@xmanrui/dsh-im 4.22.0 → 4.23.0

package/plugin-src/host/channels/office/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { OFFICE_RPC_CHANNEL, OFFICE_RPC_ENDPOINTS } from '../../../../src/channels/office/protocol.mjs';
@@ -15,6 +16,7 @@ function validConfigure(payload) {
 }
 
 export function createOfficeRpcHandler(controller) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'office' });
   for (const method of ['status', 'configure', 'reconnect', 'test', 'remove']) {
     if (typeof controller?.[method] !== 'function') throw new TypeError(`AI Office controller requires ${method}()`);
   }
@@ -35,7 +37,7 @@ export function createOfficeRpcHandler(controller) {
       const message = code === 'invalid-device-token' ? 'AI Office Device Token 无效。'
         : code === 'office-hook-unavailable' ? 'AI Office Hook 尚未上线或地址不正确。'
           : error instanceof TypeError ? error.message : 'AI Office 连接操作失败，请稍后重试。';
-      return { ok: false, error: { code, message } };
+      return diagnosticRpcResult(diagnostics, error, { ok: false, error: { code, message } }, { operation: endpoint, botId: payload?.botId, untrustedPublicError: true });
     }
   };
 }

package/plugin-src/host/channels/qq/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -104,6 +105,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new Controller({

package/plugin-src/host/channels/qq/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
@@ -132,6 +133,7 @@ async function publicStatus(status, encodeQr) {
 }
 
 export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'qq' });
   for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'bindCredentials', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') throw new TypeError(`A complete QQ controller is required (${method})`);
   }
@@ -183,7 +185,7 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
             } catch (error) {
               testError = error;
             }
-            testMessage = publicConnectionTestResult(testError);
+            testMessage = publicConnectionTestResult(testError, { diagnostics, botId: payload.botId });
           }
         }
         value = await publicStatus({
@@ -231,10 +233,10 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
         : { ok: true, value };
     } catch (error) {
       const workspaceError = publicWorkspaceError(error);
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
         : { ok: false, error: publicQqStateError(error) ?? workspaceError
-          ?? { code: 'qq-operation-failed', message: 'QQ 操作失败，请稍后重试。' } };
+          ?? { code: 'qq-operation-failed', message: 'QQ 操作失败，请稍后重试。' } }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/channels/shared/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -79,6 +80,16 @@ export async function createTokenProductionController(ctx, config, internals, de
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
     : configStore;
+  // Idempotent, and shared with createRuntime below so both paths seed a new
+  // bot's workspace identically. A channel that must write something into the
+  // workspace store before the runtime exists (email pushes its sender
+  // allowlist into the access policy) needs the record to exist first —
+  // setAccessPolicy refuses a bot the store has never seen. The call is safe to
+  // repeat: ensure() only seeds the policy when the bot has none yet.
+  const ensureWorkspace = (botId, botConfig) => workspaces.ensure(botId, {
+    defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: seedAccessPolicy(botConfig),
+  });
   const stateStores = new Map();
   const statePath = (botId) => resolve(paths.bots, botId, 'state.json');
   const stateFor = async (botId) => {
@@ -113,26 +124,61 @@ export async function createTokenProductionController(ctx, config, internals, de
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
+  // Assigned just below. A transport may need to write a rotated token back
+  // through the controller, which is only constructible after createRuntime is
+  // defined, so the reference is held in a slot rather than captured directly.
+  let controllerRef = null;
   const coreController = new ResolvedController({
     credentials: ctx.credentials,
     configStore: observedConfigStore,
     logger,
     ...(internals.inspectToken ? { inspectToken: internals.inspectToken } : {}),
-    createRuntime: async ({ botId, config: botConfig, token }) => {
+    // Optional per-channel hook: a channel whose own settings also express an
+    // access rule (email's sender allowlist) can push the derived policy into
+    // the workspace store, which is what the runtime actually reads.
+    ...(typeof definitions.accessPolicyForBot === 'function' ? {
+      syncAccessPolicy: async (botId, policy) => {
+        await workspaces.setAccessPolicy(botId, policy, {
+          incarnation: workspaces.incarnationFor(botId),
+        });
+      },
+      // Exposed so the controller can create the workspace record before it
+      // pushes a policy into it.
+      ensureWorkspace,
+    } : {}),
+    // Channels that pin conversations to an existing session need the per-bot
+    // state and the session catalog to drive their settings UI.
+    ...(definitions.supportsSessionBinding ? {
+      stateFor,
+      listWorkspaceSessions: (workspace) => harness.listWorkspaceSessions(workspace),
+      botWorkspaceFor: (botId) => workspaces.workspaceFor(botId),
+      defaultWorkspace,
+    } : {}),
+    createRuntime: async ({ botId, config: botConfig, token, credential, createTransport }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, {
-        defaultAgentPreset: config.agentPreset,
-        initialAccessPolicy: seedAccessPolicy(botConfig),
-      });
+      await ensureWorkspace(botId, botConfig);
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
+      const persistTokens = typeof definitions.persistBotCredential === 'function'
+        ? (tokens) => definitions.persistBotCredential({
+          botId, config: botConfig, tokens, controller: controllerRef,
+        })
+        : null;
       return new ResolvedRuntime({
         ...channelRuntimeOptions,
         config: botConfig,
         token,
+        // The mailbox may authenticate with an OAuth pair instead of a password.
+        ...(credential ? { credential } : {}),
+        // A transport that rotates its tokens needs them written back.
+        ...(persistTokens ? { onTokensRefreshed: persistTokens } : {}),
+        // The channel decides which transport a mailbox uses; without this the
+        // runtime falls back to its own IMAP/SMTP default.
+        ...(typeof createTransport === 'function' ? { createTransport } : {}),
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
@@ -161,6 +207,7 @@ export async function createTokenProductionController(ctx, config, internals, de
       }
     },
   });
+  controllerRef = coreController;
   const controller = createWorkspaceAwareController(coreController, {
     workspaces,
     stateFor,

