this.pendingCancellationLogin = {
+				session,
+				days: restDaysCancel
+			};
+			return this.cancellationLoginSnapshot();
+		}
+		await this.runtime.stateStore.writeCancellationCompletion?.(void 0);
+		this.cancellationNotice = void 0;
 		this.runtime.invalidateScope(this.runtime.requestScope(session.userId));
 		this.profile.invalidate(session.userId);
 		const snapshot = await this.authSnapshotForSession(session, { forceProfile: true });
+		assertCurrent?.();
 		if (snapshot.status === "authenticated") {
 			await this.runtime.clearPendingBindingSession();
+			assertCurrent?.();
 			await this.runtime.writeSession(session);
+			assertCurrent?.();
 			this.lifecycle.reconnectChatRealtime();
 			return snapshot;
 		}
 		await this.runtime.writePendingBindingSession(session);
+		assertCurrent?.();
 		await this.runtime.deleteSession();
+		assertCurrent?.();
 		this.lifecycle.reconnectChatRealtime();
 		return snapshot;
 	}
+	cancellationLoginSnapshot() {
+		return {
+			status: "cancellation-pending",
+			environment: this.runtime.config.environment,
+			restDaysCancel: this.pendingCancellationLogin.days
+		};
+	}
+	async resolveCancellationLogin(continueLogin) {
+		const pending = this.pendingCancellationLogin;
+		if (pending === void 0) throw new ArkmePluginError("cancellation-login-expired", "登录确认已失效，请重新登录", false);
+		if (!continueLogin) {
+			this.pendingCancellationLogin = void 0;
+			return {
+				status: "logged-out",
+				environment: this.runtime.config.environment
+			};
+		}
+		await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/abort-cancel", {}, pending.session.accessToken, [200]);
+		if (this.pendingCancellationLogin !== pending) throw new ArkmePluginError("cancellation-login-expired", "登录确认已失效，请重新登录", false);
+		const snapshot = await this.acceptLoginSession(pending.session, 0, () => {
+			if (this.pendingCancellationLogin !== pending) throw new ArkmePluginError("cancellation-login-expired", "登录确认已失效，请重新登录", false);
+		});
+		if (this.pendingCancellationLogin === pending) this.pendingCancellationLogin = void 0;
+		return snapshot;
+	}
+	async cancellationSession(expectedUserId) {
+		const session = await this.runtime.requireSession();
+		if (session.userId !== expectedUserId) throw new ArkmePluginError("cancellation-session-changed", "账号已切换，请重新打开账号设置", false);
+		return session;
+	}
+	cancellationResult(data) {
+		if (!data || !["immediate", "waiting"].includes(data.mode) || ![
+			"eligible",
+			"waiting",
+			"done"
+		].includes(data.status) || !Number.isSafeInteger(data.cancel_at) || data.cancel_at < 0 || typeof data.has_phone !== "boolean") throw new ArkmePluginError("cancellation-contract-invalid", "注销状态未确认，请稍后重试", true, 502);
+		return data;
+	}
+	async previewCancellation(expectedUserId) {
+		const session = await this.cancellationSession(expectedUserId);
+		const data = await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/cancellation/preview", {}, session.accessToken, [200]);
+		if ((await this.cancellationSession(expectedUserId)).refreshToken !== session.refreshToken) throw new ArkmePluginError("cancellation-session-changed", "登录状态已变化，请重试", false);
+		return this.cancellationResult(data);
+	}
+	async submitCancellation(expectedUserId, expectedMode) {
+		if (expectedMode !== "immediate" && expectedMode !== "waiting") throw new ArkmePluginError("cancellation-mode-invalid", "请重新确认注销方式", false);
+		if (this.cancellationTask !== void 0) throw new ArkmePluginError("cancellation-busy", "正在处理注销，请稍候", true);
+		const task = this.performCancellation(expectedUserId, expectedMode);
+		this.cancellationTask = task;
+		try {
+			return await task;
+		} finally {
+			if (this.cancellationTask === task) this.cancellationTask = void 0;
+		}
+	}
+	async performCancellation(expectedUserId, expectedMode) {
+		let cleanup = this.pendingCancellationCleanup;
+		if (cleanup === void 0) {
+			const completion = await this.runtime.stateStore.readCancellationCompletion?.();
+			const active = await this.runtime.sessionStore.read();
+			if (completion?.userId === expectedUserId && active === void 0) return completion.result;
+			if (completion?.userId === expectedUserId && active !== void 0 && completion.sessionHash === this.cancellationSessionHash(active)) {
+				cleanup = {
+					session: active,
+					result: completion.result
+				};
+				this.pendingCancellationCleanup = cleanup;
+			}
+		}
+		if (cleanup === void 0 || cleanup.session.userId !== expectedUserId) {
