@ycodium-ai/plugin-im 0.2.3202 → 0.2.3210

package/dist/index.js

@@ -137,7 +137,7 @@ var require_punycode = __commonJS({
       }
       return floor(k + (baseMinusTMin + 1) * delta / (delta + skew));
     };
-    var decode2 = function(input) {
+    var decode3 = function(input) {
       const output = [];
       const inputLength = input.length;
       let i = 0;
@@ -249,7 +249,7 @@ var require_punycode = __commonJS({
     };
     var toUnicode = function(input) {
       return mapDomain(input, function(string) {
-        return regexPunycode.test(string) ? decode2(string.slice(4).toLowerCase()) : string;
+        return regexPunycode.test(string) ? decode3(string.slice(4).toLowerCase()) : string;
       });
     };
     var toASCII = function(input) {
@@ -275,7 +275,7 @@ var require_punycode = __commonJS({
         "decode": ucs2decode,
         "encode": ucs2encode
       },
-      "decode": decode2,
+      "decode": decode3,
       "encode": encode2,
       "toASCII": toASCII,
       "toUnicode": toUnicode
@@ -18475,7 +18475,7 @@ var require_utils = __commonJS({
         return acc;
       }, target2);
     };
-    var decode2 = function(str2, defaultDecoder, charset) {
+    var decode3 = function(str2, defaultDecoder, charset) {
       var strWithoutPlus = str2.replace(/\+/g, " ");
       if (charset === "iso-8859-1") {
         return strWithoutPlus.replace(/%[0-9a-f]{2}/gi, unescape);
@@ -18601,7 +18601,7 @@ var require_utils = __commonJS({
       assign,
       combine,
       compact,
-      decode: decode2,
+      decode: decode3,
       encode: encode2,
       isBuffer,
       isOverflow,
@@ -23360,7 +23360,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash6 } = __require("crypto");
+    var { randomBytes, createHash: createHash8 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -24028,7 +24028,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -24397,7 +24397,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash6 } = __require("crypto");
+    var { createHash: createHash8 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -24704,7 +24704,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -24912,7 +24912,7 @@ var require_base64 = __commonJS({
       return String.fromCharCode.apply(String, chunk.slice(0, i2));
     };
     var invalidEncoding = "invalid encoding";
-    base64.decode = function decode2(string, buffer, offset) {
+    base64.decode = function decode3(string, buffer, offset) {
       var start = offset;
       var j = 0, t;
       for (var i2 = 0; i2 < string.length; ) {
@@ -121305,7 +121305,7 @@ var require_lib2 = __commonJS({
         Header.encodeDelimited = function encodeDelimited(message, writer) {
           return this.encode(message, writer).ldelim();
         };
-        Header.decode = function decode3(reader, length) {
+        Header.decode = function decode4(reader, length) {
           if (!(reader instanceof $Reader))
             reader = $Reader.create(reader);
           let end = length === void 0 ? reader.len : reader.pos + length, message = new $root.pbbp2.Header();
@@ -121451,7 +121451,7 @@ var require_lib2 = __commonJS({
         Frame.encodeDelimited = function encodeDelimited(message, writer) {
           return this.encode(message, writer).ldelim();
         };
-        Frame.decode = function decode3(reader, length) {
+        Frame.decode = function decode4(reader, length) {
           if (!(reader instanceof $Reader))
             reader = $Reader.create(reader);
           let end = length === void 0 ? reader.len : reader.pos + length, message = new $root.pbbp2.Frame();
@@ -121678,7 +121678,7 @@ var require_lib2 = __commonJS({
       })();
       return pbbp22;
     })();
-    var decode2 = (buffer) => {
+    var decode3 = (buffer) => {
       return pbbp2.Frame.decode(buffer);
     };
     var WSConfig = class {
@@ -122177,7 +122177,7 @@ var require_lib2 = __commonJS({
         const wsInstance = this.wsConfig.getWSInstance();
         wsInstance === null || wsInstance === void 0 ? void 0 : wsInstance.on("message", (buffer) => __awaiter(this, void 0, void 0, function* () {
           this.clearLiveness();
