@xmanrui/dsh-im 4.22.0 → 4.23.0

package/src/channels/wecom/wecom-controller.mjs

@@ -1,3 +1,4 @@
+import { extractConnectionEvidence, atConnectionStage, createConnectionDiagnostics } from '../shared/connection-error.mjs';
 import { randomUUID } from 'node:crypto';
 
 import { deriveWecomBotIdentity, maskWecomBotId } from './config-store.mjs';
@@ -40,6 +41,7 @@ export class WecomController {
   #createRuntime;
   #deleteState;
   #logger;
+  #diagnostics;
   #runtimes = new Map();
   #errors = new Map();
   #attempts = new Map();
@@ -74,6 +76,14 @@ export class WecomController {
     this.#createRuntime = createRuntime;
     this.#deleteState = deleteState;
     this.#logger = logger;
+    this.#diagnostics = createConnectionDiagnostics({ channel: 'wecom', logger });
+  }
+
+  get diagnostics() { return this.#diagnostics; }
+
+  #failure(error, code, message) {
+    const stage = code.startsWith('qr-') ? 'qr.begin' : code === 'activation-failed' ? 'activation' : 'connection.start';
+    return this.#diagnostics.report(error, { reuse: true, stage, publicError: { code, message } }).publicError;
   }
 
   async initialize() {
@@ -82,16 +92,16 @@ export class WecomController {
       await this.#withBotTransition(config.botId, async () => {
         const existing = this.#runtimes.get(config.botId)?.status;
         if (this.#closed || existing?.ready || existing?.wecomConnectionState === 'connecting') return;
-        const secret = await this.#resolveSecret(config.secretRef);
-        if (!secret) {
-          this.#errors.set(config.botId, safeError('missing-secret', t('企业微信机器人凭据缺失，请移除后重新扫码。')));
-          return;
-        }
         try {
+          const secret = await this.#resolveSecret(config.secretRef);
+          if (!secret) {
+            this.#errors.set(config.botId, safeError('missing-secret', t('企业微信机器人凭据缺失，请移除后重新扫码。')));
+            return;
+          }
           await this.#startRuntime(config, secret);
           this.#errors.delete(config.botId);
         } catch (error) {
-          this.#errors.set(config.botId, safeError('connection-failed', t('企业微信连接未就绪，插件会自动重试。')));
+          this.#errors.set(config.botId, this.#failure(error, 'connection-failed', t('企业微信连接未就绪，插件会自动重试。')));
           this.#logger.warn?.(`[dsh-im:wecom] bot ${config.botId} failed to initialize`);
         } finally {
           this.#touch();
@@ -137,7 +147,7 @@ export class WecomController {
       record.state = record.controller.signal.aborted ? 'cancelled' : 'failed';
       record.error = record.controller.signal.aborted
         ? safeError('cancelled', t('扫码绑定已取消。'))
-        : safeError('qr-start-failed', t('无法生成企业微信二维码，请稍后重试。'));
+        : this.#failure(error, 'qr-start-failed', t('无法生成企业微信二维码，请稍后重试。'));
       this.#finishAttempt(record);
       throw error;
     }
@@ -180,7 +190,7 @@ export class WecomController {
     await this.#withBotTransition(identity.botId, async () => {
       if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
       const previousConfig = this.#configStore.getByRemoteBotId(remoteBotId);
-      const previousSecret = await this.#credentials.resolve(identity.secretRef).catch(() => undefined);
+      const previousSecret = await atConnectionStage('credential.read', () => this.#credentials.resolve(identity.secretRef), 'credential-store');
       if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
       const config = {
         botId: identity.botId,
@@ -189,9 +199,9 @@ export class WecomController {
         createdAt: previousConfig?.createdAt ?? new Date().toISOString(),
         connectedAt: new Date().toISOString(),
       };
-      await this.#credentials.set(identity.secretRef, normalizedSecret);
+      await atConnectionStage('credential.save', () => this.#credentials.set(identity.secretRef, normalizedSecret), 'credential-store');
       try {
-        await this.#configStore.save(config);
+        await atConnectionStage('account.save', () => this.#configStore.save(config), 'account-config');
       } catch (error) {
         await this.#restoreCredential(identity.secretRef, previousSecret);
         throw error;
@@ -234,7 +244,7 @@ export class WecomController {
         await this.#startRuntime(config, secret);
         this.#errors.delete(botId);
       } catch (error) {
-        this.#errors.set(botId, safeError('connection-failed', t('企业微信连接仍未就绪，请稍后重试。')));
+        this.#errors.set(botId, this.#failure(error, 'connection-failed', t('企业微信连接仍未就绪，请稍后重试。')));
         throw error;
       } finally {
         this.#touch();
@@ -272,28 +282,32 @@ export class WecomController {
   }
 