+			const session = await this.cancellationSession(expectedUserId);
+			const result = this.cancellationResult(await this.runtime.post(this.runtime.config.authBaseUrl, "/api/v1/auth/cancellation/submit", { expected_mode: expectedMode }, session.accessToken, [200], void 0, false, this.runtime.authenticatedRequestOptions(session, "auth", "write", { trackWriteOutcome: true })));
+			if (result.changed === true && result.status === "eligible") return result;
+			if (result.status !== "done" && result.status !== "waiting") throw new ArkmePluginError("cancellation-contract-invalid", "注销状态未确认，请稍后重试", true);
+			cleanup = {
+				session,
+				result
+			};
+			this.pendingCancellationCleanup = cleanup;
+		}
+		const current = await this.runtime.sessionStore.read();
+		if (current !== void 0 && (current.userId !== cleanup.session.userId || current.refreshToken !== cleanup.session.refreshToken)) {
+			await this.runtime.stateStore.writeCancellationCompletion?.(void 0);
+			this.pendingCancellationCleanup = void 0;
+			throw new ArkmePluginError("cancellation-session-changed", "账号已切换，原账号注销已处理", false);
+		}
+		await this.runtime.stateStore.writeCancellationCompletion?.({
+			userId: cleanup.session.userId,
+			sessionHash: this.cancellationSessionHash(cleanup.session),
+			result: cleanup.result
+		});
+		this.runtime.invalidateScope(this.runtime.requestScope(cleanup.session.userId));
+		this.runtime.clearRefreshForUser(cleanup.session.userId);
+		if (!await this.runtime.deleteSessionIfCurrent(cleanup.session) && await this.runtime.sessionStore.read() !== void 0) {
+			await this.runtime.stateStore.writeCancellationCompletion?.(void 0);
+			this.pendingCancellationCleanup = void 0;
+			throw new ArkmePluginError("cancellation-session-changed", "账号已切换，原账号注销已处理", false);
+		}
+		this.profile.invalidate(cleanup.session.userId);
+		this.lifecycle.clearAccountState([cleanup.session.userId]);
+		this.lifecycle.reconnectChatRealtime();
+		this.cancellationNotice = cleanup.result.status === "done" ? "done" : "waiting";
+		this.pendingCancellationCleanup = void 0;
+		return cleanup.result;
+	}
+	cancellationSessionHash(session) {
+		return createHash("sha256").update(session.refreshToken).digest("hex");
+	}
 	normalizedPhone(phone) {
 		const normalized = phone.replace(/[\s-]/g, "");
 		if (!/^1[3-9][0-9]{9}$/.test(normalized)) throw new ArkmePluginError("phone-invalid", "请输入有效的中国大陆手机号", false);
@@ -37321,23 +37497,23 @@ var BackgroundSoundMembershipService = class {
 };
 //#endregion
 //#region src/services/membership-service.ts
-function invalid$5() {
+function invalid$6() {
 	throw new ArkmePluginError("membership-contract-invalid", "会员信息暂时无法确认，请稍后重试", true, 502);
 }
 function integer$3(value) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return invalid$5();
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return invalid$6();
 	return value;
 }
 function timestamp(value) {
 	if (value === void 0 || value === null || value === 0) return null;
 	const micros = integer$3(value);
 	const millis = Math.floor(micros / 1e3);
-	if (millis < Date.UTC(2e3, 0) || millis > Date.UTC(3e3, 0)) return invalid$5();
+	if (millis < Date.UTC(2e3, 0) || millis > Date.UTC(3e3, 0)) return invalid$6();
 	return millis;
 }
 function parseMembership(raw, userId, now = Date.now()) {
 	const memberType = integer$3(raw.member_type);
-	if (memberType > 2) return invalid$5();
+	if (memberType > 2) return invalid$6();
 	const expireAtMillis = timestamp(raw.expire_at);
 	return {
 		userId,
@@ -37348,16 +37524,16 @@ function parseMembership(raw, userId, now = Date.now()) {
 	};
 }
 function parseMembershipProducts(raw) {
-	if (!Array.isArray(raw.data_ls)) return invalid$5();
+	if (!Array.isArray(raw.data_ls)) return invalid$6();
 	const products = raw.data_ls.map((entry) => {
-		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return invalid$5();
+		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return invalid$6();
 		const row = entry;
 		const memberType = integer$3(row.spu_code);
-		if (memberType !== 1 && memberType !== 2) return invalid$5();
-		if (typeof row.name !== "string" || !row.name.trim() || typeof row.is_period !== "boolean") return invalid$5();
+		if (memberType !== 1 && memberType !== 2) return invalid$6();
+		if (typeof row.name !== "string" || !row.name.trim() || typeof row.is_period !== "boolean") return invalid$6();
 		const alipayId = integer$3(row.alipay_product_id);
 		const wechatId = integer$3(row.wechat_product_id);
