@ycodium-ai/plugin-im 0.2.3192 → 0.2.3208

package/dist/index.js

@@ -137,7 +137,7 @@ var require_punycode = __commonJS({
       }
       return floor(k + (baseMinusTMin + 1) * delta / (delta + skew));
     };
-    var decode2 = function(input) {
+    var decode3 = function(input) {
       const output = [];
       const inputLength = input.length;
       let i = 0;
@@ -249,7 +249,7 @@ var require_punycode = __commonJS({
     };
     var toUnicode = function(input) {
       return mapDomain(input, function(string) {
-        return regexPunycode.test(string) ? decode2(string.slice(4).toLowerCase()) : string;
+        return regexPunycode.test(string) ? decode3(string.slice(4).toLowerCase()) : string;
       });
     };
     var toASCII = function(input) {
@@ -275,7 +275,7 @@ var require_punycode = __commonJS({
         "decode": ucs2decode,
         "encode": ucs2encode
       },
-      "decode": decode2,
+      "decode": decode3,
       "encode": encode2,
       "toASCII": toASCII,
       "toUnicode": toUnicode
@@ -18475,7 +18475,7 @@ var require_utils = __commonJS({
         return acc;
       }, target2);
     };
-    var decode2 = function(str2, defaultDecoder, charset) {
+    var decode3 = function(str2, defaultDecoder, charset) {
       var strWithoutPlus = str2.replace(/\+/g, " ");
       if (charset === "iso-8859-1") {
         return strWithoutPlus.replace(/%[0-9a-f]{2}/gi, unescape);
@@ -18601,7 +18601,7 @@ var require_utils = __commonJS({
       assign,
       combine,
       compact,
-      decode: decode2,
+      decode: decode3,
       encode: encode2,
       isBuffer,
       isOverflow,
@@ -23360,7 +23360,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash5 } = __require("crypto");
+    var { randomBytes, createHash: createHash7 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -24028,7 +24028,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -24397,7 +24397,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash5 } = __require("crypto");
+    var { createHash: createHash7 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -24704,7 +24704,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -24912,7 +24912,7 @@ var require_base64 = __commonJS({
       return String.fromCharCode.apply(String, chunk.slice(0, i2));
     };
     var invalidEncoding = "invalid encoding";
-    base64.decode = function decode2(string, buffer, offset) {
+    base64.decode = function decode3(string, buffer, offset) {
       var start = offset;
       var j = 0, t;
       for (var i2 = 0; i2 < string.length; ) {
@@ -121305,7 +121305,7 @@ var require_lib2 = __commonJS({
         Header.encodeDelimited = function encodeDelimited(message, writer) {
           return this.encode(message, writer).ldelim();
         };
-        Header.decode = function decode3(reader, length) {
+        Header.decode = function decode4(reader, length) {
           if (!(reader instanceof $Reader))
             reader = $Reader.create(reader);
           let end = length === void 0 ? reader.len : reader.pos + length, message = new $root.pbbp2.Header();
@@ -121451,7 +121451,7 @@ var require_lib2 = __commonJS({
         Frame.encodeDelimited = function encodeDelimited(message, writer) {
           return this.encode(message, writer).ldelim();
         };
-        Frame.decode = function decode3(reader, length) {
+        Frame.decode = function decode4(reader, length) {
           if (!(reader instanceof $Reader))
             reader = $Reader.create(reader);
           let end = length === void 0 ? reader.len : reader.pos + length, message = new $root.pbbp2.Frame();
@@ -121678,7 +121678,7 @@ var require_lib2 = __commonJS({
       })();
       return pbbp22;
     })();
-    var decode2 = (buffer) => {
+    var decode3 = (buffer) => {
       return pbbp2.Frame.decode(buffer);
     };
     var WSConfig = class {
@@ -122177,7 +122177,7 @@ var require_lib2 = __commonJS({
         const wsInstance = this.wsConfig.getWSInstance();
         wsInstance === null || wsInstance === void 0 ? void 0 : wsInstance.on("message", (buffer) => __awaiter(this, void 0, void 0, function* () {
           this.clearLiveness();
-          const data = decode2(buffer);
+          const data = decode3(buffer);
           const { method } = data;
           if (method === FrameType.control) {
             yield this.handleControlData(data);
@@ -126185,22 +126185,26 @@ var makeAcknowledgements = (core) => {
       host.log.warn("chat could not acknowledge the message", { error: describeError(error) });
     }
   };
-  const clearWorking = async (binding, threadId, outcome) => {
+  const takeWorking = (binding, threadId, outcome) => {
     const adapter = adapterFor(binding.platform);
+    const clear = adapter?.clearAcknowledge?.bind(adapter);
     const pending = acknowledgements.get(threadId);
-    if (pending === void 0 || adapter?.clearAcknowledge === void 0) return;
+    if (pending === void 0 || clear === void 0) return async () => void 0;
     acknowledgements.delete(threadId);
-    for (const entry of pending) {
-      try {
-        await adapter.clearAcknowledge(binding, entry.messageId, entry.ackId, outcome);
-      } catch (error) {
-        host.log.warn("chat could not clear the acknowledgement", {
-          error: describeError(error)
-        });
+    return async () => {
+      for (const entry of pending) {
+        try {
+          await clear(binding, entry.messageId, entry.ackId, outcome);
+        } catch (error) {
+          host.log.warn("chat could not clear the acknowledgement", {
+            error: describeError(error)
+          });
+        }
       }
-    }
+    };
   };
-  return { markWorking, clearWorking };
+  const clearWorking = (binding, threadId, outcome) => takeWorking(binding, threadId, outcome)();
+  return { markWorking, takeWorking, clearWorking };
 };
 
 // src/botConfig.ts
@@ -126401,7 +126405,7 @@ var makeConclusionLedger = (core) => {
         return false;
       inFlight.add(key);
       try {
-        const sent = await send();
+        const sent = await send(() => conclusionDebtsOf(core.state)[key] !== void 0);
         if (sent) settle(debt);
         return sent;
       } finally {
@@ -126837,6 +126841,7 @@ var readString = (row, key) => {
 
 // src/settingsContract.ts
 var SETTINGS_VIEW_COMMAND = "settings.view";
+var SETTINGS_CONNECTIONS_COMMAND = "settings.connections";
 var SETTINGS_SAVE_BOT_COMMAND = "settings.saveBot";
 var SETTINGS_REMOVE_BOT_COMMAND = "settings.removeBot";
 var SETTINGS_SAVE_GENERAL_COMMAND = "settings.saveGeneral";
@@ -126877,6 +126882,7 @@ var foldFlowItem = (snapshot, item) => {
     }
   }
 };
+var connectionHintKey = (hint) => hint === "notAvailable" ? "settingsSection.connection.reason.not-available" : `rowAction.checkConnection.hint.${hint}`;
 
 // src/targetKind.ts
 var TARGET_KIND_OPTIONS = [
@@ -127410,6 +127416,31 @@ var makeChatQueue = (core) => {
 // src/chatSetup.ts
 import { threadOrNull } from "@ycodium-ai/plugin-api";
 
+// src/cooldown.ts
+var makeCooldown = (windowMs, now, maxKeys = Number.POSITIVE_INFINITY) => {
+  const lastAt = /* @__PURE__ */ new Map();
+  return {
+    tryAcquire: (key) => {
+      const current = now();
+      const previous = lastAt.get(key);
+      if (previous !== void 0 && current - previous < windowMs) return false;
+      lastAt.delete(key);
+      lastAt.set(key, current);
+      if (lastAt.size > maxKeys) {
+        for (const [candidate, at] of lastAt) {
+          if (current - at >= windowMs) lastAt.delete(candidate);
+        }
+        while (lastAt.size > maxKeys) {
+          const oldest = lastAt.keys().next().value;
+          if (oldest === void 0) break;
+          lastAt.delete(oldest);
+        }
+      }
+      return true;
+    }
+  };
+};
+
 // src/projectList.ts
 var PROJECT_LIST_MAX = 20;
 var projectLine = (row, position) => `${String(position)}. ${row.title.replace(/\s+/g, " ").trim()}${row.current ? " \u2605" : ""}`;
@@ -127498,16 +127529,21 @@ var pickSession = (arg, listed, rows) => {
 var makeChatSetup = (core, deps) => {
   const { host, t, adapterFor, commit, deliver, bindingOf: bindingOf2, hasPanel } = core;
   const { projectRowsFor, listedProjectsByChat } = deps.rows;
-  const promptProject = async (binding) => {
-    const chatKey = chatKeyOf(binding);
-    let rows;
+  const pendingMessages = makeBoundedMap(100);
+  const projectPromptCooldown = makeCooldown(3e4, () => Date.now());
+  const loadProjectRows = async (binding) => {
     try {
-      rows = await projectRowsFor(chatKey);
+      return await projectRowsFor(chatKeyOf(binding));
     } catch (error) {
       host.log.warn("chat could not list the projects", { error: describeError(error) });
       await deliver(binding, t("panel.loadFailed"));
-      return;
+      return null;
     }
+  };
+  const promptProject = async (binding, available) => {
+    const chatKey = chatKeyOf(binding);
+    const rows = available ?? await loadProjectRows(binding);
+    if (rows === null) return;
     listedProjectsByChat.set(chatKey, listedProjectIds(rows));
     if (rows.length > 0 && hasPanel(binding)) {
       try {
@@ -127527,14 +127563,8 @@ var makeChatSetup = (core, deps) => {
       return;
     }
     const chatKey = chatKeyOf(binding);
-    let rows;
-    try {
-      rows = await projectRowsFor(chatKey);
-    } catch (error) {
-      host.log.warn("chat could not list the projects", { error: describeError(error) });
-      await deliver(binding, t("panel.loadFailed"));
-      return;
-    }
+    const rows = await loadProjectRows(binding);
+    if (rows === null) return;
     const picked = pickProject(arg, listedProjectsByChat.get(chatKey), rows);
     if (picked === null) {
       await deliver(binding, t("repo.notFound", { query: arg }));
@@ -127566,6 +127596,9 @@ var makeChatSetup = (core, deps) => {
     listedProjectsByChat.delete(chatKey);
     host.log.info("chat picked a project", { bot: binding.displayName, projectId: picked });
     await deliver(binding, t("repo.done", { title: target2.title }));
+    const pending = pendingMessages.get(chatKey);
+    pendingMessages.forget((key) => key === chatKey);
+    if (pending !== void 0) await deps.resumeMessage(binding, pending);
   };
   const handleGroup = async (binding, name, senderId) => {
     const adapter = adapterFor(binding.platform);
@@ -127593,7 +127626,27 @@ var makeChatSetup = (core, deps) => {
     await deliver(binding, t("group.created", { name }));
     await promptProject(bindingOf2(binding, chatId));
   };
-  return { promptProject, handleRepo, handleGroup };
+  const prepareMessage = async (binding, message) => {
+    const chatKey = chatKeyOf(binding);
+    const asked = message.text.trim();
+    if (/^[1-9]\d{0,2}$/u.test(asked) && listedProjectsByChat.has(chatKey)) {
+      await handleRepo(binding, asked);
+      return false;
+    }
+    const rows = await loadProjectRows(binding);
+    if (rows === null) return false;
+    const only = rows.length === 1 ? rows[0] : void 0;
+    if (only !== void 0) {
+      commit("chat-updated", { chatKey, projectId: only.projectId });
+      pendingMessages.forget((key) => key === chatKey);
+      await deliver(binding, t("repo.autoSelected", { title: only.title }));
+      return true;
+    }
+    pendingMessages.set(chatKey, message);
+    if (projectPromptCooldown.tryAcquire(chatKey)) await promptProject(binding, rows);
+    return false;
+  };
+  return { promptProject, handleRepo, handleGroup, prepareMessage };
 };
 
 // src/commands.ts
@@ -127686,7 +127739,6 @@ var parseChatCommand = (input) => {
     return query === "" ? { kind: "selectTeam" } : { kind: "help" };
   }
   if (isThreadCommand(input.text, input.chinese)) return { kind: "selectThread" };
-  if (/^\/[a-z][a-z0-9_-]*/i.test(trimmed)) return { kind: "help" };
   if (input.chinese) {
     const alias = ZH_ALIASES[trimmed];
     if (alias !== void 0) return { kind: alias };
@@ -127943,13 +127995,58 @@ var makeCommands = (core, deps) => {
 };
 
 // src/keyedQueue.ts
-var makeKeyedQueue = (onError) => {
-  const tails = /* @__PURE__ */ new Map();
-  return (key, work) => {
-    const run = (tails.get(key) ?? Promise.resolve()).then(work).catch(onError).then(() => {
-      if (tails.get(key) === run) tails.delete(key);
+var makeKeyedQueue = (onError, options = {}) => {
+  const queues = /* @__PURE__ */ new Map();
+  const run = (key, work, kind = {}) => {
+    const queue = queues.get(key) ?? { tail: Promise.resolve(), size: 0, droppable: 0 };
+    const droppable = kind.droppable === true;
+    if (droppable && options.limit !== void 0 && queue.droppable >= options.limit) {
+      options.onFull?.(key, options.limit);
+      return false;
+    }
+    queue.size += 1;
+    if (droppable) queue.droppable += 1;
+    queue.tail = queue.tail.then(work).catch(onError).then(() => {
+      queue.size -= 1;
+      if (droppable) queue.droppable -= 1;
+      if (queue.size === 0 && queues.get(key) === queue) queues.delete(key);
     });
-    tails.set(key, run);
+    queues.set(key, queue);
+    return true;
+  };
+  return Object.assign(run, { activeKeys: () => queues.size });
+};
+
+// src/redact.ts
+var DETAIL_MAX_CHARS = 200;
+var MASK = "***";
+var TOKEN_LIKE = /[A-Za-z0-9_=-]{24,}/g;
+var MIN_SECRET_LENGTH = 6;
+var botRedactor = (columns, values) => {
+  const redactor = makeRedactor();
+  for (const column of columns) {
+    if (column.kind !== "password") continue;
+    const value2 = values[column.key];
+    redactor.register(value2);
+    if (value2 !== void 0) redactor.register(encodeURIComponent(value2));
+  }
+  return redactor;
+};
+var makeRedactor = () => {
+  const secrets = /* @__PURE__ */ new Set();
+  const redact = (text4) => {
+    let out = text4;
+    for (const secret of [...secrets].sort((a, b) => b.length - a.length)) {
+      out = out.split(secret).join(MASK);
+    }
+    return out.replace(TOKEN_LIKE, MASK);
+  };
+  return {
+    register: (secret) => {
+      if (typeof secret === "string" && secret.length >= MIN_SECRET_LENGTH) secrets.add(secret);
+    },
+    redact,
+    detail: (text4) => redact(text4).slice(0, DETAIL_MAX_CHARS)
   };
 };
 
@@ -127967,26 +128064,61 @@ var connectionKey = (adapter, bot) => JSON.stringify([
 var startConnections = (core, inboundHandlersFor) => {
   const { host, adapterFor, ready } = core;
   const live = /* @__PURE__ */ new Map();
+  const statuses = /* @__PURE__ */ new Map();
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = () => {
+    const snapshot = Object.fromEntries(statuses);
+    for (const listener of [...listeners]) listener(snapshot);
+  };
+  const record3 = (rowId, status) => {
+    const previous = statuses.get(rowId);
+    if (previous?.state === status.state && previous.error === status.error && previous.reason === status.reason && previous.duplicateOf === status.duplicateOf && previous.hint === status.hint)
+      return;
+    statuses.set(rowId, status);
+    notify();
+  };
+  const remove = (rowId) => {
+    if (statuses.delete(rowId)) notify();
+  };
   const enqueueForRow = makeKeyedQueue((error) => {
     host.log.warn("chat could not start an inbound connection", { error: describeError(error) });
   });
   let disposed = false;
   const open = (bot, key) => {
     const adapter = adapterFor(bot.platform);
+    const redactor = botRedactor(adapter?.columns ?? [], bot.values);
     let closed = false;
     let closeConnection;
+    record3(bot.rowId, { state: "connecting" });
     enqueueForRow(bot.rowId, async () => {
       try {
         await ready;
         if (closed || adapter === void 0) return;
-        const connection = await adapter.connect(bot, inboundHandlersFor(bot));
+        const connection = await adapter.connect(bot, {
+          ...inboundHandlersFor(bot),
+          onConnectionState: (status) => {
+            if (closed) return;
+            if (status.state === "connected") {
+              record3(bot.rowId, status);
+              return;
+            }
+            record3(bot.rowId, {
+              state: "failed",
+              ...status.reason === void 0 ? {} : { reason: status.reason },
+              ...status.error === void 0 ? {} : { error: redactor.redact(describeError(status.error)) },
+              ...status.hint === void 0 ? {} : { hint: status.hint }
+            });
+          }
+        });
         if (closed) connection.close();
         else closeConnection = () => connection.close();
       } catch (error) {
+        const detail = redactor.redact(describeError(error));
+        if (!closed) record3(bot.rowId, { state: "failed", error: detail });
         host.log.warn("chat could not start an inbound connection", {
           bot: bot.displayName,
           platform: bot.platform,
-          error: describeError(error)
+          error: detail
         });
       }
     });
@@ -128001,19 +128133,25 @@ var startConnections = (core, inboundHandlersFor) => {
   const reconcile = () => {
     const bots = disposed ? [] : core.bots();
     const wanted = /* @__PURE__ */ new Map();
-    const credentials3 = /* @__PURE__ */ new Set();
+    const credentials3 = /* @__PURE__ */ new Map();
+    const duplicates = /* @__PURE__ */ new Map();
     for (const bot of bots) {
       const adapter = adapterFor(bot.platform);
       if (adapter === void 0) continue;
       const fingerprint = `${bot.platform}:${adapter.columns.map((column) => bot.values[column.key] ?? "").join(" ")}`;
-      if (credentials3.has(fingerprint)) {
+      const duplicateOf = credentials3.get(fingerprint);
+      if (duplicateOf !== void 0) {
+        duplicates.set(bot.rowId, duplicateOf);
+        if (statuses.get(bot.rowId)?.duplicateOf !== duplicateOf) {
+          record3(bot.rowId, { state: "duplicate", duplicateOf });
+        }
         host.log.warn("chat did not connect a bot that repeats another bot's credentials", {
           bot: bot.displayName,
           platform: bot.platform
         });
         continue;
       }
-      credentials3.add(fingerprint);
+      credentials3.set(fingerprint, bot.rowId);
       wanted.set(bot.rowId, { bot, key: connectionKey(adapter, bot) });
     }
     for (const [rowId, connection] of live) {
@@ -128021,6 +128159,9 @@ var startConnections = (core, inboundHandlersFor) => {
       connection.close();
       live.delete(rowId);
     }
+    for (const rowId of statuses.keys()) {
+      if (!wanted.has(rowId) && !duplicates.has(rowId)) remove(rowId);
+    }
     for (const [rowId, { bot, key }] of wanted) {
       if (!live.has(rowId)) live.set(rowId, open(bot, key));
     }
@@ -128029,8 +128170,18 @@ var startConnections = (core, inboundHandlersFor) => {
   host.onDispose(() => {
     disposed = true;
     reconcile();
+    listeners.clear();
   });
-  return { reconcile };
+  return {
+    reconcile,
+    subscribe: (listener) => {
+      if (!disposed) listeners.add(listener);
+      listener(Object.fromEntries(statuses));
+      return () => {
+        listeners.delete(listener);
+      };
+    }
+  };
 };
 
 // src/deliveryHttp.ts
@@ -128279,6 +128430,7 @@ ${token}` : void 0;
 };
 
