@teammy/server 0.1.4 → 0.1.5

package/dist/main.js

@@ -1440,7 +1440,7 @@ var AgentConfig = class {
       if (url.password || ["http:", "https:"].includes(url.protocol) && url.username)
         throw new HubError(400, "AGENT_CONFIG_INVALID", "\u8BF7\u5728\u51ED\u8BC1\u5B57\u6BB5\u914D\u7F6E\u5BC6\u94A5\uFF0C\u4E0D\u8981\u5199\u5165\u4ED3\u5E93\u5730\u5740\u3002");
     }
-    return transaction(this.hub.db, () => {
+    return diagnosticTransaction(this.hub, () => {
       const secrets = this.secrets(project);
       if (input.sshPrivateKey !== void 0) delete secrets.sshPublicKey;
       if (generatedPublicKey) secrets.sshPublicKey = generatedPublicKey;
@@ -1670,7 +1670,7 @@ var AgentStore = class {
     };
   }
   createChat(identity) {
-    return transaction(this.hub.db, () => {
+    return diagnosticTransaction(this.hub, () => {
       const id = randomUUID3();
       this.hub.db.prepare(
         `INSERT INTO project_agent_conversations(id,project_id,role,owner,created_at)
@@ -1705,7 +1705,7 @@ var AgentStore = class {
     ).all(conversation, after);
   }
   ask(identity, text, chatId) {
-    return transaction(this.hub.db, () => {
+    return diagnosticTransaction(this.hub, () => {
       const conversation = chatId ? this.ownedChat(identity, chatId) : this.conversation(identity.workspaceId, "instant", identity.memberId);
       const id = randomUUID3(), date = now();
       this.hub.db.prepare(
@@ -1925,7 +1925,7 @@ var AgentStore = class {
     return this.message(identity, id);
   }
   reply(identity, id, body) {
-    return transaction(this.hub.db, () => {
+    return diagnosticTransaction(this.hub, () => {
       const message = this.message(identity, id);
       const recipient = this.hub.db.prepare("SELECT * FROM project_agent_recipients WHERE message_id=? AND user_id=?").get(id, identity.memberId);
       if (recipient.reply_body === body) return { taskId: Number(recipient.reply_task_id) };
@@ -2322,12 +2322,12 @@ var ProjectWorkspace = class {
         }
       }
     const files = new FileRepository(this.hub);
-    for (const [path, hash2] of Object.entries(next)) {
+    for (const [path, hash3] of Object.entries(next)) {
       signal.throwIfAborted();
-      if (this.current[path] === hash2) continue;
+      if (this.current[path] === hash3) continue;
       const target = join6(this.workspaces, path);
       await mkdir3(dirname4(target), { recursive: true });
-      const bytes = await files.download({ workspaceId: this.project, memberId: "" }, hash2);
+      const bytes = await files.download({ workspaceId: this.project, memberId: "" }, hash3);
       const temporary = `${target}.${randomUUID5()}.tmp`;
       try {
         await writeFile2(temporary, bytes, { mode: 292 });
@@ -2960,11 +2960,11 @@ var FileRepository = class {
     const query = this.hub.db.prepare(
       "SELECT 1 FROM workspace_blobs WHERE workspace_id=? AND hash=?"
     );
-    return hashes.filter((hash2) => !query.get(identity.workspaceId, hash2));
+    return hashes.filter((hash3) => !query.get(identity.workspaceId, hash3));
   }
-  async upload(authorization, device, hash2, bytes) {
+  async upload(authorization, device, hash3, bytes) {
     this.hub.authorize(authorization, device);
-    if (createHash5("sha256").update(bytes).digest("hex") !== HashSchema.parse(hash2))
+    if (createHash5("sha256").update(bytes).digest("hex") !== HashSchema.parse(hash3))
       throw new HubError(400, "HASH_MISMATCH", "Content does not match its SHA-256.");
     const ref = await this.blobs.put(bytes);
     transaction(this.hub.db, () => {
@@ -2973,10 +2973,10 @@ var FileRepository = class {
     });
     return ref;
   }
-  async download(identity, hash2) {
-    if (this.missing(identity, [hash2]).length)
+  async download(identity, hash3) {
+    if (this.missing(identity, [hash3]).length)
       throw new HubError(404, "BLOB_NOT_FOUND", "Content is not available in this workspace.");
-    const bytes = await this.blobs.get(hash2);
+    const bytes = await this.blobs.get(hash3);
     if (!bytes) throw new HubError(500, "BLOB_MISSING", "Stored content is unavailable.");
     return bytes;
   }
@@ -3754,6 +3754,33 @@ CREATE TABLE device_connect_requests (
 CREATE INDEX device_connect_expiry ON device_connect_requests(expires_at);
 `;
 
+// apps/server/wecom/schema.ts
+var wecomMigration = `
+CREATE TABLE wecom_config(id INTEGER PRIMARY KEY CHECK(id=1),bot_id TEXT NOT NULL,secret TEXT NOT NULL,enabled INTEGER NOT NULL,revision INTEGER NOT NULL);
+CREATE TABLE wecom_bindings(
+ bot_id TEXT NOT NULL,external_id TEXT NOT NULL,user_id TEXT NOT NULL,
+ active_project TEXT NOT NULL,PRIMARY KEY(bot_id,external_id),UNIQUE(bot_id,user_id)
+);
+CREATE TABLE wecom_codes(code_hash TEXT PRIMARY KEY,bot_id TEXT NOT NULL,user_id TEXT NOT NULL,project_id TEXT NOT NULL,expires_at INTEGER NOT NULL);
+CREATE TABLE wecom_subscriptions(
+ bot_id TEXT NOT NULL,user_id TEXT NOT NULL,project_id TEXT NOT NULL,outbox_after INTEGER NOT NULL,
+ chat_id TEXT,PRIMARY KEY(bot_id,user_id,project_id)
+);
+CREATE TABLE wecom_incoming(bot_id TEXT NOT NULL,msg_id TEXT NOT NULL,created_at INTEGER NOT NULL,PRIMARY KEY(bot_id,msg_id));
