@xmanrui/dsh-im 4.20.2 → 4.21.1

package/src/channels/telegram/telegram-runtime.mjs

@@ -42,10 +42,6 @@ export const TELEGRAM_COMMAND_MENU = Object.freeze(
   commandMenuEntries(SHARED_COMMAND_CATALOG, (text) => text).map((item) => Object.freeze(item)),
 );
 
-function escaped(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-
 function mentionedUsername(message, username) {
   if (!username) return false;
   return [
@@ -60,9 +56,27 @@ function mentionedUsername(message, username) {
     }));
 }
 
+function isUsernameBoundary(character) {
+  return character === undefined || !(/[a-z0-9_]/i).test(character);
+}
+
 function withoutBotMention(text, username) {
   if (!username || typeof text !== 'string') return text;
-  return text.replace(new RegExp(`@${escaped(username)}\\b`, 'ig'), '').trim();
+  const target = `@${username}`.toLowerCase();
+  let result = '';
+  let offset = 0;
+  while (offset < text.length) {
+    // Case-fold only the candidate: Unicode casing can change the full text's length.
+    if (text[offset] === '@'
+      && text.slice(offset, offset + target.length).toLowerCase() === target
+      && isUsernameBoundary(text[offset + target.length])) {
+      offset += target.length;
+    } else {
+      result += text[offset];
+      offset += 1;
+    }
+  }
+  return result.trim();
 }
 
 const IMAGE_MEDIA_TYPES = new Set(['image/jpeg', 'image/png', 'image/webp', 'image/gif']);
@@ -210,6 +224,56 @@ function telegramReplyReference(message, { quote, loadReplyContent } = {}) {
   };
 }
 
+/**
+ * Normalize an inline-keyboard press into the same shape the bridge already
+ * consumes for messages, so a button reuses the existing conversation key,
+ * access policy, and pending-interaction routing instead of a parallel path.
+ * A press always counts as addressed: the user acted on a message the bot sent.
+ */
+export function normalizeTelegramCallback(update, { botId } = {}) {
+  const callback = update?.callback_query;
+  const message = callback?.message;
+  const chatId = message?.chat?.id;
+  const senderId = callback?.from?.id;
+  const providerMessageId = message?.message_id;
+  if (!Number.isSafeInteger(update?.update_id)
+    || typeof callback?.id !== 'string' || !callback.id
+    || chatId === undefined || senderId === undefined
+    || !Number.isSafeInteger(providerMessageId)) return null;
+  if (!['private', 'group', 'supergroup'].includes(message.chat?.type)) return null;
+  const direct = message.chat.type === 'private';
+  const messageThreadId = Number.isSafeInteger(message.message_thread_id)
+    ? message.message_thread_id : undefined;
+  const conversationId = messageThreadId === undefined
+    ? String(chatId) : `${chatId}:${messageThreadId}`;
+  return {
+    messageId: String(update.update_id),
+    callbackQueryId: callback.id,
+    providerMessageId,
+    senderId: String(senderId),
+    senderIsBot: callback.from?.is_bot === true,
+    kind: direct ? 'direct' : 'group',
+    conversationId,
+    data: typeof callback.data === 'string' ? callback.data : '',
+    addressed: true,
+    replyTarget: {
+      chatId,
+      chatType: message.chat.type,
+      messageThreadId,
+    },
+    reactionTarget: { chatId, messageId: providerMessageId },
+    contextSource: () => ({
+      senderName: [callback.from?.first_name, callback.from?.last_name]
+        .filter((value) => typeof value === 'string' && value.trim())
+        .map((value) => value.trim()).join(' ') || callback.from?.username,
+      conversationTitle: direct ? undefined : message.chat?.title,
+      chatId: String(chatId),
+      threadId: messageThreadId === undefined ? undefined : String(messageThreadId),
+    }),
+    ...(botId === undefined ? {} : { botId }),
+  };
+}
+
 export function normalizeTelegramUpdate(update, {
   botId,
   username,
@@ -463,6 +527,46 @@ export class TelegramBotClient {
     return { providerMessageIds };
   }
 