 // src/core.ts
+var OUTBOUND_QUEUE_LIMIT = 100;
 var makeImCore = (input) => {
   const { host, t, adapters } = input;
   const adapterFor = (platform) => adapters.find((adapter) => adapter.platform === platform);
@@ -128290,7 +128442,7 @@ var makeImCore = (input) => {
     init: emptyState,
     apply: foldPluginEvent(input.pluginId)
   });
-  const ready = stateHandle.get().then(
+  const chatReady = stateHandle.get().then(
     (restored) => {
       state = restored;
     },
@@ -128298,6 +128450,7 @@ var makeImCore = (input) => {
       host.log.warn("chat could not restore its saved state", { error: describeError(error) });
     }
   );
+  const ready = Promise.all([chatReady, input.inboundReady]).then(() => void 0);
   let persisting = Promise.resolve();
   const commit = (name, data) => {
     state = foldImEvent(state, name, data);
@@ -128313,10 +128466,21 @@ var makeImCore = (input) => {
   const bindChat = (chatKey, threadId) => {
     commit("chat-updated", { chatKey, threadId });
   };
-  const outbound = makeKeyedQueue((error) => {
-    host.log.warn("chat could not deliver a card", { error: describeError(error) });
-  });
-  const postImages = async (binding, attachments) => {
+  const outbound = makeKeyedQueue(
+    (error) => {
+      host.log.warn("chat could not deliver queued work", { error: describeError(error) });
+    },
+    {
+      limit: OUTBOUND_QUEUE_LIMIT,
+      onFull: (chatKey, limit) => {
+        host.log.warn("chat queue is full; refused a conclusion until restart", {
+          chatKey,
+          limit
+        });
+      }
+    }
+  );
+  const postImages = async (binding, attachments, onFailure) => {
     const adapter = adapterFor(binding.platform);
     if (adapter?.sendImage === void 0) return;
     for (const attachment of attachments) {
@@ -128333,19 +128497,22 @@ var makeImCore = (input) => {
           name: attachment.name,
           error: describeError(error)
         });
+        await onFailure?.(error);
       }
     }
   };
-  const deliver = async (binding, text4, attachments = []) => {
-    await postImages(binding, attachments);
+  const deliver = async (binding, text4, attachments = [], options = {}) => {
+    const { retry, onFailure } = options;
+    await postImages(binding, attachments, onFailure);
     if (text4.trim() === "") return true;
     const adapter = adapterFor(binding.platform);
     if (adapter === void 0) return false;
     try {
-      await adapter.sendText(binding, text4);
+      await adapter.sendText(binding, text4, { retry });
       return true;
     } catch (error) {
       host.log.warn("chat could not deliver", { error: describeError(error) });
+      await onFailure?.(error);
       return false;
     }
   };
@@ -128377,6 +128544,92 @@ var makeImCore = (input) => {
 // src/conclusionDelivery.ts
 import { threadOrNull as threadOrNull3 } from "@ycodium-ai/plugin-api";
 
+// src/abortableSleep.ts
+var abortableSleep = (ms, signal) => new Promise((resolve, reject) => {
+  if (signal?.aborted === true) {
+    reject(new Error("aborted"));
+    return;
+  }
+  const onAbort = () => {
+    clearTimeout(timer);
+    reject(new Error("aborted"));
+  };
+  const timer = setTimeout(() => {
+    signal?.removeEventListener("abort", onAbort);
+    resolve();
+  }, ms);
+  signal?.addEventListener("abort", onAbort, { once: true });
+});
+
+// src/deliveryFailure.ts
+import * as NodeCrypto2 from "node:crypto";
+
+// src/diagnostics.ts
+var PREFIX = {
+  conn: "IM-CONN",
+  msg: "IM-MSG",
+  setup: "IM-SETUP"
+};
+var shortSalt = () => {
+  const bytes = new Uint8Array(2);
+  crypto.getRandomValues(bytes);
+  return Array.from(bytes, (b) => b.toString(16).toUpperCase().padStart(2, "0")).join("");
+};
+var stableDiagnosticRef = (kind, digest) => `${PREFIX[kind]}-${digest.slice(0, 16).toUpperCase()}`;
+var diagnosticRef = (kind, nowMs = Date.now()) => {
+  const stamp = nowMs.toString(36).toUpperCase();
+  return `${PREFIX[kind]}-${stamp}-${shortSalt()}`;
+};
+var formatDiagnosticCopy = (report) => [
+  `ok=${report.ok ? "yes" : "no"}`,
+  `platform=${report.platform}`,
+  `bot=${report.botName}`,
+  `row=${report.rowId}`,
+  `stage=${report.stage}`,
+  `at=${report.at}`,
+  `detail=${report.detail}`
+].join("\n");
+
+// src/deliveryFailure.ts
+var deliveryFailure = (core, binding, threadId, turnId) => async (error) => {
+  const rejection = core.adapterFor(binding.platform)?.describeDeliveryRejection?.(error, binding);
+  if (rejection === void 0) return;
+  const { recipients } = rejection;
+  const digest = NodeCrypto2.createHash("sha256").update(JSON.stringify([threadId, turnId, binding.platform, binding.rowId, recipients])).digest("hex");
+  const id = `im.delivery-failed:${digest}`;
+  const reference2 = stableDiagnosticRef("msg", digest);
+  const payload = {
+    platform: binding.platform,
+    recipients,
+    hint: rejection.hint,
+    providerCode: rejection.providerCode,
+    reference: reference2,
+    sourceTurnId: turnId
+  };
+  core.host.log.warn("chat recipient rejected delivery", { threadId, ...payload });
+  if (core.state.opened[threadId] === void 0) return;
+  try {
+    await core.host.threads.externalMessages.append({
+      requestId: id,
+      threadId,
+      messages: [],
+      activities: [
+        {
+          id,
+          tone: "error",
+          kind: "im.delivery-failed",
+          summary: rejection.summary,
+          payload,
+          turnId: null,
+          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+        }
+      ]
+    });
+  } catch {
+    core.host.log.warn("chat could not append delivery failure notice", { threadId, reference: reference2 });
+  }
+};
+
 // src/threadMessages.ts
 import {
   isThreadNotFound,
@@ -128428,20 +128681,30 @@ async function messagesAfterLastUser(threads, threadId) {
 }
 
 // src/conclusionDelivery.ts
+var ALWAYS_OWED = () => true;
 var makeConclusionDelivery = (core, anchors) => {
   let disposed = false;
+  const stopped = new AbortController();
   core.host.onDispose(() => {
     disposed = true;
+    stopped.abort();
   });
   const marked = (text4, recovered) => recovered ? `${core.t("reply.conclusionRecovered")}
 ${text4}` : text4;
+  const sleep3 = (ms) => abortableSleep(ms, stopped.signal).catch(() => void 0);
+  const retryFor = (threadId, owed = ALWAYS_OWED) => ({
+    sleep: sleep3,
+    shouldContinue: async () => !disposed && owed() && await threadOrNull3(core.host.threads, threadId) !== null
+  });
   return {
+    retryFor,
     prepareConclusion: async (threadId, turnId = null) => {
       const thread = await threadOrNull3(core.host.threads, threadId);
       const final = thread === null ? void 0 : await latestMessage(
         core.host.threads,
         threadId,
-        (message) => message.role === "assistant" && message.text.trim() !== ""
+        // 给了轮次就只取这一轮的正文：排队等着的结论不能拿到下一轮的话。没记轮次的老消息照旧认。
+        (message) => message.role === "assistant" && message.text.trim() !== "" && (turnId === null || message.turnId === null || message.turnId === turnId)
       );
       const attachments = final === void 0 ? [] : await attachmentsOf(core.host.threads, threadId, final);
       return async (binding, options) => {
@@ -128451,12 +128714,22 @@ ${text4}` : text4;
 
 ${final.text}`, options.recovered);
         const anchored = await anchors.anchored(binding, threadId, turnId ?? final.turnId);
-        return !disposed && core.deliver(anchored, text4, attachments);
+        return !disposed && core.deliver(anchored, text4, attachments, {
+          retry: retryFor(threadId, options.owed),
+          onFailure: deliveryFailure(core, binding, threadId, turnId ?? final.turnId)
+        });
       };
     },
-    failure: async (binding, threadId, notice, recovered, turnId = null) => {
+    /**
+     * 发一段已经写好的结论文字（失败通知、卡片定稿失败时的文字兜底）：锚点、停用检查、重发与
+     * 拒收提醒都在这里，调用方只管写文字。
+     */
+    sendText: async (binding, threadId, notice, recovered, turnId = null, owed = ALWAYS_OWED) => {
       const anchored = await anchors.anchored(binding, threadId, turnId);
-      return !disposed && core.deliver(anchored, marked(notice, recovered));
+      return !disposed && core.deliver(anchored, marked(notice, recovered), [], {
+        retry: retryFor(threadId, owed),
+        onFailure: deliveryFailure(core, binding, threadId, turnId)
+      });
     }
   };
 };
@@ -128709,63 +128982,15 @@ var makeInboundAttachments = (core) => {
 
 // src/inbound.ts
 import { projectOrNull } from "@ycodium-ai/plugin-api";
-
-// src/boundedSeen.ts
-var makeBoundedSeen = (limit) => {
-  const seen = /* @__PURE__ */ new Set();
-  return {
-    has: (key) => seen.has(key),
-    /** 记下这个键：第一次见返回 true；已经记着返回 false（不重排，最早记的先被忘）。 */
-    claim: (key) => {
-      if (seen.has(key)) return false;
-      seen.add(key);
-      if (seen.size > limit) {
-        const oldest = seen.values().next().value;
-        if (oldest !== void 0) seen.delete(oldest);
-      }
-      return true;
-    }
-  };
-};
-
-// src/cooldown.ts
-var makeCooldown = (windowMs, now, maxKeys = Number.POSITIVE_INFINITY) => {
-  const lastAt = /* @__PURE__ */ new Map();
-  return {
-    tryAcquire: (key) => {
-      const current = now();
-      const previous = lastAt.get(key);
-      if (previous !== void 0 && current - previous < windowMs) return false;
-      lastAt.delete(key);
-      lastAt.set(key, current);
-      if (lastAt.size > maxKeys) {
-        for (const [candidate, at] of lastAt) {
-          if (current - at >= windowMs) lastAt.delete(candidate);
-        }
-        while (lastAt.size > maxKeys) {
-          const oldest = lastAt.keys().next().value;
-          if (oldest === void 0) break;
-          lastAt.delete(oldest);
-        }
-      }
-      return true;
-    }
-  };
-};
-
-// src/inbound.ts
-var SEEN_MESSAGE_LIMIT = 256;
 var ARCHIVED_REPLY_COOLDOWN_MS = 10 * 6e4;
 var UNSUPPORTED_REPLY_COOLDOWN_MS = 6e4;
 var NOT_ALLOWED_REPLY_COOLDOWN_MS = 10 * 6e4;
 var NOT_ALLOWED_REPLY_KEY_LIMIT = 1e3;
-var PROJECT_PROMPT_COOLDOWN_MS = 3e4;
 var makeInbound = (core, deps) => {
   const { host, t, adapterFor, commit, deliver, bindingOf: bindingOf2, bots } = core;
   const { enqueueForChat } = deps;
   const { handleCommand, targetOf } = deps.commands;
-  const { promptProject, handleRepo } = deps.chatSetup;
-  const { listedProjectsByChat } = deps.rows;
+  const { prepareMessage } = deps.chatSetup;
   const { questionFlow, handleButtonClick } = deps.interactions;
   const { answerByToken } = deps.approvals;
   const { handlePanelClick } = deps.panelWiring;
@@ -128779,10 +129004,9 @@ var makeInbound = (core, deps) => {
     () => Date.now(),
     NOT_ALLOWED_REPLY_KEY_LIMIT
   );
-  const projectPromptCooldown = makeCooldown(PROJECT_PROMPT_COOLDOWN_MS, () => Date.now());
-  const handledMessages = makeBoundedSeen(SEEN_MESSAGE_LIMIT);
-  const alreadyHandled = (key) => !handledMessages.claim(key);
-  const claimCallback = (rowId, callbackId) => callbackId === void 0 || callbackId === "" || !alreadyHandled(`c:${rowId}:${callbackId}`);
+  const { inboundState } = deps;
+  const alreadyHandled = (rowId, key) => !inboundState.claim(rowId, key);
+  const claimCallback = (rowId, callbackId) => callbackId === void 0 || callbackId === "" || !alreadyHandled(rowId, `c:${callbackId}`);
   const turnAwayStranger = (target2, sender) => {
     host.log.warn("chat ignored a message from someone not on the allow list", {
       bot: target2.displayName,
@@ -128822,6 +129046,61 @@ var makeInbound = (core, deps) => {
     const threadId = await startTurn(speaker, message);
     if (threadId !== null) await markWorking(speaker, threadId, message.messageId);
   };
+  const resumeMessage = async (current, message) => {
+    inheritFromParent(current, message.chatId, message.parentChatId);
+    let target2 = {
+      ...bindingOf2(current, message.chatId),
+      reply: anchorOfMessage(adapterFor(current.platform), message)
+    };
+    const chatKey = chatKeyOf(target2);
+    if (await handleCommand(target2, message.text, message.senderId)) return;
+    if (target2.projectId === "") {
+      if (!await prepareMessage(target2, message)) return;
+      target2 = { ...bindingOf2(current, message.chatId), reply: target2.reply };
+    }
+    const boundThread = chatOf(core.state, chatKey).threadId;
+    if (boundThread !== null && message.text !== "" && await questionFlow.answerByText(chatKey, boundThread, message.text)) {
+      return;
+    }
+    const project = await projectOrNull(host.projects, target2.projectId);
+    if (project === null || project.archivedAt != null) {
+      if (project === null) {
+        host.log.warn("chat cannot start work: the chat's project is gone", {
+          bot: target2.displayName,
+          projectId: target2.projectId
+        });
+      }
+      if (archivedReplyCooldown.tryAcquire(chatKey)) {
+        await deliver(
+          target2,
+          project === null ? t("reply.projectMissing") : t("reply.projectArchived", { title: project.title })
+        );
+      }
+      return;
+    }
+    const routed = targetOf(target2);
+    const attachmentsOnly = message.text.trim() === "" && message.resources.length > 0;
+    if (routed.kind === "team") {
+      if (message.resources.length > 0) await deliver(target2, t("reply.attachmentsNoTeam"));
+      if (attachmentsOnly) return;
+      const leadThreadId = await startTeamGoal(target2, message);
+      if (leadThreadId !== null) await markWorking(target2, leadThreadId, message.messageId);
+      return;
+    }
+    if (attachmentsOnly) {
+      await receiveAttachmentsOnly(target2, message);
+      return;
+    }
+    const branchChatId = hasWaitingAttachments(chatKey) ? void 0 : message.branchChatId;
+    if (branchChatId === void 0) {
+      await openTurn(target2, message);
+      return;
+    }
+    enqueueForChat(chatKeyOf({ rowId: current.rowId, chatId: branchChatId }), async () => {
+      inheritFromParent(current, branchChatId, message.chatId);
+      await openTurn({ ...bindingOf2(current, branchChatId), reply: target2.reply }, message);
+    });
+  };
   const inboundHandlersFor = (bot) => ({
     onError: (message) => host.log.warn("chat inbound connection failed", {
       platform: bot.platform,
@@ -128844,7 +129123,7 @@ var makeInbound = (core, deps) => {
       if (current === void 0) return;
       const message = settleChat(current, received);
       const arrived = bindingOf2(current, message.chatId);
-      if (alreadyHandled(`m:${chatKeyOf(arrived)}:${message.messageId}`)) return;
+      if (alreadyHandled(current.rowId, `m:${message.chatId}:${message.messageId}`)) return;
       if (message.chatKind !== void 0 && chatOf(core.state, chatKeyOf(arrived)).chatKind !== message.chatKind) {
         commit("chat-updated", { chatKey: chatKeyOf(arrived), chatKind: message.chatKind });
       }
@@ -128871,69 +129150,129 @@ var makeInbound = (core, deps) => {
         });
         return;
       }
-      enqueueForChat(chatKeyOf(arrived), async () => {
-        inheritFromParent(current, message.chatId, message.parentChatId);
-        const target2 = {
-          ...bindingOf2(current, message.chatId),
-          reply: anchorOfMessage(adapterFor(current.platform), message)
-        };
-        const chatKey = chatKeyOf(target2);
-        if (await handleCommand(target2, message.text, message.senderId)) return;
-        if (target2.projectId === "") {
-          const asked = message.text.trim();
-          if (/^[1-9]\d{0,2}$/u.test(asked) && listedProjectsByChat.has(chatKey)) {
-            await handleRepo(target2, asked);
-          } else if (projectPromptCooldown.tryAcquire(chatKey)) {
-            await promptProject(target2);
-          }
-          return;
-        }
-        const boundThread = chatOf(core.state, chatKey).threadId;
-        if (boundThread !== null && message.text !== "" && await questionFlow.answerByText(chatKey, boundThread, message.text)) {
-          return;
+      enqueueForChat(chatKeyOf(arrived), () => resumeMessage(current, message));
+    }
+  });
+  return { inboundHandlersFor, resumeMessage };
+};
+
+// src/inboundStore.ts
+import * as NodeFSP from "node:fs/promises";
+import * as NodePath from "node:path";
+var SEEN_LIMIT = 1e3;
+var fileIo = {
+  readFile: (path) => NodeFSP.readFile(path, "utf8"),
+  mkdir: async (path) => {
+    await NodeFSP.mkdir(path, { recursive: true });
+  },
+  writeFile: (path, contents) => NodeFSP.writeFile(path, contents, "utf8"),
+  rename: (from, to) => NodeFSP.rename(from, to)
+};
+var isRecord2 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+var decode = (contents) => {
+  const value2 = JSON.parse(contents);
+  if (!isRecord2(value2) || value2["version"] !== 1 || !isRecord2(value2["bots"]))
+    throw new Error("invalid inbound store");
+  const bots = /* @__PURE__ */ new Map();
+  for (const [rowId, row] of Object.entries(value2["bots"])) {
+    if (!isRecord2(row) || !Array.isArray(row["seenIds"]) || !row["seenIds"].every((id) => typeof id === "string"))
+      throw new Error("invalid inbound bot row");
+    const telegram = row["telegram"];
+    if (telegram !== void 0 && (!isRecord2(telegram) || typeof telegram["tokenHash"] !== "string" || telegram["tokenHash"] === "" || typeof telegram["offset"] !== "number" || !Number.isSafeInteger(telegram["offset"]) || telegram["offset"] < 0))
+      throw new Error("invalid telegram cursor");
+    bots.set(rowId, {
+      seenIds: row["seenIds"].slice(-SEEN_LIMIT),
+      ...telegram === void 0 ? {} : {
+        telegram: {
+          tokenHash: telegram["tokenHash"],
+          offset: telegram["offset"]
         }
-        const project = await projectOrNull(host.projects, target2.projectId);
-        if (project === null || project.archivedAt != null) {
-          if (project === null) {
-            host.log.warn("chat cannot start work: the chat's project is gone", {
-              bot: target2.displayName,
-              projectId: target2.projectId
-            });
-          }
-          if (archivedReplyCooldown.tryAcquire(chatKey)) {
-            await deliver(
-              target2,
-              project === null ? t("reply.projectMissing") : t("reply.projectArchived", { title: project.title })
-            );
+      }
+    });
+  }
+  return bots;
+};
+var makeInboundStore = (input) => {
+  const io = input.io ?? fileIo;
+  const path = NodePath.join(input.dataDir, "inbound.json");
+  const temporary = `${path}.tmp`;
+  let bots = /* @__PURE__ */ new Map();
+  let dirty = false;
+  let writing;
+  const warn = (message, error) => input.log.warn(message, { error: describeError(error) });
+  const ready = io.readFile(path).then(
+    (contents) => {
+      try {
+        bots = decode(contents);
+      } catch (error) {
+        warn("chat could not restore inbound state", error);
+      }
+    },
+    (error) => {
+      if (!isRecord2(error) || error["code"] !== "ENOENT")
+        warn("chat could not restore inbound state", error);
+    }
+  );
+  const write = () => {
+    writing ??= Promise.resolve().then(async () => {
+      try {
+        while (dirty) {
+          dirty = false;
+          const contents = JSON.stringify({ version: 1, bots: Object.fromEntries(bots) });
+          try {
+            await io.mkdir(input.dataDir);
+            await io.writeFile(temporary, contents);
+            await io.rename(temporary, path);
+          } catch (error) {
+            dirty = true;
+            warn("chat could not save inbound state", error);
+            break;
           }
-          return;
-        }
-        const routed = targetOf(target2);
-        const attachmentsOnly = message.text.trim() === "" && message.resources.length > 0;
-        if (routed.kind === "team") {
-          if (message.resources.length > 0) await deliver(target2, t("reply.attachmentsNoTeam"));
-          if (attachmentsOnly) return;
-          const leadThreadId = await startTeamGoal(target2, message);
-          if (leadThreadId !== null) await markWorking(target2, leadThreadId, message.messageId);
-          return;
-        }
-        if (attachmentsOnly) {
-          await receiveAttachmentsOnly(target2, message);
-          return;
         }
-        const branchChatId = hasWaitingAttachments(chatKey) ? void 0 : message.branchChatId;
-        if (branchChatId === void 0) {
-          await openTurn(target2, message);
-          return;
-        }
-        enqueueForChat(chatKeyOf({ rowId: current.rowId, chatId: branchChatId }), async () => {
-          inheritFromParent(current, branchChatId, message.chatId);
-          await openTurn({ ...bindingOf2(current, branchChatId), reply: target2.reply }, message);
-        });
-      });
+      } finally {
+        writing = void 0;
+      }
+    });
+    return writing;
+  };
+  const changed = () => {
+    dirty = true;
+    void write();
+  };
+  const rowOf = (rowId) => {
+    let row = bots.get(rowId);
+    if (row === void 0) {
+      row = { seenIds: [] };
+      bots.set(rowId, row);
     }
-  });
-  return { inboundHandlersFor };
+    return row;
+  };
+  return {
+    ready,
+    claim: (rowId, id) => {
+      const row = rowOf(rowId);
+      if (row.seenIds.includes(id)) return false;
+      row.seenIds.push(id);
+      if (row.seenIds.length > SEEN_LIMIT) row.seenIds.shift();
+      changed();
+      return true;
+    },
+    readCursor: (rowId, tokenHash) => {
+      const cursor = bots.get(rowId)?.telegram;
+      return cursor?.tokenHash === tokenHash ? cursor.offset : void 0;
+    },
+    saveCursor: (rowId, tokenHash, offset) => {
+      const row = rowOf(rowId);
+      if (row.telegram?.tokenHash === tokenHash && row.telegram.offset === offset) return;
+      if (row.telegram?.tokenHash !== tokenHash) row.seenIds = [];
+      row.telegram = { tokenHash, offset };
+      changed();
+    },
+    flush: async () => {
+      await ready;
+      if (dirty || writing) await write();
+    }
+  };
 };
 