   async deleteBot(botId) {
+    const warnings = [];
     const config = this.#configStore.get(botId);
     if (!config) throw new Error('Unknown Enterprise WeChat bot');
     await this.#withBotTransition(botId, async () => {
-      const previous = await this.#credentials.resolve(config.secretRef).catch(() => undefined);
+      const previous = await atConnectionStage('credential.read', () => this.#credentials.resolve(config.secretRef), 'credential-store');
       await this.#stopRuntime(botId);
       try {
-        await this.#credentials.unset(config.secretRef);
-        await this.#configStore.remove(botId);
+        await atConnectionStage('credential.remove', () => this.#credentials.unset(config.secretRef), 'credential-store');
+        await atConnectionStage('account.remove', () => this.#configStore.remove(botId), 'account-config');
       } catch (error) {
-        if (previous?.value) {
-          await this.#credentials.set(config.secretRef, previous.value).catch(() => undefined);
-          await this.#startRuntime(config, previous.value).catch(() => undefined);
+        if (!this.#configStore.get(botId)) {
+          warnings.push(this.#diagnostics.report(error, { operation: 'bot.delete', stage: 'workspace.cleanup', warning: true,
+            publicError: { code: 'workspace-cleanup-failed', message: '账号已移除，但本地状态清理失败。' } }).publicError);
+        } else {
+          if (previous?.value) {
+            await atConnectionStage('credential.save', () => this.#credentials.set(config.secretRef, previous.value), 'credential-store').catch(() => undefined);
+            await this.#startRuntime(config, previous.value).catch(() => undefined);
+          }
+          throw new Error('Unable to remove the Enterprise WeChat bot safely.', { cause: error });
         }
-        throw new Error('Unable to remove the Enterprise WeChat bot safely.', { cause: error });
       }
-      await this.#deleteState({ botId, config }).catch((error) => {
-        this.#logger.warn?.(`[dsh-im:wecom] bot ${botId} state cleanup failed:`, error);
-      });
+      await this.#deleteState({ botId, config }).catch(error => { warnings.push(this.#diagnostics.report(error, { reuse: true, operation: 'bot.delete', stage: 'state.cleanup', resource: 'account-state', warning: true, publicError: { code: 'cleanup-failed', message: '账号已移除，但本地状态清理失败。' } }).publicError); });
       this.#errors.delete(botId);
       this.#touch();
     });
-    return this.status();
+    return { ...this.status(), ...(warnings.length ? { warnings } : {}) };
   }
 