-		if (alipayId === 0 && wechatId === 0) return invalid$5();
+		if (alipayId === 0 && wechatId === 0) return invalid$6();
 		return {
 			id: `${memberType}:${alipayId}:${wechatId}:${row.is_period ? "recurring" : "once"}`,
 			memberType,
@@ -37368,7 +37544,7 @@ function parseMembershipProducts(raw) {
 			monthCount: integer$3(row.month_count)
 		};
 	});
-	if (new Set(products.map((p) => p.id)).size !== products.length) return invalid$5();
+	if (new Set(products.map((p) => p.id)).size !== products.length) return invalid$6();
 	return products.sort((a, b) => a.memberType - b.memberType || a.monthCount - b.monthCount || a.priceMinor - b.priceMinor);
 }
 /** Membership is distinct from managed-AI balance billing. Only read endpoints are exposed. */
@@ -37384,7 +37560,7 @@ var MembershipService = class {
 		return parseMembership(raw, userId);
 	}
 	async catalog(expectedUserId) {
-		if (!Number.isSafeInteger(expectedUserId) || expectedUserId <= 0) return invalid$5();
+		if (!Number.isSafeInteger(expectedUserId) || expectedUserId <= 0) return invalid$6();
 		const session = await this.runtime.requireSession();
 		if (session.userId !== expectedUserId) throw new ArkmePluginError("membership-account-changed", "账号已切换，请重新打开会员页面", false, 409);
 		const raw = await this.runtime.authenticatedAuthReadPost("/api/v1/payment/get/sale-product", {}, session);
@@ -37499,19 +37675,19 @@ var AccountUsageService = class {
 //#endregion
 //#region src/services/account-usage-details-service.ts
 const monthPattern = /^\d{4}-(0[1-9]|1[0-2])$/;
-function invalid$4() {
+function invalid$5() {
 	return new ArkmePluginError("account-usage-details-invalid", "用量明细暂时无法确认，请重试", true, 502);
 }
 function object$5(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw invalid$4();
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw invalid$5();
 	return value;
 }
 function count(value) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw invalid$4();
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw invalid$5();
 	return value;
 }
 function text$4(value, max = 16384) {
-	if (typeof value !== "string" || value.length > max) throw invalid$4();
+	if (typeof value !== "string" || value.length > max) throw invalid$5();
 	return value;
 }
 function tokens(value) {
@@ -37540,17 +37716,17 @@ function status(value) {
 }
 function parseTokenSummary(value, accountScope) {
 	const raw = object$5(value), monthKey = text$4(raw.month_key, 7);
-	if (!monthPattern.test(monthKey) || !Array.isArray(raw.available_months)) throw invalid$4();
+	if (!monthPattern.test(monthKey) || !Array.isArray(raw.available_months)) throw invalid$5();
 	const availableMonths = [...new Set(raw.available_months.map((value) => {
 		const month = text$4(value, 7);
-		if (!monthPattern.test(month)) throw invalid$4();
+		if (!monthPattern.test(month)) throw invalid$5();
 		return month;
 	}))].sort().reverse();
 	const timezone = text$4(raw.timezone, 100);
 	try {
 		new Intl.DateTimeFormat("en", { timeZone: timezone });
 	} catch {
-		throw invalid$4();
+		throw invalid$5();
 	}
 	return {
 		accountScope,
@@ -37567,7 +37743,7 @@ function parseTokenSummary(value, accountScope) {
 }
 function parseTokenPage(value, accountScope, kind) {
 	const raw = object$5(value);
-	if (!Array.isArray(raw.items) || raw.items.length > 100) throw invalid$4();
+	if (!Array.isArray(raw.items) || raw.items.length > 100) throw invalid$5();
 	return {
 		accountScope,
 		items: raw.items.map((value) => {
@@ -37583,7 +37759,7 @@ function parseTokenPage(value, accountScope, kind) {
 				usageStatus: status(item.usage_status)
 			};
 			const operationUid = text$4(item.operation_uid, 256), displayName = text$4(item.display_name, 2048);
-			if (!operationUid.trim() || !displayName.trim() || !Array.isArray(item.models)) throw invalid$4();
+			if (!operationUid.trim() || !displayName.trim() || !Array.isArray(item.models)) throw invalid$5();
 			return {
 				...common,
 				operationUid,
@@ -37610,11 +37786,11 @@ var AccountUsageDetailsService = class {
 	async read(scope, kind, query, signal) {
 		const session = await this.session(scope);
 		const month = text$4(query.monthKey, 7), timezone = text$4(query.timezone, 100) || "Asia/Shanghai";
-		if (month && !monthPattern.test(month)) throw invalid$4();
+		if (month && !monthPattern.test(month)) throw invalid$5();
 		try {
 			new Intl.DateTimeFormat("en", { timeZone: timezone });
 		} catch {
-			throw invalid$4();
+			throw invalid$5();
 		}
 		const body = {
 			month_key: month,