 // src/interactions.ts
@@ -130583,29 +130922,6 @@ var sleep = async (deps) => {
   }
 };
 
-// src/redact.ts
-var DETAIL_MAX_CHARS = 200;
-var MASK = "***";
-var TOKEN_LIKE = /[A-Za-z0-9_=-]{24,}/g;
-var MIN_SECRET_LENGTH = 6;
-var makeRedactor = () => {
-  const secrets = /* @__PURE__ */ new Set();
-  const redact = (text4) => {
-    let out = text4;
-    for (const secret of [...secrets].sort((a, b) => b.length - a.length)) {
-      out = out.split(secret).join(MASK);
-    }
-    return out.replace(TOKEN_LIKE, MASK);
-  };
-  return {
-    register: (secret) => {
-      if (typeof secret === "string" && secret.length >= MIN_SECRET_LENGTH) secrets.add(secret);
-    },
-    redact,
-    detail: (text4) => redact(text4).slice(0, DETAIL_MAX_CHARS)
-  };
-};
-
 // src/lark/setup/cookieJar.ts
 var MAX_REDIRECT_HOPS = 10;
 var parseSetCookie = (responseUrl, header) => {
@@ -131323,21 +131639,7 @@ var buildChecklist = () => ({
 });
 var makeRealClock = () => ({
   now: () => Date.now(),
-  sleep: (ms, signal) => new Promise((resolve, reject) => {
-    if (signal?.aborted === true) {
-      reject(new Error("aborted"));
-      return;
-    }
-    const onAbort = () => {
-      clearTimeout(timer);
-      reject(new Error("aborted"));
-    };
-    const timer = setTimeout(() => {
-      signal?.removeEventListener("abort", onAbort);
-      resolve();
-    }, ms);
-    signal?.addEventListener("abort", onAbort, { once: true });
-  })
+  sleep: abortableSleep
 });
 var saveAndConclude = async (ctx, updateSettings, result) => {
   try {
@@ -131429,6 +131731,9 @@ var registerLarkSetup = (ctx, options = {}) => {
   return runner;
 };
 
+// src/larkApi.ts
+import { parseRetryAfterMs } from "@ycodium-ai/plugin-api";
+
 // src/larkPost.ts
 var styledText = (text4, style) => {
   let out = text4;
@@ -131608,6 +131913,33 @@ var parseLarkReply = (message) => {
   }
 };
 
+// src/sendRetry.ts
+var NO_RETRY = { retry: false };
+var SEND_RETRY_DELAYS_MS = [1e3, 4e3, 15e3];
+var MAX_WAIT_MS = 6e4;
+var SendStoppedError = class extends Error {
+  constructor(cause) {
+    super("send stopped before retrying", { cause });
+    this.name = "SendStoppedError";
+  }
+};
+var sendWithRetry = async (request, verdictOf, retry) => {
+  for (let attempt = 0; ; attempt += 1) {
+    try {
+      return await request();
+    } catch (error) {
+      const delayMs = SEND_RETRY_DELAYS_MS[attempt];
+      if (retry === void 0 || delayMs === void 0) throw error;
+      const verdict = verdictOf(error);
+      if (!verdict.retry) throw error;
+      const waitMs = verdict.afterMs ?? delayMs;
+      if (waitMs > MAX_WAIT_MS) throw error;
+      await retry.sleep(waitMs);
+      if (!await retry.shouldContinue()) throw new SendStoppedError(error);
+    }
+  }
+};
+
 // src/splitMessage.ts
 var splitMessage = (text4, limit) => {
   if (text4.length <= limit) return [text4];
@@ -131640,19 +131972,39 @@ var LARK_TEXT_MAX_CHARS = 3500;
 var LarkApiError = class extends Error {
   operation;
   code;
-  constructor(operation, code2, message) {
+  status;
+  retryAfterMs;
+  constructor(operation, code2, message, http = {}) {
     super(`lark ${operation} failed (code ${String(code2 ?? "?")}): ${message}`);
     this.name = "LarkApiError";
     this.operation = operation;
     this.code = code2;
+    this.status = http.status;
+    this.retryAfterMs = http.retryAfterMs;
   }
 };
-var isLarkPermissionError = (error) => error instanceof LarkApiError && (error.code === 99991672 || error.code === 99991679 || "status" in error && (error.status === 401 || error.status === 403));
+var isLarkPermissionError = (error) => error instanceof LarkApiError && (error.code === 99991672 || error.code === 99991679 || error.status === 401 || error.status === 403);
+var LARK_RATE_LIMITED = 99991400;
+var isReplyRejected = (error) => error instanceof LarkApiError && error.status === void 0 && error.code !== LARK_RATE_LIMITED;
+var larkSendVerdict = (error) => {
+  if (!(error instanceof LarkApiError)) return NO_RETRY;
+  if (error.status === 429 || error.code === LARK_RATE_LIMITED) {
+    return { retry: true, afterMs: error.retryAfterMs };
+  }
+  if (error.status !== void 0 && error.status >= 500) {
+    return { retry: true, afterMs: error.retryAfterMs };
+  }
+  return NO_RETRY;
+};
 var readEnvelope = async (operation, response) => {
   if (!response.ok) {
     await response.body?.cancel().catch(() => void 0);
-    throw Object.assign(new LarkApiError(operation, void 0, `HTTP ${String(response.status)}`), {
-      status: response.status
+    throw new LarkApiError(operation, void 0, `HTTP ${String(response.status)}`, {
+      status: response.status,
+      retryAfterMs: parseRetryAfterMs(
+        response.headers.get("retry-after") ?? response.headers.get("x-ogw-ratelimit-reset"),
+        Date.now()
+      ) ?? void 0
     });
   }
   const body = await response.json();
@@ -131679,35 +132031,37 @@ var postMessage = async (input) => {
     authorization: `Bearer ${input.token}`,
     "content-type": "application/json; charset=utf-8"
   };
-  const message = { msg_type: input.msgType, content: JSON.stringify(input.content) };
-  const sentOf = async (response2) => (await readEnvelope(input.operation, response2)).data;
+  const message = {
+    msg_type: input.msgType,
+    content: JSON.stringify(input.content),
+    ...input.retry === void 0 ? {} : { uuid: crypto.randomUUID() }
+  };
+  const post = (url, body) => sendWithRetry(
+    async () => (await readEnvelope(
+      input.operation,
+      await input.http(url, { method: "POST", headers, body: JSON.stringify(body) })
+    )).data,
+    larkSendVerdict,
+    input.retry
+  );
   if (input.reply !== void 0) {
     try {
-      const response2 = await input.http(
+      const sent2 = await post(
         `${LARK_BASE}/im/v1/messages/${encodeURIComponent(input.reply.messageId)}/reply`,
-        {
-          method: "POST",
-          headers,
-          body: JSON.stringify({
-            ...message,
-            ...input.reply.inThread ? { reply_in_thread: true } : {}
-          })
-        }
+        { ...message, ...input.reply.inThread ? { reply_in_thread: true } : {} }
       );
-      const sent = await sentOf(response2);
-      if (input.reply.inThread) input.onThreadReply?.(sent?.thread_id || void 0);
-      return sent?.message_id ?? null;
+      if (input.reply.inThread) input.onThreadReply?.(sent2?.thread_id || void 0);
+      return sent2?.message_id ?? null;
     } catch (error) {
-      if (!(error instanceof LarkApiError)) throw error;
+      if (!isReplyRejected(error)) throw error;
     }
   }
   const idType = input.receiveIdType ?? "chat_id";
-  const response = await input.http(`${LARK_BASE}/im/v1/messages?receive_id_type=${idType}`, {
-    method: "POST",
-    headers,
-    body: JSON.stringify({ receive_id: input.chatId, ...message })
+  const sent = await post(`${LARK_BASE}/im/v1/messages?receive_id_type=${idType}`, {
+    receive_id: input.chatId,
+    ...message
   });
-  return (await sentOf(response))?.message_id ?? null;
+  return sent?.message_id ?? null;
 };
 var readMessage = async (input) => {
   const response = await input.http(
@@ -131962,9 +132316,9 @@ function getDecodeCache(exclude) {
   }
   return cache;
 }
-function decode(string, exclude) {
+function decode2(string, exclude) {
   if (typeof exclude !== "string") {
-    exclude = decode.defaultChars;
+    exclude = decode2.defaultChars;
   }
   const cache = getDecodeCache(exclude);
   return string.replace(/(%[a-f0-9]{2})+/gi, function(seq) {
@@ -132023,9 +132377,9 @@ function decode(string, exclude) {
     return result;
   });
 }
-decode.defaultChars = ";/?:@&=+$,#";
-decode.componentChars = "";
-var decode_default = decode;
+decode2.defaultChars = ";/?:@&=+$,#";
+decode2.componentChars = "";
+var decode_default = decode2;
 
 // ../../node_modules/.pnpm/mdurl@2.1.0/node_modules/mdurl/lib/encode.mjs
 var encodeCache = {};
@@ -133046,12 +133400,12 @@ var LinkifyIt = class {
   *
   * See [twitter mentions example](https://github.com/markdown-it/linkify-it/blob/master/examples/twitter.mjs).
   */
-  add(schema, definition = null) {
-    if (!definition) delete this.__schemas__[schema];
+  add(schema, definition2 = null) {
+    if (!definition2) delete this.__schemas__[schema];
     else {
       const def = {
         normalize: (match, self2) => self2.normalize(match),
-        ...definition
+        ...definition2
       };
       this.__schemas__[schema] = def;
     }
@@ -137310,7 +137664,7 @@ var UNSUPPORTED_MESSAGE_TYPES = /* @__PURE__ */ new Set([
   "share_chat",
   "share_user",
   "system",
-  "merge",
+  "merge_forward",
   "interactive"
 ]);
 var botIdsOf = (mentions, appId) => {
@@ -137482,6 +137836,7 @@ var cardActionOperator = (event) => {
   }
   return null;
 };
+var isLarkAppId = (appId) => /^cli_[0-9a-fA-F]{16}$/u.test(appId);
 var startLarkInbound = (input) => {
   const dispatcher = new import_node_sdk.EventDispatcher({}).register({
     "im.message.receive_v1": (event) => {
@@ -137523,19 +137878,59 @@ var startLarkInbound = (input) => {
       return notice === null ? {} : { toast: { type: "info", content: notice } };
     }
   });
+  if (!isLarkAppId(input.appId)) {
+    input.onConnectionState?.({ state: "failed", reason: "invalid-app-id" });
+    return { close: () => void 0 };
+  }
+  let closed = false;
+  const connected = () => {
+    if (!closed) input.onConnectionState?.({ state: "connected" });
+  };
+  const failed = (error) => {
+    if (!closed) {
+      input.onConnectionState?.({ state: "failed", reason: "disconnected", error });
+    }
+  };
   const client = new import_node_sdk.WSClient({
     appId: input.appId,
     appSecret: input.appSecret,
     ...input.domain === void 0 ? {} : { domain: input.domain },
     autoReconnect: true,
-    onError: (cause) => input.onError(cause.message)
+    onReady: connected,
+    onReconnected: connected,
+    onReconnecting: () => failed(),
+    onError: (cause) => {
+      if (closed) return;
+      failed(cause);
+      input.onError(cause.message);
+    }
   });
-  void client.start({ eventDispatcher: dispatcher });
-  return { close: () => client.close({ force: true }) };
+  void client.start({ eventDispatcher: dispatcher }).catch(failed);
+  return {
+    close: () => {
+      closed = true;
+      client.close({ force: true });
+    }
+  };
 };
 
-// src/replyReference.ts
-import * as NodeCrypto2 from "node:crypto";
+// src/boundedSeen.ts
+var makeBoundedSeen = (limit) => {
+  const seen = /* @__PURE__ */ new Set();
+  return {
+    has: (key) => seen.has(key),
+    /** 记下这个键：第一次见返回 true；已经记着返回 false（不重排，最早记的先被忘）。 */
+    claim: (key) => {
+      if (seen.has(key)) return false;
+      seen.add(key);
+      if (seen.size > limit) {
+        const oldest = seen.values().next().value;
+        if (oldest !== void 0) seen.delete(oldest);
+      }
+      return true;
+    }
+  };
+};
 
 // src/deadline.ts
 var withDeadline2 = async (timeoutMs, load) => {
@@ -137554,6 +137949,7 @@ var withDeadline2 = async (timeoutMs, load) => {
 };
 
 // src/replyReference.ts
+import * as NodeCrypto3 from "node:crypto";
 var CONTENT_MAX = 8e3;
 var ATTACHMENTS_MAX = 20;
 var AUTHOR_MAX = 256;
@@ -137626,15 +138022,16 @@ var formatReplyReference = (reference2) => {
     ...lines.map((line) => `> ${line}`)
   ].join("\n");
 };
-var textWithInboundContext = (message, rowId, t) => {
-  const reply = formatReplyReference(message.replyTo);
-  const text4 = reply === null ? message.text : `${reply}
-
-${message.text}`;
+var textWithInboundContext = (message, rowId, t, topicRoot) => {
+  const text4 = [
+    formatReplyReference(topicRoot),
+    formatReplyReference(message.replyTo),
+    message.text
+  ].filter((part) => part !== null).join("\n\n");
   if (message.chatKind !== "group" || message.senderId === null) return text4;
   let name = cleanString(message.senderName, AUTHOR_MAX).value;
   if (!name) {
-    const code2 = NodeCrypto2.createHash("sha256").update(JSON.stringify([rowId, message.senderId])).digest("hex").slice(0, 4);
+    const code2 = NodeCrypto3.createHash("sha256").update(JSON.stringify([rowId, message.senderId])).digest("hex").slice(0, 4);
     name = t("source.member", { code: code2 });
   }
   const chat = cleanString(message.chatTitle, AUTHOR_MAX).value;
@@ -137687,6 +138084,26 @@ var makeLookup = (rowId, load) => {
 };
 var makeLarkMessageContext = (deps) => {
   let contactDenied = false;
+  const deliveredRoots = makeBoundedSeen(CACHE_LIMIT);
+  const loadReference = (messageId) => loadReplyReference(async (signal) => {
+    const token = await deps.tenantToken();
+    signal.throwIfAborted();
+    return fetchMessageReference({ http: deps.http, token, messageId, signal });
+  });
+  const topicRootForSession = (message) => {
+    const topic = message.topic;
+    if (topic === void 0 || topic.rootGiven === false) return void 0;
+    return async (recipientId) => {
+      const key = JSON.stringify([message.chatId, topic.rootMessageId, recipientId]);
+      if (deliveredRoots.has(key)) return void 0;
+      return {
+        reference: topic.rootMessageId === message.messageId ? void 0 : await loadReference(topic.rootMessageId),
+        confirmConsumed: () => {
+          deliveredRoots.claim(key);
+        }
+      };
+    };
+  };
   const userName = makeLookup(deps.rowId, async (openId, signal) => {
     try {
       const token = await deps.tenantToken();
@@ -137713,7 +138130,7 @@ var makeLarkMessageContext = (deps) => {
     });
     return name instanceof Promise || chat instanceof Promise ? Promise.all([name, chat]).then(([senderName, info]) => fields(senderName, info)) : fields(name, chat);
   };
-  return { chatInfo, forMessage };
+  return { chatInfo, forMessage, loadReference, topicRootForSession };
 };
 
