@xmanrui/dsh-im 4.21.0 → 4.21.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.21.0",
+  "version": "4.21.1",
   "description": "把十一种 IM 渠道和公网 AI Office 接入本机 DeepSeek Harness。 Connect eleven IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",

package/plugin-src/host/index.mjs

@@ -17,6 +17,7 @@ import { installDeliveryRpc } from './delivery-rpc.mjs';
 import { installDeliveryHttp } from './delivery-http.mjs';
 import { createDeliveryService } from './delivery-service.mjs';
 import { installInboundTtlRpc } from './inbound-ttl-rpc.mjs';
+import { installInjectedContext } from './injected-context.mjs';
 import { installSessionSyncCoordinator } from './session-sync-coordinator.mjs';
 import { installSessionTitlePrefix } from './session-title-prefix.mjs';
 import { installUpdateRpc } from './update-rpc.mjs';
@@ -41,6 +42,7 @@ export function createImHostPlugin(internals = {}) {
   const startHostLanguageRpc = internals.installHostLanguageRpc ?? installHostLanguageRpc;
   const startUpdate = internals.installUpdateRpc ?? installUpdateRpc;
   const startInboundTtl = internals.installInboundTtlRpc ?? installInboundTtlRpc;
+  const startInjectedContext = internals.installInjectedContext ?? installInjectedContext;
   const startDelivery = internals.installDeliveryRpc ?? installDeliveryRpc;
   const startDeliveryHttp = internals.installDeliveryHttp ?? installDeliveryHttp;
   const startSessionSync = internals.installSessionSyncCoordinator
@@ -139,6 +141,11 @@ export function createImHostPlugin(internals = {}) {
     const logger = typeof ctx?.logger === 'function'
       ? ctx.logger(name)
       : (ctx?.logger ?? console);
+    try {
+      startInjectedContext(ctx, { logger });
+    } catch (error) {
+      logger.error?.('[dsh-im] failed to activate injected-context pairing; prompts keep the inline prefix', error);
+    }
     if (ctx?.connection?.fetch) {
       if (hostLanguage) {
         try {

