@xmanrui/dsh-im 0.1.0

package/src/channels/wecom/wecom-controller.mjs

@@ -0,0 +1,474 @@
+import { randomUUID } from 'node:crypto';
+
+import { deriveWecomBotIdentity, maskWecomBotId } from './config-store.mjs';
+
+const ACTIVE_ATTEMPT_STATES = new Set(['pending', 'connecting']);
+const TERMINAL_ATTEMPT_STATES = new Set(['connected', 'failed', 'cancelled', 'expired']);
+
+function cleanString(value) {
+  return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+
+function safeError(code, message) {
+  return Object.freeze({ code, message });
+}
+
+function publicAttempt(record) {
+  if (!record) return null;
+  return {
+    attemptId: record.id,
+    status: record.state,
+    pollIntervalMs: record.pollIntervalMs,
+    qrRevision: record.qrRevision,
+    ...(record.verificationUrl ? { verificationUrl: record.verificationUrl } : {}),
+    ...(record.expiresAt ? { expiresAt: record.expiresAt } : {}),
+    ...(record.botId ? { botId: record.botId } : {}),
+    ...(record.error ? { error: structuredClone(record.error) } : {}),
+  };
+}
+
+export class WecomController {
+  #qrAuth;
+  #credentials;
+  #configStore;
+  #createRuntime;
+  #deleteState;
+  #logger;
+  #runtimes = new Map();
+  #errors = new Map();
+  #attempts = new Map();
+  #activeAttemptId = null;
+  #transitions = new Map();
+  #revision = 0;
+  #closed = false;
+
+  constructor({
+    qrAuth,
+    credentials,
+    configStore,
+    createRuntime,
+    deleteState = async () => {},
+    logger = console,
+  }) {
+    if (!qrAuth || typeof qrAuth.start !== 'function' || typeof qrAuth.poll !== 'function') {
+      throw new TypeError('Enterprise WeChat QR auth is required');
+    }
+    if (!credentials || typeof credentials.resolve !== 'function'
+      || typeof credentials.set !== 'function' || typeof credentials.unset !== 'function') {
+      throw new TypeError('WecomController requires the DSH credential provider');
+    }
+    if (!configStore || typeof configStore.list !== 'function'
+      || typeof configStore.save !== 'function' || typeof configStore.remove !== 'function') {
+      throw new TypeError('WecomController requires a config store');
+    }
+    if (typeof createRuntime !== 'function') throw new TypeError('createRuntime is required');
+    this.#qrAuth = qrAuth;
+    this.#credentials = credentials;
+    this.#configStore = configStore;
+    this.#createRuntime = createRuntime;
+    this.#deleteState = deleteState;
+    this.#logger = logger;
+  }
+
+  async initialize() {
+    if (this.#closed) return this.status();
+    for (const config of this.#configStore.list()) {
+      await this.#withBotTransition(config.botId, async () => {
+        const existing = this.#runtimes.get(config.botId)?.status;
+        if (this.#closed || existing?.ready || existing?.wecomConnectionState === 'connecting') return;
+        const secret = await this.#resolveSecret(config.secretRef);
+        if (!secret) {
+          this.#errors.set(config.botId, safeError('missing-secret', '企业微信机器人凭据缺失，请移除后重新扫码。'));
+          return;
+        }
+        try {
+          await this.#startRuntime(config, secret);
+          this.#errors.delete(config.botId);
+        } catch (error) {
+          this.#errors.set(config.botId, safeError('connection-failed', '企业微信连接未就绪，插件会自动重试。'));
+          this.#logger.warn?.(`[dsh-im:wecom] bot ${config.botId} failed to initialize`);
+        } finally {
+          this.#touch();
+        }
+      });
+    }
+    return this.status();
+  }
+
+  async startProvisioning() {
+    if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+    if (this.#activeAttemptId) await this.cancelProvisioning(this.#activeAttemptId);
+    const record = {
+      id: randomUUID(),
+      state: 'pending',
+      createdAt: Date.now(),
+      expiresAt: null,
+      pollIntervalMs: 3_000,
+      qrRevision: 1,
+      verificationUrl: null,
+      scode: null,
+      botId: null,
+      error: null,
+      controller: new AbortController(),
+      polling: null,
+      transition: null,
+    };
+    this.#attempts.set(record.id, record);
+    this.#activeAttemptId = record.id;
+    this.#touch();
+    try {
+      const started = await this.#qrAuth.start({ signal: record.controller.signal });