+  /**
+   * Deliver a card whose inline keyboard carries the interaction payloads.
+   * Kept separate from sendText so a markup failure can be caught and degraded
+   * to the plain-text flow by the caller without losing the text itself.
+   */
+  async sendInteractionCard(target, { text, markup, replyToMessageId } = {}) {
+    const result = await this.#api.sendMessage({
+      chatId: target.chatId,
+      text,
+      replyToMessageId: replyToMessageId ?? target.replyToMessageId,
+      messageThreadId: target.messageThreadId,
+      replyMarkup: markup,
+      signal: this.#signal,
+    });
+    const providerMessageIds = [];
+    if (Number.isSafeInteger(result?.message_id)) {
+      providerMessageIds.push(String(result.message_id));
+    }
+    return { providerMessageIds };
+  }
+
+  /** Replace a delivered card's keyboard in place; an empty keyboard removes it. */
+  async updateInteractionCard(target, providerMessageId, { markup } = {}) {
+    await this.#api.editMessageReplyMarkup({
+      chatId: target.chatId,
+      messageId: Number(providerMessageId),
+      replyMarkup: markup,
+      signal: this.#signal,
+    });
+  }
+
+  /** Stop the client-side spinner on a pressed button. */
+  async answerInteractionCallback(callbackQueryId, notice) {
+    await this.#api.answerCallbackQuery({
+      callbackQueryId,
+      text: notice,
+      signal: this.#signal,
+    });
+  }
+
   async addReaction(target, emoji, { signal } = {}) {
     const reactionKey = String(emoji ?? '').trim();
     await this.#api.setMessageReaction({
@@ -1086,7 +1190,8 @@ export class TelegramRuntime {
       // All updates have arrived together; cursor persistence must not move the
       // settings boundary for the later messages in this received batch.
       const received = updates.map((update) => {
-        const chatType = update?.message?.chat?.type;
+        const chatType = update?.message?.chat?.type
+          ?? update?.callback_query?.message?.chat?.type;
         return {
           update,
           contextSnapshot: captureContextEnhancement(this.#contextEnhancement,
@@ -1096,6 +1201,23 @@ export class TelegramRuntime {
       });
       for (const { update, contextSnapshot } of received) {
         if (signal.aborted) return;
+        const callback = normalizeTelegramCallback(update, {
+          botId: this.#config.platformId,
+        });
+        if (callback) {
+          if (typeof this.#bridge.acceptCallback === 'function') {
+            void this.#bridge.acceptCallback(callback, { contextSnapshot }).catch((error) => {
+              if (signal.aborted) return;
+              this.#logger.error?.(
+                `[dsh-im:telegram] bot ${this.#config.botId} callback handling failed:`,
+                error,
+              );
+            });
+          }
+          cursor = update.update_id + 1;
+          await this.#state.setCursor(cursor);
+          continue;
+        }
         const message = normalizeTelegramUpdate(update, {
           botId: this.#config.platformId,
           username: this.#config.username,

package/src/channels/wecom/wecom-bridge.mjs

@@ -33,7 +33,11 @@ import {
 } from '../shared/preset-command.mjs';
 import { runWorkspaceCommand, workspacePathSnapshot } from '../shared/workspace-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import {
   hasInboundImages,
   ImagePromptError,
@@ -928,6 +932,9 @@ export class WecomHarnessBridge {
               ...body,
               msgtype: 'text',
               text: { content: result.prompt },
+              // The submission is exactly the collected text, so a quote on the
+              // command itself must not become part of it.
+              quote: undefined,
             },
           }, messageId, key, { batchSubmission: result });
         }
@@ -1163,6 +1170,11 @@ export class WecomHarnessBridge {
         || this.#approvals.hasPending(key),
       control: { owner: this, key },
       deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        bodyOf(frame).chattype === 'single' ? 'direct' : 'group',
+        () => ({ channel: 'wecom', senderId: bodyOf(frame).from?.userid, chatId }),
+      ),
     });
     if (result?.stopped) {
       await Promise.allSettled([
@@ -1366,6 +1378,8 @@ export class WecomHarnessBridge {
         key,
         text,
         content,
+        titleText: batchSubmission?.title,
+        sourceGuidance: snapshot?.config?.guidance,
         contextEnhanced,
         createOptions: { signal: this.#signal },
         existsOptions: { signal: this.#signal },

package/src/channels/wecom-app/config-store.mjs

@@ -17,7 +17,9 @@ function safeIntegrationId(value) {
 
 function safeRef(value, prefix) {
   const ref = cleanString(value);
-  return ref && new RegExp('^' + prefix + '[A-F0-9]{24}$').test(ref) ? ref : null;
+  if (!ref?.startsWith(prefix)) return null;
+  const suffix = ref.slice(prefix.length);
+  return /^[A-F0-9]{24}$/.test(suffix) ? ref : null;
 }
 