 // src/larkAdapter.ts
@@ -137755,6 +138172,7 @@ var larkConfigIssues = (binding) => {
   const { appId, appSecret } = credentials(binding);
   const issues = [];
   if (appId === "") issues.push({ column: "larkAppId", code: "required" });
+  else if (!isLarkAppId(appId)) issues.push({ column: "larkAppId", code: "format" });
   if (appSecret === "") issues.push({ column: "larkAppSecret", code: "required" });
   return issues;
 };
@@ -137842,7 +138260,7 @@ var makeLarkAdapter = (deps) => {
       return rootMessageId === void 0 ? void 0 : groupId;
     },
     validate: larkConfigIssues,
-    isConfigured: (binding) => larkConfigIssues(binding).length === 0,
+    isConfigured: (binding) => larkConfigIssues(binding).every((issue) => issue.code !== "required"),
     connect: (binding, handlers) => {
       const { appId, appSecret } = credentials(binding);
       const port = {
@@ -137871,6 +138289,7 @@ var makeLarkAdapter = (deps) => {
         topicOnMention: topicOnMentionOf(binding),
         isSoloGroup: soloGroupFor(context),
         onError: handlers.onError,
+        ...handlers.onConnectionState === void 0 ? {} : { onConnectionState: handlers.onConnectionState },
         onCardAction: handlers.onButton,
         onPanelClick: (click, operatorOpenId) => handlers.onPanelClick?.({
           chatId: click.chatId,
@@ -137883,14 +138302,7 @@ var makeLarkAdapter = (deps) => {
           const { topic } = message;
           const source = context.forMessage(message);
           const parentMessageId = message.parentMessageId;
-          const reference2 = parentMessageId === void 0 ? null : loadReplyReference(
-            async (signal) => fetchMessageReference({
-              http: deps.http,
-              token: await tenantToken(binding),
-              messageId: parentMessageId,
-              signal
-            })
-          );
+          const reference2 = parentMessageId === void 0 ? null : context.loadReference(parentMessageId);
           const deliver = (names, replyTo) => handlers.onMessage({
             messageId: message.messageId,
             // 已经开出来的话题就是它自己那个聊天；将要开出来的（主窗口里 @ 机器人）先算群的，
@@ -137906,6 +138318,7 @@ var makeLarkAdapter = (deps) => {
             senderId: message.senderOpenId,
             ...names,
             text: message.text,
+            topicRootForSession: context.topicRootForSession(message),
             ...replyTo === void 0 ? {} : { replyTo },
             chatKind: message.chatType === "p2p" ? "private" : "group",
             replyInThread: message.inThread,
@@ -137960,7 +138373,8 @@ var makeLarkAdapter = (deps) => {
         const messageId = await sendChatText({
           ...target2,
           receiveIdType,
-          text: chunk
+          text: chunk,
+          retry: options?.retry
         });
         deps.log.info("lark delivered a message", { messageId, bot: binding.displayName });
       }
@@ -137974,6 +138388,9 @@ var makeLarkAdapter = (deps) => {
           detail: "missing app id or secret in saved config"
         };
       }
+      if (!isLarkAppId(appId)) {
+        return { stage: "credentials", ok: false, detail: "malformed app id in saved config" };
+      }
       try {
         const { expiresInSeconds } = await fetchTenantToken({ http: deps.http, appId, appSecret });
         return {
@@ -138295,7 +138712,7 @@ var en_default = {
     },
     wecomAppListenPort: {
       label: "Local callback port (optional)",
-      description: "Defaults to 30987. Self-built apps listening on the same address share one port.",
+      description: "Defaults to 30987. Self-built apps listening on the same address share one port; rows with different listen addresses (say 0.0.0.0 and 127.0.0.1) need different ports, or the second one fails to listen.",
       placeholder: "30987"
     },
     wecomAppListenHost: {
@@ -138313,6 +138730,7 @@ var en_default = {
     }
   },
   reply: {
+    wecomDeliveryFailed: "This reply didn't reach {{recipient}} in WeCom: they are outside this app's visible range. Add them to the app's visible range in the WeCom admin console, then ask the agent to send it again.",
     conclusionRecovered: "(Finished while restarting; delivered now)",
     notAllowed: "You are not on this bot's allow list, so this tap had no effect.",
     noDefaultModel: 'Project "{{title}}" has no agent selected yet, so a thread cannot be started. Send /model to pick one, or set a default in the project settings, then message again.',
@@ -138641,6 +139059,7 @@ var en_default = {
     }
   },
   repo: {
+    autoSelected: "Using project {{title}}.",
     needProject: "This chat has no project yet, so I won't start any work. Pick one and I will.",
     currentLine: 'This chat works on project "{{title}}".',
     noProjects: "There are no projects on this machine yet. Add one in Ycodium first.",
@@ -138668,13 +139087,16 @@ var en_default = {
       description: "Verify platform credentials still work; does not open a session or call a model.",
       running: "Checking {{rowId}}\u2026",
       done: "Connection OK",
-      failed: "Connection failed (ref {{ref}})",
+      failed: "Connection failed",
       notSaved: "Save this row first (credentials are read from saved config only).",
       hint: {
-        badToken: "This does not look like a bot token. Copy it again from BotFather: digits, a colon, then the key (ref {{ref}})",
-        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather (ref {{ref}})",
-        notBot: "This token does not belong to a bot. Use the token BotFather gave you (ref {{ref}})",
-        webhookActive: "This bot has a webhook set by another service, so it cannot receive messages here. Remove the webhook there, then check again (ref {{ref}})"
+        badToken: "This does not look like a bot token. Copy it again from BotFather: digits, a colon, then the key.",
+        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather.",
+        notBot: "This token does not belong to a bot. Use the token BotFather gave you.",
+        webhookActive: "This bot has a webhook set by another service, so it cannot receive messages here. Remove the webhook there, then check again.",
+        wecomTrustedIp: "Add this machine's outbound public IP to the app's trusted IP list in the WeCom admin console.",
+        wecomInvalidUser: "Check that the recipient, department or tag exists and is in this app's visible range.",
+        wecomInvalidAgent: "Check the AgentId against this self-built application in the WeCom admin console."
       }
     },
     copyDiagnostics: {
@@ -138682,24 +139104,24 @@ var en_default = {
       description: "Run a connection probe and produce copy-paste diagnostics (no secrets).",
       running: "Building diagnostics for {{rowId}}\u2026",
       done: "Diagnostics ready \u2014 see details below",
-      failed: "Diagnostics failed (ref {{ref}})",
+      failed: "Diagnostics failed",
       notSaved: "Save this row first before copying diagnostics."
     },
     diagnostic: {
-      ref: "Ref {{ref}}\n{{detail}}"
+      ref: "Reference: {{ref}}\n{{detail}}"
     },
     larkRepair: {
       label: "Repair scopes",
-      description: "Verify the Lark app can still mint a token and list scope / publish steps.",
+      description: "Check whether the saved credentials can mint a token; scopes, event subscriptions and publishing are not checked automatically.",
       step: {
-        scopes: "Confirm message / resource / panel scopes",
-        events: "Confirm long connection and event subscriptions",
-        publish: "Publish if scopes were added",
+        scopes: "Scopes \u2014 not checked",
+        events: "Event subscriptions \u2014 not checked",
+        publish: "Publishing \u2014 not checked",
         verify: "Verify the app can still mint a tenant token"
       },
-      done: "Credentials work; add any missing scopes in the Feishu console and publish",
-      hint: "Ref {{ref}}\n{{detail}}\nIf scopes are missing, request them on the Feishu open platform and publish; a chat /repair command will follow.",
-      failed: "Could not verify the Lark app (ref {{ref}})",
+      done: "Only token issuance was verified. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
+      hint: "Reference: {{ref}}\n{{detail}}\nReview scopes, event subscriptions and publishing on the Feishu open platform; none were checked automatically.",
+      failed: "Could not mint a token with the saved credentials. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
       notLark: "This row is not a saved Lark bot."
     }
   },
@@ -138738,7 +139160,23 @@ var en_default = {
     removeFailed: "Couldn't delete this bot.",
     status: {
       ready: "Ready",
-      incomplete: "Incomplete"
+      incomplete: "Incomplete",
+      connecting: "Connecting",
+      connected: "Connected",
+      notConnected: "Not connected"
+    },
+    connection: {
+      failed: "The last connection attempt failed.",
+      details: "Details: {{error}}",
+      reason: {
+        "not-available": "This platform can't be connected yet.",
+        "invalid-app-id": "The App ID isn't in the right format.",
+        disconnected: "The connection to the platform is down.",
+        "subscription-failed": "The platform didn't confirm the subscription.",
+        "token-unavailable": "Couldn't get an access token.",
+        "credentials-rejected": "The platform rejected the credentials."
+      },
+      duplicate: "Uses the same credentials as \u201C{{name}}\u201D. Only that row connects."
     },
     secret: {
       saved: "Saved. Leave blank to keep it.",
@@ -138977,7 +139415,7 @@ var zh_CN_default = {
     },
     wecomAppListenPort: {
       label: "\u672C\u673A\u56DE\u8C03\u7AEF\u53E3\uFF08\u53EF\u9009\uFF09",
-      description: "\u9ED8\u8BA4 30987\u3002\u76D1\u542C\u5730\u5740\u76F8\u540C\u7684\u81EA\u5EFA\u5E94\u7528\u5171\u7528\u4E00\u4E2A\u7AEF\u53E3\u3002",
+      description: "\u9ED8\u8BA4 30987\u3002\u76D1\u542C\u5730\u5740\u76F8\u540C\u7684\u81EA\u5EFA\u5E94\u7528\u5171\u7528\u4E00\u4E2A\u7AEF\u53E3\uFF1B\u76D1\u542C\u5730\u5740\u4E0D\u540C\u7684\u4E24\u884C\uFF08\u6BD4\u5982 0.0.0.0 \u548C 127.0.0.1\uFF09\u8981\u7528\u4E0D\u540C\u7AEF\u53E3\uFF0C\u5426\u5219\u540E\u4E00\u4E2A\u76D1\u542C\u4E0D\u8D77\u6765\u3002",
       placeholder: "30987"
     },
     wecomAppListenHost: {
@@ -138995,6 +139433,7 @@ var zh_CN_default = {
     }
   },
   reply: {
+    wecomDeliveryFailed: "\u8FD9\u6761\u56DE\u590D\u6CA1\u9001\u5230\u4F01\u4E1A\u5FAE\u4FE1\u91CC\u7684 {{recipient}}\uFF1A\u5BF9\u65B9\u4E0D\u5728\u8FD9\u4E2A\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u7BA1\u7406\u540E\u53F0\u628A\u4ED6\u4EEC\u52A0\u8FDB\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\uFF0C\u518D\u8BA9 agent \u91CD\u53D1\u4E00\u6B21\u3002",
     conclusionRecovered: "\uFF08\u91CD\u542F\u671F\u95F4\u5B8C\u6210\uFF0C\u73B0\u5728\u8865\u53D1\uFF09",
     notAllowed: "\u4F60\u4E0D\u5728\u8FD9\u4E2A\u673A\u5668\u4EBA\u7684\u5141\u8BB8\u540D\u5355\u91CC\uFF0C\u8FD9\u6B21\u70B9\u51FB\u6CA1\u6709\u751F\u6548\u3002",
     noDefaultModel: "\u9879\u76EE\u300C{{title}}\u300D\u8FD8\u6CA1\u9009 agent\uFF0C\u5F00\u4E0D\u4E86\u4F1A\u8BDD\u3002\u53D1 /model \u9009\u4E00\u4E2A\uFF0C\u6216\u8005\u5230\u9879\u76EE\u8BBE\u7F6E\u91CC\u8BBE\u4E2A\u9ED8\u8BA4\uFF0C\u518D\u53D1\u4E00\u6B21\u6D88\u606F\u3002",
@@ -139323,6 +139762,7 @@ var zh_CN_default = {
     }
   },
   repo: {
+    autoSelected: "\u4F7F\u7528\u9879\u76EE\u300C{{title}}\u300D\u3002",
     needProject: "\u8FD9\u4E2A\u804A\u5929\u8FD8\u6CA1\u9009\u9879\u76EE\uFF0C\u9009\u5B9A\u4E4B\u524D\u6211\u4E0D\u5F00\u5DE5\u3002\u9009\u4E00\u4E2A\u5C31\u5F00\u59CB\u3002",
     currentLine: "\u8FD9\u4E2A\u804A\u5929\u73B0\u5728\u5728\u9879\u76EE\u300C{{title}}\u300D\u4E0A\u3002",
     noProjects: "\u8FD9\u53F0\u673A\u5668\u4E0A\u8FD8\u6CA1\u6709\u9879\u76EE\uFF0C\u5148\u5230 Ycodium \u91CC\u6DFB\u52A0\u4E00\u4E2A\u3002",
@@ -139350,13 +139790,16 @@ var zh_CN_default = {
       description: "\u9A8C\u8BC1\u5E73\u53F0\u51ED\u636E\u662F\u5426\u4ECD\u53EF\u7528\uFF1B\u4E0D\u4F1A\u5F00\u4F1A\u8BDD\uFF0C\u4E5F\u4E0D\u4F1A\u8C03\u6A21\u578B\u3002",
       running: "\u6B63\u5728\u68C0\u67E5 {{rowId}} \u2026",
       done: "\u8FDE\u63A5\u6B63\u5E38",
-      failed: "\u8FDE\u63A5\u5931\u8D25\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
+      failed: "\u8FDE\u63A5\u5931\u8D25",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u68C0\u67E5\u8FDE\u63A5\uFF08\u51ED\u636E\u53EA\u4ECE\u5DF2\u4FDD\u5B58\u914D\u7F6E\u8BFB\u53D6\uFF09\u3002",
       hint: {
-        badToken: "\u8FD9\u4E0D\u50CF\u673A\u5668\u4EBA\u7684 token\u3002\u5230 BotFather \u91CD\u65B0\u590D\u5236\u4E00\u4EFD\uFF1A\u6570\u5B57\u3001\u5192\u53F7\uFF0C\u540E\u9762\u662F\u5BC6\u94A5\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
-        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
-        notBot: "\u8FD9\u4E2A token \u4E0D\u662F\u673A\u5668\u4EBA\u7684\u3002\u8BF7\u7528 BotFather \u7ED9\u7684\u90A3\u4E00\u4EFD\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
-        webhookActive: "\u8FD9\u4E2A\u673A\u5668\u4EBA\u88AB\u522B\u7684\u670D\u52A1\u8BBE\u4E86 webhook\uFF0C\u5728\u8FD9\u91CC\u6536\u4E0D\u5230\u6D88\u606F\u3002\u5148\u5230\u90A3\u8FB9\u64A4\u6389 webhook\uFF0C\u518D\u68C0\u67E5\u4E00\u6B21\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09"
+        badToken: "\u8FD9\u4E0D\u50CF\u673A\u5668\u4EBA\u7684 token\u3002\u5230 BotFather \u91CD\u65B0\u590D\u5236\u4E00\u4EFD\uFF1A\u6570\u5B57\u3001\u5192\u53F7\uFF0C\u540E\u9762\u662F\u5BC6\u94A5\u3002",
+        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\u3002",
+        notBot: "\u8FD9\u4E2A token \u4E0D\u662F\u673A\u5668\u4EBA\u7684\u3002\u8BF7\u7528 BotFather \u7ED9\u7684\u90A3\u4E00\u4EFD\u3002",
+        webhookActive: "\u8FD9\u4E2A\u673A\u5668\u4EBA\u88AB\u522B\u7684\u670D\u52A1\u8BBE\u4E86 webhook\uFF0C\u5728\u8FD9\u91CC\u6536\u4E0D\u5230\u6D88\u606F\u3002\u5148\u5230\u90A3\u8FB9\u64A4\u6389 webhook\uFF0C\u518D\u68C0\u67E5\u4E00\u6B21\u3002",
+        wecomTrustedIp: "\u628A\u8FD9\u53F0\u673A\u5668\u7684\u51FA\u7AD9\u516C\u7F51 IP \u52A0\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u4F01\u4E1A\u53EF\u4FE1 IP\u3002",
+        wecomInvalidUser: "\u786E\u8BA4\u6536\u4EF6\u4EBA\u3001\u90E8\u95E8\u6216\u6807\u7B7E\u5B58\u5728\uFF0C\u5E76\u5728\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u5185\u3002",
+        wecomInvalidAgent: "\u6838\u5BF9\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002"
       }
     },
     copyDiagnostics: {
@@ -139364,24 +139807,24 @@ var zh_CN_default = {
       description: "\u8DD1\u4E00\u6B21\u8FDE\u63A5\u63A2\u6D4B\uFF0C\u751F\u6210\u53EF\u590D\u5236\u7684\u8BCA\u65AD\u6587\u672C\uFF08\u4E0D\u542B\u5BC6\u94A5\uFF09\u3002",
       running: "\u6B63\u5728\u751F\u6210\u8BCA\u65AD {{rowId}} \u2026",
       done: "\u8BCA\u65AD\u5DF2\u751F\u6210\uFF0C\u89C1\u4E0B\u65B9\u8BE6\u60C5",
-      failed: "\u8BCA\u65AD\u5931\u8D25\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
+      failed: "\u8BCA\u65AD\u5931\u8D25",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u590D\u5236\u8BCA\u65AD\u3002"
     },
     diagnostic: {
-      ref: "\u53C2\u8003\u53F7 {{ref}}\n{{detail}}"
+      ref: "\u53C2\u8003\u53F7\uFF1A{{ref}}\n{{detail}}"
     },
     larkRepair: {
       label: "\u8865\u5168\u6743\u9650",
-      description: "\u6838\u5BF9\u98DE\u4E66\u5E94\u7528\u4ECD\u80FD\u6362 token\uFF0C\u5E76\u63D0\u793A\u9700\u8981\u8865\u7684\u6743\u9650\u4E0E\u53D1\u5E03\u6B65\u9AA4\u3002",
+      description: "\u68C0\u67E5\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u80FD\u5426\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u4E0D\u4F1A\u81EA\u52A8\u68C0\u67E5\u3002",
       step: {
-        scopes: "\u786E\u8BA4\u6D88\u606F / \u8D44\u6E90 / \u9762\u677F\u7B49\u6743\u9650",
-        events: "\u786E\u8BA4\u957F\u8FDE\u63A5\u4E0E\u4E8B\u4EF6\u8BA2\u9605",
-        publish: "\u5982\u6709\u589E\u91CF\u6743\u9650\uFF0C\u5B8C\u6210\u53D1\u5E03\u5BA1\u6279",
+        scopes: "\u6743\u9650\uFF1A\u672A\u68C0\u67E5",
+        events: "\u4E8B\u4EF6\u8BA2\u9605\uFF1A\u672A\u68C0\u67E5",
+        publish: "\u53D1\u5E03\uFF1A\u672A\u68C0\u67E5",
         verify: "\u9A8C\u8BC1\u5E94\u7528\u4ECD\u53EF\u6362\u53D6 tenant token"
       },
-      done: "\u51ED\u636E\u53EF\u7528\uFF1B\u82E5\u6743\u9650\u4E0D\u8DB3\u8BF7\u6309\u98DE\u4E66\u63A7\u5236\u53F0\u8865\u9F50\u540E\u53D1\u5E03",
-      hint: "\u53C2\u8003\u53F7 {{ref}}\n{{detail}}\n\u7F3A\u6743\u9650\u65F6\u53EF\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5BF9\u8BE5\u5E94\u7528\u589E\u91CF\u7533\u8BF7\u5E76\u53D1\u5E03\uFF1B\u804A\u5929\u4FA7 /repair \u547D\u4EE4\u540E\u7EED\u8865\u9F50\u3002",
-      failed: "\u65E0\u6CD5\u9A8C\u8BC1\u98DE\u4E66\u5E94\u7528\uFF08\u53C2\u8003\u53F7 {{ref}}\uFF09",
+      done: "\u4EC5\u6838\u5B9E\u4E86\u51ED\u636E\u4ECD\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
+      hint: "\u53C2\u8003\u53F7\uFF1A{{ref}}\n{{detail}}\n\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\uFF1B\u8FD9\u4E09\u9879\u5747\u672A\u81EA\u52A8\u68C0\u67E5\u3002",
+      failed: "\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u672A\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
       notLark: "\u8FD9\u4E00\u884C\u4E0D\u662F\u5DF2\u4FDD\u5B58\u7684\u98DE\u4E66\u673A\u5668\u4EBA\u3002"
     }
   },
@@ -139419,8 +139862,24 @@ var zh_CN_default = {
     copyFailed: "\u6CA1\u590D\u5236\u4E0A\u3002",
     removeFailed: "\u6CA1\u80FD\u5220\u6389\u8FD9\u4E2A\u673A\u5668\u4EBA\u3002",
     status: {
-      ready: "\u53EF\u7528",
-      incomplete: "\u8FD8\u6CA1\u586B\u5B8C"
+      ready: "\u5C31\u7EEA",
+      incomplete: "\u5F85\u8865\u5168",
+      connecting: "\u8FDE\u63A5\u4E2D",
+      connected: "\u5DF2\u8FDE\u63A5",
+      notConnected: "\u672A\u8FDE\u63A5"
+    },
+    connection: {
+      failed: "\u4E0A\u6B21\u8FDE\u63A5\u6CA1\u6709\u6210\u529F\u3002",
+      details: "\u8BE6\u60C5\uFF1A{{error}}",
+      reason: {
+        "not-available": "\u8FD9\u4E2A\u5E73\u53F0\u8FD8\u4E0D\u80FD\u8FDE\u63A5\u3002",
+        "invalid-app-id": "App ID \u683C\u5F0F\u4E0D\u6B63\u786E\u3002",
+        disconnected: "\u548C\u5E73\u53F0\u7684\u8FDE\u63A5\u65AD\u4E86\u3002",
+        "subscription-failed": "\u5E73\u53F0\u6CA1\u6709\u786E\u8BA4\u8BA2\u9605\u3002",
+        "token-unavailable": "\u6CA1\u80FD\u6362\u5230\u8BBF\u95EE\u4EE4\u724C\u3002",
+        "credentials-rejected": "\u5E73\u53F0\u62D2\u7EDD\u4E86\u51ED\u636E\u3002"
+      },
+      duplicate: "\u548C\u300C{{name}}\u300D\u7528\u7684\u662F\u540C\u4E00\u4EFD\u51ED\u636E\uFF0C\u53EA\u8FDE\u90A3\u4E00\u884C\u3002"
     },
     secret: {
       saved: "\u5DF2\u7ECF\u5B58\u8FC7\uFF0C\u7559\u7A7A\u5C31\u4FDD\u6301\u539F\u503C\u3002",
@@ -139601,6 +140060,16 @@ var makeModelPlan = (core, deps) => {
 // src/notifications.ts
 import { readThreadFailed, threadOrNull as threadOrNull5 } from "@ycodium-ai/plugin-api";
 