package/plugin-src/host/channels/shared/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from './bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from './context-enhancement-rpc.mjs';
@@ -131,6 +132,7 @@ function operationError(channel, error) {
 }
 
 export function createTokenBotRpcHandler(controller, { channel }) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: channel.toLowerCase() });
   for (const method of ['status', 'bindCredentials', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete ${channel} controller is required (${method})`);
@@ -172,7 +174,7 @@ export function createTokenBotRpcHandler(controller, { channel }) {
           } catch (error) {
             testError = error;
           }
-          value = { ...value, testMessage: publicConnectionTestResult(testError) };
+          value = { ...value, testMessage: publicConnectionTestResult(testError, { diagnostics, botId: payload.botId }) };
         }
       } else if (endpoint === TOKEN_BOT_ENDPOINTS.setWorkspace) {
         if (typeof controller.updateWorkspace !== 'function') throw new Error('Workspace update is unavailable');
@@ -199,9 +201,9 @@ export function createTokenBotRpcHandler(controller, { channel }) {
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
         : { ok: true, value: sanitizePublic(value) };
     } catch (error) {
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
-        : { ok: false, error: operationError(channel, error) };
+        : { ok: false, error: operationError(channel, error) }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/channels/shared/startup-error.mjs

@@ -3,7 +3,8 @@ import { t } from '../../../../src/channels/shared/i18n.mjs';
 const CHANNEL_NAMES = {
   weixin: '微信', feishu: '飞书', dingtalk: '钉钉', wecom: '企业微信',
   'wecom-app': '企业微信应用', qq: 'QQ', slack: 'Slack', telegram: 'Telegram',
-  discord: 'Discord', whatsapp: 'WhatsApp', office: 'AI Office',
+  discord: 'Discord', whatsapp: 'WhatsApp', imessage: 'iMessage',
+  email: '邮箱', office: 'AI Office',
 };
 const INVALID_CONFIG_MESSAGES = new Set([
   'dsh-weixin config contains invalid account data',
@@ -11,7 +12,7 @@ const INVALID_CONFIG_MESSAGES = new Set([
   'dsh-feishu config contains duplicate bot identities',
   'dsh-feishu config is incomplete or invalid',
   'dsh-dingtalk config contains invalid bot data',
-  ...['Enterprise WeChat', 'Enterprise WeChat app', 'QQ', 'Slack', 'Telegram', 'Discord']
+  ...['Enterprise WeChat', 'Enterprise WeChat app', 'QQ', 'Slack', 'Telegram', 'Discord', 'Email']
     .map(channel => `dsh-im ${channel} config contains invalid bot data`),
   'dsh-im WhatsApp config contains invalid account data',
   'dsh-im AI Office config is invalid',
@@ -47,7 +48,7 @@ export function publicChannelStartupError(channel, error) {
   }
   return {
     code: `${channel}-startup-failed`,
-    message: t('{channel}初始化失败。请查看 DSH 启动日志中 failed to activate {id} 后的错误，修复后重启 DSH。', params),
+    message: t('{channel}初始化失败。请展开诊断详情，并通过参考号查找 DSH 启动日志，修复后重启 DSH。', params),
     details: {},
   };
 }