package/plugin-src/host/injected-context.mjs

@@ -0,0 +1,104 @@
+import { getImHostLanguage } from '../../src/channels/shared/i18n.mjs';
+import { rewriteInjectedContextMessages } from '../../src/channels/shared/injected-context.mjs';
+import {
+  IM_SOURCE_GUIDANCE_CONTEXT,
+  IM_SOURCE_GUIDANCE_ORDER,
+  imSourceGuidance,
+} from '../../src/channels/shared/im-source-guidance.mjs';
+
+/** Row label for a quoted reply, in the mirrored Host interface language. */
+const REPLY_LABELS = Object.freeze({ zh: '\u5f15\u7528', en: 'Quoted' });
+
+/** Row label for a source block that names no readable field of its own. */
+const SOURCE_LABELS = Object.freeze({ zh: '\u6765\u6e90', en: 'Source' });
+
+/** Read the current reply-row label; an unknown language falls back to English. */
+function replyLabel() {
+  try {
+    return getImHostLanguage() === 'en' ? REPLY_LABELS.en : REPLY_LABELS.zh;
+  } catch {
+    return REPLY_LABELS.en;
+  }
+}
+
+/** Read the current nameless-source-row label; unknown languages fall back. */
+function sourceLabel() {
+  try {
+    return getImHostLanguage() === 'en' ? SOURCE_LABELS.en : SOURCE_LABELS.zh;
+  } catch {
+    return SOURCE_LABELS.en;
+  }
+}
+
+/**
+ * Pair every injected context block with the user message that carried it, and
+ * materialize the source guidance as session-level prompt context.
+ *
+ * The prompt RPC cannot carry a message source, so a channel writes its source
+ * block, guidance and quoted reply into the prompt text. `agent/pre-step` is
+ * the one point where the claimed messages are already known and nothing is
+ * committed yet: splitting the blocks there records each as its own
+ * plugin-sourced message next to exactly the user message it belongs to,
+ * whatever the inbox interleaved meanwhile. A Host without the Agent loop never
+ * dispatches the event, and the prompt then keeps its inline blocks.
+ *
+ * Guidance is not per message but per conversation, so it is registered as
+ * dynamic prompt context instead: the Host appends one durable snapshot per
+ * Session and only re-renders it when a channel publishes different guidance.
+ * Deployment policy still decides whether such snapshots exist at all, which is
+ * why the message-side copy is kept until a channel has published a matching
+ * value for that Session.
+ *
+ * @param ctx - owning Host context.
+ * @param options.logger - Host logger for a rewrite that could not be trusted.
+ * @param options.registry - guidance registry; tests inject their own.
+ * @returns the Cordis disposer, or null when the context cannot listen.
+ */
+export function installInjectedContext(ctx, { logger, registry = imSourceGuidance } = {}) {
+  if (typeof ctx?.on !== 'function') return null;
+
+  const startGuidanceContext = (promptCtx) => {
+    if (typeof promptCtx?.systemPrompt?.context !== 'function') return null;
+    return promptCtx.systemPrompt.context({
+      name: IM_SOURCE_GUIDANCE_CONTEXT,
+      order: IM_SOURCE_GUIDANCE_ORDER,
+      text: (assembly) => registry.get(assembly?.agent?.session?.id) ?? '',
+    });
+  };
+  if (typeof ctx.inject === 'function') {
+    // Same gating the outbound artifact tool uses: register once the service
+    // exists instead of requiring it at load time.
+    ctx.inject(['systemPrompt'], startGuidanceContext);
+  } else {
+    startGuidanceContext(ctx);
+  }
+
+  const disposeDisposed = ctx.on('agent/disposed', ({ agent }) => {
+    const sessionId = agent?.session?.id;
+    if (typeof sessionId === 'string') registry.forget(sessionId);
+  }, { global: true });
+
+  const listener = async ({ agent }, next) => {
+    const decision = await next();
+    if (decision === null || typeof decision !== 'object' || decision.kind !== 'enter') {
+      return decision;
+    }
+    try {
+      const rewritten = rewriteInjectedContextMessages(decision.messages, {
+        labels: { reply: replyLabel(), source: sourceLabel() },
+        ownedGuidance: registry.get(agent?.session?.id),
+      });
+      return rewritten === null ? decision : { ...decision, messages: rewritten };
+    } catch (error) {
+      // A failed split must never cost the user their message: the blocks then
+      // stay inline, which is the same fallback a Host without Agents uses.
+      logger?.warn?.('[dsh-im] unable to split the injected context blocks:', error?.message ?? error);
+      return decision;
+    }
+  };
+  const disposePreStep = ctx.on('agent/pre-step', listener, { global: true });
+  return () => {
+    disposePreStep?.();
+    disposeDisposed?.();
+  };
+}

package/src/channels/dingtalk/dingtalk-bridge.mjs

@@ -30,7 +30,11 @@ import {
 } from '../shared/preset-command.mjs';
 import { runWorkspaceCommand } from '../shared/workspace-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import {
   BatchInputManager,
   batchInputBusyMessage,
@@ -43,6 +47,7 @@ import {
   imagePromptUserMessage,
 } from '../shared/image-prompt.mjs';
 import {
+  InboundFileError,
   hasInboundFiles,
   inboundFileUserMessage,
   prefetchInboundFiles,
@@ -195,6 +200,13 @@ function downloadCodeFor(value) {
   return nonEmptyString(value?.downloadCode) ?? nonEmptyString(value?.pictureDownloadCode);
 }
 
+function dingtalkImageEntries(msgtype, content) {
+  if (msgtype === 'picture') return [content];
+  if (msgtype !== 'richtext') return [];
+  return richTextEntries(content)
+    .filter((entry) => String(entry?.type ?? '').toLowerCase() === 'picture');
+}
+
 function dingtalkTimestampMs(value) {
   const number = typeof value === 'string' && value.trim() ? Number(value) : value;
   if (!Number.isFinite(number) || number < 0) return null;
@@ -206,24 +218,36 @@ function usefulReplyText(value) {
   return text && !/^\[interactive card message\]$/iu.test(text) ? text : null;
 }
 