+      record.scode = cleanString(started.scode);
+      record.verificationUrl = cleanString(started.verificationUrl);
+      record.expiresAt = Number(started.expiresAt);
+      record.pollIntervalMs = Math.min(10_000, Math.max(500, Number(started.pollIntervalMs) || 3_000));
+      if (!record.scode || !record.verificationUrl || !Number.isFinite(record.expiresAt)) {
+        throw new Error('Enterprise WeChat QR auth returned incomplete data');
+      }
+      this.#touch();
+      return publicAttempt(record);
+    } catch (error) {
+      record.state = record.controller.signal.aborted ? 'cancelled' : 'failed';
+      record.error = record.controller.signal.aborted
+        ? safeError('cancelled', '扫码绑定已取消。')
+        : safeError('qr-start-failed', '无法生成企业微信二维码，请稍后重试。');
+      this.#finishAttempt(record);
+      throw error;
+    }
+  }
+
+  async registrationStatus(attemptId) {
+    const record = this.#attempts.get(attemptId);
+    if (!record || TERMINAL_ATTEMPT_STATES.has(record.state)) return publicAttempt(record);
+    if (record.state === 'connecting') {
+      await record.transition?.catch(() => undefined);
+      return publicAttempt(record);
+    }
+    if (Date.now() >= record.expiresAt) {
+      record.state = 'expired';
+      record.error = safeError('expired', '企业微信二维码已过期，请重新生成。');
+      record.controller.abort();
+      this.#finishAttempt(record);
+      return publicAttempt(record);
+    }
+    if (!record.polling) {
+      const polling = this.#pollAttempt(record).finally(() => {
+        if (record.polling === polling) record.polling = null;
+      });
+      record.polling = polling;
+    }
+    await record.polling.catch(() => undefined);
+    return publicAttempt(record);
+  }
+
+  async bindCredentials({ botId, secret } = {}) {
+    if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+    const remoteBotId = cleanString(botId);
+    const normalizedSecret = cleanString(secret);
+    if (!remoteBotId || !normalizedSecret) {
+      throw new TypeError('Enterprise WeChat Bot ID and Secret are required');
+    }
+    if (this.#activeAttemptId) await this.cancelProvisioning(this.#activeAttemptId);
+    if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+    const identity = deriveWecomBotIdentity(remoteBotId);
+    await this.#withBotTransition(identity.botId, async () => {
+      if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+      const previousConfig = this.#configStore.getByRemoteBotId(remoteBotId);
+      const previousSecret = await this.#credentials.resolve(identity.secretRef).catch(() => undefined);
+      if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+      const config = {
+        botId: identity.botId,
+        remoteBotId,
+        secretRef: identity.secretRef,
+        createdAt: previousConfig?.createdAt ?? new Date().toISOString(),
+        connectedAt: new Date().toISOString(),
+      };
+      await this.#credentials.set(identity.secretRef, normalizedSecret);
+      try {
+        await this.#configStore.save(config);
+      } catch (error) {
+        await this.#restoreCredential(identity.secretRef, previousSecret);
+        throw error;
+      }
+      try {
+        await this.#startRuntime(config, normalizedSecret);
+        this.#errors.delete(identity.botId);
+      } catch {
+        this.#errors.set(
+          identity.botId,
+          safeError('connection-failed', '企业微信机器人已绑定，消息连接暂未就绪。'),
+        );
+        this.#logger.warn?.(`[dsh-im:wecom] bot ${identity.botId} credential connection failed`);
+      }
+      this.#touch();
+    });
+    return this.status();
+  }
+
+  async cancelProvisioning(attemptId) {
+    const record = this.#attempts.get(attemptId);
+    if (!record) return null;
+    if (!TERMINAL_ATTEMPT_STATES.has(record.state)) {
+      record.controller.abort();
+      await Promise.allSettled([record.polling, record.transition].filter(Boolean));
+      if (!TERMINAL_ATTEMPT_STATES.has(record.state)) record.state = 'cancelled';
+      record.error ??= safeError('cancelled', '扫码绑定已取消。');
+      this.#finishAttempt(record);
+    }
+    return publicAttempt(record);
+  }
+
+  async reconnectBot(botId) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Enterprise WeChat bot');