+CREATE TABLE wecom_requests(
+ run_id TEXT PRIMARY KEY,bot_id TEXT NOT NULL,external_id TEXT NOT NULL,user_id TEXT NOT NULL,project_id TEXT NOT NULL
+);
+CREATE TABLE wecom_deliveries(
+ id TEXT PRIMARY KEY,bot_id TEXT NOT NULL,external_id TEXT NOT NULL,user_id TEXT,
+ project_id TEXT,kind TEXT NOT NULL,source_id TEXT NOT NULL,reference TEXT UNIQUE,body TEXT NOT NULL,
+ state TEXT NOT NULL DEFAULT 'pending',attempts INTEGER NOT NULL DEFAULT 0,due_at INTEGER NOT NULL DEFAULT 0,
+ error TEXT,created_at INTEGER NOT NULL,sent_at INTEGER,
+ UNIQUE(bot_id,external_id,kind,source_id)
+);
+CREATE INDEX wecom_pending ON wecom_deliveries(bot_id,state,due_at);
+CREATE TABLE wecom_runtime(id INTEGER PRIMARY KEY CHECK(id=1),owner TEXT NOT NULL,expires_at INTEGER NOT NULL,state TEXT NOT NULL,error TEXT);
+`;
+
 // apps/server/ai/schema.ts
 var aiConfigMigration = `
 CREATE TABLE ai_profiles (
@@ -3827,7 +3854,8 @@ var migrations = [
   instantAgentMigration,
   sandboxStatusMigration,
   agentChatsMigration,
-  clientAccessMigration
+  clientAccessMigration,
+  wecomMigration
 ];
 var HubStore = class {
   constructor(directory) {
@@ -8492,7 +8520,7 @@ function registerWeb(server, root) {
 }
 
 // apps/server/server.ts
-import { randomUUID as randomUUID12 } from "node:crypto";
+import { randomUUID as randomUUID14 } from "node:crypto";
 import Fastify from "fastify";
 
 // packages/protocol/index.ts
@@ -9004,14 +9032,14 @@ function registerFileRoutes(server, store) {
     missing: files.missing(authorize(request), BlobCheckSchema.parse(request.body).hashes)
   }));
   server.put("/blobs/:hash", { ...guard, bodyLimit: MAX_BLOB_BYTES }, async (request) => {
-    const { hash: hash2 } = z33.object({ hash: HashSchema }).parse(request.params);
+    const { hash: hash3 } = z33.object({ hash: HashSchema }).parse(request.params);
     if (!Buffer.isBuffer(request.body))
       throw Object.assign(new Error("Expected binary content"), { statusCode: 400 });
-    return files.upload(request.headers.authorization, device(request), hash2, request.body);
+    return files.upload(request.headers.authorization, device(request), hash3, request.body);
   });
   server.get("/blobs/:hash", async (request, reply) => {
-    const { hash: hash2 } = z33.object({ hash: HashSchema }).parse(request.params);
-    const bytes = await files.download(authorizeRead(store, request), hash2);
+    const { hash: hash3 } = z33.object({ hash: HashSchema }).parse(request.params);
+    const bytes = await files.download(authorizeRead(store, request), hash3);
     return reply.type("application/octet-stream").send(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength));
   });
   const upgradeRequired = () => {
@@ -9503,6 +9531,634 @@ function registerClientAccess(server, store) {
   );
 }
 
+// packages/protocol/wecom.ts
+import { z as z37 } from "zod";
+var WecomConfigInputSchema = z37.object({
+  enabled: z37.boolean(),
+  botId: z37.string().trim().min(1),
+  secret: z37.string().trim().min(1).optional()
+}).strict();
+var WecomStatusSchema = z37.object({
+  enabled: z37.boolean(),
+  botId: z37.string(),
+  secretConfigured: z37.boolean(),
+  state: z37.enum(["disabled", "connecting", "connected", "disconnected", "error"]),
+  error: z37.string().nullable(),
+  pending: z37.number()
+});
+var WecomBindingSchema = z37.object({
+  available: z37.boolean(),
+  bound: z37.boolean(),
+  subscribed: z37.boolean(),
+  activeProject: z37.string().nullable(),
+  pending: z37.number(),
+  error: z37.string().nullable()
+});
+var WecomCodeSchema = z37.object({ code: z37.string(), expiresAt: z37.number() });
+
+// apps/server/wecom/config.ts
+import { createCipheriv as createCipheriv3, createDecipheriv as createDecipheriv3, randomBytes as randomBytes6 } from "node:crypto";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join18 } from "node:path";
+var WecomConfig = class {
+  constructor(hub) {
+    this.hub = hub;
+  }
+  hub;
+  key() {
+    const path = join18(this.hub.directory, "wecom-secret.key");
+    try {
+      writeFileSync4(path, randomBytes6(32), { flag: "wx", mode: 384 });
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+    }
+    return readFileSync6(path);
+  }
+  row() {
+    return this.hub.db.prepare("SELECT * FROM wecom_config WHERE id=1").get();
+  }
+  credentials() {
+    const row = this.row();
+    if (!row?.enabled) return null;
+    const [iv, tag, body] = String(row.secret).split(".").map((v) => Buffer.from(v, "base64"));
+    const decipher = createDecipheriv3("aes-256-gcm", this.key(), iv);
+    decipher.setAAD(Buffer.from(String(row.bot_id)));
+    decipher.setAuthTag(tag);
+    return {
+      botId: String(row.bot_id),
+      secret: Buffer.concat([decipher.update(body), decipher.final()]).toString("utf8"),
+      revision: Number(row.revision)
+    };
+  }
+  save(value) {
+    const input = WecomConfigInputSchema.parse(value), old = this.row();
+    if (!input.secret && (!old || old.bot_id !== input.botId))
+      throw new HubError(400, "WECOM_SECRET_REQUIRED", "\u8BF7\u586B\u5199\u8FD9\u4E2A\u673A\u5668\u4EBA\u7684 Secret\u3002");
+    let secret = String(old?.secret ?? "");