-function dingtalkReplyReference(message, options) {
-  const replyEnvelope = message?.text;
-  if (replyEnvelope?.isReplyMsg !== true) return null;
-  const replied = replyEnvelope?.repliedMsg;
-  if (!replied || typeof replied !== 'object') {
-    return { unavailableReason: 'not-delivered' };
-  }
-
+function dingtalkReplyMessage(message) {
+  if (message?.text?.isReplyMsg !== true) return null;
+  const replied = message.text.repliedMsg;
+  if (!replied || typeof replied !== 'object') return null;
   const msgtype = nonEmptyString(replied.msgType ?? replied.msgtype)?.toLowerCase() ?? '';
   const repliedContent = parsedMessageContent({ content: replied.content }) ?? {};
-  const pseudoMessage = {
+  // Quoted richText entries use msgType instead of the direct callback's type.
+  const content = msgtype === 'richtext' ? {
+    ...repliedContent,
+    richText: richTextEntries(repliedContent).map((entry) => ({
+      ...entry, type: entry?.type ?? entry?.msgType ?? entry?.msgtype,
+    })),
+  } : repliedContent;
+  return {
     msgtype,
+    robotCode: message.robotCode,
     text: {
       content: nonEmptyString(repliedContent.text)
         ?? (typeof replied.content === 'string' ? replied.content : ''),
     },
-    content: repliedContent,
+    content,
   };
+}
+
+function dingtalkReplyReference(message, options) {
+  if (message?.text?.isReplyMsg !== true) return null;
+  const pseudoMessage = dingtalkReplyMessage(message);
+  if (!pseudoMessage) return { unavailableReason: 'not-delivered' };
+  const replied = message.text.repliedMsg;
+  const { msgtype, content: repliedContent } = pseudoMessage;
   const normalized = dingtalkInboundMessage(pseudoMessage, options);
   let attachments = [];
   if (msgtype === 'picture') {
@@ -232,8 +256,7 @@ function dingtalkReplyReference(message, options) {
     const name = nonEmptyString(repliedContent.fileName ?? repliedContent.file_name);
     attachments = [{ kind: 'file', ...(name ? { name } : {}) }];
   } else if (msgtype === 'richtext') {
-    attachments = richTextEntries(repliedContent)
-      .filter((entry) => String(entry?.type ?? '').toLowerCase() === 'picture')
+    attachments = dingtalkImageEntries(msgtype, repliedContent)
       .map(() => ({ kind: 'image' }));
   } else if (msgtype === 'voice' || msgtype === 'audio') {
     attachments = [{ kind: 'audio' }];
@@ -278,6 +301,43 @@ function dingtalkReplyReference(message, options) {
   };
 }
 