+    await this.#withBotTransition(botId, async () => {
+      const secret = await this.#resolveSecret(config.secretRef);
+      if (!secret) throw new Error('Enterprise WeChat bot secret is missing');
+      try {
+        await this.#startRuntime(config, secret);
+        this.#errors.delete(botId);
+      } catch (error) {
+        this.#errors.set(botId, safeError('connection-failed', '企业微信连接仍未就绪，请稍后重试。'));
+        throw error;
+      } finally {
+        this.#touch();
+      }
+    });
+    return this.status();
+  }
+
+  async deleteBot(botId) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Enterprise WeChat bot');
+    await this.#withBotTransition(botId, async () => {
+      const previous = await this.#credentials.resolve(config.secretRef).catch(() => undefined);
+      await this.#stopRuntime(botId);
+      try {
+        await this.#credentials.unset(config.secretRef);
+        await this.#configStore.remove(botId);
+      } catch (error) {
+        if (previous?.value) {
+          await this.#credentials.set(config.secretRef, previous.value).catch(() => undefined);
+          await this.#startRuntime(config, previous.value).catch(() => undefined);
+        }
+        throw new Error('Unable to remove the Enterprise WeChat bot safely.', { cause: error });
+      }
+      await this.#deleteState({ botId, config }).catch((error) => {
+        this.#logger.warn?.(`[dsh-im:wecom] bot ${botId} state cleanup failed:`, error);
+      });
+      this.#errors.delete(botId);
+      this.#touch();
+    });
+    return this.status();
+  }
+
+  status() {
+    const bots = this.#configStore.list().map((config) => {
+      const runtimeStatus = this.#runtimes.get(config.botId)?.status ?? null;
+      const connected = runtimeStatus?.ready === true
+        && runtimeStatus.wecomConnectionState === 'connected'
+        && runtimeStatus.harnessReachable === true;
+      const state = connected ? 'connected'
+        : runtimeStatus?.wecomConnectionState === 'connecting' ? 'connecting'
+          : this.#errors.has(config.botId) || runtimeStatus?.wecomConnectionState === 'failed'
+            ? 'error' : 'offline';
+      return {
+        botId: config.botId,
+        state,
+        connected,
+        configured: true,
+        bot: { name: '企业微信机器人', appIdMasked: maskWecomBotId(config.remoteBotId) },
+        health: {
+          status: connected ? 'healthy' : state === 'error' ? 'error' : 'offline',
+          summary: connected ? '企业微信 WebSocket 长连接运行正常'
+            : state === 'error' ? '企业微信连接未就绪，插件会自动重试' : '企业微信连接当前离线',
+          lastCheckedAt: runtimeStatus?.lastCheckedAt ?? null,
+          lastConnectedAt: runtimeStatus?.lastConnectedAt ?? null,
+        },
+        stats: {
+          messagesReceived: runtimeStatus?.messagesReceived ?? 0,
+          messagesReplied: runtimeStatus?.messagesReplied ?? 0,
+        },
+        error: structuredClone(this.#errors.get(config.botId) ?? null),
+      };
+    });
+    const connectedCount = bots.filter((bot) => bot.connected).length;
+    const active = this.#activeAttemptId ? this.#attempts.get(this.#activeAttemptId) : null;
+    return {
+      schemaVersion: 1,
+      revision: this.#revision,
+      state: active && ACTIVE_ATTEMPT_STATES.has(active.state) ? 'provisioning'
+        : bots.length === 0 ? 'disconnected'
+          : connectedCount === bots.length ? 'connected'
+            : connectedCount > 0 ? 'degraded' : 'offline',
+      bots,
+      totals: { configured: bots.length, connected: connectedCount },
+      ...(active && ACTIVE_ATTEMPT_STATES.has(active.state)
+        ? { provisioning: publicAttempt(active) } : {}),
+    };
+  }
+
+  async close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    if (this.#activeAttemptId) await this.cancelProvisioning(this.#activeAttemptId);
+    await Promise.allSettled([...this.#transitions.values()]);
+    await Promise.allSettled([...this.#runtimes.keys()].map((botId) => this.#stopRuntime(botId)));
+  }
+
+  async #pollAttempt(record) {
+    try {
+      const result = await this.#qrAuth.poll({ scode: record.scode, signal: record.controller.signal });
+      if (record.controller.signal.aborted || TERMINAL_ATTEMPT_STATES.has(record.state)) return;