@@ -37626,7 +37802,7 @@ var AccountUsageDetailsService = class {
 		}
 		if (kind === "calls") {
 			const uid = text$4(query.operationUid, 256), biz = count(query.bizCode);
-			if (!uid.trim() || biz > 32767) throw invalid$4();
+			if (!uid.trim() || biz > 32767) throw invalid$5();
 			body.operation_uid = uid;
 			body.biz_code = biz;
 		}
@@ -37636,7 +37812,7 @@ var AccountUsageDetailsService = class {
 	}
 	async summary(scope, query, signal) {
 		const result = parseTokenSummary(await this.read(scope, "summary", query, signal), scope);
-		if (query.monthKey && result.monthKey !== query.monthKey) throw invalid$4();
+		if (query.monthKey && result.monthKey !== query.monthKey) throw invalid$5();
 		return result;
 	}
 	async operations(scope, query, signal) {
@@ -37649,17 +37825,17 @@ var AccountUsageDetailsService = class {
 //#endregion
 //#region src/services/data-management-service.ts
 function object$4(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw invalid$3();
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw invalid$4();
 	return value;
 }
-function invalid$3() {
+function invalid$4() {
 	return new ArkmePluginError("data-management-contract-invalid", "数据格式暂时无法确认，请重试", true, 502);
 }
 function text$3(value) {
 	return typeof value === "string" ? value : "";
 }
 function integer$1(value) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw invalid$3();
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw invalid$4();
 	return value;
 }
 const DELETED_RETENTION_MILLIS = 720 * 60 * 60 * 1e3;
@@ -37682,7 +37858,7 @@ function lifecycle(value) {
 function parseDeletedRecords(raw, accountScope, nowMillis = Date.now()) {
 	const envelope = object$4(raw);
 	const rows = envelope.items ?? envelope.records ?? envelope.list ?? envelope.data;
-	if (!Array.isArray(rows)) throw invalid$3();
+	if (!Array.isArray(rows)) throw invalid$4();
 	let unverifiedCount = 0;
 	return {
 		accountScope,
@@ -37690,7 +37866,7 @@ function parseDeletedRecords(raw, accountScope, nowMillis = Date.now()) {
 			const row = object$4(value);
 			const core = object$4(row.record_core ?? row.record ?? row);
 			const recordUid = text$3(core.record_uid).trim();
-			if (!recordUid) throw invalid$3();
+			if (!recordUid) throw invalid$4();
 			const status = lifecycle(core.status);
 			if (status === "excluded") return [];
 			if (status === "unknown") {
@@ -37753,7 +37929,7 @@ var DataManagementService = class {
 		}, session, signal, { lane: "interactive-read" }), this.runtime.authenticatedPost("/api/v1/records/export/session/latest", {}, session, signal, { lane: "interactive-read" })]);
 		await this.session(scope);
 		const raw = object$4(preflightResponse), latest = object$4(latestResponse);
-		if (typeof raw.can_export !== "boolean") throw invalid$3();
+		if (typeof raw.can_export !== "boolean") throw invalid$4();
 		return {
 			accountScope: scope,
 			canExport: raw.can_export,
@@ -37765,7 +37941,7 @@ var DataManagementService = class {
 		};
 	}
 	async recover(scope, recordUid, version) {
-		if (!recordUid.trim() || integer$1(version) <= 0) throw invalid$3();
+		if (!recordUid.trim() || integer$1(version) <= 0) throw invalid$4();
 		const record = (await this.deleted(scope)).items.find((item) => item.recordUid === recordUid);
 		if (!record || record.version !== version || record.recoverableUntilMillis === void 0 || record.recoverableUntilMillis <= Date.now()) throw new ArkmePluginError("data-management-record-changed", "记录状态已变化或无法确认可恢复，请刷新最近删除列表。", false, 409);
 		const session = await this.session(scope);
@@ -37775,7 +37951,7 @@ var DataManagementService = class {
 		}, session);
 		await this.session(scope);
 		const envelope = object$4(raw);
-		if (object$4(envelope.record_core ?? envelope.record ?? envelope).record_uid !== recordUid) throw invalid$3();
+		if (object$4(envelope.record_core ?? envelope.record ?? envelope).record_uid !== recordUid) throw invalid$4();
 		return {
 			accountScope: scope,
 			recordUid
@@ -46119,7 +46295,7 @@ var RecordReeditSubmissions = class {
 };
 //#endregion
 //#region src/services/record-reedit-attachments.ts
-const invalid$2 = () => new ArkmePluginError("record-reedit-attachment-invalid", "附件引用无效或不属于这条快记，请重新读取后选择", false, 409);
+const invalid$3 = () => new ArkmePluginError("record-reedit-attachment-invalid", "附件引用无效或不属于这条快记，请重新读取后选择", false, 409);
 const refs = (payload) => Array.isArray(payload?.media_refs) ? payload.media_refs.map(objectValue$2) : [];
 function recordReeditIsBackgroundSound(ref) {