+// Resolve only the immediate quote, after command/interaction routing has finished.
+function prepareDingtalkReplyAttachments(message, promptMessage, options) {
+  const quoted = dingtalkReplyMessage(message);
+  if (!quoted) return promptMessage;
+  if (['audio', 'voice', 'video'].includes(quoted.msgtype)) quoted.msgtype = 'file';
+  const imageCodes = dingtalkImageEntries(quoted.msgtype, quoted.content).map(downloadCodeFor);
+  const fileCodes = quoted.msgtype === 'file' ? [downloadCodeFor(quoted.content)] : [];
+  if ([...imageCodes, ...fileCodes].some((code) => !code)) {
+    throw new InboundFileError(
+      'dingtalk-quoted-attachment-unavailable',
+      'DingTalk did not deliver a download reference for the quoted attachment.',
+      t('钉钉未提供引用附件的下载信息，无法读取原附件。请直接重新发送附件后再提问。'),
+    );
+  }
+  if (imageCodes.length === 0 && fileCodes.length === 0) return promptMessage;
+  const currentType = String(message?.msgtype ?? '').toLowerCase();
+  const currentContent = parsedMessageContent(message);
+  const seen = new Set([
+    ...dingtalkImageEntries(currentType, currentContent).map(downloadCodeFor),
+    ...(currentType === 'file' ? [downloadCodeFor(currentContent)] : []),
+  ].filter(Boolean));
+  const take = (code) => {
+    if (seen.has(code)) return false;
+    seen.add(code);
+    return true;
+  };
+  const normalized = dingtalkInboundMessage(quoted, options);
+  const images = normalized.images.filter((_, index) => take(imageCodes[index]));
+  const files = normalized.files.filter((_, index) => take(fileCodes[index]));
+  const prefetched = prefetchInboundFiles({ files }, { signal: options.signal });
+  return {
+    ...promptMessage,
+    images: [...promptMessage.images, ...images],
+    files: [...promptMessage.files, ...prefetched.files],
+  };
+}
+
 /** Normalize DingTalk picture and richText callbacks into lazy image references. */
 export function dingtalkInboundMessage(message, {
   api,
@@ -291,17 +351,7 @@ export function dingtalkInboundMessage(message, {
   const text = msgtype === 'text'
     ? nonEmptyString(message?.text?.content) ?? ''
     : richEntries.map(richTextEntryText).filter(Boolean).join('\n');
-  const imageCodes = [];
-  if (msgtype === 'picture') {
-    const code = downloadCodeFor(content);
-    if (code) imageCodes.push(code);
-  } else if (msgtype === 'richtext') {
-    for (const entry of richEntries) {
-      if (String(entry?.type ?? '').toLowerCase() !== 'picture') continue;
-      const code = downloadCodeFor(entry);
-      if (code) imageCodes.push(code);
-    }
-  }
+  const imageCodes = dingtalkImageEntries(msgtype, content).map(downloadCodeFor).filter(Boolean);
   const fileCode = msgtype === 'file' ? downloadCodeFor(content) : null;
   const replyTo = dingtalkReplyReference(message, {
     api,
@@ -838,6 +888,17 @@ export class DingtalkHarnessBridge {
       signal: this.#signal, isDirect: String(message.conversationType) === '1',
       pendingInteraction: this.#pendingInteractions.has(key) || this.#approvals.hasPending(key),
       control: { owner: this, key }, deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        String(message.conversationType) === '1' ? 'direct' : 'group',
+        () => ({
+          channel: 'dingtalk',
+          senderId: senderStaffId(message),
+          senderName: message.senderNick,
+          conversationTitle: message.conversationTitle,
+          chatId: message.conversationId,
+        }),
+      ),
     };
     const access = evaluateInboundAccess(this.#accessPolicy, {
       conversationType: options.isDirect ? 'direct' : 'group',
@@ -1102,6 +1163,17 @@ export class DingtalkHarnessBridge {
           || this.#approvals.hasPending(key),
         control: { owner: this, key },
         deferredDelivery: this.#deferred,
+        enhancement: captureContextEnhancementSource(
+          this.#contextEnhancement,
+          String(message.conversationType) === '1' ? 'direct' : 'group',
+          () => ({
+            channel: 'dingtalk',
+            senderId: senderStaffId(message),
+            senderName: message.senderNick,
+            conversationTitle: message.conversationTitle,
+            chatId: message.conversationId,
+          }),
+        ),
       },
     );
     if (result?.stopped) {
@@ -1261,8 +1333,12 @@ export class DingtalkHarnessBridge {
         return;
       }
 
-      let content = hasImages || hasReply
-        ? await promptContentForInboundMessage(promptMessage, { signal: this.#signal })
+      const modelMessage = prepareDingtalkReplyAttachments(message, promptMessage, {
+        api: this.#api, clientId: this.#clientId, clientSecret: this.#clientSecret,
+        signal: this.#signal,
+      });
+      let content = hasInboundImages(modelMessage) || hasReply
+        ? await promptContentForInboundMessage(modelMessage, { signal: this.#signal })
         : undefined;
       const snapshot = this.#acceptedMessageIds.get(messageId);
       let contextEnhanced = false;
@@ -1300,6 +1376,7 @@ export class DingtalkHarnessBridge {
         text,
         content,
         titleText: batchSubmission?.title,
+        sourceGuidance: snapshot?.config?.guidance,
         contextEnhanced,
         createOptions: { signal: this.#signal },
         existsOptions: { signal: this.#signal },
@@ -1317,7 +1394,7 @@ export class DingtalkHarnessBridge {
             requiresMention: String(message.conversationType) === '2',
           }),
           onInteractionResolved: (resolution) => this.#handleInteractionResolved(resolution),
-          files: promptMessage.files,
+          files: modelMessage.files,
         },
       });
       if (batchSubmission) {