   status() {
@@ -324,7 +338,7 @@ export class WecomController {
           messagesReplied: runtimeStatus?.messagesReplied ?? 0,
         },
         lastMessageError: publicMessageFailure(runtimeStatus?.lastMessageError),
-        error: structuredClone(this.#errors.get(config.botId) ?? null),
+        error: structuredClone(runtimeStatus?.error ?? this.#errors.get(config.botId) ?? null),
       };
     });
     const connectedCount = bots.filter((bot) => bot.connected).length;
@@ -379,7 +393,7 @@ export class WecomController {
     } catch (error) {
       if (record.controller.signal.aborted) return;
       record.state = 'failed';
-      record.error = safeError('qr-connect-failed', t('企业微信扫码服务暂时不可用，请重新生成二维码。'));
+      record.error = this.#failure(error, 'qr-connect-failed', t('企业微信扫码服务暂时不可用，请重新生成二维码。'));
       this.#logger.warn?.('[dsh-im:wecom] QR polling failed');
       this.#finishAttempt(record);
     }
@@ -399,7 +413,7 @@ export class WecomController {
         record.error = safeError('cancelled', t('扫码绑定已取消。'));
       } else {
         record.state = 'failed';
-        record.error = safeError('activation-failed', t('企业微信已授权，但无法安全保存接入配置。'));
+        record.error = this.#failure(error, 'activation-failed', t('企业微信已授权，但无法安全保存接入配置。'));
         this.#logger.error?.('[dsh-im:wecom] provisioning failed');
       }
     } finally {
@@ -410,7 +424,7 @@ export class WecomController {
   async #activateBot(record, { remoteBotId, secret }) {
     const identity = deriveWecomBotIdentity(remoteBotId);
     const previousConfig = this.#configStore.getByRemoteBotId(remoteBotId);
-    const previousSecret = await this.#credentials.resolve(identity.secretRef).catch(() => undefined);
+    const previousSecret = await atConnectionStage('credential.read', () => this.#credentials.resolve(identity.secretRef), 'credential-store');
     const config = {
       botId: identity.botId,
       remoteBotId,
@@ -419,10 +433,10 @@ export class WecomController {
       connectedAt: new Date().toISOString(),
     };
     return this.#withBotTransition(identity.botId, async () => {
-      await this.#credentials.set(identity.secretRef, secret);
+      await atConnectionStage('credential.save', () => this.#credentials.set(identity.secretRef, secret), 'credential-store');
       try {
         if (record.controller.signal.aborted) throw new DOMException('Cancelled', 'AbortError');
-        await this.#configStore.save(config);
+        await atConnectionStage('account.save', () => this.#configStore.save(config), 'account-config');
       } catch (error) {
         await this.#restoreCredential(identity.secretRef, previousSecret);
         throw error;
@@ -434,19 +448,19 @@ export class WecomController {
       } catch (error) {
         if (record.controller.signal.aborted) {
           await this.#stopRuntime(identity.botId);
-          if (previousConfig) await this.#configStore.save(previousConfig).catch(() => undefined);
+          if (previousConfig) await atConnectionStage('account.save', () => this.#configStore.save(previousConfig), 'account-config').catch(() => undefined);
           else {
-            const removed = await this.#configStore.remove(identity.botId).catch(() => null);
+            const removed = await atConnectionStage('account.remove', () => this.#configStore.remove(identity.botId), 'account-config').catch(() => null);
             if (removed) {
               await this.#deleteState({ botId: identity.botId, config }).catch((cleanupError) => {
-                this.#logger.warn?.('[dsh-im:wecom] cancelled bot state cleanup failed:', cleanupError);
+                this.#logger.warn?.('[dsh-im:wecom] cancelled bot state cleanup failed:', extractConnectionEvidence(cleanupError).details);
               });
             }
           }
           await this.#restoreCredential(identity.secretRef, previousSecret);
           throw error;
         }
-        this.#errors.set(identity.botId, safeError('connection-failed', t('企业微信机器人已绑定，消息连接暂未就绪。')));
+        this.#errors.set(identity.botId, this.#failure(error, 'connection-failed', t('企业微信机器人已绑定，消息连接暂未就绪。')));
         this.#logger.warn?.(`[dsh-im:wecom] bot ${identity.botId} activation connection failed`);
       }
       this.#touch();
@@ -458,7 +472,7 @@ export class WecomController {
     if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
     await this.#stopRuntime(config.botId);
     if (this.#closed) throw new Error('Enterprise WeChat controller is closed');
-    const runtime = await this.#createRuntime({ botId: config.botId, config, secret });
+    const runtime = await atConnectionStage('runtime.prepare', () => this.#createRuntime({ botId: config.botId, config, secret }));
     if (!runtime || typeof runtime.start !== 'function' || typeof runtime.stop !== 'function') {
       throw new TypeError('createRuntime returned an invalid Enterprise WeChat runtime');
     }
@@ -476,18 +490,18 @@ export class WecomController {
     const runtime = this.#runtimes.get(botId);
     this.#runtimes.delete(botId);
     await runtime?.stop().catch((error) => {
-      this.#logger.warn?.(`[dsh-im:wecom] bot ${botId} failed to stop cleanly:`, error);
+      this.#logger.warn?.(`[dsh-im:wecom] bot ${botId} failed to stop cleanly:`, extractConnectionEvidence(error).details);
     });
   }
 