+      if (result.status === 'waiting') return;
+      if (result.status === 'expired') {
+        record.state = 'expired';
+        record.error = safeError('expired', '企业微信二维码已过期，请重新生成。');
+        this.#finishAttempt(record);
+        return;
+      }
+      if (result.status !== 'success') {
+        record.state = 'failed';
+        record.error = safeError('qr-connect-failed', '企业微信扫码没有完成，请重新生成二维码。');
+        this.#finishAttempt(record);
+        return;
+      }
+      record.state = 'connecting';
+      record.verificationUrl = null;
+      record.expiresAt = null;
+      record.scode = null;
+      this.#touch();
+      const transition = this.#completeProvisioning(record, result);
+      record.transition = transition;
+      await transition;
+    } catch (error) {
+      if (record.controller.signal.aborted) return;
+      record.state = 'failed';
+      record.error = safeError('qr-connect-failed', '企业微信扫码服务暂时不可用，请重新生成二维码。');
+      this.#logger.warn?.('[dsh-im:wecom] QR polling failed');
+      this.#finishAttempt(record);
+    }
+  }
+
+  async #completeProvisioning(record, result) {
+    try {
+      const remoteBotId = cleanString(result.remoteBotId);
+      const secret = cleanString(result.secret);
+      if (!remoteBotId || !secret) throw new Error('Enterprise WeChat authorization returned incomplete credentials');
+      record.botId = await this.#activateBot(record, { remoteBotId, secret });
+      record.state = 'connected';
+      record.error = null;
+    } catch (error) {
+      if (record.controller.signal.aborted) {
+        record.state = 'cancelled';
+        record.error = safeError('cancelled', '扫码绑定已取消。');
+      } else {
+        record.state = 'failed';
+        record.error = safeError('activation-failed', '企业微信已授权，但无法安全保存接入配置。');
+        this.#logger.error?.('[dsh-im:wecom] provisioning failed');
+      }
+    } finally {
+      this.#finishAttempt(record);
+    }
+  }
+
+  async #activateBot(record, { remoteBotId, secret }) {
+    const identity = deriveWecomBotIdentity(remoteBotId);
+    const previousConfig = this.#configStore.getByRemoteBotId(remoteBotId);
+    const previousSecret = await this.#credentials.resolve(identity.secretRef).catch(() => undefined);
+    const config = {
+      botId: identity.botId,
+      remoteBotId,
+      secretRef: identity.secretRef,
+      createdAt: previousConfig?.createdAt ?? new Date().toISOString(),
+      connectedAt: new Date().toISOString(),
+    };
+    return this.#withBotTransition(identity.botId, async () => {
+      await this.#credentials.set(identity.secretRef, secret);
+      try {
+        if (record.controller.signal.aborted) throw new DOMException('Cancelled', 'AbortError');
+        await this.#configStore.save(config);
+      } catch (error) {
+        await this.#restoreCredential(identity.secretRef, previousSecret);
+        throw error;
+      }
+      try {
+        if (record.controller.signal.aborted) throw new DOMException('Cancelled', 'AbortError');
+        await this.#startRuntime(config, secret);
+        this.#errors.delete(identity.botId);
+      } catch (error) {
+        if (record.controller.signal.aborted) {
+          await this.#stopRuntime(identity.botId);
+          if (previousConfig) await this.#configStore.save(previousConfig).catch(() => undefined);
+          else await this.#configStore.remove(identity.botId).catch(() => undefined);
+          await this.#restoreCredential(identity.secretRef, previousSecret);
+          throw error;
+        }
+        this.#errors.set(identity.botId, safeError('connection-failed', '企业微信机器人已绑定，消息连接暂未就绪。'));
+        this.#logger.warn?.(`[dsh-im:wecom] bot ${identity.botId} activation connection failed`);
+      }
+      this.#touch();
+      return identity.botId;
+    });
+  }
+
+  async #startRuntime(config, secret) {
+    if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+    await this.#stopRuntime(config.botId);
+    if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
+    const runtime = await this.#createRuntime({ botId: config.botId, config, secret });
+    if (!runtime || typeof runtime.start !== 'function' || typeof runtime.stop !== 'function') {
+      throw new TypeError('createRuntime returned an invalid Enterprise WeChat runtime');