package/plugin-src/host/channels/shared/startup.mjs

@@ -2,6 +2,7 @@ import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { onImHostLanguageChange } from '../../../../src/channels/shared/i18n.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicChannelInitializing, publicChannelStartupError } from './startup-error.mjs';
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 
 /**
  * Keep a channel's platform-side command menu in the current host message
@@ -30,13 +31,18 @@ export async function installProductionChannel(ctx, config, {
 }) {
   let startupError = publicChannelInitializing(channel);
   let handler = async () => ({ ok: false, error: startupError });
-  const disposeRpc = registerManagementRpc(ctx, rpcChannel, (endpoint, payload, signal) => {
+  const logger = typeof ctx.logger === 'function' ? ctx.logger(`dsh-im:${channel}`) : (ctx.logger ?? console);
+  const diagnostics = createConnectionDiagnostics({ channel, logger });
+  const disposeRpc = registerManagementRpc(ctx, rpcChannel, async (endpoint, payload, signal) => {
     if (signal?.aborted) {
       return { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.', details: {} } };
     }
-    return handler(endpoint, payload, signal);
+    try { return await handler(endpoint, payload, signal); }
+    catch (error) {
+      // Preserve a final Host diagnostic if an endpoint misses its own catch.
+      return diagnosticRpcResult(diagnostics, error, { ok: false, error: { code: `${channel}-operation-failed` } }, { operation: endpoint });
+    }
   }, { authority: resolveRpcAuthority(config.rpcAuthority) });
-  const logger = typeof ctx.logger === 'function' ? ctx.logger(`dsh-im:${channel}`) : (ctx.logger ?? console);
   let production;
   let unregisterDelivery;
   let closing;
@@ -58,13 +64,12 @@ export async function installProductionChannel(ctx, config, {
   } catch (error) {
     startupError = reportStartupError
       ? reportStartupError(error, false)
-      : publicChannelStartupError(channel, error);
-    if (!reportStartupError) logger.error?.(`[dsh-im] failed to activate ${channel}; management RPC remains available`, error);
+      : diagnostics.report(error, { operation: 'startup', stage: 'startup.load', publicError: publicChannelStartupError(channel, error) }).publicError;
     try {
       await closeProduction();
     } catch (cleanupError) {
       if (reportStartupError) reportStartupError(cleanupError, true);
-      else logger.error?.(`[dsh-im] failed to close partially initialized ${channel} resources`, cleanupError);
+      else diagnostics.report(cleanupError, { operation: 'startup', stage: 'connection.stop', warning: true });
     }
   }
   return disposeRpc;

package/plugin-src/host/channels/slack/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { resolve } from 'node:path';
 
@@ -92,6 +93,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new ResolvedController({

package/plugin-src/host/channels/slack/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
@@ -131,6 +132,7 @@ function operationError(error) {
 }
 
 export function createSlackRpcHandler(controller) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'slack' });
   for (const method of ['status', 'bindCredentials', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete Slack controller is required (${method})`);
@@ -171,7 +173,7 @@ export function createSlackRpcHandler(controller) {
           } catch (error) {
             testError = error;
           }
-          value = { ...value, testMessage: publicConnectionTestResult(testError) };
+          value = { ...value, testMessage: publicConnectionTestResult(testError, { diagnostics, botId: payload.botId }) };
         }
       }
       else if (endpoint === SLACK_ENDPOINTS.setWorkspace) {
@@ -203,9 +205,9 @@ export function createSlackRpcHandler(controller) {
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
         : { ok: true, value: sanitizePublic(value) };
     } catch (error) {
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
-        : { ok: false, error: operationError(error) };
+        : { ok: false, error: operationError(error) }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/channels/wecom/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -107,6 +108,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new Controller({