package/src/channels/feishu/bridge.mjs

@@ -60,7 +60,11 @@ import {
 } from '../shared/workspace-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
 import { createDeferredDeliveryCoordinator, deferredOutcomeText } from '../shared/deferred-delivery-coordinator.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import { deliverOutboundArtifacts } from '../shared/semantic/artifact-delivery.mjs';
 import {
   createDeliveryReceipt,
@@ -1416,6 +1420,16 @@ export class FeishuHarnessBridge {
         hasFiles: hasInboundFiles(message),
         pendingInteraction: this.#hasPendingInteraction(key),
         control: { owner: this, key },
+        enhancement: captureContextEnhancementSource(
+          this.#contextEnhancement,
+          event.message.chat_type === 'p2p' ? 'direct' : 'group',
+          () => ({
+            channel: 'feishu',
+            senderId: senderOpenId(event),
+            chatId: event.message.chat_id,
+            threadId: event.message.thread_id,
+          }),
+        ),
       },
     );
     if (result?.stopped) {
@@ -2475,7 +2489,7 @@ export class FeishuHarnessBridge {
         await this.#sendCard(chatId, customSteerCard(), { key, updateMessageId: messageId, replyTo: messageId });
         return;
       }
-      await this.#sendSteer({ key, chatId, messageId }, raw);
+      await this.#sendSteer({ key, chatId, messageId, actor }, raw);
       return;
     }
     if (action === 'presets') {
@@ -3201,11 +3215,26 @@ export class FeishuHarnessBridge {
    */
   async #sendSteer(entry, text) {
     const { key, chatId } = entry;
+    // Card routes carry the conversation key, not the raw event, so the topic
+    // id is recovered from the key the channel itself minted.
+    const threadId = typeof key === 'string'
+      ? /(?:^|:)thread:(.+)$/u.exec(key)?.[1]
+      : undefined;
     const result = await runControlCommand(
       `/steer ${text}`, this.#harness, this.#state, key, {
         signal: this.#signal,
         pendingInteraction: this.#hasPendingInteraction(key),
         control: { owner: this, key },
+        enhancement: captureContextEnhancementSource(
+          this.#contextEnhancement,
+          typeof key === 'string' && key.startsWith('p2p:') ? 'direct' : 'group',
+          () => ({
+            channel: 'feishu',
+            senderId: entry.actor ?? entry.operatorOpenId,
+            chatId,
+            threadId,
+          }),
+        ),
       },
     );
     await this.#send(chatId, result?.message || t('已提交补充指令。'), { replyTo: entry.messageId ?? null });
@@ -4964,6 +4993,7 @@ export class FeishuHarnessBridge {
       text,
       content,
       titleText: event.batchSubmission?.title,
+      sourceGuidance: snapshot?.config?.guidance,
       contextEnhanced,
       createOptions: { signal: this.#signal },
       existsOptions: { signal: this.#signal },
@@ -5207,6 +5237,7 @@ export class FeishuHarnessBridge {
         text,
         content,
         titleText: event.batchSubmission?.title,
+        sourceGuidance: snapshot?.config?.guidance,
         contextEnhanced,
         createOptions: { signal: this.#signal },
         existsOptions: { signal: this.#signal },
@@ -5287,6 +5318,7 @@ export class FeishuHarnessBridge {
             text,
             content,
             titleText: event.batchSubmission?.title,
+            sourceGuidance: snapshot?.config?.guidance,
             contextEnhanced,
             createOptions: { signal: this.#signal },
             existsOptions: { signal: this.#signal },
@@ -5358,6 +5390,7 @@ export class FeishuHarnessBridge {
         text,
         content,
         titleText: event.batchSubmission?.title,
+        sourceGuidance: snapshot?.config?.guidance,
         contextEnhanced,
         createOptions: { signal: this.#signal },
         existsOptions: { signal: this.#signal },