 	return ref.content_file_role === 4;
@@ -46141,14 +46317,14 @@ function recordReeditAttachmentSelection(value, payload) {
 	try {
 		selection = parseArkmeRecordReeditAttachments(value);
 	} catch {
-		throw invalid$2();
+		throw invalid$3();
 	}
 	const groups = recordReeditMediaGroups(payload);
 	const supported = new Set(groups.map((group) => group.fileAssetUid));
-	if (selection.some((item) => item.fileAssetUid !== void 0 && !supported.has(item.fileAssetUid))) throw invalid$2();
+	if (selection.some((item) => item.fileAssetUid !== void 0 && !supported.has(item.fileAssetUid))) throw invalid$3();
 	const grouped = new Set(groups.flatMap((group) => group.refs));
-	if (refs(payload).some((ref) => !recordReeditIsBackgroundSound(ref) && ref.render_role === 4 && !groups.some((group) => group.refs.some((item) => item.file_asset_uid === ref.file_asset_uid)))) throw invalid$2();
-	if (groups.some((group) => group.fileAssetUid === "") || grouped.size !== groups.reduce((sum, group) => sum + group.refs.length, 0)) throw invalid$2();
+	if (refs(payload).some((ref) => !recordReeditIsBackgroundSound(ref) && ref.render_role === 4 && !groups.some((group) => group.refs.some((item) => item.file_asset_uid === ref.file_asset_uid)))) throw invalid$3();
+	if (groups.some((group) => group.fileAssetUid === "") || grouped.size !== groups.reduce((sum, group) => sum + group.refs.length, 0)) throw invalid$3();
 	return selection;
 }
 function recordReeditAttachmentChanges(payload, selection) {
@@ -46170,11 +46346,11 @@ function recordReeditWithAttachments(payload, selection, uploads) {
 	const media = selection.flatMap((item) => {
 		if (item.fileAssetUid !== void 0) {
 			const group = groups.find((value) => value.fileAssetUid === item.fileAssetUid);
-			if (group === void 0) throw invalid$2();
+			if (group === void 0) throw invalid$3();
 			return group.refs.map((ref) => structuredClone(ref));
 		}
 		const asset = uploads.get(item.fileRef);
-		if (asset === void 0 || asset.fileAssetUid.trim() === "") throw invalid$2();
+		if (asset === void 0 || asset.fileAssetUid.trim() === "") throw invalid$3();
 		return [{
 			file_asset_uid: asset.fileAssetUid,
 			render_role: 1,
@@ -47701,21 +47877,21 @@ var RecordService = class {
 const LOCAL_FILE_REF = /^arkme-file-v1\.[0-9a-f-]{36}$/;
 const ASSET_REF = /^[A-Za-z0-9._:-]{8,256}$/;
 const MAX_AMPLITUDES = 4096;
-function invalid$1(message) {
+function invalid$2(message) {
 	return new ArkmePluginError("background-sound-invalid", message, false, 400);
 }
 function invalidFile(message) {
 	return new ArkmePluginError("background-sound-file-invalid", message, false, 400);
 }
 function arkmeBackgroundSoundAmplitudes(values) {
-	if (!Array.isArray(values) || values.length > MAX_AMPLITUDES || values.some((value) => typeof value !== "number" || !Number.isFinite(value) || value < 0 || value > 1)) throw invalid$1("背景音振幅数量不能超过 4096，且每项必须是 0 到 1 之间的有限数字");
+	if (!Array.isArray(values) || values.length > MAX_AMPLITUDES || values.some((value) => typeof value !== "number" || !Number.isFinite(value) || value < 0 || value > 1)) throw invalid$2("背景音振幅数量不能超过 4096，且每项必须是 0 到 1 之间的有限数字");
 	return [...values];
 }
 function arkmeFileBackgroundSound(value, allFileRefs) {
 	if (value === void 0) return void 0;
-	if (!Array.isArray(value.fileRefs) || value.fileRefs.length === 0 || value.fileRefs.some((ref) => typeof ref !== "string" || !LOCAL_FILE_REF.test(ref)) || new Set(value.fileRefs).size !== value.fileRefs.length) throw invalid$1("背景音文件引用为空、重复或无效");
+	if (!Array.isArray(value.fileRefs) || value.fileRefs.length === 0 || value.fileRefs.some((ref) => typeof ref !== "string" || !LOCAL_FILE_REF.test(ref)) || new Set(value.fileRefs).size !== value.fileRefs.length) throw invalid$2("背景音文件引用为空、重复或无效");
 	const allowed = new Set(allFileRefs);
-	if (value.fileRefs.some((ref) => !allowed.has(ref))) throw invalid$1("背景音文件必须属于同一发送任务");
+	if (value.fileRefs.some((ref) => !allowed.has(ref))) throw invalid$2("背景音文件必须属于同一发送任务");
 	return {
 		fileRefs: [...value.fileRefs],
 		amplitudes: arkmeBackgroundSoundAmplitudes(value.amplitudes)
@@ -47745,10 +47921,10 @@ function normalizedBackgroundAsset(asset) {
 }
 function arkmeRichBackgroundSound(value) {
 	if (value === void 0) return void 0;
-	if (!Array.isArray(value.assets) || value.assets.length === 0 || value.assets.length > 20) throw invalid$1("背景音资产为空或数量超限");
+	if (!Array.isArray(value.assets) || value.assets.length === 0 || value.assets.length > 20) throw invalid$2("背景音资产为空或数量超限");