package/plugin-src/host/channels/wecom/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
@@ -131,6 +132,7 @@ async function publicStatus(status, encodeQr) {
 }
 
 export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'wecom' });
   for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'bindCredentials', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete Enterprise WeChat controller is required (${method})`);
@@ -185,7 +187,7 @@ export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {})
               await controller.sendConnectionTest(payload.botId);
               testMessage = publicConnectionTestResult();
             } catch (error) {
-              testMessage = publicConnectionTestResult(error);
+              testMessage = publicConnectionTestResult(error, { diagnostics, botId: payload.botId });
             }
           }
         }
@@ -231,10 +233,10 @@ export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {})
         : { ok: true, value };
     } catch (error) {
       const workspaceError = publicWorkspaceError(error);
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
         : { ok: false, error: workspaceError
-          ?? { code: 'wecom-operation-failed', message: '企业微信操作失败，请稍后重试。' } };
+          ?? { code: 'wecom-operation-failed', message: '企业微信操作失败，请稍后重试。' } }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/channels/wecom-app/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -141,6 +142,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new Controller({

package/plugin-src/host/channels/wecom-app/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
@@ -136,6 +137,7 @@ function publicStatus(status) {
 }
 
 export function createWecomAppRpcHandler(controller) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'wecom-app' });
   for (const method of ['status', 'bindApp', 'updateAppSettings', 'resetCallbackSecret', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete Enterprise WeChat app controller is required (${method})`);
@@ -178,7 +180,7 @@ export function createWecomAppRpcHandler(controller) {
               await controller.sendConnectionTest(payload.botId);
               testMessage = publicConnectionTestResult();
             } catch (error) {
-              testMessage = publicConnectionTestResult(error);
+              testMessage = publicConnectionTestResult(error, { diagnostics, botId: payload.botId });
             }
           }
         }
@@ -215,11 +217,11 @@ export function createWecomAppRpcHandler(controller) {
         : { ok: true, value };
     } catch (error) {
       const workspaceError = publicWorkspaceError(error);
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.', details: {} } }
         : { ok: false, error: workspaceError
           ? { ...workspaceError, details: {} }
-          : { code: 'wecom-app-operation-failed', message: '企业微信应用操作失败，请稍后重试。', details: {} } };
+          : { code: 'wecom-app-operation-failed', message: '企业微信应用操作失败，请稍后重试。', details: {} } }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/channels/weixin/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -139,6 +140,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new Controller({

package/plugin-src/host/channels/whatsapp/production.mjs

@@ -1,3 +1,4 @@
+import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
 import { rm, unlink } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -113,6 +114,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     ...(controlExecutor ? { controlExecutor } : {}),
     ...(sessionMaintenanceExecutor ? { sessionMaintenanceExecutor } : {}),
     ...(fileIngressExecutor ? { fileIngressExecutor } : {}),
+    imageInputPolicy: () => getImageInputSettingsStore(config).get(),
   });
   const modelCatalog = () => listModelCatalog(harness);
   const coreController = new Controller({

package/plugin-src/host/channels/whatsapp/rpc.mjs

@@ -1,3 +1,4 @@
+import { createConnectionDiagnostics, diagnosticRpcResult } from '../../../../src/channels/shared/connection-error.mjs';
 import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
@@ -116,6 +117,7 @@ async function publicStatus(value, encodeQr) {
 }
 
 export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
+  const diagnostics = controller.diagnostics ?? createConnectionDiagnostics({ channel: 'whatsapp' });
   for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete WhatsApp controller is required (${method})`);
@@ -176,7 +178,7 @@ export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } =
               testError = error;
             }
           }
-          value = { ...value, testMessage: publicConnectionTestResult(testError) };
+          value = { ...value, testMessage: publicConnectionTestResult(testError, { diagnostics, botId: payload.botId }) };
         }
       } else if (endpoint === WHATSAPP_ENDPOINTS.setWorkspace) {
         if (typeof controller.updateWorkspace !== 'function') throw new Error('Workspace update is unavailable');
@@ -223,10 +225,10 @@ export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } =
         : { ok: true, value };
     } catch (error) {
       const workspaceError = publicWorkspaceError(error);
-      return signal?.aborted
+      return diagnosticRpcResult(diagnostics, error, signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
         : { ok: false, error: workspaceError
-          ?? { code: 'whatsapp-operation-failed', message: 'WhatsApp 操作失败，请稍后重试。' } };
+          ?? { code: 'whatsapp-operation-failed', message: 'WhatsApp 操作失败，请稍后重试。' } }, { operation: endpoint, botId: payload?.botId });
     }
   };
 }