+// src/conclusionOutbox.ts
+var enqueueConclusion = (core, ledger, binding, debt, send) => core.outbound(
+  chatKeyOf(binding),
+  async () => {
+    if (debt === void 0) await send();
+    else await ledger.deliver(debt, send);
+  },
+  { droppable: debt !== void 0 }
+);
+
 // src/conclusionRecovery.ts
 var MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var recoverConclusions = async (core, ledger, delivery, failures) => {
@@ -139608,6 +140077,12 @@ var recoverConclusions = async (core, ledger, delivery, failures) => {
   core.host.onDispose(() => {
     disposed = true;
   });
+  const couldNotRecover = (debt, error) => {
+    core.host.log.warn("chat could not recover a conclusion", {
+      ...debt,
+      error: describeError(error)
+    });
+  };
   await core.ready;
   for (const debt of Object.values(conclusionDebtsOf(core.state))) {
     if (disposed) return;
@@ -139634,24 +140109,27 @@ var recoverConclusions = async (core, ledger, delivery, failures) => {
       }
       const binding = core.bindingForChatKey(debt.chatKey);
       if (binding === void 0) continue;
-      await ledger.deliver(debt, async () => {
-        if (latest.state === "error") {
-          return delivery.failure(
-            binding,
-            debt.threadId,
-            failures.forFailure(debt.threadId, execution.session?.lastError),
-            true,
-            latest.turnId
-          );
+      enqueueConclusion(core, ledger, binding, debt, async (owed) => {
+        try {
+          if (latest.state === "error") {
+            return delivery.sendText(
+              binding,
+              debt.threadId,
+              failures.forFailure(debt.threadId, execution.session?.lastError),
+              true,
+              latest.turnId,
+              owed
+            );
+          }
+          const send = await delivery.prepareConclusion(debt.threadId, latest.turnId);
+          return send(binding, { recovered: true, streaming: false, owed });
+        } catch (error) {
+          couldNotRecover(debt, error);
+          return false;
         }
-        const send = await delivery.prepareConclusion(debt.threadId, latest.turnId);
-        return send(binding, { recovered: true, streaming: false });
       });
     } catch (error) {
-      core.host.log.warn("chat could not recover a conclusion", {
-        ...debt,
-        error: describeError(error)
-      });
+      couldNotRecover(debt, error);
     }
   }
 };
@@ -139674,7 +140152,7 @@ var outcomeOfSession = (status) => {
 var THREAD_PROJECT_CACHE_LIMIT = 256;
 var makeNotifications = (core, deps) => {
   const { host, adapterFor, bindingForChatKey, ready } = core;
-  const { clearWorking } = deps;
+  const { takeWorking } = deps;
   const { turnCards } = deps.replyCards;
   const { failures, conclusions, delivery } = deps;
   void recoverConclusions(core, conclusions, delivery, failures);
@@ -139697,6 +140175,11 @@ var makeNotifications = (core, deps) => {
   });
   const streamsTo = (binding, threadId) => adapterFor(binding.platform)?.turnCards !== void 0 && owns(binding, threadId);
   const owns = (binding, threadId) => chatOfThread(core.state, threadId) === chatKeyOf(binding);
+  const later = (binding, work) => {
+    core.outbound(chatKeyOf(binding), async () => {
+      await work();
+    });
+  };
   const threadsWithSomethingToReport = /* @__PURE__ */ new Set();
   host.reactor({
     name: "im.assistant-messages",
@@ -139722,29 +140205,38 @@ var makeNotifications = (core, deps) => {
       const owes = Object.values(conclusionDebtsOf(core.state)).some(
         (debt2) => debt2.threadId === threadId
       );
-      const { debt, handled, execution } = said || owes ? await conclusions.forTurn(threadId) : { debt: void 0, handled: false, execution: null };
+      const { debt, handled, execution } = said || owes || targets.length > 0 ? await conclusions.forTurn(threadId) : { debt: void 0, handled: false, execution: null };
       if (debt !== void 0) {
         const binding = bindingForChatKey(debt.chatKey);
         if (binding !== void 0 && !streamsTo(binding, threadId) && execution?.session?.activeTurnId == null && execution?.latestTurn?.state !== "running" && execution?.latestTurn?.state !== "error" && payload.session?.status !== "error") {
-          await conclusions.deliver(debt, async () => {
-            const send = await delivery.prepareConclusion(
-              threadId,
-              execution?.latestTurn?.turnId ?? null
-            );
-            return send(binding, { recovered: false, streaming: false });
+          const turnId = execution?.latestTurn?.turnId ?? null;
+          enqueueConclusion(core, conclusions, binding, debt, async (owed) => {
+            const send = await delivery.prepareConclusion(threadId, turnId);
+            return send(binding, { recovered: false, streaming: false, owed });
           });
         }
       } else if (said && !handled) {
         const send = await delivery.prepareConclusion(threadId);
         for (const binding of targets) {
-          await send(binding, {
-            recovered: false,
-            streaming: streamsTo(binding, threadId)
-          });
+          const streaming = streamsTo(binding, threadId);
+          enqueueConclusion(
+            core,
+            conclusions,
+            binding,
+            void 0,
+            () => send(binding, { recovered: false, streaming })
+          );
         }
       }
       const outcome = outcomeOfSession(payload.session?.status);
-      for (const binding of targets) await clearWorking(binding, threadId, outcome);
+      for (const binding of targets) {
+        const withdraw = takeWorking(binding, threadId, outcome);
+        turnCards.afterTurn(
+          threadId,
+          () => later(binding, withdraw),
+          execution?.latestTurn?.turnId ?? null
+        );
+      }
     }
   });
   host.events.on("thread.failed", async (event) => {
@@ -139753,7 +140245,7 @@ var makeNotifications = (core, deps) => {
     threadsWithSomethingToReport.delete(threadId);
     await ready;
     const targets = targetsForProject(threadId, await projectOfThread(threadId));
-    const { debt, handled } = await conclusions.forTurn(threadId);
+    const { debt, handled, execution } = await conclusions.forTurn(threadId);
     const debtBinding = debt === void 0 ? void 0 : bindingForChatKey(debt.chatKey);
     const recipients = debt !== void 0 ? debtBinding === void 0 ? [] : [debtBinding] : targets;
     const textTargets = handled ? [] : recipients.filter(
@@ -139763,16 +140255,20 @@ var makeNotifications = (core, deps) => {
     const notice = textTargets.length > 0 || drawingTurn !== null ? failures.forFailure(threadId, readThreadFailed(event)?.detail) : null;
     if (notice !== null && drawingTurn !== null)
       failures.holdForCard(threadId, drawingTurn, notice);
-    for (const binding of targets) {
-      await clearWorking(binding, threadId, "failed");
-    }
     if (notice !== null) {
       for (const binding of textTargets) {
-        const send = () => delivery.failure(binding, threadId, notice, false);
-        if (debt !== void 0) await conclusions.deliver(debt, send);
-        else await send();
+        const send = (owed) => delivery.sendText(binding, threadId, notice, false, null, owed);
+        enqueueConclusion(core, conclusions, binding, debt, send);
       }
     }
+    for (const binding of targets) {
+      const withdraw = takeWorking(binding, threadId, "failed");
+      turnCards.afterTurn(
+        threadId,
+        () => later(binding, withdraw),
+        execution?.latestTurn?.turnId ?? null
+      );
+    }
   });
   const rememberThreadProject = (threadId, projectId) => {
     projectByThread.set(threadId, projectId);
@@ -140333,32 +140829,6 @@ var makeProjectRows = (core) => {
   return { projectRowsFor, listedProjectsByChat };
 };
 
-// src/diagnostics.ts
-var PREFIX = {
-  conn: "IM-CONN",
-  msg: "IM-MSG",
-  setup: "IM-SETUP"
-};
-var shortSalt = () => {
-  const bytes = new Uint8Array(2);
-  crypto.getRandomValues(bytes);
-  return Array.from(bytes, (b) => b.toString(16).toUpperCase().padStart(2, "0")).join("");
-};
-var diagnosticRef = (kind, nowMs = Date.now()) => {
-  const stamp = nowMs.toString(36).toUpperCase();
-  return `${PREFIX[kind]}-${stamp}-${shortSalt()}`;
-};
-var formatDiagnosticCopy = (report) => [
-  `ref=${report.ref}`,
-  `ok=${report.ok ? "yes" : "no"}`,
-  `platform=${report.platform}`,
-  `bot=${report.botName}`,
-  `row=${report.rowId}`,
-  `stage=${report.stage}`,
-  `at=${report.at}`,
-  `detail=${report.detail}`
-].join("\n");
-
 // src/failureNotices.ts
 var makeFailureNotices = (core) => {
   const heldForCard = /* @__PURE__ */ new Map();
@@ -140450,20 +140920,12 @@ var trailingReply = (messages) => {
 var ROTATE = "rotate";
 var isDrawing = (live) => live.card !== null || live.reopen;
 var RECENT_ENDED_LIMIT = 256;
+var turnKey = (threadId, turnId) => JSON.stringify([threadId, turnId]);
 var makeTurnCards = (deps) => {
   const slots = /* @__PURE__ */ new Map();
-  const recentEnded = /* @__PURE__ */ new Map();
+  const recentEnded = makeBoundedSeen(RECENT_ENDED_LIMIT);
   const erroredThreads = /* @__PURE__ */ new Set();
   let disposed = false;
-  const rememberEnded = (threadId, turnId) => {
-    if (turnId === null) return;
-    recentEnded.delete(threadId);
-    recentEnded.set(threadId, turnId);
-    if (recentEnded.size > RECENT_ENDED_LIMIT) {
-      const oldest = recentEnded.keys().next().value;
-      if (oldest !== void 0) recentEnded.delete(oldest);
-    }
-  };
   const readTexts = async (live, progress) => {
     const texts = /* @__PURE__ */ new Map();
     for (const segment of progress.segments) {
@@ -140515,29 +140977,28 @@ var makeTurnCards = (deps) => {
     const turnId = progress.turnId ?? live?.turnId ?? null;
     const target2 = live?.target ?? deps.resolveTarget(threadId, turnId);
     if (target2 === null) return;
-    rememberEnded(threadId, turnId);
     if (end.status === "error") erroredThreads.add(threadId);
     const title = live?.title ?? await deps.titleOf(threadId);
     const view = await finalView(title, progress, live, end);
-    if (live?.card != null) {
-      const card = live.card;
-      const sent = await card.finish(view);
-      deps.onClosed(card.cardId);
-      if (deps.finalize !== void 0)
-        await deps.finalize(threadId, turnId, target2.chatKey, async () => sent);
-      return;
-    }
-    const send = async () => {
-      const card = await openCard(target2, view);
-      return card !== null || await deps.fallback(threadId, turnId, target2.chatKey, view);
-    };
-    if (deps.finalize === void 0) await send();
-    else await deps.finalize(threadId, turnId, target2.chatKey, send);
+    const card = live?.card ?? null;
+    const finished = card !== null && await card.finish(view);
+    if (card !== null) deps.onClosed(card.cardId);
+    const send = async () => finished || card === null && await openCard(target2, view) !== null;
+    const sent = deps.finalize === void 0 ? await send() : await deps.finalize(threadId, turnId, target2.chatKey, send);
+    if (!sent) await deps.fallback(threadId, turnId, target2.chatKey, view);
+    if (turnId !== null) recentEnded.claim(turnKey(threadId, turnId));
+    const callbacks = slot.afterTurn.get(turnId) ?? [];
+    slot.afterTurn.delete(turnId);
+    if (turnId !== null) {
+      callbacks.push(...slot.afterTurn.get(null) ?? []);
+      slot.afterTurn.delete(null);
+    }
+    for (const after of callbacks) after();
   };
   const handle = async (slot, threadId, item) => {
     await deps.ready;
     if (disposed) return;
-    if (item.turnId !== null && recentEnded.get(threadId) === item.turnId) return;
+    if (item.turnId !== null && recentEnded.has(turnKey(threadId, item.turnId))) return;
     let live = slot.live;
     if (live !== null) {
       const sameTurn = item.turnId === null || live.turnId === null || live.turnId === item.turnId;
@@ -140621,7 +141082,11 @@ var makeTurnCards = (deps) => {
       }
     } finally {
       slot.running = false;
-      if (slot.live === null && slot.queue.length === 0) slots.delete(threadId);
+      if (slot.live === null && slot.queue.length === 0) {
+        slots.delete(threadId);
+        for (const callbacks of slot.afterTurn.values()) for (const after of callbacks) after();
+        slot.afterTurn.clear();
+      }
     }
   };
   return {
@@ -140630,7 +141095,7 @@ var makeTurnCards = (deps) => {
       if (disposed) return;
       let slot = slots.get(threadId);
       if (slot === void 0) {
-        slot = { queue: [], running: false, live: null };
+        slot = { queue: [], running: false, live: null, afterTurn: /* @__PURE__ */ new Map() };
         slots.set(threadId, slot);
       }
       const last = slot.queue.at(-1);
@@ -140644,6 +141109,18 @@ var makeTurnCards = (deps) => {
         void pump(threadId, slot);
       }
     },
+    /** 撤回执只等所属轮次收尾；没有轮次 id 时仍等当前线程槽，不能在出站队列里等自己。 */
+    afterTurn: (threadId, work, turnId = null) => {
+      if (disposed) return;
+      const slot = slots.get(threadId);
+      if (slot === void 0 || turnId !== null && recentEnded.has(turnKey(threadId, turnId)))
+        work();
+      else {
+        const callbacks = slot.afterTurn.get(turnId) ?? [];
+        callbacks.push(work);
+        slot.afterTurn.set(turnId, callbacks);
+      }
+    },
     /**
      * 审批或提问答完了：封存这条会话开着的卡，下一拍另开一张。立刻返回；没有在画的卡、或
      * 平台不换卡，就什么都不做。
@@ -140670,7 +141147,10 @@ var makeTurnCards = (deps) => {
     /** 插件停用：放下所有在画的卡，不再发任何更新。卡会停在最后一拍，重启时被标「已中断」。 */
     dispose: () => {
       disposed = true;
-      for (const slot of slots.values()) slot.live?.card?.abandon();
+      for (const slot of slots.values()) {
+        slot.live?.card?.abandon();
+        slot.afterTurn.clear();
+      }
       slots.clear();
     }
   };
@@ -140678,7 +141158,7 @@ var makeTurnCards = (deps) => {
 
 // src/replyCards.ts
 var makeReplyCards = (core, failures, anchors, conclusions, delivery) => {
-  const { host, adapterFor, commit, deliver, bindingForChatKey, bindingOfThread, ready } = core;
+  const { host, adapterFor, commit, bindingForChatKey, bindingOfThread, ready } = core;
   const stopRequested = /* @__PURE__ */ new Set();
   const turnCards = makeTurnCards({
     ready,
@@ -140737,22 +141217,28 @@ var makeReplyCards = (core, failures, anchors, conclusions, delivery) => {
     onClosed: (cardId) => commit("turn-card-closed", { cardId }),
     finalize: async (threadId, turnId, chatKey, send) => {
       const { debt, handled } = await conclusions.forTurn(threadId, turnId);
-      if (handled) return;
-      if (debt === void 0) {
-        await send();
-        return;
-      }
-      if (!await conclusions.deliver(debt, send)) return;
+      if (handled) return true;
+      if (debt === void 0) return send();
+      if (!await conclusions.deliver(debt, send)) return false;
       const binding = bindingForChatKey(chatKey);
-      if (binding === void 0) return;
+      if (binding === void 0) return true;
       const sendConclusion = await delivery.prepareConclusion(threadId, turnId);
       await sendConclusion(binding, { recovered: false, streaming: true });
+      return true;
     },
     fallback: async (threadId, turnId, chatKey, view) => {
+      const { debt, handled } = await conclusions.forTurn(threadId, turnId);
+      if (handled) return;
       const binding = bindingForChatKey(chatKey);
-      if (binding === void 0) return false;
+      if (binding === void 0) return;
       const text4 = [view.body, view.errorText ?? ""].filter((part) => part !== "").join("\n\n");
-      return deliver(await anchors.anchored(binding, threadId, turnId), text4);
+      enqueueConclusion(
+        core,
+        conclusions,
+        binding,
+        debt,
+        (owed) => delivery.sendText(binding, threadId, text4, false, turnId, owed)
+      );
     },
     schedule: (run, delayMs) => {
       const timer = setTimeout(run, delayMs);
@@ -141122,8 +141608,8 @@ var makeSessions = (core) => {
 };
 
 // src/teamGoals.ts
-import * as NodeCrypto3 from "node:crypto";
-var isRecord2 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+import * as NodeCrypto4 from "node:crypto";
+var isRecord3 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 var teamGoalRequestId = (binding, messageId) => {
   const identity = JSON.stringify([
     "im",
@@ -141132,7 +141618,7 @@ var teamGoalRequestId = (binding, messageId) => {
     binding.chatId,
     messageId
   ]);
-  return NodeCrypto3.createHash("sha256").update(identity).digest("hex");
+  return NodeCrypto4.createHash("sha256").update(identity).digest("hex");
 };
 var makeTeamGoals = (core) => {
   const { host, t, deliver, commit } = core;
@@ -141153,17 +141639,19 @@ var makeTeamGoals = (core) => {
   };
   const startTeamGoal = async (binding, message) => {
     try {
+      const requestId = teamGoalRequestId(binding, message.messageId);
+      const topicRoot = await message.topicRootForSession?.(requestId);
       const result = await host.plugins.invoke({
         pluginId: "team",
         command: "startGoal",
         payload: {
           projectId: binding.projectId,
-          goal: textWithInboundContext(message, binding.rowId, t),
+          goal: textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
           titleSeed: message.text,
-          requestId: teamGoalRequestId(binding, message.messageId)
+          requestId
         }
       });
-      if (isRecord2(result) && result._tag === "TeamGoalRejection") {
+      if (isRecord3(result) && result._tag === "TeamGoalRejection") {
         await deliver(
           binding,
           t(
@@ -141172,9 +141660,10 @@ var makeTeamGoals = (core) => {
         );
         return null;
       }
-      if (!isRecord2(result) || typeof result.leadThreadId !== "string" || result.leadThreadId === "" || result.leadName !== null && typeof result.leadName !== "string") {
+      if (!isRecord3(result) || typeof result.leadThreadId !== "string" || result.leadThreadId === "" || result.leadName !== null && typeof result.leadName !== "string") {
         throw new Error("team startGoal returned an invalid result");
       }
+      topicRoot?.confirmConsumed();
       commit("team-goal-started", { chatKey: chatKeyOf(binding), threadId: result.leadThreadId });
       await deliver(
         binding,
@@ -141194,6 +141683,9 @@ var makeTeamGoals = (core) => {
   return { hasRosterFor, startTeamGoal };
 };
 