 	const assets = value.assets.map(normalizedBackgroundAsset);
 	const identities = assets.map((asset) => asset.fileAssetUid);
-	if (new Set(identities).size !== identities.length) throw invalid$1("背景音资产不能重复");
+	if (new Set(identities).size !== identities.length) throw invalid$2("背景音资产不能重复");
 	return {
 		assets,
 		amplitudes: arkmeBackgroundSoundAmplitudes(value.amplitudes)
@@ -83924,13 +84100,13 @@ var GroupService = class {
 };
 //#endregion
 //#region src/services/common-group-service.ts
-const invalid = () => new ArkmePluginError("common-groups-response-invalid", "共同群聊响应不完整，请重试", true, 502);
+const invalid$1 = () => new ArkmePluginError("common-groups-response-invalid", "共同群聊响应不完整，请重试", true, 502);
 function commonGroupChanges(value, known, after) {
 	const raw = objectValue$2(value);
-	if (!Array.isArray(raw.items) || !Array.isArray(raw.removed) || typeof raw.has_more !== "boolean" || raw.items.length > 20 || raw.removed.length > 20) throw invalid();
+	if (!Array.isArray(raw.items) || !Array.isArray(raw.removed) || typeof raw.has_more !== "boolean" || raw.items.length > 20 || raw.removed.length > 20) throw invalid$1();
 	const items = raw.items.map((value) => {
 		const row = objectValue$2(value);
-		if (typeof row.chat_session_uid !== "string" || !row.chat_session_uid || row.chat_session_uid.length > 128 || typeof row.title !== "string" || row.title.length > 4096 || !Number.isSafeInteger(row.member_count) || Number(row.member_count) < 0) throw invalid();
+		if (typeof row.chat_session_uid !== "string" || !row.chat_session_uid || row.chat_session_uid.length > 128 || typeof row.title !== "string" || row.title.length > 4096 || !Number.isSafeInteger(row.member_count) || Number(row.member_count) < 0) throw invalid$1();
 		return {
 			uid: row.chat_session_uid,
 			title: row.title,
@@ -83938,14 +84114,14 @@ function commonGroupChanges(value, known, after) {
 		};
 	});
 	const removed = raw.removed;
-	if (removed.some((uid) => typeof uid !== "string" || !known.includes(uid))) throw invalid();
+	if (removed.some((uid) => typeof uid !== "string" || !known.includes(uid))) throw invalid$1();
 	const identities = [...items.map((row) => row.uid), ...removed];
-	if (new Set(identities).size !== identities.length) throw invalid();
+	if (new Set(identities).size !== identities.length) throw invalid$1();
 	if (known.length) {
-		if (raw.has_more || identities.length !== known.length || identities.some((uid) => !known.includes(String(uid)))) throw invalid();
-	} else if (removed.length || items.some((row, i) => row.uid <= (items[i - 1]?.uid ?? after))) throw invalid();
+		if (raw.has_more || identities.length !== known.length || identities.some((uid) => !known.includes(String(uid)))) throw invalid$1();
+	} else if (removed.length || items.some((row, i) => row.uid <= (items[i - 1]?.uid ?? after))) throw invalid$1();
 	const next = raw.has_more ? raw.next_after : "";
-	if (typeof next !== "string" || raw.has_more && (!items.length || next !== items.at(-1)?.uid || next <= after)) throw invalid();
+	if (typeof next !== "string" || raw.has_more && (!items.length || next !== items.at(-1)?.uid || next <= after)) throw invalid$1();
 	return {
 		items,
 		removed,
@@ -87884,6 +88060,28 @@ var RelatedQuickNoteService = class {
 	}
 };
 //#endregion
+//#region src/recording-search-version.ts
+/** Public Audio contract: hash raw decrypted text, retaining whitespace and Unicode. */
+function recordingSearchVersion(item) {
+	return createHash("sha256").update([
+		item.sessionId,
+		item.childId,
+		item.asrItemIndex,
+		item.transcriptSource,
+		item.startAtMillis,
+		item.endAtMillis,
+		item.text
+	].join("\n"), "utf8").digest("hex");
+}
+function recordingSearchIdentityHash(item) {
+	return createHash("sha256").update(JSON.stringify([
+		item.sessionId,
+		item.transcriptSource,
+		item.childId,
+		item.itemIndex
+	]), "utf8").digest("hex");
+}
+//#endregion
 //#region src/recording-import-coordinator.ts
 function importFailure(error) {
 	if (error instanceof RecordingImportContractError) return {
@@ -88417,6 +88615,7 @@ function projectRecordingTranscripts(response, speakerResponse, profilesByUserId
 				isSelf,
 				isBackground,
 				text,
+				rawTranscriptText: stringValue(row.t ?? row.text),
 				...generationText === text ? {} : { generationText },
 				...stringValue(row.p).trim() === "" ? {} : { event: stringValue(row.p).trim() },
 				sourceIndex,
@@ -89817,6 +90016,18 @@ var RecordingService = class {