-          const data = decode2(buffer);
+          const data = decode3(buffer);
           const { method } = data;
           if (method === FrameType.control) {
             yield this.handleControlData(data);
@@ -125575,14 +125575,14 @@ ${lines.join("\n")}
         const senderOpenId = event.sender.sender_id.open_id;
         const senderFallbackId = (_d = (_c = event.sender.sender_id.user_id) !== null && _c !== void 0 ? _c : event.sender.sender_id.union_id) !== null && _d !== void 0 ? _d : "";
         const senderId = senderOpenId !== null && senderOpenId !== void 0 ? senderOpenId : senderFallbackId;
-        const senderName = senderOpenId ? (_e = opts.resolveSenderName) === null || _e === void 0 ? void 0 : _e.call(opts, senderOpenId) : void 0;
+        const senderName2 = senderOpenId ? (_e = opts.resolveSenderName) === null || _e === void 0 ? void 0 : _e.call(opts, senderOpenId) : void 0;
         const createMs = msg.create_time ? parseInt(msg.create_time, 10) : 0;
         return {
           messageId: msg.message_id,
           chatId: msg.chat_id,
           chatType: msg.chat_type,
           senderId,
-          senderName,
+          senderName: senderName2,
           content,
           rawContentType: msg.message_type,
           resources,
@@ -126850,6 +126850,7 @@ var SETTINGS_REMOVE_TARGET_COMMAND = "settings.removeTarget";
 var LARK_SETUP_SESSION_COMMAND = "larkSetup.session";
 var BOT_ACTION_COMMANDS = {
   checkConnection: "im.settings.checkConnection",
+  reconnect: "im.settings.reconnect",
   copyDiagnostics: "im.settings.copyDiagnostics",
   larkRepair: "im.settings.larkRepair"
 };
@@ -127416,6 +127417,31 @@ var makeChatQueue = (core) => {
 // src/chatSetup.ts
 import { threadOrNull } from "@ycodium-ai/plugin-api";
 
+// src/cooldown.ts
+var makeCooldown = (windowMs, now, maxKeys = Number.POSITIVE_INFINITY) => {
+  const lastAt = /* @__PURE__ */ new Map();
+  return {
+    tryAcquire: (key) => {
+      const current = now();
+      const previous = lastAt.get(key);
+      if (previous !== void 0 && current - previous < windowMs) return false;
+      lastAt.delete(key);
+      lastAt.set(key, current);
+      if (lastAt.size > maxKeys) {
+        for (const [candidate, at] of lastAt) {
+          if (current - at >= windowMs) lastAt.delete(candidate);
+        }
+        while (lastAt.size > maxKeys) {
+          const oldest = lastAt.keys().next().value;
+          if (oldest === void 0) break;
+          lastAt.delete(oldest);
+        }
+      }
+      return true;
+    }
+  };
+};
+
 // src/projectList.ts
 var PROJECT_LIST_MAX = 20;
 var projectLine = (row, position) => `${String(position)}. ${row.title.replace(/\s+/g, " ").trim()}${row.current ? " \u2605" : ""}`;
@@ -127449,6 +127475,14 @@ var pickProject = (arg, listed, rows) => {
   return prefixed.length === 1 ? prefixed[0]?.projectId ?? null : null;
 };
 
+// src/messageIdentityFormat.ts
+var IDENTITY_VERSION = "im1";
+var identityPrefix = (operation) => `${IDENTITY_VERSION}-${operation}-`;
+var identityDigest = (id, operation) => {
+  const prefix = identityPrefix(operation);
+  return id.startsWith(prefix) ? id.slice(prefix.length) : void 0;
+};
+
 // src/sessionList.ts
 var SESSION_LIST_MAX = 20;
 var isSessionRunning = (status) => status === "running";
@@ -127463,7 +127497,10 @@ var ageLabel = (updatedAt, now, t) => {
   if (hours < 24) return t("sessions.age.hours", { count: hours });
   return t("sessions.age.days", { count: Math.floor(hours / 24) });
 };
-var shortId = (threadId) => threadId.slice(0, SESSION_ID_SHORT_LENGTH);
+var shortId = (threadId) => threadId.slice(
+  0,
+  (identityDigest(threadId, "thread") === void 0 ? 0 : identityPrefix("thread").length) + SESSION_ID_SHORT_LENGTH
+);
 var sessionLine = (row, position, now, t) => {
   const title = row.title.replace(/\s+/g, " ").trim() || t("sessions.untitled");
   const age = ageLabel(row.updatedAt, now, t);
@@ -127504,16 +127541,21 @@ var pickSession = (arg, listed, rows) => {
 var makeChatSetup = (core, deps) => {
   const { host, t, adapterFor, commit, deliver, bindingOf: bindingOf2, hasPanel } = core;
   const { projectRowsFor, listedProjectsByChat } = deps.rows;