 // A bot identity is stable per (corpId, agentId) pair so re-binding the same

package/src/channels/wecom-app/wecom-app-bridge.mjs

@@ -26,7 +26,11 @@ import {
 } from '../shared/preset-command.mjs';
 import { runWorkspaceCommand } from '../shared/workspace-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import {
   DEFAULT_IMAGE_PROMPT,
   hasInboundImages,
@@ -498,6 +502,11 @@ export class WecomAppBridge {
         || this.#approvals.hasPending(key),
       control: { owner: this, key },
       deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        'direct',
+        () => ({ channel: 'wecom-app', senderId: sender, chatId: sender }),
+      ),
     });
     if (result?.stopped) {
       await Promise.allSettled([
@@ -605,6 +614,8 @@ export class WecomAppBridge {
           key,
           text,
           content,
+          titleText: batchSubmission?.title,
+          sourceGuidance: snapshot?.config?.guidance,
           contextEnhanced,
           createOptions: { signal: this.#signal },
           existsOptions: { signal: this.#signal },

package/src/channels/weixin/config-store.mjs

@@ -4,6 +4,7 @@ import { dirname } from 'node:path';
 
 import { normalizeWeixinApiBaseUrl } from './weixin-api.mjs';
 import { t } from '../shared/i18n.mjs';
+import { configValidationError, withConfigResource } from '../shared/config-read-error.mjs';
 
 const EMPTY_DOCUMENT = Object.freeze({ version: 1, accounts: Object.freeze([]) });
 
@@ -37,20 +38,24 @@ export function maskWeixinAccountId(accountId) {
   return `${value.slice(0, 6)}••••${value.slice(-4)}`;
 }
 
-function normalizeAccount(value) {
-  if (!value || typeof value !== 'object') return null;
+function normalizeAccount(value, invalid = () => null) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return invalid('', 'expected-object');
   const accountId = cleanString(value.accountId);
   const ownerUserId = cleanString(value.ownerUserId);
   const botId = safeBotId(value.botId);
   const tokenRef = safeTokenRef(value.tokenRef);
-  if (!accountId || !ownerUserId || !botId || !tokenRef) return null;
+  if (!accountId) return invalid('.accountId', 'invalid-string');
+  if (!ownerUserId) return invalid('.ownerUserId', 'invalid-string');
+  if (!botId) return invalid('.botId', 'invalid-identifier');
+  if (!tokenRef) return invalid('.tokenRef', 'invalid-identifier');
   const derived = deriveWeixinBotIdentity(accountId);
-  if (derived.botId !== botId || derived.tokenRef !== tokenRef) return null;
+  if (derived.botId !== botId) return invalid('.botId', 'identity-mismatch');
+  if (derived.tokenRef !== tokenRef) return invalid('.tokenRef', 'identity-mismatch');
   let baseUrl;
   try {
     baseUrl = normalizeWeixinApiBaseUrl(value.baseUrl);
-  } catch {
-    return null;
+  } catch (error) {
+    return invalid('.baseUrl', error?.code === 'untrusted-base-url' ? 'untrusted-api-url' : 'invalid-api-url');
   }
   return Object.freeze({
     botId,
@@ -64,16 +69,21 @@ function normalizeAccount(value) {
 }
 