+    if (input.secret) {
+      const iv = randomBytes6(12), cipher = createCipheriv3("aes-256-gcm", this.key(), iv);
+      cipher.setAAD(Buffer.from(input.botId));
+      const body = Buffer.concat([cipher.update(input.secret, "utf8"), cipher.final()]);
+      secret = [iv, cipher.getAuthTag(), body].map((v) => v.toString("base64")).join(".");
+    }
+    this.hub.db.prepare(
+      `INSERT INTO wecom_config VALUES(1,?,?,?,1)
+      ON CONFLICT(id) DO UPDATE SET bot_id=excluded.bot_id,secret=excluded.secret,enabled=excluded.enabled,revision=revision+1`
+    ).run(input.botId, secret, Number(input.enabled));
+    return this.status();
+  }
+  seed(env) {
+    if (!this.row() && env.WECOM_BOT_BOT_ID && env.WECOM_BOT_SECRET)
+      this.save({ enabled: true, botId: env.WECOM_BOT_BOT_ID, secret: env.WECOM_BOT_SECRET });
+  }
+  status() {
+    const row = this.row(), runtime = this.hub.db.prepare("SELECT * FROM wecom_runtime WHERE id=1").get();
+    return {
+      enabled: !!row?.enabled,
+      botId: String(row?.bot_id ?? ""),
+      secretConfigured: !!row?.secret,
+      state: !row?.enabled ? "disabled" : runtime && Number(runtime.expires_at) > Date.now() ? String(runtime.state) : "disconnected",
+      error: runtime?.error ? String(runtime.error) : null,
+      pending: Number(
+        this.hub.db.prepare("SELECT COUNT(*) n FROM wecom_deliveries WHERE bot_id=? AND state='pending'").get(String(row?.bot_id ?? "")).n
+      )
+    };
+  }
+};
+
+// apps/server/wecom/runtime.ts
+import { randomUUID as randomUUID13 } from "node:crypto";
+import {
+  WSClient
+} from "@wecom/aibot-node-sdk";
+
+// apps/server/wecom/store.ts
+import { createHash as createHash14, randomBytes as randomBytes7, randomUUID as randomUUID12 } from "node:crypto";
+import { z as z38 } from "zod";
+var hash2 = (text) => createHash14("sha256").update(text).digest("hex");
+var referencePattern = /\bTM-([A-F0-9]{12})\b/i;
+var incomingSchema = z38.object({
+  msgid: z38.string().min(1),
+  aibotid: z38.string(),
+  chattype: z38.string(),
+  from: z38.object({ userid: z38.string().min(1) }),
+  msgtype: z38.string(),
+  text: z38.object({ content: z38.string() }).optional(),
+  quote: z38.object({ text: z38.object({ content: z38.string() }).optional() }).passthrough().optional(),
+  compat_info: z38.unknown().optional()
+}).passthrough();
+var replyHint = "\u56DE\u5E94\u300C\u63D0\u767E\u4E8B\u300D\u7684\u95EE\u9898\u3002\u6CE8\u610F\uFF1A\u53EA\u80FD\u53D1\u9001\u4E00\u6761\u6D88\u606F\uFF0C\u300C\u63D0\u767E\u4E8B\u300D\u6536\u5230\u540E\u4F1A\u7EE7\u7EED\u5DE5\u4F5C\u3002\u5982\u679C\u6709\u65B0\u7684\u95EE\u9898\uFF0C\u300C\u63D0\u767E\u4E8B\u300D\u4F1A\u7EE7\u7EED\u53D1\u6D88\u606F\u6765\u95EE\u4F60\u3002";
+var WecomStore = class {
+  constructor(hub) {
+    this.hub = hub;
+    this.agents = new AgentStore(hub);
+  }
+  hub;
+  agents;
+  bot() {
+    const config = new WecomConfig(this.hub).row();
+    if (!config?.enabled) throw new HubError(400, "WECOM_DISABLED", "\u4F01\u4E1A\u5FAE\u4FE1\u63A5\u5165\u5C1A\u672A\u542F\u7528\u3002");
+    return String(config.bot_id);
+  }
+  requireMember(identity) {
+    if (!this.hub.db.prepare(
+      `SELECT 1 FROM members m JOIN users u ON u.id=m.member_id
+      WHERE m.workspace_id=? AND m.member_id=? AND m.enabled=1 AND u.enabled=1`
+    ).get(identity.workspaceId, identity.memberId))
+      throw new HubError(
+        403,
+        "WECOM_MEMBER_REQUIRED",
+        "\u5F53\u524D\u8D26\u53F7\u5DF2\u505C\u7528\u6216\u5DF2\u79BB\u5F00\u9879\u76EE\uFF0C\u8BF7\u5728\u7F51\u9875\u68C0\u67E5\u3002"
+      );
+  }
+  binding(identity) {
+    this.requireMember(identity);
+    const config = new WecomConfig(this.hub).row(), bot = String(config?.bot_id ?? "");
+    const bound = this.hub.db.prepare("SELECT * FROM wecom_bindings WHERE bot_id=? AND user_id=?").get(bot, identity.memberId);
+    const subscribed = this.hub.db.prepare("SELECT 1 FROM wecom_subscriptions WHERE bot_id=? AND user_id=? AND project_id=?").get(bot, identity.memberId, identity.workspaceId);
+    const pending = Number(
+      this.hub.db.prepare(
+        "SELECT COUNT(*) n FROM wecom_deliveries WHERE bot_id=? AND user_id=? AND project_id=? AND state='pending'"
+      ).get(bot, identity.memberId, identity.workspaceId).n
+    );
+    const error = this.hub.db.prepare(
+      "SELECT error FROM wecom_deliveries WHERE bot_id=? AND user_id=? AND project_id=? AND state='pending' AND error IS NOT NULL ORDER BY rowid DESC LIMIT 1"
+    ).get(bot, identity.memberId, identity.workspaceId)?.error;
+    return {
+      available: !!config?.enabled,
+      bound: !!bound,
+      subscribed: !!subscribed,
+      activeProject: bound ? String(bound.active_project) : null,
+      pending,
+      error: error ? String(error) : null
+    };
+  }
+  code(identity) {
+    this.requireMember(identity);
+    const bot = this.bot(), code = randomBytes7(6).toString("hex").toUpperCase(), expiresAt = Date.now() + 10 * 6e4;
+    transaction(this.hub.db, () => {
+      this.hub.db.prepare(
+        "DELETE FROM wecom_codes WHERE expires_at<? OR (bot_id=? AND user_id=? AND project_id=?)"