   async #resolveSecret(ref) {
-    const result = await this.#credentials.resolve(ref).catch(() => undefined);
+    const result = await atConnectionStage('credential.read', () => this.#credentials.resolve(ref), 'credential-store');
     return cleanString(result?.value);
   }
 
   async #restoreCredential(ref, previous) {
-    if (previous?.value) await this.#credentials.set(ref, previous.value).catch(() => undefined);
-    else await this.#credentials.unset(ref).catch(() => undefined);
+    if (previous?.value) await atConnectionStage('credential.save', () => this.#credentials.set(ref, previous.value), 'credential-store').catch(() => undefined);
+    else await atConnectionStage('credential.remove', () => this.#credentials.unset(ref), 'credential-store').catch(() => undefined);
   }
 
   #withBotTransition(botId, operation) {

package/src/channels/wecom/wecom-runtime.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, atConnectionStage } from '../shared/connection-error.mjs';
 import { WSAuthFailureError, WSClient, WSReconnectExhaustedError } from '@wecom/aibot-node-sdk';
 
 import { createWecomBridgeStatus, WecomHarnessBridge } from './wecom-bridge.mjs';
@@ -31,6 +32,7 @@ export class WecomRuntime {
   #contextEnhancement;
   #accessPolicy;
   #logger;
+  #diagnostics;
   #replyTimeoutMs;
   #connectTimeoutMs;
   #maxReconnectAttempts;
@@ -64,7 +66,7 @@ export class WecomRuntime {
     this.#state = state;
     this.#contextEnhancement = contextEnhancement;
     this.#accessPolicy = accessPolicy;
-    this.#logger = logger;
+    this.#logger = logger; this.#diagnostics = createConnectionDiagnostics({ channel: 'wecom', logger });
     this.#replyTimeoutMs = replyTimeoutMs;
     this.#connectTimeoutMs = connectTimeoutMs;
     this.#maxReconnectAttempts = maxReconnectAttempts;
@@ -94,8 +96,8 @@ export class WecomRuntime {
     signal.throwIfAborted();
     this.#status.startedAt = new Date().toISOString();
     this.#status.wecomConnectionState = 'connecting';
-    this.#status.lastError = null;
-    await this.#harness.ensureRunning();
+    this.#status.lastError = null; this.#status.error = null; this.#diagnostics.clear();
+    await atConnectionStage('harness.check', () => this.#harness.ensureRunning());
     this.#status.harnessReachable = true;
 