 function normalizeDocument(value) {
-  if (!value || value.version !== 1 || !Array.isArray(value.accounts)) return null;
-  const accounts = value.accounts.map(normalizeAccount);
-  if (accounts.some((account) => account === null)) return null;
+  const invalid = (field, issue) => {
+    throw configValidationError('dsh-weixin config contains invalid account data', field, issue);
+  };
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return invalid('$', 'expected-object');
+  if (value.version !== 1) return invalid('version', 'unsupported-version');
+  if (!Array.isArray(value.accounts)) return invalid('accounts', 'expected-array');
+  const accounts = value.accounts.map((account, index) => normalizeAccount(account,
+    (field, issue) => invalid(`accounts[${index}]${field}`, issue)));
   const ids = new Set();
   const accountIds = new Set();
   const refs = new Set();
-  for (const account of accounts) {
-    if (ids.has(account.botId) || accountIds.has(account.accountId) || refs.has(account.tokenRef)) {
-      return null;
-    }
+  for (const [index, account] of accounts.entries()) {
+    if (ids.has(account.botId)) return invalid(`accounts[${index}].botId`, 'duplicate-identity');
+    if (accountIds.has(account.accountId)) return invalid(`accounts[${index}].accountId`, 'duplicate-identity');
+    if (refs.has(account.tokenRef)) return invalid(`accounts[${index}].tokenRef`, 'duplicate-identity');
     ids.add(account.botId);
     accountIds.add(account.accountId);
     refs.add(account.tokenRef);
@@ -93,10 +103,9 @@ export class WeixinConfigStore {
   async load() {
     try {
       const normalized = normalizeDocument(JSON.parse(await readFile(this.#path, 'utf8')));
-      if (!normalized) throw new Error('dsh-weixin config contains invalid account data');
       this.#value = normalized;
     } catch (error) {
-      if (error?.code !== 'ENOENT') throw error;
+      if (error?.code !== 'ENOENT') throw withConfigResource(error, 'account-config');
       this.#value = EMPTY_DOCUMENT;
     }
     return this;

package/src/channels/weixin/connection-error.en.mjs

@@ -1,5 +1,26 @@
 // Shared diagnostic copy for the WeChat Host and settings client.
 export default {
+  "微信配置格式错误：{file}。请查看诊断详情，修复后重启 DSH。": "The WeChat configuration is invalid: {file}. See the diagnostic details, fix the file, and restart DSH.",
+  "配置文件": "Configuration file",
+  "配置字段": "Configuration field",
+  "校验原因": "Validation issue",
+  "应为 JSON 对象。": "Expected a JSON object.",
+  "应为 JSON 数组。": "Expected a JSON array.",
+  "配置版本缺失或不受当前插件支持。": "The configuration version is missing or unsupported by this plugin.",
+  "字段缺失或不是非空字符串。": "The field is missing or is not a non-empty string.",
+  "标识符格式不符合要求。": "The identifier has an invalid format.",
+  "标识符与 accountId 派生结果不一致。": "The identifier does not match the value derived from accountId.",
+  "账号标识重复。": "The account identifier is duplicated.",
+  "微信服务地址不是有效 URL。": "The WeChat service address is not a valid URL.",
+  "微信服务地址必须使用受信任的 HTTPS 域名和端口。": "The WeChat service address must use a trusted HTTPS domain and port.",
+  "工作区路径必须是当前操作系统的绝对路径。": "The workspace path must be absolute on the current operating system.",
+  "Agent Preset 标识无效。": "The Agent Preset identifier is invalid.",
+  "模型设置须包含有效的 provider、model 和可选 reasoningEffort。": "Model settings require valid provider and model fields, with an optional valid reasoningEffort.",
+  "投递目标的标识、结构或路由不符合当前配置版本要求。": "The delivery target identifier, structure or route is invalid for this configuration version.",
+  "当前配置版本不允许此字段。": "This field is not allowed in this configuration version.",
+  "JSON 语法无效。": "The JSON syntax is invalid.",
+  "请检查微信渠道数据目录中的 {file}，修复后重启 DSH；“重新读取”不会重新加载配置。": "Check {file} in the WeChat channel data directory, fix it, and restart DSH; refreshing the status does not reload configuration.",
+  "字段位置中的序号从 0 开始，按文件中的条目顺序计数，不包含真实账号标识。": "Field positions use zero-based entry order in the file without including actual account identifiers.",
   "插件版本": "Plugin version",
   "DSH 微信管理接口返回了无法识别的响应，请重新读取状态。": "The DSH WeChat management endpoint returned an invalid response. Refresh the status.",
   "无法读取现有登录凭据。请检查 DSH 凭据存储。": "Could not read the saved login credential. Check the DSH credential store.",

package/src/channels/weixin/connection-error.mjs

@@ -1,7 +1,8 @@
 import { randomUUID } from 'node:crypto';
 import packageInfo from '../../../package.json' with { type: 'json' };
 import { t } from '../shared/i18n.mjs';
-import { normalizeWeixinDiagnosticDetails } from './diagnostic-details.mjs';
+import { CONFIG_ISSUE_LABELS, normalizeWeixinDiagnosticDetails } from './diagnostic-details.mjs';
+import { configReadErrorDetails } from '../shared/config-read-error.mjs';
 