+      ).run(Date.now(), bot, identity.memberId, identity.workspaceId);
+      this.hub.db.prepare("INSERT INTO wecom_codes VALUES(?,?,?,?,?)").run(hash2(code), bot, identity.memberId, identity.workspaceId, expiresAt);
+    });
+    return { code, expiresAt };
+  }
+  unsubscribe(identity) {
+    const bot = this.bot();
+    this.requireMember(identity);
+    transaction(this.hub.db, () => {
+      this.hub.db.prepare("DELETE FROM wecom_subscriptions WHERE bot_id=? AND user_id=? AND project_id=?").run(bot, identity.memberId, identity.workspaceId);
+      this.hub.db.prepare("DELETE FROM wecom_codes WHERE bot_id=? AND user_id=? AND project_id=?").run(bot, identity.memberId, identity.workspaceId);
+      this.hub.db.prepare(
+        "UPDATE wecom_deliveries SET state='cancelled' WHERE bot_id=? AND user_id=? AND project_id=? AND state='pending'"
+      ).run(bot, identity.memberId, identity.workspaceId);
+      if (!this.hub.db.prepare("SELECT 1 FROM wecom_subscriptions WHERE bot_id=? AND user_id=?").get(bot, identity.memberId))
+        this.hub.db.prepare("DELETE FROM wecom_bindings WHERE bot_id=? AND user_id=?").run(bot, identity.memberId);
+    });
+    return this.binding(identity);
+  }
+  projectName(id) {
+    const row = this.hub.db.prepare("SELECT config_json FROM projects WHERE id=?").get(id);
+    return row ? String(JSON.parse(String(row.config_json)).projectName) : id;
+  }
+  queue(bot, external, kind, source, body, identity, reference) {
+    this.hub.db.prepare(
+      `INSERT OR IGNORE INTO wecom_deliveries
+      (id,bot_id,external_id,user_id,project_id,kind,source_id,reference,body,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`
+    ).run(
+      randomUUID12(),
+      bot,
+      external,
+      identity?.memberId ?? null,
+      identity?.workspaceId ?? null,
+      kind,
+      source,
+      reference ?? null,
+      body,
+      Date.now()
+    );
+  }
+  subscribe(bot, external, code) {
+    const row = this.hub.db.prepare("SELECT * FROM wecom_codes WHERE code_hash=? AND bot_id=? AND expires_at>?").get(hash2(code.toUpperCase()), bot, Date.now());
+    if (!row)
+      throw new HubError(400, "WECOM_CODE_INVALID", "\u7ED1\u5B9A\u7801\u65E0\u6548\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u5728\u9879\u76EE\u8BBE\u7F6E\u4E2D\u91CD\u65B0\u751F\u6210\u3002");
+    const identity = { memberId: String(row.user_id), workspaceId: String(row.project_id) };
+    this.requireMember(identity);
+    const other = this.hub.db.prepare("SELECT * FROM wecom_bindings WHERE bot_id=? AND (external_id=? OR user_id=?)").all(bot, external, identity.memberId);
+    if (other.some((r) => r.external_id !== external || r.user_id !== identity.memberId))
+      throw new HubError(
+        409,
+        "WECOM_ALREADY_BOUND",
+        "\u8D26\u53F7\u5DF2\u7ED1\u5B9A\u5176\u4ED6\u8EAB\u4EFD\uFF0C\u8BF7\u5148\u5728\u539F\u8D26\u53F7\u7684\u9879\u76EE\u8BBE\u7F6E\u4E2D\u89E3\u9664\u7ED1\u5B9A\u3002"
+      );
+    this.hub.db.prepare(
+      `INSERT INTO wecom_bindings VALUES(?,?,?,?) ON CONFLICT(bot_id,external_id) DO UPDATE SET active_project=excluded.active_project`
+    ).run(bot, external, identity.memberId, identity.workspaceId);
+    const after = Number(
+      this.hub.db.prepare("SELECT COALESCE(MAX(rowid),0) n FROM project_agent_outbox").get().n
+    );
+    this.hub.db.prepare("INSERT OR IGNORE INTO wecom_subscriptions VALUES(?,?,?,?,NULL)").run(bot, identity.memberId, identity.workspaceId, after);
+    this.hub.db.prepare("DELETE FROM wecom_codes WHERE code_hash=?").run(hash2(code.toUpperCase()));
+    return identity;
+  }
+  /** Deduplication, business writes and acknowledgement queue commit together. */
+  receive(value) {
+    const parsed = incomingSchema.safeParse(value);
+    if (!parsed.success) return;
+    const msg = parsed.data, bot = this.bot();
+    if (msg.aibotid !== bot || msg.chattype !== "single" || msg.compat_info) return;
+    return transaction(this.hub.db, () => {
+      const inserted = this.hub.db.prepare("INSERT OR IGNORE INTO wecom_incoming VALUES(?,?,?)").run(bot, msg.msgid, Date.now());
+      if (!inserted.changes) return;
+      const notice = (body) => this.queue(bot, msg.from.userid, "notice", msg.msgid, body);
+      try {
+        if (msg.msgtype !== "text" || !msg.text?.content.trim()) {
+          notice("\u76EE\u524D\u652F\u6301\u6587\u5B57\u6D88\u606F\uFF0C\u8BF7\u76F4\u63A5\u53D1\u9001\u6587\u5B57\u3002");
+          return;
+        }
+        const text = msg.text.content.trim();
+        const bind = text.match(/^绑定\s+([a-f0-9]{12})$/i);