+// src/telegramAdapter.ts
+import * as NodeCrypto5 from "node:crypto";
+
 // src/telegramApi.ts
 var API_BASE = "https://api.telegram.org";
 var POLL_TIMEOUT_SECONDS = 45;
@@ -141218,6 +141710,10 @@ var target = (chatId) => {
   const { chat, thread } = splitChatId(chatId);
   return { chat_id: chat, ...thread === null ? {} : { message_thread_id: thread } };
 };
+var replyParameters = (messageId) => {
+  const id = Number(messageId);
+  return messageId === void 0 || !Number.isSafeInteger(id) ? {} : { reply_parameters: { message_id: id, allow_sending_without_reply: true } };
+};
 var chatOnly = (chatId) => ({ chat_id: splitChatId(chatId).chat });
 var TelegramApiError = class extends Error {
   code;
@@ -141230,6 +141726,10 @@ var TelegramApiError = class extends Error {
     this.retryAfterSeconds = retryAfterSeconds;
   }
 };
+var telegramSendVerdict = (error) => error instanceof TelegramApiError && (error.code === 429 || error.code === 503 && error.retryAfterSeconds !== void 0) ? {
+  retry: true,
+  afterMs: error.retryAfterSeconds === void 0 ? void 0 : error.retryAfterSeconds * 1e3
+} : NO_RETRY;
 var isNotModified = (error) => error instanceof TelegramApiError && error.code === 400 && error.message.toLowerCase().includes("message is not modified");
 var PHOTO_NAME = "photo.jpg";
 var PHOTO_MIME = "image/jpeg";
@@ -141345,13 +141845,15 @@ var makeTelegramApi = (input) => {
     }
     return envelope.result;
   };
-  const upload = async (method, field, chatId, file) => {
+  const upload = async (method, field, chatId, file, replyMessageId) => {
     const form = new FormData();
     const where = target(chatId);
     form.set("chat_id", where.chat_id);
     if (where.message_thread_id !== void 0) {
       form.set("message_thread_id", String(where.message_thread_id));
     }
+    const reply = replyParameters(replyMessageId).reply_parameters;
+    if (reply !== void 0) form.set("reply_parameters", JSON.stringify(reply));
     form.set(field, new Blob([new Uint8Array(file.bytes)], { type: file.mimeType }), file.name);
     const response = await send(
       method,
@@ -141374,9 +141876,10 @@ var makeTelegramApi = (input) => {
       (row) => row.map((button) => ({ text: button.text, callback_data: button.data }))
     )
   });
-  const sendSingle = async (method, chatId, body, rows) => {
+  const sendSingle = async (method, chatId, body, rows, replyMessageId) => {
     const sent = await call(method, {
       ...target(chatId),
+      ...replyParameters(replyMessageId),
       ...body,
       ...rows === void 0 ? {} : { reply_markup: keyboard(rows) }
     });
@@ -141436,21 +141939,26 @@ var makeTelegramApi = (input) => {
       },
       POLL_CALL_TIMEOUT_MS
     ),
-    sendMessage: async (chatId, text4) => {
-      for (const chunk of splitForTelegram(text4)) {
-        await call("sendMessage", { ...target(chatId), text: chunk });
+    sendMessage: async (chatId, text4, retry, replyMessageId) => {
+      for (const [index, chunk] of splitForTelegram(text4).entries()) {
+        const reply = index === 0 ? replyMessageId : void 0;
+        await sendWithRetry(
+          () => sendSingle("sendMessage", chatId, { text: chunk }, void 0, reply),
+          telegramSendVerdict,
+          retry
+        );
       }
     },
     /**
      * 发一条消息，回它的 id。调用方保证 `text` 不超过单条上限（边写边更新的回复要自己
      * 在上限处翻篇，这里不替它切）。带 `rows` 就挂一块内联键盘。
      */
-    sendOne: (chatId, text4, rows) => sendSingle("sendMessage", chatId, { text: text4 }, rows),
+    sendOne: (chatId, text4, rows, replyMessageId) => sendSingle("sendMessage", chatId, { text: text4 }, rows, replyMessageId),
     /**
      * 发一条富文本，回它的 id。`markdown` 已是平台要的样子。带 `rows` 就挂一块内联键盘。
      * 调用方保证不超富文本单条上限（这里不替它切）。
      */
-    sendRichOne: (chatId, markdown, rows) => sendSingle("sendRichMessage", chatId, { rich_message: { markdown } }, rows),
+    sendRichOne: (chatId, markdown, rows, replyMessageId) => sendSingle("sendRichMessage", chatId, { rich_message: { markdown } }, rows, replyMessageId),
     /**
      * 改一条已发出的消息。内容没变（`message is not modified`）当成功。`rows` 不给就是
      * 去掉按钮：改了文字又要保留按钮的调用方得自己再传一次。
@@ -141462,20 +141970,21 @@ var makeTelegramApi = (input) => {
      */
     editRich: (chatId, messageId, markdown, rows = []) => editSingle(chatId, messageId, { rich_message: { markdown } }, rows),
     /** 带按钮的审批消息，一行一个按钮；回消息 id，之后才改得了它（平台没给就是 null）。 */
-    sendButtons: (chatId, text4, buttons) => sendSingle(
+    sendButtons: (chatId, text4, buttons, replyMessageId) => sendSingle(
       "sendMessage",
       chatId,
       { text: text4 },
-      buttons.map((button) => [{ text: button.label, data: button.token }])
+      buttons.map((button) => [{ text: button.label, data: button.token }]),
+      replyMessageId
     ),
     /** 答完点击，不然客户端上那个按钮一直转圈。带 `text` 时点击者会看到一句提示。 */
     answerCallback: (callbackQueryId, text4) => call("answerCallbackQuery", {
       callback_query_id: callbackQueryId,
       ...text4 === void 0 ? {} : { text: text4 }
     }),
-    sendPhoto: (chatId, photo) => upload("sendPhoto", "photo", chatId, photo),
+    sendPhoto: (chatId, photo, replyMessageId) => upload("sendPhoto", "photo", chatId, photo, replyMessageId),
     /** 以文件形式发（不压缩、不限尺寸比例）：什么类型都行，音频与视频也走这条。 */
-    sendDocument: (chatId, file) => upload("sendDocument", "document", chatId, file),
+    sendDocument: (chatId, file, replyMessageId) => upload("sendDocument", "document", chatId, file, replyMessageId),
     /** 取一个文件的字节。要两步：先换路径，再按路径下载。 */
     fetchFile: async (fileId, maxBytes) => {
       const file = await call("getFile", {
@@ -141687,7 +142196,7 @@ var makeTurnWriter = (deps) => {
   const put = async (text4) => {
     const bounded = text4.length <= deps.limit ? text4 : text4.slice(0, deps.limit);
     if (live === null) {
-      const id = await deps.messages.send(bounded);
+      const id = await deps.messages.send(bounded, first === null);
       if (id === null) throw new Error("telegram sent a message without an id");
       live = id;
       first ??= id;
@@ -141827,19 +142336,18 @@ var makeTelegramAdapter = (deps) => {
     limit: TELEGRAM_TEXT_MAX_CHARS,
     ...resume === void 0 ? {} : { resume },
     messages: {
-      send: (text4) => withRichFallback(
-        toTelegramRichMarkdown(text4),
-        async (markdown) => (await apiFor(slot.binding)).sendRichOne(chatId, markdown),
-        async () => (await apiFor(slot.binding)).sendOne(chatId, text4)
-      ),
+      send: (text4, first) => {
+        const reply = first ? slot.binding.reply?.messageId : void 0;
+        return withRichFallback(
+          toTelegramRichMarkdown(text4),
+          async (markdown) => (await apiFor(slot.binding)).sendRichOne(chatId, markdown, void 0, reply),
+          async () => (await apiFor(slot.binding)).sendOne(chatId, text4, void 0, reply)
+        );
+      },
       edit: (messageId, text4) => withRichFallback(
         toTelegramRichMarkdown(text4),
-        async (markdown) => {
-          await (await apiFor(slot.binding)).editRich(chatId, messageId, markdown);
-        },
-        async () => {
-          await (await apiFor(slot.binding)).editMessage(chatId, messageId, text4);
-        }
+        async (markdown) => (await apiFor(slot.binding)).editRich(chatId, messageId, markdown),
+        async () => (await apiFor(slot.binding)).editMessage(chatId, messageId, text4)
       )
     }
   });
@@ -141847,6 +142355,7 @@ var makeTelegramAdapter = (deps) => {
     platform: "telegram",
     icon: "telegram",
     label: "Telegram",
+    quotesReplies: true,
     columns: COLUMNS2,
     validate: telegramConfigIssues,
     isConfigured: (binding) => telegramConfigIssues(binding).length === 0,
@@ -141855,7 +142364,12 @@ var makeTelegramAdapter = (deps) => {
       };
       const stopped = new Promise((resolve) => stop = resolve);
       let running = true;
-      let offset = 0;
+      const tokenHash = NodeCrypto5.createHash("sha256").update(tokenOf(binding)).digest("hex");
+      let offset = deps.readCursor(binding.rowId, tokenHash);
+      const advanceOffset = (update) => {
+        offset = nextOffset([update], offset ?? 0);
+        deps.saveCursor(binding.rowId, tokenHash, offset);
+      };
       let acknowledged = 0;
       let backoff = BACKOFF_START_MS;
       let botUsername;
@@ -141868,7 +142382,7 @@ var makeTelegramAdapter = (deps) => {
       });
       const publishAck = () => {
         const api = liveApi;
-        if (api === void 0 || offset <= acknowledged) return;
+        if (api === void 0 || offset === void 0 || offset <= acknowledged) return;
         const next = offset;
         acknowledged = next;
         void api.getUpdates(next, 0).catch(() => void 0);
@@ -141876,6 +142390,7 @@ var makeTelegramAdapter = (deps) => {
       const poll = async () => {
         for (; ; ) {
           if (!running) return;
+          let checkingConnection = true;
           try {
             const api = await apiFor(binding);
             liveApi = api;
@@ -141884,6 +142399,7 @@ var makeTelegramAdapter = (deps) => {
               const own = await api.getMe();
               botUsername = own.username ?? null;
               botId = own.id;
+              if (running) handlers.onConnectionState?.({ state: "connected" });
             }
             if (!running) return;
             if (!menuSent) {
@@ -141895,9 +142411,17 @@ var makeTelegramAdapter = (deps) => {
                 });
               });
             }
+            if (offset === void 0) {
+              const backlog = await api.getUpdates(-1, 0);
+              if (!running) return;
+              offset = nextOffset(backlog, 0);
+              deps.saveCursor(binding.rowId, tokenHash, offset);
+            }
             acknowledged = offset;
             const updates = await api.getUpdates(offset);
             if (!running) return;
+            handlers.onConnectionState?.({ state: "connected" });
+            checkingConnection = false;
             backoff = BACKOFF_START_MS;
             for (const update of updates) {
               if (!running) break;
@@ -141905,13 +142429,13 @@ var makeTelegramAdapter = (deps) => {
               if (callback?.data !== void 0) {
                 const operatorId = callback.from === void 0 ? null : String(callback.from.id);
                 const notice = callback.data.startsWith(PANEL_DATA_PREFIX) ? panelClick(binding.rowId, callback, operatorId, handlers) : handlers.onButton(callback.data, operatorId, callback.id);
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 await api.answerCallback(callback.id, notice ?? void 0).catch(() => void 0);
                 continue;
               }
               const message = update.message;
               if (message === void 0) {
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 continue;
               }
               const resource = resourceOf2(message);
@@ -141920,7 +142444,7 @@ var makeTelegramAdapter = (deps) => {
                 botUsername
               );
               if (text4 === null) {
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 continue;
               }
               const gated = !passesGroupGate2({
@@ -141934,12 +142458,12 @@ var makeTelegramAdapter = (deps) => {
                 const solo = binding.groupMention === "always" && await isSoloGroup(String(message.chat.id));
                 if (!running) break;
                 if (!solo) {
-                  offset = nextOffset([update], offset);
+                  advanceOffset(update);
                   continue;
                 }
               }
               if (!running) break;
-              offset = nextOffset([update], offset);
+              advanceOffset(update);
               const senderId = message.from === void 0 ? null : String(message.from.id);
               const senderName = telegramDisplayName(message.from);
               const chatKind = message.chat.type === "private" ? "private" : "group";
@@ -141982,6 +142506,7 @@ var makeTelegramAdapter = (deps) => {
             }
           } catch (error) {
             if (!running) return;
+            if (checkingConnection) handlers.onConnectionState?.({ state: "failed", error });
             handlers.onError(error instanceof Error ? error.message : String(error));
             await Promise.race([(deps.sleep ?? defaultSleep)(backoff), stopped]);
             backoff = Math.min(backoff * 2, BACKOFF_MAX_MS);
@@ -141999,9 +142524,9 @@ var makeTelegramAdapter = (deps) => {
         }
       };
     },
-    sendText: async (binding, text4) => {
+    sendText: async (binding, text4, options) => {
       const api = await apiFor(binding);
-      await api.sendMessage(binding.chatId, text4);
+      await api.sendMessage(binding.chatId, text4, options?.retry, binding.reply?.messageId);
     },
     checkConnection: async (bot) => {
       const token = tokenOf(bot);
@@ -142070,25 +142595,30 @@ var makeTelegramAdapter = (deps) => {
     sendImage: async (binding, image2) => {
       const api = await apiFor(binding);
       try {
-        await api.sendPhoto(binding.chatId, image2);
+        await api.sendPhoto(binding.chatId, image2, binding.reply?.messageId);
       } catch (error) {
         if (!(error instanceof TelegramApiError && error.code === 400)) throw error;
         deps.log.info("telegram could not send the picture as a photo, sending it as a file", {
           name: image2.name,
           reason: error.message
         });
-        await api.sendDocument(binding.chatId, image2);
+        await api.sendDocument(binding.chatId, image2, binding.reply?.messageId);
       }
     },
     sendFile: async (binding, file) => {
       const api = await apiFor(binding);
-      await api.sendDocument(binding.chatId, file);
+      await api.sendDocument(binding.chatId, file, binding.reply?.messageId);
     },
     // 单张照片 10 MB、单个文件 50 MB。这两个数来自 Bot API 文档的记忆，本仓库里没有核对过。
     outboundLimits: { imageBytes: 10 * 1024 * 1024, fileBytes: 50 * 1024 * 1024 },
     askApproval: async (binding, request) => {
       const api = await apiFor(binding);
-      return api.sendButtons(binding.chatId, request.body, request.options);
+      return api.sendButtons(
+        binding.chatId,
+        request.body,
+        request.options,
+        binding.reply?.messageId
+      );
     },
     settleApproval: async (binding, cardId, settlement) => {
       const api = await apiFor(binding);
@@ -142140,7 +142670,7 @@ ${line}`
         const api = await apiFor(binding);
         const rendered = renderPanel(card, 1);
         const cardId = await withFloodWait(
-          () => api.sendOne(binding.chatId, rendered.text, rendered.rows)
+          () => api.sendOne(binding.chatId, rendered.text, rendered.rows, binding.reply?.messageId)
         );
         if (cardId !== null) {
           panelKeyboards.set(`${binding.rowId}:${binding.chatId}:${cardId}`, {
@@ -142165,7 +142695,9 @@ ${line}`
       open: async (binding, card) => {
         const api = await apiFor(binding);
         const rendered = renderChoiceCard(card);
-        return withFloodWait(() => api.sendOne(binding.chatId, rendered.text, rendered.rows));
+        return withFloodWait(
+          () => api.sendOne(binding.chatId, rendered.text, rendered.rows, binding.reply?.messageId)
+        );
       },
       update: async (binding, cardId, card) => {
         const api = await apiFor(binding);
@@ -142260,6 +142792,7 @@ var makeTurns = (core, deps) => {
     const text4 = message.text;
     const threadId = await ensureThread(binding, text4 || message.resources[0]?.name || "Chat");
     if (threadId === null) return null;
+    const topicRoot = await message.topicRootForSession?.(threadId);
     const carried = waitingFor(chatKey, threadId);
     pendingByChat.delete(chatKey);
     const own = await collectResources(
@@ -142297,7 +142830,10 @@ var makeTurns = (core, deps) => {
         message: {
           messageId: userMessageId,
           role: "user",
-          text: [textWithInboundContext(message, binding.rowId, t), ...notes].join("\n"),
+          text: [
+            textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
+            ...notes
+          ].join("\n"),
           attachments: attachments.map(
             (attachment) => attachment.type === "image" ? { ...attachment, type: "image" } : { ...attachment, type: "file" }
           )
@@ -142307,6 +142843,7 @@ var makeTurns = (core, deps) => {
         interactionMode: interactionModeOf(chatKey),
         ...intentAction !== void 0 ? { intentAction } : {}
       });
+      topicRoot?.confirmConsumed();
       if (intentAction?.kind !== "steer") {
         deps.conclusions.owe({
           chatKey,
@@ -142435,8 +142972,15 @@ var ROW_ACTION_ITEM_SCHEMA = makeFlowItemSchema({
   doneRequired: ["messageKey", "fills"]
 });
 var botOf = (config2, adapters, rowId) => {
-  const adapterFor = (platform) => adapters.find((adapter) => adapter.platform === platform);
-  return readBots(config2, adapterFor).find((bot) => bot.rowId === rowId);
+  const table2 = config2[BOTS_FIELD];
+  if (typeof table2 !== "object" || table2 === null || Array.isArray(table2) || !Object.hasOwn(table2, rowId))
+    return void 0;
+  const row = table2[rowId];
+  if (typeof row !== "object" || row === null || Array.isArray(row)) return void 0;
+  const raw = row;
+  const platform = platformOf(raw);
+  const adapter = adapters.find((candidate) => candidate.platform === platform);
+  return { ...readBotView(rowId, raw, adapter ?? { label: platform }), platform };
 };
 var reportOf = (bot, stage, ok, detail, hint) => ({
   ref: diagnosticRef("conn"),
@@ -142452,12 +142996,9 @@ var reportOf = (bot, stage, ok, detail, hint) => ({
 var probe = async (adapters, bot) => {
   const adapter = adapters.find((candidate) => candidate.platform === bot.platform);
   if (adapter?.checkConnection === void 0) {
-    return reportOf(bot, "platform", false, `unsupported platform ${bot.platform}`);
-  }
-  const redactor = makeRedactor();
-  for (const column of adapter.columns) {
-    if (column.kind === "password") redactor.register(bot.values[column.key]);
+    return reportOf(bot, "platform", false, `unsupported platform ${bot.platform}`, "notAvailable");
   }
+  const redactor = botRedactor(adapter.columns, bot.values);
   try {
     const result = await adapter.checkConnection(bot);
     return reportOf(
@@ -142482,10 +143023,15 @@ var emitReport = (emit, report, action) => {
     });
     return;
   }
+  const suggested = report.hint !== void 0 && action.keyPrefix === "rowAction.checkConnection";
   emit({
     kind: "failed",
-    reasonKey: report.hint !== void 0 && action.keyPrefix === "rowAction.checkConnection" ? `rowAction.checkConnection.hint.${report.hint}` : `${action.keyPrefix}.failed`,
-    params: { ref: report.ref },
+    reasonKey: suggested && report.hint !== void 0 ? connectionHintKey(report.hint) : `${action.keyPrefix}.failed`,
+    // 参考号由界面写在细节第一行（「参考号：…」），结论句里不带。
+    params: {
+      ref: report.ref,
+      ...suggested && report.hint !== void 0 ? { hint: report.hint } : {}
+    },
     detail
   });
 };
@@ -142537,9 +143083,9 @@ var registerSettingsRowActions = (ctx, adapters) => {
       send({
         kind: "steps",
         steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "pending" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "pending" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "pending" },
+          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
+          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
+          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
           { id: "verify", labelKey: "rowAction.larkRepair.step.verify", state: "running" }
         ]
       });
@@ -142556,9 +143102,9 @@ var registerSettingsRowActions = (ctx, adapters) => {
       send({
         kind: "steps",
         steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "done" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "done" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "done" },
+          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
+          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
+          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
           {
             id: "verify",
             labelKey: "rowAction.larkRepair.step.verify",
@@ -142574,7 +143120,7 @@ var registerSettingsRowActions = (ctx, adapters) => {
           warnings: [
             {
               key: "rowAction.larkRepair.hint",
-              params: { ref, detail: formatDiagnosticCopy({ ...report, ref }) }
+              params: { ref, detail: formatDiagnosticCopy(report) }
             }
           ]
         });
@@ -142584,14 +143130,14 @@ var registerSettingsRowActions = (ctx, adapters) => {
         kind: "failed",
         reasonKey: "rowAction.larkRepair.failed",
         params: { ref },
-        detail: formatDiagnosticCopy({ ...report, ref })
+        detail: formatDiagnosticCopy(report)
       });
     }
   });
 };
 