package/src/channels/qq/qq-bridge.mjs

@@ -22,7 +22,11 @@ import {
   runPresetCommand,
 } from '../shared/preset-command.mjs';
 import { askInWorkspaceSession } from '../shared/workspace-session.mjs';
-import { captureContextEnhancement, enhanceContextContent } from '../shared/context-enhancement.mjs';
+import {
+  captureContextEnhancement,
+  captureContextEnhancementSource,
+  enhanceContextContent,
+} from '../shared/context-enhancement.mjs';
 import {
   BatchInputManager,
   batchInputBusyMessage,
@@ -759,7 +763,17 @@ export class QqHarnessBridge {
       return { message: t('当前任务仍在运行，请先停止任务或等待任务完成后再执行此操作。') };
     }
     const options = { signal: this.#signal, isDirect: message.kind === 'c2c', pendingInteraction,
-      control: { owner: this, key }, deferredDelivery: this.#deferred };
+      control: { owner: this, key }, deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        message.kind === 'c2c' ? 'direct' : 'group',
+        () => ({
+          channel: 'qq',
+          senderId: nonEmptyString(message.senderId),
+          senderName: message.kind === 'group' ? message.senderName : undefined,
+          chatId: message.kind === 'group' ? message.groupOpenid : message.senderId,
+        }),
+      ) };
     // Existing runners own all Host mutations and control authorization.
     const execute = async () => {
       this.#signal?.throwIfAborted();
@@ -824,6 +838,16 @@ export class QqHarnessBridge {
         || this.#approvals.hasPending(key),
       control: { owner: this, key },
       deferredDelivery: this.#deferred,
+      enhancement: captureContextEnhancementSource(
+        this.#contextEnhancement,
+        message.kind === 'c2c' ? 'direct' : 'group',
+        () => ({
+          channel: 'qq',
+          senderId: nonEmptyString(message.senderId),
+          senderName: message.kind === 'group' ? message.senderName : undefined,
+          chatId: message.kind === 'group' ? message.groupOpenid : message.senderId,
+        }),
+      ),
     });
     if (result?.stopped) {
       await Promise.allSettled([
@@ -1046,6 +1070,7 @@ export class QqHarnessBridge {
           text,
           content,
           titleText: batchSubmission?.title,
+          sourceGuidance: snapshot?.config?.guidance,
           contextEnhanced,
           createOptions: { signal: this.#signal },
           existsOptions: { signal: this.#signal },

package/src/channels/shared/context-enhancement.mjs

@@ -4,6 +4,23 @@ export const CONTEXT_ENHANCEMENT_FIELDS = Object.freeze([
   'chatId', 'threadId', 'botId',
 ]);
 
+/**
+ * Tag grammar of the injected context prefix. The producer here and the
+ * Host-side splitter in `injected-context.mjs` share these literals, so the
+ * prefix a channel writes can never drift from the parser that pairs it.
+ */
+export const INJECTED_CONTEXT_TAGS = Object.freeze({
+  sourceOpen: '<dsh_im_source>',
+  sourceClose: '</dsh_im_source>',
+  guidanceOpen: '<dsh_im_source_guidance>',
+  guidanceClose: '</dsh_im_source_guidance>',
+  replyOpen: '<dsh_im_reply_to>',
+  replyClose: '</dsh_im_reply_to>',
+});
+
+/** Separator the producer joins prefix blocks with, and the splitter consumes. */
+export const INJECTED_CONTEXT_SEPARATOR = '\n\n';
+
 export const CONTEXT_ENHANCEMENT_GUIDANCE_MAX_LENGTH = 8_000;
 export const CONTEXT_GROUP_GUIDANCE_EXAMPLE = `仅依据当前消息的 <dsh_im_source> 中实际提供的字段理解来源；没有提供的字段不要猜测或补全。
 当前消息来自群聊，请使用严肃、克制、简洁的表达方式。`;
@@ -138,6 +155,26 @@ export function captureContextEnhancement(provider, conversationType) {
   }
 }
 