     const silentSdkLogger = { debug() {}, info() {}, warn() {}, error() {} };
@@ -136,7 +138,7 @@ export class WecomRuntime {
       this.#status.wecomConnectionState = 'connected';
       this.#status.lastCheckedAt = now;
       this.#status.lastConnectedAt = now;
-      this.#status.lastError = null;
+      this.#status.lastError = null; this.#status.error = null; this.#diagnostics.clear();
       readyResolve();
     };
     const onDisconnected = () => {
@@ -159,7 +161,8 @@ export class WecomRuntime {
         this.#status.ready = false;
         this.#status.wecomConnectionState = 'failed';
       }
-      this.#status.lastError = terminal ? error.name : 'connection-error';
+      this.#status.error = this.#diagnostics.report(error, { operation: 'connection.monitor', botId: this.#config?.botId, automatic: true }).publicError;
+      this.#status.lastError = this.#status.error.message;
       this.#logger.warn?.(`[dsh-im:wecom] bot ${this.#config.botId} connection error`);
     };
     const onMessage = (frame) => this.#bridge?.accept(frame);
@@ -191,7 +194,8 @@ export class WecomRuntime {
       }
       this.#status.ready = false;
       this.#status.wecomConnectionState = 'failed';
-      this.#status.lastError = error?.message ?? String(error);
+      this.#status.error = this.#diagnostics.report(error, { operation: 'connection.monitor', botId: this.#config?.botId, automatic: true }).publicError;
+      this.#status.lastError = this.#status.error.message;
       await this.#stopActive();
       throw error;
     } finally {

package/src/channels/wecom-app/wecom-app-bridge.mjs

@@ -52,6 +52,7 @@ import {
   promptContentForInboundMessage,
 } from '../shared/semantic/reply-reference.mjs';
 import {
+  messageFailureDiagnostic,
   channelDeliveryFailure,
   clearLastMessageFailure,
   messageFailureText,
@@ -325,7 +326,7 @@ export class WecomAppBridge {
           const failure = setLastMessageFailure(this.#status, error);
           this.#logger.error?.(
             `[dsh-im:wecom-app] failed to process a command [${failure.referenceId}]:`,
-            error,
+            messageFailureDiagnostic(error, failure),
           );
           return this.#send(sender, messageFailureText(failure)).catch(() => undefined);
         })
@@ -426,7 +427,7 @@ export class WecomAppBridge {
       const failure = setLastMessageFailure(this.#status, error);
       this.#logger.error?.(
         `[dsh-im:wecom-app] failed to process a batch input message [${failure.referenceId}]:`,
-        error,
+        messageFailureDiagnostic(error, failure),
       );
       await this.#send(sender, messageFailureText(failure)).catch(() => undefined);
     }).finally(() => {
@@ -592,7 +593,7 @@ export class WecomAppBridge {
       let artifacts = [];
       try {
         let content = hasImages || hasReply
-          ? await promptContentForInboundMessage(promptMessage, { signal: this.#signal })
+          ? await promptContentForInboundMessage(promptMessage, { signal: this.#signal, deferImages: true })
           : undefined;
         const snapshot = this.#acceptedMessageIds.get(messageId);
         let contextEnhanced = false;
@@ -638,6 +639,7 @@ export class WecomAppBridge {
               await this.#handleInteractionResolved(resolution);
             },
             files: promptMessage.files,
+            images: promptMessage.images,
           },
         }));
         if (batchSubmission) {
@@ -720,7 +722,7 @@ export class WecomAppBridge {
       });
       this.#logger.error?.(
         `[dsh-im:wecom-app] failed to process an inbound message [${failure.referenceId}]:`,
-        error,
+        messageFailureDiagnostic(error, failure),
       );
       try {
         await this.#send(
@@ -1006,7 +1008,7 @@ export class WecomAppBridge {
     const failure = setLastMessageFailure(this.#status, error);
     this.#logger.error?.(
       `[dsh-im:wecom-app] failed to process an interaction reply [${failure.referenceId}]:`,
-      error,
+      messageFailureDiagnostic(error, failure),
     );
     if (!this.#state.hasSeen(messageId)) {
       await this.#state.markSeen(messageId).catch(() => undefined);