+        if (bind) {
+          const identity2 = this.subscribe(bot, msg.from.userid, bind[1]);
+          notice(
+            `\u5DF2\u7ED1\u5B9A ${identity2.memberId}\uFF0C\u5F53\u524D\u9879\u76EE\uFF1A${this.projectName(identity2.workspaceId)}\u3002
+
+\u53EF\u4EE5\u76F4\u63A5\u63D0\u95EE\uFF0C\u6216\u53D1\u9001\u201C\u65B0\u5EFA\u5BF9\u8BDD\u201D\u3002\u6536\u5230\u901A\u77E5\u540E\uFF0C\u8BF7\u5F15\u7528\u5BF9\u5E94\u6D88\u606F\u56DE\u590D\u3002`
+          );
+          return;
+        }
+        const binding = this.hub.db.prepare("SELECT * FROM wecom_bindings WHERE bot_id=? AND external_id=?").get(bot, msg.from.userid);
+        if (!binding) {
+          notice("\u8BF7\u5148\u767B\u5F55 Teammy\uFF0C\u5728\u9879\u76EE\u8BBE\u7F6E \u2192 \u4F01\u4E1A\u5FAE\u4FE1\u4E2D\u83B7\u53D6\u7ED1\u5B9A\u7801\uFF0C\u53D1\u9001\u201C\u7ED1\u5B9A \u7ED1\u5B9A\u7801\u201D\u3002");
+          return;
+        }
+        const user = String(binding.user_id);
+        if (text === "\u5E2E\u52A9" || text === "\u9879\u76EE") {
+          const projects = this.hub.db.prepare(
+            `SELECT s.project_id FROM wecom_subscriptions s JOIN members m ON m.workspace_id=s.project_id AND m.member_id=s.user_id JOIN users u ON u.id=s.user_id WHERE s.bot_id=? AND s.user_id=? AND m.enabled=1 AND u.enabled=1`
+          ).all(bot, user);
+          notice(
+            `\u5DF2\u8FDE\u63A5\u9879\u76EE\uFF1A
+${projects.map((p) => `${this.projectName(String(p.project_id))}\uFF08${p.project_id}\uFF09`).join("\n")}
+
+\u76F4\u63A5\u53D1\u9001\u6587\u5B57\u63D0\u95EE\uFF1B\u53D1\u9001\u201C\u65B0\u5EFA\u5BF9\u8BDD\u201D\u5F00\u59CB\u65B0\u8BDD\u9898\uFF1B\u53D1\u9001\u201C\u5207\u6362\u9879\u76EE \u9879\u76EE\u540D\u79F0\u201D\u5207\u6362\uFF1B\u5F15\u7528\u901A\u77E5\u56DE\u590D\u8BE5\u6761\u6D88\u606F\u3002`
+          );
+          return;
+        }
+        const change = text.match(/^切换项目\s+(.+)$/);
+        if (change) {
+          const projects = this.hub.db.prepare("SELECT project_id FROM wecom_subscriptions WHERE bot_id=? AND user_id=?").all(bot, user).map((r) => String(r.project_id)).filter((id) => id === change[1] || this.projectName(id) === change[1]);
+          if (projects.length !== 1) {
+            notice("\u9879\u76EE\u4E0D\u5B58\u5728\u6216\u540D\u79F0\u91CD\u590D\uFF0C\u8BF7\u53D1\u9001\u201C\u9879\u76EE\u201D\u67E5\u770B\u5DF2\u8FDE\u63A5\u9879\u76EE\uFF0C\u5E76\u4F7F\u7528\u5B8C\u6574\u9879\u76EE ID \u5207\u6362\u3002");
+            return;
+          }
+          this.requireMember({ memberId: user, workspaceId: projects[0] });
+          this.hub.db.prepare("UPDATE wecom_bindings SET active_project=? WHERE bot_id=? AND external_id=?").run(projects[0], bot, msg.from.userid);
+          notice(`\u5DF2\u5207\u6362\u5230 ${this.projectName(projects[0])}\u3002`);
+          return;
+        }
+        const explicit = text.match(/^回复\s+(TM-[A-F0-9]{12})\s+([\s\S]+)$/i);
+        const ref = explicit?.[1] ?? msg.quote?.text?.content.match(referencePattern)?.[0];
+        if (ref) {
+          const delivery = this.hub.db.prepare(
+            "SELECT * FROM wecom_deliveries WHERE bot_id=? AND external_id=? AND user_id=? AND reference=? AND kind='outbox'"
+          ).get(bot, msg.from.userid, user, ref.toUpperCase());
+          if (!delivery) {
+            notice("\u6CA1\u6709\u627E\u5230\u4F60\u53EF\u56DE\u590D\u7684\u8FD9\u6761\u901A\u77E5\uFF0C\u8BF7\u5728\u7F51\u9875\u6253\u5F00\u539F\u6D88\u606F\u3002");
+            return;
+          }
+          const identity2 = { memberId: user, workspaceId: String(delivery.project_id) };
+          this.requireMember(identity2);
+          if (!this.hub.db.prepare(
+            "SELECT 1 FROM wecom_subscriptions WHERE bot_id=? AND user_id=? AND project_id=?"
+          ).get(bot, user, identity2.workspaceId)) {
+            notice("\u6B64\u9879\u76EE\u5DF2\u89E3\u9664\u4F01\u4E1A\u5FAE\u4FE1\u8FDE\u63A5\uFF0C\u8BF7\u5728\u7F51\u9875\u56DE\u590D\u539F\u6D88\u606F\u3002");
+            return;
+          }
+          this.agents.reply(identity2, String(delivery.source_id), explicit?.[2] ?? text);
+          notice("\u56DE\u590D\u5DF2\u4FDD\u5B58\uFF0C\u7F51\u9875\u6D88\u606F\u5DF2\u540C\u6B65\u3002\u300C\u63D0\u767E\u4E8B\u300D\u4F1A\u7EE7\u7EED\u5904\u7406\u3002");
+          return;
+        }
+        const identity = { memberId: user, workspaceId: String(binding.active_project) };
+        this.requireMember(identity);
+        const subscription = this.hub.db.prepare(
+          "SELECT * FROM wecom_subscriptions WHERE bot_id=? AND user_id=? AND project_id=?"