+/**
+ * Capture the enhancement one prompt replays, together with the source factory
+ * that fills its selected fields.
+ *
+ * Ordinary messages snapshot this when they are accepted, so a queued message
+ * keeps the settings it arrived under. A control command is never queued, so it
+ * captures at the moment it runs -- and it must, because the source fields of a
+ * steering instruction belong to whoever issued it, not to the message that
+ * opened the turn.
+ *
+ * @param provider - the bot's enhancement provider.
+ * @param conversationType - the inbound message's scope.
+ * @param source - factory for the currently selected source fields.
+ * @returns the enhancement to apply, or null when the scope is off.
+ */
+export function captureContextEnhancementSource(provider, conversationType, source) {
+  const snapshot = captureContextEnhancement(provider, conversationType);
+  return snapshot === null ? null : Object.freeze({ snapshot, source });
+}
+
 function sourceString(value, field) {
   if (field === 'senderId' && (typeof value === 'bigint' || Number.isFinite(value))) {
     value = String(value);
@@ -165,7 +202,7 @@ function sourceBlock(snapshot, sourceFactory) {
   const json = JSON.stringify(projected).replace(/[<>&]/g, (character) => ({
     '<': '\\u003c', '>': '\\u003e', '&': '\\u0026',
   })[character]);
-  return `<dsh_im_source>${json}</dsh_im_source>`;
+  return `${INJECTED_CONTEXT_TAGS.sourceOpen}${json}${INJECTED_CONTEXT_TAGS.sourceClose}`;
 }
 
 function guidanceBlock(guidance) {
@@ -173,7 +210,7 @@ function guidanceBlock(guidance) {
   const body = guidance.replace(/<\/?dsh_im_source_guidance\b[^>]*(?:>|$)/gi, (tag) => (
     tag.replace(/</g, '&lt;').replace(/>/g, '&gt;')
   ));
-  return `<dsh_im_source_guidance>\n${body}\n</dsh_im_source_guidance>`;
+  return `${INJECTED_CONTEXT_TAGS.guidanceOpen}\n${body}\n${INJECTED_CONTEXT_TAGS.guidanceClose}`;
 }
 
 /** Add one text prefix; never inspect sources, format or copy content when off. */
@@ -183,7 +220,7 @@ export function enhanceContextContent(content, snapshot, sourceFactory) {
     const blocks = [sourceBlock(snapshot, sourceFactory), guidanceBlock(snapshot.config.guidance)]
       .filter(Boolean);
     if (blocks.length === 0) return content;
-    const prefix = blocks.join('\n\n');
+    const prefix = blocks.join(INJECTED_CONTEXT_SEPARATOR);
     if (typeof content === 'string') return `${prefix}\n\n${content}`;
     if (Array.isArray(content)) return [{ type: 'text', text: prefix }, ...content];
     return content;

package/src/channels/shared/control-command.mjs

@@ -1,3 +1,4 @@
+import { enhanceContextContent } from './context-enhancement.mjs';
 import { t } from './i18n.mjs';
 import manifest from '../../../package.json' with { type: 'json' };
 
@@ -41,6 +42,7 @@ export async function runControlCommand(text, harness, state, key, {
   pendingInteraction = false,
   control,
   deferredDelivery,
+  enhancement,
 } = {}) {
   if (!isControlCommand(text)) return null;
   const command = text.trim();
@@ -93,8 +95,13 @@ export async function runControlCommand(text, harness, state, key, {
   if (typeof session.steerActiveTurn !== 'function') {
     throw new TypeError('Harness session does not support steering active turns');
   }
+  // A mid-turn correction carries the same provenance as the message that
+  // opened the turn, so a group member who steers is identified too.
+  const steering = enhancement
+    ? enhanceContextContent(instruction, enhancement.snapshot, enhancement.source)
+    : instruction;
   const steered = await session.steerActiveTurn(
-    instruction,
+    steering,
     control,
     requestOptions(signal),
   );