 const MESSAGES = Object.freeze({
   'credential-read-failed': '无法读取现有登录凭据。请检查 DSH 凭据存储。',
@@ -123,6 +124,13 @@ function hintFor(code, details) {
   if (details.reason === 'ENOTFOUND' || details.reason === 'EAI_AGAIN') return t('微信服务域名解析失败，请检查运行 DSH 的机器的网络和 DNS 设置后重试。');
   if (['EACCES', 'EPERM', 'EROFS'].includes(details.reason)) return t('请检查 DSH 数据目录和对应文件的读写权限。');
   if (details.reason === 'ENOSPC') return t('磁盘空间不足，请释放空间后重试。');
+  if (code.startsWith('weixin-startup-') && details.file) {
+    const explanation = details.reason === 'invalid-json' ? t('JSON 语法无效。')
+      : details.issue ? t(CONFIG_ISSUE_LABELS[details.issue]) : '';
+    return [explanation, t('请检查微信渠道数据目录中的 {file}，修复后重启 DSH；“重新读取”不会重新加载配置。', { file: details.file }),
+      details.field ? t('字段位置中的序号从 0 开始，按文件中的条目顺序计数，不包含真实账号标识。') : '',
+    ].filter(Boolean).join(' ');
+  }
   if (details.reason === 'invalid-json' && details.resource) return t('本机文件格式无效，请检查对应配置或状态文件；不要清空登录凭据。');
   if (/CERT|TLS|SSL/.test(details.reason ?? '')) return t('请检查运行 DSH 的机器的系统时间、证书和网络设置。');
   if (code === 'stale-token' || code === 'missing-token') return t('请移除失效接入并重新扫码绑定。');
@@ -143,17 +151,21 @@ export function createWeixinDiagnostics({ logger = console, now = Date.now } = {
     const selected = chain.find(error => knownWeixinErrorCode(error.code));
     const code = selected?.code ?? (knownWeixinErrorCode(context.code) ? context.code : 'weixin-operation-failed');
     const staged = chain.map(error => ownedStages.get(error)).find(Boolean) ?? {};
+    const configDetails = chain.map(configReadErrorDetails).find(Boolean) ?? {};
     const defaults = CODE_STAGES[code] ?? [];
     const reason = chain.map(error => normalizeWeixinDiagnosticDetails({ reason: error.code }).reason).find(Boolean)
       ?? (chain.some(error => error instanceof SyntaxError) ? 'invalid-json' : undefined);
     const numeric = field => chain.map(error => normalizeWeixinDiagnosticDetails({ [field]: field === 'httpStatus' ? error.status : error[field] })[field]).find(value => value !== undefined);
     const details = normalizeWeixinDiagnosticDetails({
-      ...context, stage: staged.stage ?? defaults[0] ?? (code.startsWith('harness-') ? 'harness.check' : context.stage),
-      resource: staged.resource ?? defaults[1] ?? context.resource,
-      reason: reason ?? context.reason, httpStatus: numeric('httpStatus'), providerCode: numeric('providerCode'), pluginVersion: packageInfo.version,
+      ...context, ...configDetails,
+      file: { 'account-config': 'config.json', 'workspace-config': 'workspaces.json' }[configDetails.resource],
+      stage: staged.stage ?? defaults[0] ?? (code.startsWith('harness-') ? 'harness.check' : context.stage),
+      resource: staged.resource ?? defaults[1] ?? configDetails.resource ?? context.resource,
+      reason: reason ?? configDetails.reason ?? context.reason, httpStatus: numeric('httpStatus'), providerCode: numeric('providerCode'), pluginVersion: packageInfo.version,
     });
     const botId = /^wx_[a-f0-9]{24}$/.test(context.botId ?? '') ? context.botId : undefined;
-    const key = JSON.stringify([botId, details.operation, details.stage, code, details.reason, details.httpStatus, details.providerCode]);
+    const key = JSON.stringify([botId, details.operation, details.stage, code, details.reason, details.httpStatus, details.providerCode,
+      details.resource, details.file, details.field, details.issue]);
     const previous = recent.get(key);
     const time = now();
     if (context.automatic && previous && time - previous.time < 60_000) {
@@ -168,7 +180,10 @@ export function createWeixinDiagnostics({ logger = console, now = Date.now } = {
     details.referenceId = `WX-CONN-${randomUUID().replaceAll('-', '').slice(0, 8).toUpperCase()}`;
     details.occurredAt = new Date(time).toISOString();
     details.hint = hintFor(code, details);
-    const publicError = { code, message: t(MESSAGES[code], { status: details.httpStatus ?? '?' }), details };
+    const message = code === 'weixin-startup-config-invalid' && details.file
+      ? t('微信配置格式错误：{file}。请查看诊断详情，修复后重启 DSH。', { file: details.file })
+      : t(MESSAGES[code], { status: details.httpStatus ?? '?' });
+    const publicError = { code, message, details };
     const wrapped = new Error(publicError.message, { cause });
     wrapped.code = code;
     wrapped.publicError = publicError;