+    }
+    this.#runtimes.set(config.botId, runtime);
+    try {
+      await runtime.start();
+    } catch (error) {
+      await runtime.stop().catch(() => undefined);
+      this.#runtimes.delete(config.botId);
+      throw error;
+    }
+  }
+
+  async #stopRuntime(botId) {
+    const runtime = this.#runtimes.get(botId);
+    this.#runtimes.delete(botId);
+    await runtime?.stop().catch((error) => {
+      this.#logger.warn?.(`[dsh-im:wecom] bot ${botId} failed to stop cleanly:`, error);
+    });
+  }
+
+  async #resolveSecret(ref) {
+    const result = await this.#credentials.resolve(ref).catch(() => undefined);
+    return cleanString(result?.value);
+  }
+
+  async #restoreCredential(ref, previous) {
+    if (previous?.value) await this.#credentials.set(ref, previous.value).catch(() => undefined);
+    else await this.#credentials.unset(ref).catch(() => undefined);
+  }
+
+  #withBotTransition(botId, operation) {
+    const previous = this.#transitions.get(botId) ?? Promise.resolve();
+    const current = previous.catch(() => undefined).then(operation);
+    const settled = current.finally(() => {
+      if (this.#transitions.get(botId) === settled) this.#transitions.delete(botId);
+    });
+    this.#transitions.set(botId, settled);
+    return settled;
+  }
+
+  #finishAttempt(record) {
+    record.scode = null;
+    record.verificationUrl = null;
+    record.expiresAt = null;
+    if (this.#activeAttemptId === record.id) this.#activeAttemptId = null;
+    this.#touch();
+    const terminal = [...this.#attempts.values()].filter((attempt) => TERMINAL_ATTEMPT_STATES.has(attempt.state));
+    while (terminal.length > 16) this.#attempts.delete(terminal.shift().id);
+  }
+
+  #touch() {
+    this.#revision += 1;
+  }
+}

package/src/channels/wecom/wecom-runtime.mjs

@@ -0,0 +1,209 @@
+import { WSAuthFailureError, WSClient, WSReconnectExhaustedError } from '@wecom/aibot-node-sdk';
+
+import { createWecomBridgeStatus, WecomHarnessBridge } from './wecom-bridge.mjs';
+
+function timeoutError() {
+  const error = new Error('Enterprise WeChat WebSocket authentication timed out');
+  error.code = 'connect-timeout';
+  return error;
+}
+
+export function createWecomRuntimeStatus() {
+  return {
+    startedAt: null,
+    ready: false,
+    wecomConnectionState: 'idle',
+    harnessReachable: false,
+    lastCheckedAt: null,
+    lastConnectedAt: null,
+    lastError: null,
+    ...createWecomBridgeStatus(),
+  };
+}
+
+export class WecomRuntime {
+  #config;
+  #secret;
+  #harness;
+  #state;
+  #logger;
+  #replyTimeoutMs;
+  #connectTimeoutMs;
+  #maxReconnectAttempts;
+  #createClient;
+  #status = createWecomRuntimeStatus();
+  #client = null;
+  #bridge = null;
+  #starting = null;
+  #startController = null;
+
+  constructor({
+    config,
+    secret,
+    harness,
+    state,
+    logger = console,
+    replyTimeoutMs = 600_000,
+    connectTimeoutMs = 20_000,
+    maxReconnectAttempts = 10,
+    createClient = (options) => new WSClient(options),
+  }) {
+    if (!config || !secret || !harness || !state) {
+      throw new TypeError('WecomRuntime requires config, secret, Harness, and state');
+    }
+    this.#config = config;
+    this.#secret = secret;
+    this.#harness = harness;
+    this.#state = state;
+    this.#logger = logger;
+    this.#replyTimeoutMs = replyTimeoutMs;
+    this.#connectTimeoutMs = connectTimeoutMs;
+    this.#maxReconnectAttempts = maxReconnectAttempts;
+    this.#createClient = createClient;
+  }
+
+  get status() {
+    return structuredClone(this.#status);
+  }
+
+  async start() {
+    if (this.#status.ready && this.#client) return this.status;
+    if (this.#starting) return this.#starting;
+    const controller = new AbortController();
+    this.#startController = controller;
+    this.#starting = this.#start(controller.signal).finally(() => {
+      if (this.#startController === controller) this.#startController = null;
+      this.#starting = null;
+    });
+    return this.#starting;
+  }
+
+  async #start(signal) {
+    await this.#stopActive();
+    signal.throwIfAborted();
+    this.#status.startedAt = new Date().toISOString();
+    this.#status.wecomConnectionState = 'connecting';
+    this.#status.lastError = null;