+        ).get(bot, user, identity.workspaceId);
+        if (!subscription) {
+          notice("\u8BF7\u5148\u5728\u9879\u76EE\u8BBE\u7F6E\u4E2D\u8FDE\u63A5\u4F01\u4E1A\u5FAE\u4FE1\uFF0C\u6216\u53D1\u9001\u201C\u9879\u76EE\u201D\u9009\u62E9\u5176\u4ED6\u5DF2\u8FDE\u63A5\u9879\u76EE\u3002");
+          return;
+        }
+        let chat = subscription.chat_id ? String(subscription.chat_id) : null;
+        if (text === "\u65B0\u5EFA\u5BF9\u8BDD" || !chat) {
+          chat = this.agents.createChat(identity).id;
+          this.hub.db.prepare(
+            "UPDATE wecom_subscriptions SET chat_id=? WHERE bot_id=? AND user_id=? AND project_id=?"
+          ).run(chat, bot, user, identity.workspaceId);
+          if (text === "\u65B0\u5EFA\u5BF9\u8BDD") {
+            notice(`\u5DF2\u5728 ${this.projectName(identity.workspaceId)} \u65B0\u5EFA\u5BF9\u8BDD\uFF0C\u8BF7\u53D1\u9001\u4F60\u7684\u95EE\u9898\u3002`);
+            return;
+          }
+        }
+        new AiDefaults(this.hub).resolve(identity.workspaceId);
+        new AgentConfig(this.hub).initialize(identity.workspaceId);
+        const question = msg.quote?.text?.content ? `\u5F15\u7528\u5185\u5BB9\uFF1A
+${msg.quote.text.content}
+
+${text}` : text;
+        const run = this.agents.ask(identity, question, chat);
+        this.hub.db.prepare("INSERT INTO wecom_requests VALUES(?,?,?,?,?)").run(run.id, bot, msg.from.userid, user, identity.workspaceId);
+        notice("\u5DF2\u6536\u5230\uFF0C\u6B63\u5728\u67E5\u770B\u3002\u56DE\u7B54\u4E5F\u4F1A\u4FDD\u5B58\u5728\u7F51\u9875\u5BF9\u8BDD\u4E2D\u3002");
+      } catch (error) {
+        if (!(error instanceof HubError)) throw error;
+        notice(
+          error.code === "OUTBOX_ARCHIVED" ? "\u8FD9\u6761\u6D88\u606F\u5DF2\u7ECF\u56DE\u590D\u6216\u5F52\u6863\uFF0C\u65E0\u9700\u518D\u6B21\u63D0\u4EA4\u3002" : error.message
+        );
+      }
+    });
+  }
+  url(project, query) {
+    return new SiteRepository(this.hub).config().publicServerUrl.replace(/\/+$/, "") + `/projects/${encodeURIComponent(project)}/assistant?${query}`;
+  }
+  render(project, body, query, reference) {
+    const base = new SiteRepository(this.hub).config().publicServerUrl.replace(/\/+$/, "");
+    body = body.replace(/\]\((\/(?!\/)[^\s)]*)\)/g, (_all, path) => `](${base}${path})`);
+    let shortened = "";
+    let bytes = 0;
+    for (const char of body) {
+      bytes += Buffer.byteLength(char);
+      if (bytes > 17e3) break;
+      shortened += char;
+    }
+    if (shortened !== body) shortened += "\n\n\u2026\u2026\u5B8C\u6574\u5185\u5BB9\u8BF7\u5728\u7F51\u9875\u67E5\u770B\u3002";
+    return `**${this.projectName(project)} \xB7 \u63D0\u767E\u4E8B${reference ? " \xB7 " + reference : ""}**
+
+${shortened}
+
+[\u5728\u7F51\u9875\u67E5\u770B](${this.url(project, query)})${reference ? "\n\n\u8BF7\u5F15\u7528\u672C\u6761\u6D88\u606F\u56DE\u590D\u3002\n" + replyHint : ""}`;
+  }
+  collect() {
+    const bot = this.bot();
+    transaction(this.hub.db, () => {
+      const rows = this.hub.db.prepare(
+        `SELECT o.*,b.external_id,s.user_id FROM project_agent_outbox o
+        JOIN wecom_subscriptions s ON s.project_id=o.project_id AND o.rowid>s.outbox_after
+        JOIN wecom_bindings b ON b.bot_id=s.bot_id AND b.user_id=s.user_id
+        JOIN project_agent_recipients r ON r.message_id=o.id AND r.user_id=s.user_id
+        WHERE s.bot_id=? AND r.archived_at IS NULL AND NOT EXISTS(SELECT 1 FROM wecom_deliveries d WHERE d.bot_id=s.bot_id AND d.external_id=b.external_id AND d.kind='outbox' AND d.source_id=o.id)`
+      ).all(bot);
+      for (const row of rows) {
+        const identity = { memberId: String(row.user_id), workspaceId: String(row.project_id) };
+        try {
+          this.requireMember(identity);
+        } catch {
+          continue;
+        }
+        const ref = "TM-" + randomBytes7(6).toString("hex").toUpperCase();
+        this.queue(
+          bot,
+          String(row.external_id),
+          "outbox",
+          String(row.id),
+          this.render(identity.workspaceId, String(row.body), `message=${row.id}`, ref),
+          identity,
+          ref
+        );
+      }
+      const answers = this.hub.db.prepare(
+        `SELECT r.*,w.external_id,w.user_id,w.project_id FROM wecom_requests w
+        JOIN project_agent_runs r ON r.id=w.run_id WHERE w.bot_id=? AND r.state IN ('succeeded','failed')
+        AND NOT EXISTS(SELECT 1 FROM wecom_deliveries d WHERE d.bot_id=w.bot_id AND d.external_id=w.external_id AND d.kind='answer' AND d.source_id=r.id)`
+      ).all(bot);
+      for (const row of answers) {
+        const body = String(
+          row.answer || (row.state === "failed" ? "\u672C\u6B21\u5904\u7406\u672A\u5B8C\u6210\uFF0C\u8BF7\u5728\u7F51\u9875\u67E5\u770B\u8FD0\u884C\u60C5\u51B5\u3002" : "\u672C\u8F6E\u5904\u7406\u5DF2\u5B8C\u6210\u3002")
+        );
+        this.queue(
+          bot,
+          String(row.external_id),
+          "answer",
+          String(row.id),
+          this.render(String(row.project_id), body, `chat=${row.conversation_id}`),
+          { memberId: String(row.user_id), workspaceId: String(row.project_id) }
+        );
+      }
+    });
+  }
+  valid(delivery) {
+    if (!delivery.user_id) return true;
+    const bound = this.hub.db.prepare("SELECT 1 FROM wecom_bindings WHERE bot_id=? AND external_id=? AND user_id=?").get(delivery.bot_id, delivery.external_id, delivery.user_id);