package/src/channels/wecom-app/wecom-app-controller.mjs

@@ -1,3 +1,4 @@
+import { extractConnectionEvidence, atConnectionStage, createConnectionDiagnostics } from '../shared/connection-error.mjs';
 import {
   deriveWecomAppIdentity,
   generateCallbackSecret,
@@ -42,6 +43,7 @@ export class WecomAppController {
   #createRuntime;
   #deleteState;
   #logger;
+  #diagnostics;
   #buildCallbackUrl;
   #runtimes = new Map();
   #errors = new Map();
@@ -71,25 +73,33 @@ export class WecomAppController {
     this.#createRuntime = createRuntime;
     this.#deleteState = deleteState;
     this.#logger = logger;
+    this.#diagnostics = createConnectionDiagnostics({ channel: 'wecom-app', logger });
     this.#buildCallbackUrl = typeof buildCallbackUrl === 'function' ? buildCallbackUrl : null;
   }
 
+  get diagnostics() { return this.#diagnostics; }
+
+  #failure(error, code, message) {
+    const stage = code.startsWith('qr-') ? 'qr.begin' : code === 'activation-failed' ? 'activation' : 'connection.start';
+    return this.#diagnostics.report(error, { reuse: true, stage, publicError: { code, message } }).publicError;
+  }
+
   async initialize() {
     if (this.#closed) return this.status();
     for (const config of this.#configStore.list()) {
       await this.#withBotTransition(config.botId, async () => {
         if (this.#runtimes.has(config.botId)) return;
-        const secrets = await this.#resolveSecrets(config);
-        if (!secrets) {
-          this.#errors.set(config.botId, safeError('missing-credentials', t('企业微信应用凭据缺失，请重新绑定。')));
-          return;
-        }
         try {
+          const secrets = await this.#resolveSecrets(config);
+          if (!secrets) {
+            this.#errors.set(config.botId, safeError('missing-credentials', t('企业微信应用凭据缺失，请重新绑定。')));
+            return;
+          }
           await this.#startRuntime(config, secrets);
           this.#errors.delete(config.botId);
         } catch (error) {
-          this.#errors.set(config.botId, safeError('connection-failed', t('企业微信应用连接未就绪，插件会自动重试。')));
-          this.#logger.warn?.(`[dsh-im:wecom-app] bot ${config.botId} failed to initialize`, error);
+          this.#errors.set(config.botId, this.#failure(error, 'connection-failed', t('企业微信应用连接未就绪，插件会自动重试。')));
+
         } finally {
           this.#touch();
         }
@@ -147,7 +157,7 @@ export class WecomAppController {
         encodingAESKey: normalizedAesKey,
       });
       try {
-        await this.#configStore.save(config);
+        await atConnectionStage('account.save', () => this.#configStore.save(config), 'account-config');
       } catch (error) {
         await this.#restoreSecrets(identity, previous);
         throw error;
@@ -160,8 +170,8 @@ export class WecomAppController {
         });
         this.#errors.delete(botId);
       } catch (error) {
-        this.#errors.set(botId, safeError('connection-failed', t('企业微信应用已绑定，但尚未就绪。')));
-        this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} credential connection failed`, error);
+        this.#errors.set(botId, this.#failure(error, 'connection-failed', t('企业微信应用已绑定，但尚未就绪。')));
+
       }
       this.#touch();
     });
@@ -202,8 +212,8 @@ export class WecomAppController {
           try {
             await this.#startRuntime(updated, secrets);
           } catch (error) {
-            this.#errors.set(botId, safeError('connection-failed', t('企业微信应用已更新，但尚未就绪。')));
-            this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} restart after settings update failed`, error);
+            this.#errors.set(botId, this.#failure(error, 'connection-failed', t('企业微信应用已更新，但尚未就绪。')));
+
           }
         }
       }
@@ -224,8 +234,7 @@ export class WecomAppController {
         try {
           await this.#startRuntime(updated, secrets);
         } catch (error) {
-          this.#errors.set(botId, safeError('connection-failed', t('回调密钥已重置，但机器人重启失败，请手动重连。')));
-          this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} restart after secret reset failed`, error);
+          this.#errors.set(botId, this.#failure(error, 'connection-failed', t('回调密钥已重置，但机器人重启失败，请手动重连。')));
         }
       }
       this.#touch();
@@ -243,7 +252,7 @@ export class WecomAppController {
         await this.#startRuntime(config, secrets);
         this.#errors.delete(botId);
       } catch (error) {
-        this.#errors.set(botId, safeError('connection-failed', t('企业微信应用仍未就绪，请稍后重试。')));
+        this.#errors.set(botId, this.#failure(error, 'connection-failed', t('企业微信应用仍未就绪，请稍后重试。')));
         throw error;
       } finally {
         this.#touch();
@@ -282,30 +291,34 @@ export class WecomAppController {
   }
 