 		return {
 			itemId: item.itemId,
 			itemRef: this.sealRecordingRefWithKey("arkme-recording-item-v1", payload, refKey),
+			...item.transcriptSource !== "system" ? {} : {
+				searchIdentityHash: recordingSearchIdentityHash({
+					sessionId: item.sessionId,
+					childId: item.childId,
+					itemIndex: item.asrItemIndex,
+					transcriptSource: item.transcriptSource
+				}),
+				searchVersion: recordingSearchVersion({
+					...item,
+					text: item.rawTranscriptText ?? item.text
+				})
+			},
 			transcriptSource: item.transcriptSource,
 			sessionKey: createHmac("sha256", refKey).update(`recording-session:${String(viewerUserId)}:${item.sessionId}`).digest("base64url"),
 			startAtMillis: item.startAtMillis,
@@ -90789,6 +91000,60 @@ var RelatedRecordingService = class {
 	}
 };
 //#endregion
+//#region src/recording-search-result.ts
+function invalid() {
+	throw new ArkmePluginError("recording-search-invalid", "录音搜索结果已失效，请重试", true);
+}
+function segment(raw) {
+	const value = objectValue$2(raw);
+	if (!stringValue$2(value.session_id).trim() || !stringValue$2(value.child_id).trim() || !Number.isSafeInteger(value.item_index) || Number(value.item_index) < 0 || value.transcript_source !== "system" || !stringValue$2(value.transcript_version).trim() || typeof value.text !== "string" || !Number.isSafeInteger(value.start_at) || !Number.isSafeInteger(value.end_at)) invalid();
+	const speaker = objectValue$2(value.speaker);
+	return {
+		sessionId: String(value.session_id),
+		childId: String(value.child_id),
+		itemIndex: Number(value.item_index),
+		transcriptSource: "system",
+		transcriptVersion: String(value.transcript_version),
+		startAtMillis: Number(value.start_at),
+		endAtMillis: Number(value.end_at),
+		text: String(value.text),
+		...value.speaker === void 0 ? {} : { speaker: {
+			speakerId: stringValue$2(speaker.speaker_id),
+			label: stringValue$2(speaker.label) || "未知说话人",
+			...typeof speaker.user_id === "number" && speaker.user_id > 0 ? { userId: speaker.user_id } : {},
+			...typeof speaker.color_index === "number" ? { colorIndex: speaker.color_index } : {}
+		} }
+	};
+}
+function parseRecordingSearchItem(raw) {
+	const value = objectValue$2(raw);
+	const match = segment(value.match);
+	const previous = value.previous == null ? void 0 : segment(value.previous);
+	const next = value.next == null ? void 0 : segment(value.next);
+	if (match.sessionId !== value.session_id) invalid();
+	const day = Number(value.date_stamp);
+	if ([previous, next].some((item) => item && item.sessionId !== match.sessionId && (!Number.isSafeInteger(day) || day <= 0 || item.startAtMillis < day || item.startAtMillis >= day + 864e5))) invalid();
+	if (previous && previous.startAtMillis > match.startAtMillis || next && next.startAtMillis < match.startAtMillis) invalid();
+	const ranges = Array.isArray(value.highlight_ranges) ? value.highlight_ranges : [];
+	const length = Array.from(match.text).length;
+	const highlightRanges = ranges.map(objectValue$2).map((range) => ({
+		start: Number(range.start_index),
+		length: Number(range.length)
+	})).filter((range) => Number.isSafeInteger(range.start) && Number.isSafeInteger(range.length) && range.start >= 0 && range.length > 0 && range.start + range.length <= length).sort((a, b) => a.start - b.start).filter((range, index, all) => index === 0 || range.start >= all[index - 1].start + all[index - 1].length);
+	return {
+		sessionId: match.sessionId,
+		dateStamp: Number(value.date_stamp) || 0,
+		startAtMillis: match.startAtMillis,
+		snippet: match.text,
+		score: Number(value.score) || 0,
+		match,
+		highlightRanges,
+		...stringValue$2(value.record_uid) ? { recordUid: String(value.record_uid) } : {},
+		...previous ? { previous } : {},
+		...next ? { next } : {}
+	};
+}
+//#endregion
 //#region src/dsh-search-origins.ts
 /** Resolve sync identity using the public index and exact deterministic record IDs. */
 async function resolveDshSearchOrigins(provider, items, signal) {
@@ -91115,13 +91380,15 @@ var SearchService = class {
 	media;
 	source;
 	privacy;
+	profile;
 	localDshQuery;
-	constructor(runtime, record, media, source, privacy = new ArkmePrivacyVisibilityService(runtime)) {
+	constructor(runtime, record, media, source, privacy = new ArkmePrivacyVisibilityService(runtime), profile) {
 		this.runtime = runtime;
 		this.record = record;
 		this.media = media;
 		this.source = source;
 		this.privacy = privacy;
+		this.profile = profile;
 	}