package/src/channels/shared/harness-client.mjs

@@ -13,6 +13,7 @@ import {
   imageFileSourcesFromContent,
   isModelImageRejection,
 } from './image-prompt.mjs';
+import { imSourceGuidance } from './im-source-guidance.mjs';
 import { outboundArtifactRegistry } from './semantic/artifact.mjs';
 import { t } from './i18n.mjs';
 import { watchHarnessMux } from './harness-mux.mjs';
@@ -1508,6 +1509,12 @@ export class HarnessClient {
       if (!Array.isArray(content) || content.length === 0) {
         throw new TypeError('Harness prompt content is required');
       }
+      // Publish the guidance the channel's own captured settings produced, so
+      // the Host materializes it once per Session as prompt context instead of
+      // per user message. It is passed in and never parsed back out of
+      // `content`: the prompt also carries whatever the user typed, and a
+      // message that merely looks like a guidance block is not configuration.
+      imSourceGuidance.publish(sessionId, options.sourceGuidance);
       const clientTimeZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
       const sendPrompt = (promptContent) => this.rpc('session.prompt', {
         sessionId,

package/src/channels/shared/i18n-en/dingtalk.mjs

@@ -16,6 +16,7 @@ export default {
 
   '钉钉未能换取图片下载地址，请重新发送；若持续失败，请检查机器人的“企业内机器人发送消息权限”。': 'DingTalk could not provide the image download address. Please resend; if it keeps failing, check the bot\'s "Send messages as an internal robot" permission.',
   '钉钉没有返回图片下载地址，请重新发送。': 'DingTalk did not return an image download address. Please resend.',
+  '钉钉未提供引用附件的下载信息，无法读取原附件。请直接重新发送附件后再提问。': 'DingTalk did not provide download information for the quoted attachment, so it cannot be read. Please resend the attachment directly with your question.',
   '钉钉返回的图片临时地址无法读取，请重新发送。': 'The temporary image address returned by DingTalk could not be read. Please resend.',
   '结果文件「{name}」发送结果未能确认，请先检查聊天内是否已收到，不要立即重试。': 'Delivery of the result file "{name}" could not be confirmed. Please check whether it already arrived in the chat before retrying.',
   '结果文件「{name}」已生成，但钉钉应用或机器人缺少文件消息权限。请开通应用 qyapi_base 权限，并确认机器人具备文件消息发送能力。': 'Result file "{name}" was generated, but the DingTalk app or bot lacks file message permission. Enable the app\'s qyapi_base permission and make sure the bot can send file messages.',

package/src/channels/shared/i18n-en/weixin.mjs

@@ -6,6 +6,7 @@ export default {
   '微信已连接 DeepSeek Harness。': 'WeChat is connected to DeepSeek Harness.',
   '结果文件「{name}」已生成，但微信机器人当前没有文件消息发送权限，请检查机器人文件消息能力。': 'The result file "{name}" was generated, but the WeChat bot currently has no permission to send file messages. Please check the bot\'s file messaging capability.',
   '结果文件「{name}」超过当前微信会话可发送的文件大小，未发送。': 'The result file "{name}" exceeds the file size limit of the current WeChat conversation and was not sent.',
+  '结果文件「{name}」上传微信时长时间没有进展，已超时，文件尚未发送。请检查网络后重试，或压缩、拆分文件后发送。': 'The upload of "{name}" to WeChat stalled and timed out. The file has not been sent. Check your network and retry, or compress or split the file before sending.',
   '结果文件「{name}」暂时被微信限流，未能发送，请稍后重试。': 'The result file "{name}" was temporarily rate-limited by WeChat and was not sent. Please try again later.',
   '结果文件「{name}」已生成，但微信拒绝了该文件消息。': 'The result file "{name}" was generated, but WeChat rejected the file message.',
   '结果文件「{name}」已生成，但暂时未能通过微信发送，请稍后重试。': 'The result file "{name}" was generated but could not be sent via WeChat right now. Please try again later.',
@@ -72,6 +73,7 @@ export default {
   '微信文件上传失败（HTTP {status}）。': 'The WeChat file upload failed (HTTP {status}).',
   '微信文件上传响应缺少下载参数。': 'The WeChat file upload response is missing the download parameter.',
   '微信文件上传失败。': 'The WeChat file upload failed.',
+  '微信文件上传长时间没有进展，已超时。': 'The WeChat file upload stalled and timed out.',
   '拒绝访问不受信任的微信服务地址。': 'Refusing to access an untrusted WeChat service URL.',
   '微信服务请求失败（HTTP {status}）。': 'The WeChat service request failed (HTTP {status}).',
   '微信服务返回了无法解析的响应。': 'The WeChat service returned an unparseable response.',