-  const promptProject = async (binding) => {
-    const chatKey = chatKeyOf(binding);
-    let rows;
+  const pendingMessages = makeBoundedMap(100);
+  const projectPromptCooldown = makeCooldown(3e4, () => Date.now());
+  const loadProjectRows = async (binding) => {
     try {
-      rows = await projectRowsFor(chatKey);
+      return await projectRowsFor(chatKeyOf(binding));
     } catch (error) {
       host.log.warn("chat could not list the projects", { error: describeError(error) });
       await deliver(binding, t("panel.loadFailed"));
-      return;
+      return null;
     }
+  };
+  const promptProject = async (binding, available) => {
+    const chatKey = chatKeyOf(binding);
+    const rows = available ?? await loadProjectRows(binding);
+    if (rows === null) return;
     listedProjectsByChat.set(chatKey, listedProjectIds(rows));
     if (rows.length > 0 && hasPanel(binding)) {
       try {
@@ -127533,14 +127575,8 @@ var makeChatSetup = (core, deps) => {
       return;
     }
     const chatKey = chatKeyOf(binding);
-    let rows;
-    try {
-      rows = await projectRowsFor(chatKey);
-    } catch (error) {
-      host.log.warn("chat could not list the projects", { error: describeError(error) });
-      await deliver(binding, t("panel.loadFailed"));
-      return;
-    }
+    const rows = await loadProjectRows(binding);
+    if (rows === null) return;
     const picked = pickProject(arg, listedProjectsByChat.get(chatKey), rows);
     if (picked === null) {
       await deliver(binding, t("repo.notFound", { query: arg }));
@@ -127572,6 +127608,9 @@ var makeChatSetup = (core, deps) => {
     listedProjectsByChat.delete(chatKey);
     host.log.info("chat picked a project", { bot: binding.displayName, projectId: picked });
     await deliver(binding, t("repo.done", { title: target2.title }));
+    const pending = pendingMessages.get(chatKey);
+    pendingMessages.forget((key) => key === chatKey);
+    if (pending !== void 0) await deps.resumeMessage(binding, pending);
   };
   const handleGroup = async (binding, name, senderId) => {
     const adapter = adapterFor(binding.platform);
@@ -127599,7 +127638,27 @@ var makeChatSetup = (core, deps) => {
     await deliver(binding, t("group.created", { name }));
     await promptProject(bindingOf2(binding, chatId));
   };
-  return { promptProject, handleRepo, handleGroup };
+  const prepareMessage = async (binding, message) => {
+    const chatKey = chatKeyOf(binding);
+    const asked = message.text.trim();
+    if (/^[1-9]\d{0,2}$/u.test(asked) && listedProjectsByChat.has(chatKey)) {
+      await handleRepo(binding, asked);
+      return false;
+    }
+    const rows = await loadProjectRows(binding);
+    if (rows === null) return false;
+    const only = rows.length === 1 ? rows[0] : void 0;
+    if (only !== void 0) {
+      commit("chat-updated", { chatKey, projectId: only.projectId });
+      pendingMessages.forget((key) => key === chatKey);
+      await deliver(binding, t("repo.autoSelected", { title: only.title }));
+      return true;
+    }
+    pendingMessages.set(chatKey, message);
+    if (projectPromptCooldown.tryAcquire(chatKey)) await promptProject(binding, rows);
+    return false;
+  };
+  return { promptProject, handleRepo, handleGroup, prepareMessage };
 };
 
 // src/commands.ts
@@ -127692,7 +127751,6 @@ var parseChatCommand = (input) => {
     return query === "" ? { kind: "selectTeam" } : { kind: "help" };
   }
   if (isThreadCommand(input.text, input.chinese)) return { kind: "selectThread" };
-  if (/^\/[a-z][a-z0-9_-]*/i.test(trimmed)) return { kind: "help" };
   if (input.chinese) {
     const alias = ZH_ALIASES[trimmed];
     if (alias !== void 0) return { kind: alias };
@@ -128084,30 +128142,36 @@ var startConnections = (core, inboundHandlersFor) => {
       }
     };
   };
-  const reconcile = () => {
+  const plan = () => {
     const bots = disposed ? [] : core.bots();
     const wanted = /* @__PURE__ */ new Map();
-    const credentials3 = /* @__PURE__ */ new Map();
+    const credentials2 = /* @__PURE__ */ new Map();
     const duplicates = /* @__PURE__ */ new Map();
     for (const bot of bots) {