 // src/settingsView.ts
-var isRecord3 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+var isRecord4 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 var hasStoredSecret = (row, key) => {
   const value2 = row[key];
   return typeof value2 === "string" && value2 !== "";
@@ -142609,10 +143155,10 @@ var targetTable = () => ({
 });
 var targetViews = (config2) => {
   const table2 = config2[DELIVERY_TARGETS_FIELD];
-  if (!isRecord3(table2)) return [];
+  if (!isRecord4(table2)) return [];
   const columns = deliveryTargetColumns();
   return Object.entries(table2).flatMap(([rowId, raw]) => {
-    if (!isRecord3(raw)) return [];
+    if (!isRecord4(raw)) return [];
     const issues = targetIssues(raw);
     const values = Object.fromEntries(
       columns.map((column) => [column.key, readString(raw, column.key)])
@@ -142624,9 +143170,9 @@ var buildSettingsView = (config2, adapters) => {
   const columns = buildBotColumns(adapters);
   const table2 = config2[BOTS_FIELD];
   const bots = [];
-  if (isRecord3(table2)) {
+  if (isRecord4(table2)) {
     for (const [rowId, raw] of Object.entries(table2)) {
-      if (!isRecord3(raw)) continue;
+      if (!isRecord4(raw)) continue;
       const platform = platformOf(raw);
       const values = {};
       const secrets = {};
@@ -142689,10 +143235,10 @@ var applyRowEdit = (config2, { field, columns }, edit) => {
   for (const key of clearSecrets) {
     if (!secretColumns.has(key)) return columnError("not-a-secret", key);
   }
-  const table2 = isRecord3(config2[field]) ? config2[field] : {};
+  const table2 = isRecord4(config2[field]) ? config2[field] : {};
   const requested = edit.rowId;
   const current = requested === void 0 ? {} : Object.hasOwn(table2, requested) ? table2[requested] : void 0;
-  if (!isRecord3(current)) return { ok: false, code: "unknown-row" };
+  if (!isRecord4(current)) return { ok: false, code: "unknown-row" };
   const rowId = requested ?? nextRowId(table2);
   const nextRow = { ...current, ...edit.values };
   const clearing = clearSecrets.filter((key) => !Object.hasOwn(secrets, key));
@@ -142710,7 +143256,7 @@ var applyBotEdit = (config2, adapters, edit) => applyRowEdit(config2, { field: B
 var applyTargetEdit = (config2, edit) => applyRowEdit(config2, targetTable(), edit);
 var removeRow = (config2, field, rowId) => {
   const table2 = config2[field];
-  if (!isRecord3(table2) || !Object.hasOwn(table2, rowId)) return null;
+  if (!isRecord4(table2) || !Object.hasOwn(table2, rowId)) return null;
   const nextTable = { ...table2 };
   delete nextTable[rowId];
   return { ...config2, [field]: nextTable };
@@ -142784,8 +143330,29 @@ var generalWriteOptions = (payload, next) => {
   }
   return void 0;
 };
-var viewAfterWrite = async (ctx, adapters) => buildSettingsView(await ctx.settings.read(), adapters);
-var registerSettingsCommands = (ctx, adapters, updateSettings) => {
+var registerSettingsCommands = (ctx, adapters, updateSettings, connections) => {
+  const viewAfterWrite = async () => buildSettingsView(await ctx.settings.read(), adapters);
+  ctx.stream({
+    name: SETTINGS_CONNECTIONS_COMMAND,
+    description: "Read bot connection states as an initial snapshot and subsequent changes.",
+    scope: "read",
+    payloadSchema: EMPTY_PAYLOAD,
+    buffer: { latest: 1 },
+    handle: async (_payload, emit, signal) => {
+      if (signal.aborted) return;
+      const unsubscribe = connections.subscribe((snapshot) => {
+        if (!signal.aborted) emit(snapshot);
+      });
+      try {
+        await new Promise((resolve) => {
+          if (signal.aborted) resolve();
+          else signal.addEventListener("abort", () => resolve(), { once: true });
+        });
+      } finally {
+        unsubscribe();
+      }
+    }
+  });
   ctx.command({
     name: SETTINGS_VIEW_COMMAND,
     description: "Read the chat-bridge settings view, bot columns, and this machine's proxies.",
@@ -142812,7 +143379,7 @@ var registerSettingsCommands = (ctx, adapters, updateSettings) => {
       return { result, write: { config: next, options: { secrets, clearSecrets } } };
     });
     if (!edited.ok) return edited;
-    return { ok: true, rowId: edited.rowId, view: await viewAfterWrite(ctx, adapters) };
+    return { ok: true, rowId: edited.rowId, view: await viewAfterWrite() };
   };
   const removeRow2 = async (remove) => {
     const removed = await updateSettings((config2) => {
@@ -142820,7 +143387,7 @@ var registerSettingsCommands = (ctx, adapters, updateSettings) => {
       return next === null ? { result: false } : { result: true, write: { config: next } };
     });
     if (!removed) return { ok: false, code: "unknown-row" };
-    return { ok: true, view: await viewAfterWrite(ctx, adapters) };
+    return { ok: true, view: await viewAfterWrite() };
   };
   ctx.command({
     name: SETTINGS_SAVE_BOT_COMMAND,
@@ -142871,7 +143438,7 @@ var registerSettingsCommands = (ctx, adapters, updateSettings) => {
           write: options === void 0 ? { config: next } : { config: next, options }
         };
       });
-      return { ok: true, view: await viewAfterWrite(ctx, adapters) };
+      return { ok: true, view: await viewAfterWrite() };
     }
   });
 };
@@ -142899,12 +143466,13 @@ var makeWechatAdapter = (deps) => {
     columns: COLUMNS3,
     validate: wechatConfigIssues,
     isConfigured: (bot) => wechatConfigIssues(bot).length === 0,
-    connect: (bot, _handlers) => {
+    connect: (bot, handlers) => {
       deps.log.warn("wechat iLink connect is stubbed pending security-review gate (YCO-236)", {
         bot: bot.displayName,
         hasToken: tokenOf2(bot) !== "",
         textLimit: WECHAT_TEXT_MAX_CHARS
       });
+      handlers.onConnectionState?.({ state: "failed", reason: "not-available" });
       return { close: () => void 0 };
     },
     sendText: async (binding, _text) => {
@@ -142927,7 +143495,7 @@ var makeWechatAdapter = (deps) => {
 };
 
 // src/wecomUpload.ts
-import * as NodeCrypto4 from "node:crypto";
+import * as NodeCrypto6 from "node:crypto";
 var WECOM_CHUNK_BYTES = 512 * 1024;
 var WECOM_MAX_CHUNKS = 100;
 var WECOM_MIN_UPLOAD_BYTES = 5;
@@ -142960,7 +143528,7 @@ var uploadWecomMedia = async (input) => {
     filename: clampName(input.filename),
     total_size: bytes.byteLength,
     total_chunks: totalChunks,
-    md5: NodeCrypto4.createHash("md5").update(bytes).digest("hex")
+    md5: NodeCrypto6.createHash("md5").update(bytes).digest("hex")
   });
   const uploadId = init.upload_id;
   if (typeof uploadId !== "string" || uploadId === "") {
@@ -143047,7 +143615,7 @@ var wecomReplyReference = (quote) => {
 };
 
 // src/wecomApi.ts
-var DEFAULT_WECOM_ENDPOINT = "wss://openws.work.weixin.qq.com/wssvr/";
+var DEFAULT_WECOM_ENDPOINT = "wss://openws.work.weixin.qq.com";
 var PING_INTERVAL_MS = 3e4;
 var MAX_MISSED_PONGS = 2;
 var SUBSCRIBE_TIMEOUT_MS = 1e4;
@@ -143184,9 +143752,10 @@ var runWecomClient = (input) => {
     const message = parseWecomMessage(frame, input.botId);
     if (message !== null) input.handlers.onMessage(message);
   };
-  const finish = () => {
+  const finish = (error = new Error("WeCom connection closed"), reason = "disconnected") => {
     if (finished) return;
     finished = true;
+    if (!closed) input.handlers.onConnectionState?.({ state: "failed", error, reason });
     clearInterval(heartbeat);
     openStreams.clear();
     void input.socket.close().catch(() => void 0);
@@ -143204,6 +143773,7 @@ var runWecomClient = (input) => {
       if (!closed) {
         input.handlers.onError(error instanceof Error ? error.message : String(error));
       }
+      finish(error);
     }
     finish();
   };
@@ -143211,7 +143781,7 @@ var runWecomClient = (input) => {
     if (finished) return;
     if (missedPong >= MAX_MISSED_PONGS) {
       input.handlers.onError("socket hang up: missed pong");
-      finish();
+      finish(new Error("socket hang up: missed pong"));
       return;
     }
     missedPong += 1;
@@ -143232,10 +143802,13 @@ var runWecomClient = (input) => {
     settleAck(subscribeId, error instanceof Error ? error : new Error(String(error)));
   });
   const ready = subscribed.then(
-    () => true,
+    () => {
+      if (!finished && !closed) input.handlers.onConnectionState?.({ state: "connected" });
+      return !finished && !closed;
+    },
     (error) => {
       if (!closed) input.handlers.onError(error instanceof Error ? error.message : String(error));
-      finish();
+      finish(error, "subscription-failed");
       return false;
     }
   );
@@ -143370,7 +143943,7 @@ var runWecomClient = (input) => {
 };
 
 // src/wecomMedia.ts
-import * as NodeCrypto5 from "node:crypto";
+import * as NodeCrypto7 from "node:crypto";
 
 // src/wecomPadding.ts
 var PADDING_BLOCK = 32;
@@ -143401,7 +143974,7 @@ var decryptWecomMedia = (cipher, aesKey) => {
   if (cipher.byteLength === 0 || cipher.byteLength % AES_BLOCK !== 0) {
     throw new WecomDecryptError("the ciphertext is not a whole number of blocks");
   }
-  const decipher = NodeCrypto5.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
+  const decipher = NodeCrypto7.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
   decipher.setAutoPadding(false);
   const plain = Buffer.concat([decipher.update(cipher), decipher.final()]);
   const unpadded = stripPadding(plain);
@@ -143544,6 +144117,9 @@ ${kept}`;
           botSecret,
           handlers: {
             onError: handlers.onError,
+            onConnectionState: (state) => {
+              if (!stopped) handlers.onConnectionState?.(state);
+            },
             onMessage: (message) => {
               if (message.chatType !== "single") return;
               client.rememberRequest(message.chatId, message.requestId);
@@ -143585,6 +144161,8 @@ ${kept}`;
           try {
             if (await runOnce()) backoff = BACKOFF_START_MS2;
           } catch (error) {
+            if (stopped) return;
+            handlers.onConnectionState?.({ state: "failed", error, reason: "disconnected" });
             handlers.onError(error instanceof Error ? error.message : String(error));
           }
           if (stopped) return;
@@ -143602,6 +144180,7 @@ ${kept}`;
         }
       };
     },
+    // 不看 `options.retry`：长连接的回执没有核实过的限流码，也没有幂等键，失败一律说不清发没发出去。
     sendText: async (binding, text4) => {
       const client = clients.get(binding.rowId);
       if (client === void 0) {
@@ -143618,12 +144197,36 @@ ${kept}`;
           detail: "missing bot id or secret in saved config"
         };
       }
+      let stage = "websocket";
       try {
         const socket = await deps.connectSocket(endpoint);
-        await socket.close();
-        return { stage: "websocket", ok: true, detail: `endpoint reachable (${endpoint})` };
+        stage = "aibot_subscribe";
+        let detail = "WeCom connection closed before subscribe ack";
+        let closing;
+        const client = runWecomClient({
+          socket: {
+            send: (data) => socket.send(data),
+            messages: socket.messages,
+            close: () => closing ??= socket.close()
+          },
+          botId,
+          botSecret,
+          handlers: {
+            onMessage: () => void 0,
+            onError: (error) => {
+              detail = error;
+            }
+          }
+        });
+        try {
+          const ok = await client.ready;
+          return { stage, ok, detail: ok ? `subscription confirmed (${endpoint})` : detail };
+        } finally {
+          client.close();
+          await closing;
+        }
       } catch (error) {
-        return { stage: "websocket", ok: false, detail: describeError(error) };
+        return { stage, ok: false, detail: describeError(error) };
       }
     },
     askApproval: async (binding, request) => {
@@ -143680,18 +144283,25 @@ ${kept}`;
 // src/wecomAppApi.ts
 var WECOM_APP_DEFAULT_API_BASE = "https://qyapi.weixin.qq.com";
 var WECOM_APP_TEXT_MAX_BYTES = 2048;
+var REQUEST_TIMEOUT_MS = 15e3;
+var MEDIA_TIMEOUT_MS = 6e4;
 var WecomAppApiError = class extends Error {
   code;
   providerCode;
   hint;
+  invalidUsers;
   constructor(code2, message, extras) {
     super(message);
     this.name = "WecomAppApiError";
     this.code = code2;
     this.providerCode = extras?.providerCode;
     this.hint = extras?.hint;
+    this.invalidUsers = extras?.invalidUsers ?? [];
   }
 };
+var TOKEN_INVALID_CODES = /* @__PURE__ */ new Set(["40014", "42001"]);
+var RATE_LIMITED_CODES = /* @__PURE__ */ new Set(["45009", "45033"]);
+var wecomAppSendVerdict = (error) => error instanceof WecomAppApiError && error.providerCode !== void 0 && (RATE_LIMITED_CODES.has(error.providerCode) || TOKEN_INVALID_CODES.has(error.providerCode)) ? { retry: true } : NO_RETRY;
 var cleanString2 = (value2) => {
   if (typeof value2 !== "string") return null;
   const trimmed = value2.trim();
@@ -143727,6 +144337,7 @@ var splitUtf8ByBytes = (text4, maxBytes = WECOM_APP_TEXT_MAX_BYTES) => {
   if (current.length > 0) chunks.push(current);
   return chunks;
 };
+var parseInvalidUsers = (value2) => typeof value2 === "string" ? value2.split("|").map((user) => user.trim()).filter(Boolean) : [];
 var WecomAppApi = class {
   corpId;
   corpSecret;
@@ -143778,9 +144389,13 @@ var WecomAppApi = class {
   async sendText(input) {
     const chunks = splitUtf8ByBytes(input.content);
     for (const chunk of chunks) {
-      await this.#send(
-        { touser: input.userId, msgtype: "text", text: { content: chunk } },
-        input.signal
+      await sendWithRetry(
+        () => this.#send(
+          { touser: input.userId, msgtype: "text", text: { content: chunk } },
+          input.signal
+        ),
+        wecomAppSendVerdict,
+        input.retry
       );
     }
   }
@@ -143807,12 +144422,16 @@ var WecomAppApi = class {
       new Blob([new Uint8Array(input.bytes)], { type: input.mimeType }),
       input.name
     );
-    const payload = await this.#requestJson(url, {
-      method: "POST",
-      // 不设 content-type：multipart 的 boundary 要让 fetch 自己写。
-      body: form,
-      ...input.signal === void 0 ? {} : { signal: input.signal }
-    });
+    const payload = await this.#requestJson(
+      url,
+      {
+        method: "POST",
+        // 不设 content-type：multipart 的 boundary 要让 fetch 自己写。
+        body: form,
+        ...input.signal === void 0 ? {} : { signal: input.signal }
+      },
+      MEDIA_TIMEOUT_MS
+    );
     const mediaId = payload["media_id"];
     if (typeof mediaId === "string" && mediaId !== "") return mediaId;
     throw this.#apiError(Number(payload["errcode"] ?? -1), payload["errmsg"]);
@@ -143826,10 +144445,17 @@ var WecomAppApi = class {
     const url = new URL("/cgi-bin/media/get", this.apiBaseUrl);
     url.searchParams.set("access_token", token);
     url.searchParams.set("media_id", input.mediaId);
-    const response = await this.#fetch(url, {
-      method: "GET",
-      ...input.signal === void 0 ? {} : { signal: input.signal }
-    });
+    return this.#withRequest(
+      url,
+      {
+        method: "GET",
+        ...input.signal === void 0 ? {} : { signal: input.signal }
+      },
+      MEDIA_TIMEOUT_MS,
+      (response) => this.#readMedia(response, input.maxBytes)
+    );
+  }
+  async #readMedia(response, maxBytes) {
     const contentType = response.headers.get("content-type") ?? "";
     if (contentType.includes("application/json") || contentType.includes("text/plain")) {
       let payload = {};
@@ -143849,7 +144475,7 @@ var WecomAppApi = class {
         `WeCom media/get failed (HTTP ${String(response.status)}).`
       );
     }
-    const bytes = await readBodyLimited(response, input.maxBytes);
+    const bytes = await readBodyLimited(response, maxBytes);
     const name = filenameFromContentDisposition(response.headers.get("content-disposition"));
     const mimeType = contentType.split(";")[0]?.trim();
     return {
@@ -143868,55 +144494,76 @@ var WecomAppApi = class {
       body: JSON.stringify({ ...message, agentid: Number.parseInt(this.agentId, 10) }),
       ...signal === void 0 ? {} : { signal }
     });
-    const errcode = Number(payload["errcode"] ?? 0);
-    if (errcode !== 0) throw this.#apiError(errcode, payload["errmsg"]);
     const invalid = payload["invaliduser"];
     if (typeof invalid === "string" && invalid.trim() !== "") {
       throw new WecomAppApiError("invalid-user", `WeCom did not deliver to: ${invalid.trim()}.`, {
         providerCode: "81013",
-        hint: "\u786E\u8BA4\u63A5\u6536\u4EBA\u4ECD\u5728\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u5185\u3002"
+        hint: "wecomInvalidUser",
+        invalidUsers: parseInvalidUsers(invalid)
       });
     }
   }
-  #apiError(errcode, errmsg) {
+  #apiError(errcode, errmsg, invalidUsers) {
     const code2 = String(errcode);
     const message = typeof errmsg === "string" && errmsg !== "" ? `WeCom API failed (${code2}): ${errmsg}` : `WeCom API failed (${code2}).`;
-    if (errcode === 40014 || errcode === 42001) this.invalidateToken();
+    if (TOKEN_INVALID_CODES.has(code2)) this.invalidateToken();
     if (errcode === 60020) {
       return new WecomAppApiError("trusted-ip", "WeCom rejected the outbound IP (errcode 60020).", {
         providerCode: code2,
-        hint: "\u628A\u51FA\u7AD9\u516C\u7F51 IP \u52A0\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u7684\u300C\u4F01\u4E1A\u53EF\u4FE1 IP\u300D\u3002"
+        hint: "wecomTrustedIp"
       });
     }
     if (errcode === 81013) {
       return new WecomAppApiError("invalid-user", message, {
         providerCode: code2,
-        hint: "\u6536\u4EF6\u4EBA\u3001\u90E8\u95E8\u6216\u6807\u7B7E\u4E0D\u5B58\u5728\uFF0C\u6216\u4E0D\u5728\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u5185\u3002"
+        hint: "wecomInvalidUser",
+        invalidUsers: parseInvalidUsers(invalidUsers)
       });
     }
     if (errcode === 40056) {
       return new WecomAppApiError("invalid-agent", message, {
         providerCode: code2,
-        hint: "AgentId \u4E0D\u5BF9\uFF0C\u6838\u5BF9\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002"
+        hint: "wecomInvalidAgent"
       });
     }
     return new WecomAppApiError("api-failed", message, { providerCode: code2 });
   }
-  async #requestJson(url, init) {
-    const response = await this.#fetch(url, init);
-    let payload;
+  async #withRequest(url, init, timeoutMs, read) {
+    const deadline = new AbortController();
+    const signal = AbortSignal.any([deadline.signal, ...init.signal ? [init.signal] : []]);
+    const timeout = new WecomAppApiError(
+      "timeout",
+      `WeCom ${url.pathname} timed out after ${timeoutMs}ms.`
+    );
+    const timer = setTimeout(() => deadline.abort(timeout), timeoutMs);
     try {
-      payload = await response.json();
-    } catch {
-      throw new WecomAppApiError(
-        "bad-response",
-        `WeCom returned non-JSON (HTTP ${String(response.status)}).`
-      );
-    }
-    if (payload === null || typeof payload !== "object" || Array.isArray(payload)) {
-      throw new WecomAppApiError("bad-response", "WeCom returned a non-object JSON body.");
+      return await read(await this.#fetch(url, { ...init, signal }));
+    } catch (error) {
+      if (signal.aborted) throw signal.reason;
+      throw error;
+    } finally {
+      clearTimeout(timer);
     }
-    return payload;
+  }
+  async #requestJson(url, init, timeoutMs = REQUEST_TIMEOUT_MS) {
+    return this.#withRequest(url, init, timeoutMs, async (response) => {
+      let payload;
+      try {
+        payload = await response.json();
+      } catch {
+        throw new WecomAppApiError(
+          "bad-response",
+          `WeCom returned non-JSON (HTTP ${String(response.status)}).`
+        );
+      }
+      if (payload === null || typeof payload !== "object" || Array.isArray(payload)) {
+        throw new WecomAppApiError("bad-response", "WeCom returned a non-object JSON body.");
+      }
+      const result = payload;
+      const errcode = Number(result["errcode"] ?? 0);
+      if (errcode !== 0) throw this.#apiError(errcode, result["errmsg"], result["invaliduser"]);
+      return result;
+    });
   }
 };
 