+    const subscribed = this.hub.db.prepare("SELECT 1 FROM wecom_subscriptions WHERE bot_id=? AND user_id=? AND project_id=?").get(delivery.bot_id, delivery.user_id, delivery.project_id);
+    if (!bound || !subscribed) return false;
+    try {
+      this.requireMember({ memberId: delivery.user_id, workspaceId: delivery.project_id });
+    } catch {
+      return false;
+    }
+    if (delivery.kind === "outbox")
+      return !!this.hub.db.prepare(
+        "SELECT 1 FROM project_agent_recipients WHERE message_id=? AND user_id=? AND archived_at IS NULL"
+      ).get(delivery.source_id, delivery.user_id);
+    return true;
+  }
+};
+
+// apps/server/wecom/runtime.ts
+var quiet = { debug() {
+}, info() {
+}, warn() {
+}, error() {
+} };
+var WecomRuntime = class {
+  constructor(hub, factory = (options) => new WSClient(options)) {
+    this.hub = hub;
+    this.factory = factory;
+    this.store = new WecomStore(hub);
+  }
+  hub;
+  factory;
+  owner = randomUUID13();
+  store;
+  client;
+  revision = 0;
+  connected = false;
+  stopped = false;
+  timer;
+  running;
+  start() {
+    this.timer = setInterval(() => void this.tick(), 1e3);
+    this.timer.unref();
+    void this.tick();
+  }
+  status(state, error = null) {
+    if (this.stopped) return;
+    this.hub.db.prepare("UPDATE wecom_runtime SET state=?,error=? WHERE id=1 AND owner=?").run(state, error, this.owner);
+  }
+  own() {
+    return !!this.hub.db.prepare(
+      `INSERT INTO wecom_runtime VALUES(1,?,?,'connecting',NULL)
+      ON CONFLICT(id) DO UPDATE SET owner=excluded.owner,expires_at=excluded.expires_at
+      WHERE owner=excluded.owner OR expires_at<? RETURNING owner`
+    ).get(this.owner, Date.now() + 3e4, Date.now());
+  }
+  tick() {
+    if (this.stopped) return Promise.resolve();
+    if (this.running) return this.running;
+    this.running = this.work().catch(() => this.status("error", "\u4F01\u4E1A\u5FAE\u4FE1\u63A5\u5165\u5904\u7406\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u914D\u7F6E\u548C\u670D\u52A1\u72B6\u6001\u3002")).finally(() => {
+      this.running = void 0;
+    });
+    return this.running;
+  }
+  async work() {
+    const config = new WecomConfig(this.hub), row = config.row();
+    if (!row?.enabled) {
+      this.client?.disconnect();
+      this.client = void 0;
+      this.connected = false;
+      this.revision = 0;
+      this.hub.db.prepare("DELETE FROM wecom_runtime WHERE owner=?").run(this.owner);
+      return;
+    }
+    if (!this.own()) {
+      this.client?.disconnect();
+      this.client = void 0;
+      this.connected = false;
+      this.revision = 0;
+      return;
+    }
+    if (!this.client || Number(row.revision) !== this.revision) {
+      this.client?.disconnect();
+      this.connected = false;
+      this.revision = Number(row.revision);
+      const credentials = config.credentials();
+      const client = this.factory({
+        botId: credentials.botId,
+        secret: credentials.secret,
+        logger: quiet,
+        maxReconnectAttempts: -1
+      });
+      this.client = client;
+      this.status("connecting");
+      let displaced = false;
+      client.on("authenticated", () => {
+        if (this.client === client && !this.stopped) {
+          displaced = false;
+          this.connected = true;
+          this.status("connected");
+        }
+      });
+      client.on("disconnected", () => {
+        if (this.client === client && !this.stopped) {
+          this.connected = false;
+          if (!displaced) this.status("disconnected", "\u8FDE\u63A5\u4E2D\u65AD\uFF0C\u6B63\u5728\u7B49\u5F85\u91CD\u65B0\u8FDE\u63A5\u3002");
+        }
+      });
+      client.on("event.disconnected_event", () => {
+        if (this.client === client) {
+          displaced = true;
+          this.connected = false;
+          this.status("error", "\u673A\u5668\u4EBA\u5DF2\u88AB\u5176\u4ED6\u670D\u52A1\u8FDE\u63A5\uFF0C\u8BF7\u505C\u7528\u91CD\u590D\u8FDE\u63A5\u540E\u91CD\u65B0\u4FDD\u5B58\u914D\u7F6E\u3002");
+        }
+      });
+      client.on("error", () => {
+        if (this.client === client)
+          this.status("error", "\u4F01\u4E1A\u5FAE\u4FE1\u8FDE\u63A5\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5 Bot ID\u3001Secret \u548C\u7F51\u7EDC\u3002");
+      });
+      client.on("message", (frame) => {
+        if (this.stopped || this.client !== client) return;
+        try {
+          this.store.receive(frame.body);
+        } catch {
+          this.status("error", "\u6536\u5230\u7684\u6D88\u606F\u6682\u672A\u5904\u7406\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u72B6\u6001\u540E\u91CD\u53D1\u3002");
+        }
+      });
+      client.connect();
+    }
+    if (!this.connected) return;
+    this.store.collect();
+    const deliveries = this.hub.db.prepare(
+      `SELECT * FROM wecom_deliveries WHERE bot_id=? AND state='pending' AND due_at<=? ORDER BY rowid`
+    ).all(String(row.bot_id), Date.now());
+    const targets = /* @__PURE__ */ new Set(), jobs = [];
+    for (const delivery of deliveries) {
+      if (!this.store.valid(delivery)) {
+        this.hub.db.prepare("UPDATE wecom_deliveries SET state='cancelled' WHERE id=?").run(delivery.id);
+        continue;
+      }
+      if (targets.has(delivery.external_id)) continue;
+      targets.add(delivery.external_id);
+      const recent = this.hub.db.prepare(
+        `SELECT COUNT(*) n,MAX(sent_at) last FROM wecom_deliveries