       const adapter = adapterFor(bot.platform);
       if (adapter === void 0) continue;
       const fingerprint = `${bot.platform}:${adapter.columns.map((column) => bot.values[column.key] ?? "").join(" ")}`;
-      const duplicateOf = credentials3.get(fingerprint);
+      const duplicateOf = credentials2.get(fingerprint);
       if (duplicateOf !== void 0) {
         duplicates.set(bot.rowId, duplicateOf);
-        if (statuses.get(bot.rowId)?.duplicateOf !== duplicateOf) {
-          record3(bot.rowId, { state: "duplicate", duplicateOf });
-        }
-        host.log.warn("chat did not connect a bot that repeats another bot's credentials", {
-          bot: bot.displayName,
-          platform: bot.platform
-        });
         continue;
       }
-      credentials3.set(fingerprint, bot.rowId);
+      credentials2.set(fingerprint, bot.rowId);
       wanted.set(bot.rowId, { bot, key: connectionKey(adapter, bot) });
     }
+    return { bots, wanted, duplicates };
+  };
+  const reconcile = () => {
+    const { bots, wanted, duplicates } = plan();
+    for (const bot of bots) {
+      const duplicateOf = duplicates.get(bot.rowId);
+      if (duplicateOf === void 0) continue;
+      record3(bot.rowId, { state: "duplicate", duplicateOf });
+      host.log.warn("chat did not connect a bot that repeats another bot's credentials", {
+        bot: bot.displayName,
+        platform: bot.platform
+      });
+    }
     for (const [rowId, connection] of live) {
       if (wanted.get(rowId)?.key === connection.key) continue;
       connection.close();
@@ -128128,6 +128192,23 @@ var startConnections = (core, inboundHandlersFor) => {
   });
   return {
     reconcile,
+    reconnect: (rowId) => {
+      live.get(rowId)?.close();
+      live.delete(rowId);
+      const { wanted, duplicates } = plan();
+      const duplicateOf = duplicates.get(rowId);
+      if (duplicateOf !== void 0) {
+        record3(rowId, { state: "duplicate", duplicateOf });
+        return { started: false, reason: "duplicate" };
+      }
+      const target2 = wanted.get(rowId);
+      if (target2 === void 0) {
+        remove(rowId);
+        return { started: false, reason: disposed ? "inactive" : "notConfigured" };
+      }
+      live.set(rowId, open(target2.bot, target2.key));
+      return { started: true };
+    },
     subscribe: (listener) => {
       if (!disposed) listeners.add(listener);
       listener(Object.fromEntries(statuses));
@@ -128396,7 +128477,7 @@ var makeImCore = (input) => {
     init: emptyState,
     apply: foldPluginEvent(input.pluginId)
   });
-  const ready = stateHandle.get().then(
+  const chatReady = stateHandle.get().then(
     (restored) => {
       state = restored;
     },
@@ -128404,6 +128485,7 @@ var makeImCore = (input) => {
       host.log.warn("chat could not restore its saved state", { error: describeError(error) });
     }
   );
+  const ready = Promise.all([chatReady, input.inboundReady]).then(() => void 0);
   let persisting = Promise.resolve();
   const commit = (name, data) => {
     state = foldImEvent(state, name, data);
@@ -128936,79 +129018,51 @@ var makeInboundAttachments = (core) => {
 // src/inbound.ts
 import { projectOrNull } from "@ycodium-ai/plugin-api";
 
-// src/boundedSeen.ts
-var makeBoundedSeen = (limit) => {
-  const seen = /* @__PURE__ */ new Set();
-  return {
-    has: (key) => seen.has(key),
-    /** 记下这个键：第一次见返回 true；已经记着返回 false（不重排，最早记的先被忘）。 */
-    claim: (key) => {
-      if (seen.has(key)) return false;
-      seen.add(key);
-      if (seen.size > limit) {
-        const oldest = seen.values().next().value;
-        if (oldest !== void 0) seen.delete(oldest);
-      }
-      return true;
-    }
-  };
-};
-
-// src/cooldown.ts
-var makeCooldown = (windowMs, now, maxKeys = Number.POSITIVE_INFINITY) => {
-  const lastAt = /* @__PURE__ */ new Map();
-  return {
-    tryAcquire: (key) => {
-      const current = now();
-      const previous = lastAt.get(key);
-      if (previous !== void 0 && current - previous < windowMs) return false;
-      lastAt.delete(key);
-      lastAt.set(key, current);
-      if (lastAt.size > maxKeys) {