package/plugin-src/host/delivery-adapter.mjs

@@ -16,6 +16,7 @@ const CHANNELS = new Set([
   'discord',
   'whatsapp',
   'imessage',
+  'email',
 ]);
 
 export function supportsDeliveryChannel(channel) {
@@ -126,6 +127,16 @@ function normalizeRoute(channel, kind, route) {
     case 'imessage':
       oneOf(kind, ['user']);
       return routeWithStrings(route, ['chatGuid']);
+    case 'email': {
+      oneOf(kind, ['user']);
+      const normalized = routeWithStrings(route, ['address']);
+      // Mail addresses are normalized to lower case everywhere so a target
+      // created from a mixed-case address still matches.
+      if (!/^[^\s@<>]+@[^\s@<>]+\.[^\s@<>]+$/.test(normalized.address)) {
+        throw invalidTarget('route.address must be a valid email address');
+      }
+      return { address: normalized.address.toLowerCase() };
+    }
     default:
       throw new TypeError(`Unsupported delivery channel: ${channel}`);
   }

package/plugin-src/host/image-input-rpc.mjs

@@ -0,0 +1,24 @@
+import { normalizeImageInputSettings } from '../../src/channels/shared/image-input-policy.mjs';
+
+export const IMAGE_INPUT_ENDPOINTS = Object.freeze({
+  get: 'settings.image-input.get',
+  set: 'settings.image-input.set',
+});
+
+export function createImageInputRpcHandler(store) {
+  return async (endpoint, payload, signal) => {
+    const object = payload && typeof payload === 'object' && !Array.isArray(payload);
+    const valid = object && (endpoint === IMAGE_INPUT_ENDPOINTS.get
+      ? Object.keys(payload).length === 0
+      : endpoint === IMAGE_INPUT_ENDPOINTS.set && Object.keys(payload).length === 4
+        && normalizeImageInputSettings(payload));
+    if (!valid) return { ok: false, error: { code: 'bad-request', message: '图片限制无效：请输入正整数，原图接收上限和总量上限不能小于单图上限。' } };
+    if (signal?.aborted) return { ok: false, error: { code: 'cancelled', message: 'Request cancelled.' } };
+    try {
+      const value = endpoint === IMAGE_INPUT_ENDPOINTS.get ? await store.get() : await store.set(payload);
+      return { ok: true, value };
+    } catch {
+      return { ok: false, error: { code: 'image-input-settings-unavailable', message: '无法读取或保存图片设置，请稍后重试。' } };
+    }
+  };
+}

package/plugin-src/host/inbound-ttl-rpc.mjs

@@ -1,6 +1,8 @@
 import { registerManagementRpc } from '../management-rpc.mjs';
 import { normalizeInboundTtlHours } from '../../src/channels/shared/inbound-ttl.mjs';
 import { getInboundTtlRuntime } from './inbound-ttl-runtime.mjs';
+import { getImageInputSettingsStore } from '../../src/channels/shared/image-input-settings-store.mjs';
+import { createImageInputRpcHandler, IMAGE_INPUT_ENDPOINTS } from './image-input-rpc.mjs';
 