+        WHERE bot_id=? AND external_id=? AND sent_at>?`
+      ).get(delivery.bot_id, delivery.external_id, Date.now() - 36e5);
+      if (Number(recent.n) >= 1e3 || Number(recent.last) > Date.now() - 2100) continue;
+      jobs.push(this.send(delivery));
+    }
+    await Promise.all(jobs);
+  }
+  async send(delivery) {
+    const client = this.client;
+    try {
+      const result = await client.reply(
+        { headers: { req_id: delivery.id } },
+        {
+          chatid: delivery.external_id,
+          chat_type: 1,
+          msgtype: "markdown",
+          markdown: { content: delivery.body }
+        },
+        "aibot_send_msg"
+      );
+      if (result.errcode !== 0) throw new Error("Delivery rejected");
+      this.hub.db.prepare(
+        "UPDATE wecom_deliveries SET state='sent',sent_at=?,error=NULL WHERE id=? AND state='pending'"
+      ).run(Date.now(), delivery.id);
+    } catch {
+      if (this.stopped || this.client !== client) return;
+      const delay4 = Math.min(30 * 6e4, 5e3 * 2 ** Math.min(delivery.attempts, 9)) * (0.75 + Math.random() * 0.5);
+      this.hub.db.prepare(
+        `UPDATE wecom_deliveries SET attempts=attempts+1,due_at=?,error=? WHERE id=? AND state='pending'`
+      ).run(Date.now() + Math.round(delay4), "\u4F01\u4E1A\u5FAE\u4FE1\u6295\u9012\u6682\u672A\u6210\u529F\uFF0C\u5C06\u81EA\u52A8\u91CD\u8BD5\u3002", delivery.id);
+    }
+  }
+  async stop() {
+    this.stopped = true;
+    if (this.timer) clearInterval(this.timer);
+    this.client?.disconnect();
+    await this.running;
+    this.hub.db.prepare("DELETE FROM wecom_runtime WHERE owner=?").run(this.owner);
+  }
+};
+
+// apps/server/wecom/routes.ts
+function registerWecom(server, hub, env, factory) {
+  const config = new WecomConfig(hub), store = new WecomStore(hub), runtime = new WecomRuntime(hub, factory);
+  config.seed(env);
+  server.addHook("onReady", async () => runtime.start());
+  server.addHook("preClose", async () => runtime.stop());
+  server.get("/api/v1/site/wecom", async (req) => {
+    requireSiteAdmin(new SiteRepository(hub).identity(cookieToken(req)));
+    return config.status();
+  });
+  server.put("/api/v1/site/wecom", async (req) => {
+    webMutation(req);
+    requireSiteAdmin(new SiteRepository(hub).identity(cookieToken(req)));
+    config.save(WecomConfigInputSchema.parse(req.body));
+    void runtime.tick();
+    return config.status();
+  });
+  const base = "/api/v1/projects/:projectId/wecom";
+  server.get(base, async (req) => store.binding(authorizeWeb(hub, req)));
+  server.post(`${base}/code`, async (req) => {
+    webMutation(req);
+    return store.code(authorizeWeb(hub, req));
+  });
+  server.delete(base, async (req) => {
+    webMutation(req);
+    return store.unsubscribe(authorizeWeb(hub, req));
+  });
+}
+
 // apps/server/server.ts
 function buildServer(options) {
   const store = options.dataDir ? new HubStore(options.dataDir) : void 0;
@@ -9524,7 +10180,7 @@ function buildServer(options) {
       ]
     } : false,
     requestIdHeader: false,
-    genReqId: () => randomUUID12(),
+    genReqId: () => randomUUID14(),
     bodyLimit: 1024 * 1024,
     requestTimeout: BLOB_TRANSFER_TIMEOUT_MS
   });
@@ -9615,6 +10271,7 @@ function buildServer(options) {
   if (store) {
     registerSiteRoutes(server, store);
     registerClientAccess(server, store);
+    registerWecom(server, store, options.wecomEnv ?? {}, options.wecomFactory);
     registerBootstrapRoutes(server, store);
     registerProjectRoutes(server, store);
     registerAiRoutes(server, store);
@@ -9644,7 +10301,7 @@ function buildServer(options) {
 
 // apps/server/main.ts
 import { homedir } from "node:os";
-import { join as join18, resolve as resolve4 } from "node:path";
+import { join as join19, resolve as resolve4 } from "node:path";
 import { spawn as spawn4 } from "node:child_process";
 var help = `teammy-server \u2014 the Teammy collaboration hub
 
@@ -9682,7 +10339,7 @@ async function runServerCli(args, version2) {
         options: {
           "data-dir": {
             type: "string",
-            default: process.env.TEAMMY_DATA_DIR ?? join18(homedir(), ".teammy", "server")
+            default: process.env.TEAMMY_DATA_DIR ?? join19(homedir(), ".teammy", "server")
           },
           once: { type: "boolean" }
         }
@@ -9701,7 +10358,7 @@ async function runServerCli(args, version2) {
           member: { type: "string" },
           "data-dir": {
             type: "string",
-            default: process.env.TEAMMY_DATA_DIR ?? join18(homedir(), ".teammy", "server")
+            default: process.env.TEAMMY_DATA_DIR ?? join19(homedir(), ".teammy", "server")
           }
         }
       });
@@ -9729,7 +10386,7 @@ async function runServerCli(args, version2) {
         port: { type: "string", default: process.env.TEAMMY_PORT ?? "4317" },
         "data-dir": {
           type: "string",
-          default: process.env.TEAMMY_DATA_DIR ?? join18(homedir(), ".teammy", "server")
+          default: process.env.TEAMMY_DATA_DIR ?? join19(homedir(), ".teammy", "server")
         },
         "with-worker": { type: "boolean", default: false }
       }
@@ -9751,6 +10408,7 @@ async function runServerCli(args, version2) {
     const server = buildServer({
       version: version2,
       logger: true,
+      wecomEnv: process.env,
       dataDir: resolve4(values["data-dir"]),
       webDir: fileURLToPath5(new URL("./web/", import.meta.url))
     });