 	async searchRecords(options) {
 		const query = options.query.trim();
@@ -91483,22 +91750,37 @@ var SearchService = class {
 		const session = await this.runtime.requireSession();
 		const data = await this.runtime.authenticatedPost("/api/v1/search/recordings/query", {
 			keyword: query,
+			result_mode: "segments",
 			limit: Math.min(50, Math.max(1, Math.trunc(options.limit))),
 			...options.cursor?.trim() ? { cursor: options.cursor.trim() } : {}
 		}, session, options.signal);
+		const items = listValue$3(data.items).map(parseRecordingSearchItem);
+		const segments = items.flatMap((item) => [
+			item.previous,
+			item.match,
+			item.next
+		].filter((value) => value !== void 0));
+		const userIds = [...new Set(segments.flatMap((item) => item.speaker?.userId === void 0 ? [] : [item.speaker.userId]))];
+		if (this.profile !== void 0 && userIds.length > 0) try {
+			const profiles = await this.profile.publicProfileSummariesByUserIds(userIds, session, options.signal);
+			const avatars = /* @__PURE__ */ new Map();
+			await Promise.all([...profiles].map(async ([userId, profile]) => {
+				if (profile.avatarUrl !== void 0) avatars.set(userId, await this.profile.sealProfileImageRef(session.userId, userId));
+			}));
+			for (const segment of segments) {
+				const speaker = segment.speaker;
+				if (speaker?.userId === void 0) continue;
+				const profile = profiles.get(speaker.userId);
+				const avatarRef = avatars.get(speaker.userId);
+				if (avatarRef !== void 0) speaker.avatarRef = avatarRef;
+				if (profile && (speaker.userId === session.userId || speaker.label === "未知说话人")) speaker.label = profile.displayName.trim() || profile.nickname.trim() || speaker.label;
+			}
+		} catch (error) {
+			if (options.signal?.aborted) throw error;
+		}
 		const guard = objectValue$2(data.query_guard);
 		return {
-			items: listValue$3(data.items).map((raw) => {
-				const item = objectValue$2(raw);
-				return {
-					sessionId: stringValue$2(item.session_id).trim(),
-					...stringValue$2(item.record_uid).trim() === "" ? {} : { recordUid: stringValue$2(item.record_uid).trim() },
-					dateStamp: numberValue$2(item.date_stamp),
-					startAtMillis: numberValue$2(item.start_at),
-					snippet: clippedText(item.snippet, 1e3),
-					score: numberValue$2(item.score)
-				};
-			}).filter((item) => item.sessionId !== "" && item.snippet !== ""),
+			items,
 			hasMore: booleanValue$1(data.has_more),
 			...stringValue$2(data.next_cursor).trim() === "" ? {} : { nextCursor: stringValue$2(data.next_cursor).trim() },
 			queryGuard: {
@@ -95342,7 +95624,7 @@ var ArkmeService = class {
 			await this.realtime.invalidateRecordProjection();
 		}, async (source, text, humans, bots, session, textFormat) => await this.chat.resolveMentions(source, text, text, humans, bots, session, void 0, textFormat));
 		this.calendar = new CalendarService(this.runtime, this.privacy, this.media, this.record, this.source, this.callHistory);
-		this.search = new SearchService(this.runtime, this.record, this.media, this.source, this.privacy);
+		this.search = new SearchService(this.runtime, this.record, this.media, this.source, this.privacy, this.profile);
 		if (localDshQuery !== void 0) this.search.localDshQuery = localDshQuery;
 		this.bot = new BotService(this.runtime, this.source);
 		this.messageActions = new MessageActionService(new ArkmeMessageActionGateway(this.runtime, this.source, async (target, sequence) => {
@@ -96777,6 +97059,12 @@ var ArkmeService = class {
 	async testLogin(userId) {
 		return await this.auth.testLogin(userId);
 	}
+	async sendEmailBindCode(expectedUserId, email) {
+		return await this.auth.sendEmailBindCode(expectedUserId, email);
+	}
+	async bindEmail(expectedUserId, email, code) {
+		return await this.auth.bindEmail(expectedUserId, email, code);
+	}
 	async sendPhoneCode(phone, captcha) {
 		return await this.auth.sendPhoneCode(phone, captcha);
 	}
@@ -96792,6 +97080,15 @@ var ArkmeService = class {
 	async verifyPhoneCode(phone, code) {
 		return await this.auth.verifyPhoneCode(phone, code);
 	}
+	async previewCancellation(expectedUserId) {
+		return await this.auth.previewCancellation(expectedUserId);
+	}
+	async submitCancellation(expectedUserId, expectedMode) {
+		return await this.auth.submitCancellation(expectedUserId, expectedMode);
+	}
+	async resolveCancellationLogin(continueLogin) {
+		return await this.auth.resolveCancellationLogin(continueLogin);
+	}
 	async logout() {
 		return await this.auth.logout();
 	}