 export const INBOUND_TTL_RPC_CHANNEL = '/dsh-im-settings';
 export const INBOUND_TTL_ENDPOINTS = Object.freeze({
@@ -73,9 +75,12 @@ export function installInboundTtlRpc(ctx, options = {}) {
   const runtime = options.runtime ?? getInboundTtlRuntime(ctx, options.config);
   const logger = typeof ctx?.logger === 'function'
     ? ctx.logger('dsh-im:inbound-ttl') : (ctx?.logger ?? null);
+  const ttl = createInboundTtlRpcHandler({ ...runtime, logger });
+  const image = createImageInputRpcHandler(getImageInputSettingsStore(options.config));
   return registerManagementRpc(ctx,
     INBOUND_TTL_RPC_CHANNEL,
-    createInboundTtlRpcHandler({ ...runtime, logger }),
+    (endpoint, payload, signal) => Object.values(IMAGE_INPUT_ENDPOINTS).includes(endpoint)
+      ? image(endpoint, payload, signal) : ttl(endpoint, payload, signal),
     { authority: 'loopback' },
   );
 }

package/plugin-src/host/index.mjs

@@ -10,6 +10,7 @@ import { apply as applyWecomApp } from './channels/wecom-app/index.mjs';
 import { apply as applyWeixin } from './channels/weixin/index.mjs';
 import { apply as applyWhatsapp } from './channels/whatsapp/index.mjs';
 import { apply as applyIMessage } from './channels/imessage/index.mjs';
+import { apply as applyEmail } from './channels/email/index.mjs';
 import { installOutboundArtifactTool } from '../../src/channels/shared/semantic/artifact.mjs';
 import { installHostLanguage } from './host-language.mjs';
 import { installHostLanguageRpc } from './host-language-rpc.mjs';
@@ -60,6 +61,7 @@ export function createImHostPlugin(internals = {}) {
   const startOffice = internals.applyOffice ?? applyOffice;
   const startWhatsapp = internals.applyWhatsapp ?? applyWhatsapp;
   const startIMessage = internals.applyIMessage ?? applyIMessage;
+  const startEmail = internals.applyEmail ?? applyEmail;
   const channels = [
     ['feishu', startFeishu],
     ['weixin', startWeixin],
@@ -72,6 +74,7 @@ export function createImHostPlugin(internals = {}) {
     ['discord', startDiscord],
     ['whatsapp', startWhatsapp],
     ['imessage', startIMessage],
+    ['email', startEmail],
     ['office', startOffice],
   ];
   return Object.freeze({

package/plugin-src/management-rpc.mjs

@@ -72,6 +72,16 @@ export function registerManagementRpc(ctx, channel, handler, { authority } = {})
 }
 
 /** Keep channel UI callers unchanged while using DSH's native correlation and response validation. */
-export function callManagementRpc(connection, channel, method, payload, signal) {
-  return connection.rpc.call('/api', rpcEndpoint(channel), { method, payload }, signal);
+export async function callManagementRpc(connection, channel, method, payload, signal) {
+  try {
+    return await connection.rpc.call('/api', rpcEndpoint(channel), { method, payload }, signal);
+  } catch (cause) {
+    if (signal?.aborted || cause?.name === 'AbortError') throw cause;
+    const error = new Error('无法访问 DSH 管理接口，请检查 DSH 连接或重新登录后重试。', { cause });
+    error.code = 'management-unreachable';
+    error.details = { operation: method, stage: 'management.request', occurredAt: new Date().toISOString(),
+      ...(Number.isInteger(cause?.status) && cause.status >= 100 && cause.status <= 599 ? { httpStatus: cause.status } : {}),
+    };
+    throw error;
+  }
 }

package/scripts/verify-package.mjs

@@ -147,9 +147,11 @@ if (client.includes('settings.plugins.tab') || clientSources.includes('settings.
 // template; the delivery target adds one ordinary checkbox template.
 const contextEditorSource = await readFile(resolve(root, 'plugin-src/client/context-enhancement.js'), 'utf8');
 const deliverySettingsSource = await readFile(resolve(root, 'plugin-src/client/delivery-settings.js'), 'utf8');
+const emailSettingsSource = await readFile(resolve(root, 'plugin-src/client/channels/email/index.js'), 'utf8');
 const otherClientSources = clientSources
   .replace(contextEditorSource, '')
-  .replace(deliverySettingsSource, '');
+  .replace(deliverySettingsSource, '')
+  .replace(emailSettingsSource, '');
 if (/role:\s*["']switch|type:\s*["']checkbox/.test(otherClientSources)
   || (deliverySettingsSource.match(/type:\s*["']checkbox["']/g) ?? []).length !== 1
   || /role:\s*["']switch["']/u.test(deliverySettingsSource)