+    await this.#harness.ensureRunning();
+    this.#status.harnessReachable = true;
+
+    const silentSdkLogger = { debug() {}, info() {}, warn() {}, error() {} };
+    const client = this.#createClient({
+      botId: this.#config.remoteBotId,
+      secret: this.#secret,
+      logger: silentSdkLogger,
+      maxReconnectAttempts: this.#maxReconnectAttempts,
+    });
+    if (!client || typeof client.connect !== 'function' || typeof client.disconnect !== 'function') {
+      throw new TypeError('Enterprise WeChat client factory returned an invalid client');
+    }
+    this.#client = client;
+    this.#bridge = new WecomHarnessBridge({
+      client,
+      harness: this.#harness,
+      state: this.#state,
+      status: this.#status,
+      logger: this.#logger,
+      replyTimeoutMs: this.#replyTimeoutMs,
+    });
+
+    let readyResolve;
+    let readyReject;
+    let authenticated = false;
+    const ready = new Promise((resolve, reject) => {
+      readyResolve = resolve;
+      readyReject = reject;
+    });
+    const onAuthenticated = () => {
+      if (this.#client !== client || signal.aborted) return;
+      authenticated = true;
+      const now = Date.now();
+      this.#status.ready = true;
+      this.#status.wecomConnectionState = 'connected';
+      this.#status.lastCheckedAt = now;
+      this.#status.lastConnectedAt = now;
+      this.#status.lastError = null;
+      readyResolve();
+    };
+    const onDisconnected = () => {
+      if (this.#client !== client) return;
+      this.#status.ready = false;
+      this.#status.wecomConnectionState = 'connecting';
+      this.#status.lastCheckedAt = Date.now();
+    };
+    const onReconnecting = () => {
+      if (this.#client !== client) return;
+      this.#status.ready = false;
+      this.#status.wecomConnectionState = 'connecting';
+      this.#status.lastCheckedAt = Date.now();
+    };
+    const onError = (error) => {
+      if (this.#client !== client) return;
+      const terminal = error instanceof WSAuthFailureError || error instanceof WSReconnectExhaustedError;
+      if (!authenticated && terminal) readyReject(error);
+      if (terminal) {
+        this.#status.ready = false;
+        this.#status.wecomConnectionState = 'failed';
+      }
+      this.#status.lastError = terminal ? error.name : 'connection-error';
+      this.#logger.warn?.(`[dsh-im:wecom] bot ${this.#config.botId} connection error`);
+    };
+    const onMessage = (frame) => this.#bridge?.accept(frame);
+    client.on('authenticated', onAuthenticated);
+    client.on('disconnected', onDisconnected);
+    client.on('reconnecting', onReconnecting);
+    client.on('error', onError);
+    client.on('message', onMessage);
+
+    let timer;
+    try {
+      client.connect();
+      await Promise.race([
+        ready,
+        new Promise((_, reject) => {
+          signal.addEventListener('abort', () => reject(signal.reason), { once: true });
+        }),
+        new Promise((_, reject) => {
+          timer = setTimeout(() => reject(timeoutError()), this.#connectTimeoutMs);
+        }),
+      ]);
+      return this.status;
+    } catch (error) {
+      if (signal.aborted) {
+        await this.#stopActive();
+        throw error;
+      }
+      this.#status.ready = false;
+      this.#status.wecomConnectionState = 'failed';
+      this.#status.lastError = error?.message ?? String(error);
+      await this.#stopActive();
+      throw error;
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+
+  async stop() {
+    const starting = this.#starting;
+    this.#startController?.abort(new DOMException('Enterprise WeChat runtime stopped', 'AbortError'));
+    await this.#stopActive();
+    await starting?.catch(() => undefined);
+    return this.status;
+  }
+
+  async #stopActive() {
+    const client = this.#client;
+    const bridge = this.#bridge;
+    this.#client = null;
+    this.#bridge = null;
+    try {
+      client?.disconnect();
+      client?.removeAllListeners?.();
+    } catch (error) {
+      this.#logger.warn?.(`[dsh-im:wecom] bot ${this.#config.botId} failed to stop cleanly`);
+    }
+    await bridge?.waitForIdle();
+    this.#status.ready = false;
+    this.#status.wecomConnectionState = 'idle';
+  }
+}