package/src/channels/weixin/diagnostic-details.mjs

@@ -15,9 +15,29 @@ const REASONS = new Set([
   'CERT_HAS_EXPIRED', 'CERT_NOT_YET_VALID', 'DEPTH_ZERO_SELF_SIGNED_CERT', 'SELF_SIGNED_CERT_IN_CHAIN',
   'UNABLE_TO_VERIFY_LEAF_SIGNATURE', 'UNABLE_TO_GET_ISSUER_CERT_LOCALLY', 'ERR_TLS_CERT_ALTNAME_INVALID', 'ERR_SSL_WRONG_VERSION_NUMBER',
   'ENOENT', 'EACCES', 'EPERM', 'ENOSPC', 'EROFS', 'ENOTDIR', 'EISDIR', 'EBUSY', 'EIO', 'EXDEV', 'EMFILE', 'ENFILE', 'EEXIST',
-  'invalid-json', 'read-only',
+  'invalid-json', 'invalid-config', 'read-only',
 ]);
 const RESOURCES = new Set(['credential-store', 'account-config', 'account-state', 'workspace-config', 'workspace-directory']);
+const CONFIG_FILES = new Set(['config.json', 'workspaces.json']);
+export const CONFIG_ISSUE_LABELS = Object.freeze({
+  'expected-object': '应为 JSON 对象。',
+  'expected-array': '应为 JSON 数组。',
+  'unsupported-version': '配置版本缺失或不受当前插件支持。',
+  'invalid-string': '字段缺失或不是非空字符串。',
+  'invalid-identifier': '标识符格式不符合要求。',
+  'identity-mismatch': '标识符与 accountId 派生结果不一致。',
+  'duplicate-identity': '账号标识重复。',
+  'invalid-api-url': '微信服务地址不是有效 URL。',
+  'untrusted-api-url': '微信服务地址必须使用受信任的 HTTPS 域名和端口。',
+  'invalid-workspace-path': '工作区路径必须是当前操作系统的绝对路径。',
+  'invalid-agent-preset': 'Agent Preset 标识无效。',
+  'invalid-model-selection': '模型设置须包含有效的 provider、model 和可选 reasoningEffort。',
+  'invalid-delivery-target': '投递目标的标识、结构或路由不符合当前配置版本要求。',
+  'unexpected-field': '当前配置版本不允许此字段。',
+});
+// Only schema-owned field names and numeric entry positions may leave the Host.
+// Map keys are replaced with zero-based positions to avoid exposing identities.
+const CONFIG_FIELD = /^(?:\$|version|accounts(?:\[\d{1,10}\](?:\.(?:accountId|ownerUserId|botId|tokenRef|baseUrl))?)?|(?:workspaces|agentPresets|models)(?:\[\d{1,10}\]\.(?:key|value))?|deliveryTargets(?:\[\d{1,10}\]\.(?:key|targets(?:\[\d{1,10}\])?))?)$/;
 
 export function normalizeWeixinDiagnosticDetails(value) {
   if (!value || typeof value !== 'object' || Array.isArray(value)) return {};
@@ -25,6 +45,9 @@ export function normalizeWeixinDiagnosticDetails(value) {
   for (const [field, allowed] of [['operation', OPERATIONS], ['stage', STAGES], ['reason', REASONS], ['resource', RESOURCES]]) {
     if (allowed.has(value[field])) result[field] = value[field];
   }
+  if (CONFIG_FILES.has(value.file)) result.file = value.file;
+  if (typeof value.field === 'string' && CONFIG_FIELD.test(value.field)) result.field = value.field;
+  if (typeof value.issue === 'string' && Object.hasOwn(CONFIG_ISSUE_LABELS, value.issue)) result.issue = value.issue;
   if (/^WX-CONN-[A-F0-9]{8}$/.test(value.referenceId ?? '')) result.referenceId = value.referenceId;
   if (typeof value.occurredAt === 'string' && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(value.occurredAt)
     && Number.isFinite(Date.parse(value.occurredAt))) result.occurredAt = value.occurredAt;