   async deleteBot(botId) {
+    const warnings = [];
     const config = this.#configStore.get(botId);
     if (!config) throw new Error('Unknown Enterprise WeChat app bot');
     await this.#withBotTransition(botId, async () => {
       const previous = await this.#resolveSecrets(config);
       await this.#stopRuntime(botId);
       try {
-        await this.#credentials.unset(config.secretRef);
-        await this.#credentials.unset(config.callbackTokenRef);
-        await this.#credentials.unset(config.callbackKeyRef);
-        await this.#configStore.remove(botId);
+        await atConnectionStage('credential.remove', () => this.#credentials.unset(config.secretRef), 'credential-store');
+        await atConnectionStage('credential.remove', () => this.#credentials.unset(config.callbackTokenRef), 'credential-store');
+        await atConnectionStage('credential.remove', () => this.#credentials.unset(config.callbackKeyRef), 'credential-store');
+        await atConnectionStage('account.remove', () => this.#configStore.remove(botId), 'account-config');
       } catch (error) {
-        if (previous) {
-          await this.#setSecrets(config, previous).catch(() => undefined);
-          await this.#startRuntime(config, previous).catch(() => undefined);
+        if (!this.#configStore.get(botId)) {
+          warnings.push(this.#diagnostics.report(error, { operation: 'bot.delete', stage: 'workspace.cleanup', warning: true,
+            publicError: { code: 'workspace-cleanup-failed', message: '账号已移除，但本地状态清理失败。' } }).publicError);
+        } else {
+          if (previous) {
+            await this.#setSecrets(config, previous).catch(() => undefined);
+            await this.#startRuntime(config, previous).catch(() => undefined);
+          }
+          throw new Error('Unable to remove the Enterprise WeChat app bot safely.', { cause: error });
         }
-        throw new Error('Unable to remove the Enterprise WeChat app bot safely.', { cause: error });
       }
-      await this.#deleteState({ botId, config }).catch((error) => {
-        this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} state cleanup failed:`, error);
-      });
+      await this.#deleteState({ botId, config }).catch(error => { warnings.push(this.#diagnostics.report(error, { reuse: true, operation: 'bot.delete', stage: 'state.cleanup', resource: 'account-state', warning: true, publicError: { code: 'cleanup-failed', message: '账号已移除，但本地状态清理失败。' } }).publicError); });
       this.#errors.delete(botId);
       this.#touch();
     });
-    return this.status();
+    return { ...this.status(), ...(warnings.length ? { warnings } : {}) };
   }
 