@@ -143925,7 +144572,7 @@ import * as NodeHttp2 from "node:http";
 import * as NodeNet from "node:net";
 
 // src/wecomAppCrypto.ts
-import * as NodeCrypto6 from "node:crypto";
+import * as NodeCrypto8 from "node:crypto";
 var AES_KEY_BYTES = 32;
 var RANDOM_BYTES = 16;
 var WecomAppCryptoError = class extends Error {
@@ -143948,13 +144595,13 @@ var timingSafeEqualString2 = (a, b) => {
   const left = Buffer.from(a);
   const right = Buffer.from(b);
   if (left.length === 0 || left.length !== right.length) return false;
-  return NodeCrypto6.timingSafeEqual(left, right);
+  return NodeCrypto8.timingSafeEqual(left, right);
 };
-var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto6.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
+var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto8.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
 var verifySignature = (token, timestamp, nonce, encrypt, signature) => timingSafeEqualString2(computeSignature(token, timestamp, nonce, encrypt), signature);
 var decrypt = (encodingAESKey, encryptText, expectReceiveId) => {
   const { key, iv } = parseEncodingAESKey(encodingAESKey);
-  const decipher = NodeCrypto6.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = NodeCrypto8.createDecipheriv("aes-256-cbc", key, iv);
   decipher.setAutoPadding(false);
   let deciphered;
   try {
@@ -144013,10 +144660,10 @@ var createWecomAppCrypto = (input) => {
     decrypt: (encryptText) => decrypt(encodingAESKey, encryptText, corpId).message
   };
 };
-var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto6.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
+var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto8.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
 
 // src/wecomAppParse.ts
-var isRecord4 = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
+var isRecord5 = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
 var isXmlFormat = (raw) => {
   const trimmed = raw.trim();
   return trimmed.startsWith("<") && trimmed.endsWith(">");
@@ -144062,7 +144709,7 @@ var parseWecomAppPlainMessage = (raw) => {
   } catch {
     return null;
   }
-  if (!isRecord4(data)) return null;
+  if (!isRecord5(data)) return null;
   const fromRaw = data["from"];
   const textRaw = data["text"];
   const imageRaw = data["image"];
@@ -144071,10 +144718,10 @@ var parseWecomAppPlainMessage = (raw) => {
     msgtype: String(data["msgtype"] ?? data["MsgType"] ?? "").toLowerCase(),
     createTime: data["createTime"] !== void 0 ? String(data["createTime"]) : data["CreateTime"] !== void 0 ? String(data["CreateTime"]) : void 0,
     agentId: data["agentid"] !== void 0 ? String(data["agentid"]) : data["AgentID"] !== void 0 ? String(data["AgentID"]) : void 0,
-    from: isRecord4(fromRaw) ? { userid: typeof fromRaw["userid"] === "string" ? fromRaw["userid"] : void 0 } : typeof data["FromUserName"] === "string" ? { userid: data["FromUserName"] } : void 0,
+    from: isRecord5(fromRaw) ? { userid: typeof fromRaw["userid"] === "string" ? fromRaw["userid"] : void 0 } : typeof data["FromUserName"] === "string" ? { userid: data["FromUserName"] } : void 0,
     to: typeof data["to"] === "string" ? data["to"] : void 0,
-    text: isRecord4(textRaw) ? { content: typeof textRaw["content"] === "string" ? textRaw["content"] : void 0 } : void 0,
-    image: isRecord4(imageRaw) ? { url: typeof imageRaw["url"] === "string" ? imageRaw["url"] : void 0 } : void 0,
+    text: isRecord5(textRaw) ? { content: typeof textRaw["content"] === "string" ? textRaw["content"] : void 0 } : void 0,
+    image: isRecord5(imageRaw) ? { url: typeof imageRaw["url"] === "string" ? imageRaw["url"] : void 0 } : void 0,
     mediaId: typeof data["mediaid"] === "string" ? data["mediaid"] : void 0,
     recognition: typeof data["recognition"] === "string" ? data["recognition"] : void 0,
     event: String(data["event"] ?? data["eventtype"] ?? "").toLowerCase() || void 0,
@@ -144460,6 +145107,7 @@ var WECOM_APP_IMAGE_BYTES = 10 * 1024 * 1024;
 var WECOM_APP_FILE_BYTES = 20 * 1024 * 1024;
 var WECOM_APP_MIN_BYTES = 5;
 var WECOM_APP_IMAGE_TYPES = /* @__PURE__ */ new Set(["image/jpeg", "image/png"]);
+var CREDENTIAL_ERROR_CODES = /* @__PURE__ */ new Set(["40001", "40013", "40014", "40056", "42001", "60020"]);
 var joinCallbackUrl = (baseOrOrigin, path) => `${baseOrOrigin}${path}`;
 var wecomAppPublicFields = (bot) => {
   const c = wecomAppCredentials(bot);
@@ -144485,6 +145133,8 @@ var OUTBOUND_COLUMNS = /* @__PURE__ */ new Set([
   "wecomAppSecret",
   "wecomAppApiBaseUrl"
 ]);
+var PROBE_BACKOFF_START_MS = 1e3;
+var PROBE_BACKOFF_MAX_MS = 6e4;
 var makeWecomAppAdapter = (deps) => {
   const apis = /* @__PURE__ */ new Map();
   const newApi = (c) => new WecomAppApi({
@@ -144495,17 +145145,30 @@ var makeWecomAppAdapter = (deps) => {
     fetch: deps.fetch
   });
   const callbackHub = makeWecomAppCallbackHub();
-  const apiFor = (binding) => {
+  const connectionFor = (binding) => {
     const api = apis.get(binding.rowId);
     if (api === void 0) {
       throw new ImNotConnectedError(`wecom-app bot '${binding.displayName}' is not connected.`);
     }
     return api;
   };
+  const deliver = async (binding, send) => {
+    const connection = connectionFor(binding);
+    try {
+      await send(connection.api);
+      connection.report({ state: "connected" });
+    } catch (error) {
+      if (error instanceof WecomAppApiError && error.providerCode !== void 0 && CREDENTIAL_ERROR_CODES.has(error.providerCode)) {
+        connection.report({ state: "failed", error, reason: "credentials-rejected" });
+      }
+      throw error;
+    }
+  };
   const sendMedia = async (binding, mediaType, file) => {
-    const api = apiFor(binding);
-    const mediaId = await api.uploadMedia({ mediaType, ...file });
-    await api.sendMedia({ userId: binding.chatId, mediaType, mediaId });
+    await deliver(binding, async (api) => {
+      const mediaId = await api.uploadMedia({ mediaType, ...file });
+      await api.sendMedia({ userId: binding.chatId, mediaType, mediaId });
+    });
     deps.log.info(`wecom-app delivered ${mediaType === "image" ? "an image" : "a file"}`, {
       name: file.name
     });
@@ -144556,6 +145219,19 @@ var makeWecomAppAdapter = (deps) => {
       (issue) => issue.code !== "required" && issue.column !== "wecomAppEncodingAESKey"
     ),
     publicFields: wecomAppPublicFields,
+    // 收件人不在应用可见范围（invaliduser / 81013）：说清是谁、为什么、怎么办。
+    describeDeliveryRejection: (error, binding) => {
+      if (!(error instanceof WecomAppApiError) || error.code !== "invalid-user") return void 0;
+      const recipients = [
+        ...new Set(error.invalidUsers.length > 0 ? error.invalidUsers : [binding.chatId])
+      ].sort();
+      return {
+        recipients,
+        summary: deps.translate("reply.wecomDeliveryFailed", { recipient: recipients.join(", ") }),
+        hint: error.hint,
+        providerCode: error.providerCode
+      };
+    },
     /**
      * 自建应用是回调式渠道：入站由企微推到我们的 listener，没有可探的长连接；能探的是出站
      * 凭据——和真实发送同一条路，向 gettoken 换一次 access_token。
@@ -144586,7 +145262,12 @@ var makeWecomAppAdapter = (deps) => {
           detail: "access_token ok (callback reachability is not probed)"
         };
       } catch (error) {
-        return { stage: "gettoken", ok: false, detail: describeError(error) };
+        return {
+          stage: "gettoken",
+          ok: false,
+          detail: describeError(error),
+          ...error instanceof WecomAppApiError && error.hint !== void 0 ? { hint: error.hint } : {}
+        };
       }
     },
     connect: async (bot, handlers) => {
@@ -144600,7 +145281,14 @@ var makeWecomAppAdapter = (deps) => {
       const lease = await callbackHub.acquire({ host: config2.listenHost, port: config2.listenPort });
       const server = lease.server;
       const api = newApi(c);
-      apis.set(bot.rowId, api);
+      let closed = false;
+      const report = (state) => {
+        if (closed) return;
+        handlers.onConnectionState?.(
+          state.state === "failed" && state.error instanceof WecomAppApiError && state.error.hint !== void 0 ? { ...state, hint: state.error.hint } : state
+        );
+      };
+      apis.set(bot.rowId, { api, report });
       let path;
       try {
         path = server.register({
@@ -144616,7 +145304,7 @@ var makeWecomAppAdapter = (deps) => {
         await lease.release();
         throw error;
       }
-      deps.log.info("wecom-app connected", {
+      deps.log.info("wecom-app callback listening", {
         bot: bot.displayName,
         callbackPath: path,
         callbackUrl: joinCallbackUrl(
@@ -144625,8 +145313,26 @@ var makeWecomAppAdapter = (deps) => {
         ),
         listen: `${server.host}:${String(server.port)}`
       });
+      const probe2 = new AbortController();
+      void (async () => {
+        let backoff = PROBE_BACKOFF_START_MS;
+        while (!probe2.signal.aborted) {
+          try {
+            await api.getAccessToken(probe2.signal);
+            report({ state: "connected" });
+            return;
+          } catch (error) {
+            if (probe2.signal.aborted) return;
+            report({ state: "failed", error, reason: "token-unavailable" });
+            await (deps.sleep ?? abortableSleep)(backoff, probe2.signal).catch(() => void 0);
+            backoff = Math.min(backoff * 2, PROBE_BACKOFF_MAX_MS);
+          }
+        }
+      })();
       return {
         close: () => {
+          closed = true;
+          probe2.abort();
           server.unregister(bot.rowId);
           apis.delete(bot.rowId);
           void lease.release().catch((error) => {
@@ -144642,15 +145348,18 @@ var makeWecomAppAdapter = (deps) => {
       if (options?.targetKind === "group") {
         throw new Error("wecom-app can only deliver to a user; group targets are not supported.");
       }
-      await apiFor(binding).sendText({ userId: binding.chatId, content: text4 });
+      await deliver(
+        binding,
+        (api) => api.sendText({ userId: binding.chatId, content: text4, retry: options?.retry })
+      );
     },
     // D376：企业微信自建应用没有表情回执也没有流式，开工时先回一句文字，结论照常另发。没有要撤的
     // 东西，回 null；发不出去由核心记一条 warn，不拦这一轮。
     acknowledge: async (binding) => {
-      await apiFor(binding).sendText({
-        userId: binding.chatId,
-        content: deps.translate("reply.received")
-      });
+      await deliver(
+        binding,
+        (api) => api.sendText({ userId: binding.chatId, content: deps.translate("reply.received") })
+      );
       return null;
     },
     sendImage: (binding, image2) => sendMedia(binding, "image", image2),
@@ -144661,11 +145370,16 @@ var makeWecomAppAdapter = (deps) => {
       minBytes: WECOM_APP_MIN_BYTES
     },
     imageMimeTypes: WECOM_APP_IMAGE_TYPES,
-    fetchResource: (binding, input) => apiFor(binding).downloadMedia({ mediaId: input.resource.key, maxBytes: input.maxBytes }),
+    fetchResource: (binding, input) => connectionFor(binding).api.downloadMedia({
+      mediaId: input.resource.key,
+      maxBytes: input.maxBytes
+    }),
     askApproval: async (binding, request) => {
-      const api = apis.get(binding.rowId);
-      if (api === void 0) return null;
-      await api.sendText({ userId: binding.chatId, content: numberedApprovalText(request) });
+      if (!apis.has(binding.rowId)) return null;
+      await deliver(
+        binding,
+        (api) => api.sendText({ userId: binding.chatId, content: numberedApprovalText(request) })
+      );
       return null;
     },
     answerByText: (_binding, text4, options) => answerByNumber(text4, options)
@@ -144673,10 +145387,16 @@ var makeWecomAppAdapter = (deps) => {
 };
 
 // src/index.ts
-var imPlugin = definePlugin({
+var definition = {
   id: "im",
-  apiVersion: 17,
-  activate: async (ctx) => {
+  apiVersion: 19,
+  activate: async (ctx, inboundIo) => {
+    const inboundState = makeInboundStore({
+      dataDir: ctx.paths.dataDir,
+      log: ctx.log,
+      io: inboundIo
+    });
+    ctx.onDispose(inboundState.flush);
     const { t, setLanguage } = makeLiveTranslate(
       parseReplyLanguage(ctx.config[REPLY_LANGUAGE_FIELD])
     );
@@ -144698,6 +145418,8 @@ var imPlugin = definePlugin({
         // Telegram 在不少网络里要绕代理，而绕不绕、绕哪个是按行配的 —— 这是插件面上
         // `ctx.proxies` 的第一个真实消费者。
         fetchVia: (proxy) => ctx.proxies.fetch(proxy),
+        readCursor: inboundState.readCursor,
+        saveCursor: inboundState.saveCursor,
         translate: t,
         log: {
           info: (message, fields) => ctx.log.info(message, fields),
@@ -144736,7 +145458,6 @@ var imPlugin = definePlugin({
     const updateSettings = makeSettingsUpdater(ctx.settings);
     registerLarkSetup(ctx, { updateSettings });
     registerSettingsRowActions(ctx, adapters);
-    registerSettingsCommands(ctx, adapters, updateSettings);
     const core = makeImCore({
       host: {
         log: ctx.log,
@@ -144755,7 +145476,8 @@ var imPlugin = definePlugin({
       config: () => ctx.config,
       derivedState: ctx.derivedState,
       t,
-      adapters
+      adapters,
+      inboundReady: inboundState.ready
     });
     const acknowledgements = makeAcknowledgements(core);
     const failures = makeFailureNotices(core);
@@ -144771,7 +145493,7 @@ var imPlugin = definePlugin({
     );
     const teams = makeTeamGoals(core);
     const notifications = makeNotifications(core, {
-      clearWorking: acknowledgements.clearWorking,
+      takeWorking: acknowledgements.takeWorking,
       replyCards,
       failures,
       conclusions,
@@ -144806,6 +145528,7 @@ var imPlugin = definePlugin({
     });
     const chatSetup = makeChatSetup(core, {
       rows: projectRows,
+      resumeMessage: (bot, message) => inbound.resumeMessage(bot, message),
       openPicker: (chatKey, rows, reply) => panelWiring.panel.openProjects(chatKey, rows, reply)
     });
     const commands = makeCommands(core, {
@@ -144818,10 +145541,10 @@ var imPlugin = definePlugin({
       openPanel: (chatKey, reply) => panelWiring.panel.open(chatKey, reply)
     });
     const inbound = makeInbound(core, {
+      inboundState,
       enqueueForChat: chatQueue.enqueueForChat,
       commands,
       chatSetup,
-      rows: projectRows,
       interactions,
       approvals,
       panelWiring,
@@ -144847,6 +145570,7 @@ var imPlugin = definePlugin({
       ]
     });
     const connections = startConnections(core, inbound.inboundHandlersFor);
+    registerSettingsCommands(ctx, adapters, updateSettings, connections);
     const { bots, connecting } = connections.reconcile();
     const deliveryHttp = makeDeliveryHttp({
       // 每次请求按此刻的设置找目标：投递目标表改了不用重开监听。
@@ -144864,8 +145588,11 @@ var imPlugin = definePlugin({
     }
     ctx.log.info("chat plugin active", { bots, connecting });
   }
-});
+};
+var activateImPlugin = definition.activate;
+var imPlugin = definePlugin(definition);
 var index_default = imPlugin;
 export {
+  activateImPlugin,
   index_default as default
 };