package/src/channels/weixin/weixin-api.mjs

@@ -21,6 +21,8 @@ const ILINK_CLIENT_VERSION = (2 << 16) | (4 << 8) | 6;
 const DEFAULT_TIMEOUT_MS = 15_000;
 const DEFAULT_LONG_POLL_TIMEOUT_MS = 35_000;
 const WEIXIN_CDN_UPLOAD_RETRIES = 3;
+const WEIXIN_CDN_UPLOAD_IDLE_TIMEOUT_MS = 60_000;
+const WEIXIN_CDN_UPLOAD_CHUNK_BYTES = 64 * 1024;
 const WEIXIN_MESSAGE_ID_TIMESTAMP_SHIFT = 22n;
 const WEIXIN_MESSAGE_ID_MIN_TIMESTAMP_MS = Date.UTC(2020, 0, 1);
 const WEIXIN_MESSAGE_ID_MAX_FUTURE_MS = 24 * 60 * 60 * 1_000;
@@ -79,6 +81,9 @@ function weixinArtifactError(cause, { fallback = 'artifact-provider-rejected' }
     || /(?:rate.?limit|too.?many)/i.test(providerText)) {
     code = 'artifact-rate-limited';
     message = 'Weixin rate-limited file delivery.';
+  } else if (cause?.code === 'upload-timeout') {
+    code = 'artifact-upload-timeout';
+    message = 'Weixin file upload stalled; the file message was not sent.';
   } else if (fallback === 'artifact-provider-rejected') {
     message = 'Weixin rejected the file message.';
   }
@@ -339,25 +344,54 @@ function weixinCdnUploadUrl(response, fileKey) {
   return trustedWeixinCdnUploadUrl(url);
 }
 
-function encryptWeixinUpload(bytes, key) {
+async function* encryptWeixinUpload(bytes, key, { signal, onProgress }) {
   const cipher = createCipheriv('aes-128-ecb', key, null);
-  return Buffer.concat([cipher.update(bytes), cipher.final()]);
+  // Let fetch backpressure drive encryption, without keeping whole-file
+  // ciphertext copies alongside a potentially large artifact buffer.
+  for (let offset = 0; offset < bytes.byteLength; offset += WEIXIN_CDN_UPLOAD_CHUNK_BYTES) {
+    signal.throwIfAborted();
+    const chunk = cipher.update(bytes.subarray(offset, offset + WEIXIN_CDN_UPLOAD_CHUNK_BYTES));
+    onProgress();
+    if (chunk.byteLength) yield chunk;
+  }
+  signal.throwIfAborted();
+  onProgress();
+  yield cipher.final();
 }
 