   status() {
@@ -347,7 +360,7 @@ export class WecomAppController {
           messagesReplied: runtimeStatus?.messagesReplied ?? 0,
         },
         lastMessageError: publicMessageFailure(runtimeStatus?.lastMessageError),
-        error: structuredClone(this.#errors.get(config.botId) ?? null),
+        error: structuredClone(runtimeStatus?.error ?? this.#errors.get(config.botId) ?? null),
       };
     });
     const connectedCount = bots.filter((bot) => bot.connected).length;
@@ -373,7 +386,7 @@ export class WecomAppController {
     if (this.#closed) throw new Error('Enterprise WeChat app controller is closed');
     await this.#stopRuntime(config.botId);
     if (this.#closed) throw new Error('Enterprise WeChat app controller is closed');
-    const runtime = await this.#createRuntime({ botId: config.botId, config, secrets });
+    const runtime = await atConnectionStage('runtime.prepare', () => this.#createRuntime({ botId: config.botId, config, secrets }));
     if (!runtime || typeof runtime.start !== 'function' || typeof runtime.stop !== 'function') {
       throw new TypeError('createRuntime returned an invalid Enterprise WeChat app runtime');
     }
@@ -391,7 +404,7 @@ export class WecomAppController {
     const runtime = this.#runtimes.get(botId);
     this.#runtimes.delete(botId);
     await runtime?.stop().catch((error) => {
-      this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} failed to stop cleanly:`, error);
+      this.#logger.warn?.(`[dsh-im:wecom-app] bot ${botId} failed to stop cleanly:`, extractConnectionEvidence(error).details);
     });
   }
 
@@ -404,13 +417,13 @@ export class WecomAppController {
   }
 
   async #setSecrets(identity, { corpSecret, token, encodingAESKey }) {
-    await this.#credentials.set(identity.secretRef, corpSecret);
-    await this.#credentials.set(identity.callbackTokenRef, token);
-    await this.#credentials.set(identity.callbackKeyRef, encodingAESKey);
+    await atConnectionStage('credential.save', () => this.#credentials.set(identity.secretRef, corpSecret), 'credential-store');
+    await atConnectionStage('credential.save', () => this.#credentials.set(identity.callbackTokenRef, token), 'credential-store');
+    await atConnectionStage('credential.save', () => this.#credentials.set(identity.callbackKeyRef, encodingAESKey), 'credential-store');
   }
 
   async #resolveSecret(ref) {
-    const result = await this.#credentials.resolve(ref).catch(() => undefined);
+    const result = await atConnectionStage('credential.read', () => this.#credentials.resolve(ref), 'credential-store');
     return cleanString(result?.value);
   }
 
@@ -419,9 +432,9 @@ export class WecomAppController {
       await this.#setSecrets(identity, previous).catch(() => undefined);
       return;
     }
-    await this.#credentials.unset(identity.secretRef).catch(() => undefined);
-    await this.#credentials.unset(identity.callbackTokenRef).catch(() => undefined);
-    await this.#credentials.unset(identity.callbackKeyRef).catch(() => undefined);
+    await atConnectionStage('credential.remove', () => this.#credentials.unset(identity.secretRef), 'credential-store').catch(() => undefined);
+    await atConnectionStage('credential.remove', () => this.#credentials.unset(identity.callbackTokenRef), 'credential-store').catch(() => undefined);
+    await atConnectionStage('credential.remove', () => this.#credentials.unset(identity.callbackKeyRef), 'credential-store').catch(() => undefined);
   }
 
   #withBotTransition(botId, operation) {

package/src/channels/wecom-app/wecom-app-runtime.mjs

@@ -1,3 +1,4 @@
+import { atConnectionStage } from '../shared/connection-error.mjs';
 import {
   WecomAppApi,
   WecomAppError,
@@ -104,7 +105,7 @@ export class WecomAppRuntime {
     this.#status.startedAt = new Date().toISOString();
     this.#status.lastError = null;
     this.#status.wecomAppConnectionState = 'connecting';
-    await this.#harness.ensureRunning({ signal: this.#signal() });
+    await atConnectionStage('harness.check', () => this.#harness.ensureRunning({ signal: this.#signal() }));
     this.#status.harnessReachable = true;
 
     this.#api = new WecomAppApi({