-async function uploadWeixinCdn(fetchImpl, url, ciphertext, { signal } = {}) {
+async function uploadWeixinCdn(fetchImpl, url, bytes, key, { signal } = {}) {
   let lastError;
   for (let attempt = 1; attempt <= WEIXIN_CDN_UPLOAD_RETRIES; attempt += 1) {
     signal?.throwIfAborted();
+    const idleController = new AbortController();
+    const uploadSignal = signal
+      ? AbortSignal.any([signal, idleController.signal])
+      : idleController.signal;
+    let timer;
+    let active = true;
+    const onProgress = () => {
+      if (!active) return;
+      clearTimeout(timer);
+      timer = setTimeout(() => idleController.abort(new WeixinApiError(
+        'upload-timeout', '微信文件上传长时间没有进展，已超时。',
+      )), WEIXIN_CDN_UPLOAD_IDLE_TIMEOUT_MS);
+    };
+    const body = encryptWeixinUpload(bytes, key, { signal: uploadSignal, onProgress });
+    let response;
+    onProgress();
     try {
-      const response = await fetchImpl(url, {
+      response = await fetchImpl(url, {
         method: 'POST',
-        headers: { 'content-type': 'application/octet-stream' },
-        body: ciphertext,
-        signal: signal
-          ? AbortSignal.any([signal, AbortSignal.timeout(60_000)])
-          : AbortSignal.timeout(60_000),
+        headers: {
+          'content-type': 'application/octet-stream',
+          'content-length': String(aesEcbPaddedSize(bytes.byteLength)),
+        },
+        body,
+        duplex: 'half',
+        signal: uploadSignal,
         redirect: 'error',
       });
+      uploadSignal.throwIfAborted();
       if (response.status >= 400 && response.status < 500) {
         throw new WeixinApiError(
           'upload-rejected',
@@ -373,16 +407,21 @@ async function uploadWeixinCdn(fetchImpl, url, ciphertext, { signal } = {}) {
         );
       }
       const downloadParam = nonEmptyString(response.headers.get('x-encrypted-param'));
-      await response.body?.cancel?.().catch(() => undefined);
       if (!downloadParam) {
         throw new WeixinApiError('invalid-upload-response', '微信文件上传响应缺少下载参数。');
       }
       return downloadParam;
     } catch (error) {
       if (signal?.aborted) throw abortError(signal);
+      if (idleController.signal.aborted) error = idleController.signal.reason;
       if (error instanceof WeixinApiError
         && (error.code === 'upload-rejected' || error.status < 500)) throw error;
       lastError = error;
+    } finally {
+      active = false;
+      clearTimeout(timer);
+      await body.return();
+      await response?.body?.cancel?.().catch(() => undefined);
     }
   }
   if (lastError instanceof WeixinApiError) throw lastError;
@@ -524,10 +563,10 @@ export function createWeixinApi({ fetchImpl = fetch } = {}) {
       ));
     }
     const uploadUrl = weixinCdnUploadUrl(upload, fileKey);
-    const ciphertext = encryptWeixinUpload(file.bytes, aesKey);
+    const ciphertextSize = aesEcbPaddedSize(file.bytes.byteLength);
     let downloadParam;
     try {
-      downloadParam = await uploadWeixinCdn(fetchImpl, uploadUrl, ciphertext, { signal });
+      downloadParam = await uploadWeixinCdn(fetchImpl, uploadUrl, file.bytes, aesKey, { signal });
     } catch (error) {
       if (signal?.aborted) throw abortError(signal);
       const status = Number(error?.status);
@@ -564,7 +603,7 @@ export function createWeixinApi({ fetchImpl = fetch } = {}) {
             client_id: clientId,
             message_type: 2,
             message_state: 2,
-            item_list: [createItem({ file, media, ciphertextSize: ciphertext.byteLength })],
+            item_list: [createItem({ file, media, ciphertextSize })],
             ...(nonEmptyString(contextToken) ? { context_token: contextToken.trim() } : {}),
             ...(nonEmptyString(runId) ? { run_id: runId.trim() } : {}),
           },

package/src/channels/weixin/weixin-bridge.mjs

@@ -36,7 +36,11 @@ import {
 } from '../shared/preset-command.mjs';
 import { runWorkspaceCommand } from '../shared/workspace-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import {
   hasInboundImages,
   imagePromptDiagnostic,
@@ -262,6 +266,8 @@ function artifactFailureText(fileName, error) {
       return t('结果文件「{name}」已生成，但微信机器人当前没有文件消息发送权限，请检查机器人文件消息能力。', { name });
     case 'artifact-too-large':
       return t('结果文件「{name}」超过当前微信会话可发送的文件大小，未发送。', { name });
+    case 'artifact-upload-timeout':
+      return t('结果文件「{name}」上传微信时长时间没有进展，已超时，文件尚未发送。请检查网络后重试，或压缩、拆分文件后发送。', { name });
     case 'artifact-rate-limited':
       return t('结果文件「{name}」暂时被微信限流，未能发送，请稍后重试。', { name });
     case 'artifact-provider-rejected':
@@ -707,6 +713,11 @@ export class WeixinHarnessBridge {
         || this.#approvals.hasPending(key),
       control: { owner: this, key },
       deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        'direct',
+        () => ({ channel: 'weixin', senderId: sender, chatId: sender }),
+      ),
     });
     if (result?.stopped) {
       await Promise.allSettled([
@@ -825,6 +836,8 @@ export class WeixinHarnessBridge {
           key,
           text,
           content,
+          titleText: batchSubmission?.title,
+          sourceGuidance: snapshot?.config?.guidance,
           contextEnhanced,
           createOptions: { signal: this.#signal },
           existsOptions: { signal: this.#signal },