-        for (const [candidate, at] of lastAt) {
-          if (current - at >= windowMs) lastAt.delete(candidate);
-        }
-        while (lastAt.size > maxKeys) {
-          const oldest = lastAt.keys().next().value;
-          if (oldest === void 0) break;
-          lastAt.delete(oldest);
-        }
-      }
-      return true;
-    }
+// src/greetings.ts
+var GREETING_COOLDOWN_MS = 12 * 60 * 6e4;
+var GREETING_KEY_LIMIT = 1e3;
+var makeGreetings = (core, enqueueForChat, now) => {
+  const cooldown = makeCooldown(GREETING_COOLDOWN_MS, now, GREETING_KEY_LIMIT);
+  return (rowId, chatId, senderId) => {
+    const bot = core.bots().find((candidate) => candidate.rowId === rowId);
+    if (bot === void 0 || !isAllowedSender(bot, senderId)) return;
+    if (!cooldown.tryAcquire(`${rowId}:${senderId}`)) return;
+    enqueueForChat(chatKeyOf({ rowId, chatId }), async () => {
+      const current = core.bots().find((candidate) => candidate.rowId === rowId);
+      if (current === void 0 || !isAllowedSender(current, senderId)) return;
+      await core.deliver(core.bindingOf(current, chatId), core.t("reply.welcome"));
+    });
   };
 };
 
 // src/inbound.ts
-var SEEN_MESSAGE_LIMIT = 256;
 var ARCHIVED_REPLY_COOLDOWN_MS = 10 * 6e4;
 var UNSUPPORTED_REPLY_COOLDOWN_MS = 6e4;
 var NOT_ALLOWED_REPLY_COOLDOWN_MS = 10 * 6e4;
 var NOT_ALLOWED_REPLY_KEY_LIMIT = 1e3;
-var PROJECT_PROMPT_COOLDOWN_MS = 3e4;
 var makeInbound = (core, deps) => {
   const { host, t, adapterFor, commit, deliver, bindingOf: bindingOf2, bots } = core;
   const { enqueueForChat } = deps;
+  const now = deps.now ?? (() => Date.now());
+  const greet = makeGreetings(core, enqueueForChat, now);
   const { handleCommand, targetOf } = deps.commands;
-  const { promptProject, handleRepo } = deps.chatSetup;
-  const { listedProjectsByChat } = deps.rows;
+  const { prepareMessage } = deps.chatSetup;
   const { questionFlow, handleButtonClick } = deps.interactions;
   const { answerByToken } = deps.approvals;
   const { handlePanelClick } = deps.panelWiring;
   const { startTurn, receiveAttachmentsOnly, hasWaitingAttachments } = deps.turns;
   const { startTeamGoal } = deps.teams;
   const { markWorking } = deps.acknowledgements;
-  const archivedReplyCooldown = makeCooldown(ARCHIVED_REPLY_COOLDOWN_MS, () => Date.now());
-  const unsupportedReplyCooldown = makeCooldown(UNSUPPORTED_REPLY_COOLDOWN_MS, () => Date.now());
+  const archivedReplyCooldown = makeCooldown(ARCHIVED_REPLY_COOLDOWN_MS, now);
+  const unsupportedReplyCooldown = makeCooldown(UNSUPPORTED_REPLY_COOLDOWN_MS, now);
   const notAllowedReplyCooldown = makeCooldown(
     NOT_ALLOWED_REPLY_COOLDOWN_MS,
-    () => Date.now(),
+    now,
     NOT_ALLOWED_REPLY_KEY_LIMIT
   );
-  const projectPromptCooldown = makeCooldown(PROJECT_PROMPT_COOLDOWN_MS, () => Date.now());
-  const handledMessages = makeBoundedSeen(SEEN_MESSAGE_LIMIT);
-  const alreadyHandled = (key) => !handledMessages.claim(key);
-  const claimCallback = (rowId, callbackId) => callbackId === void 0 || callbackId === "" || !alreadyHandled(`c:${rowId}:${callbackId}`);
+  const { inboundState } = deps;
+  const alreadyHandled = (rowId, key) => !inboundState.claim(rowId, key);
+  const claimCallback = (rowId, callbackId) => callbackId === void 0 || callbackId === "" || !alreadyHandled(rowId, `c:${callbackId}`);
   const turnAwayStranger = (target2, sender) => {
     host.log.warn("chat ignored a message from someone not on the allow list", {
       bot: target2.displayName,
@@ -129039,6 +129093,7 @@ var makeInbound = (core, deps) => {
     commit("chat-aliased", { rowId: bot.rowId, alias, chatId });
   };
   const settleChat = (bot, message) => {
+    message = { ...message, originalChatId: message.originalChatId ?? message.chatId };
     if (message.chatAlias === void 0) return message;
     const known = chatAliasOf(core.state, bot.rowId, message.chatAlias);
     if (known === void 0) noteChatAlias(bot, message.chatAlias, message.chatId);
@@ -129048,6 +129103,61 @@ var makeInbound = (core, deps) => {
     const threadId = await startTurn(speaker, message);
     if (threadId !== null) await markWorking(speaker, threadId, message.messageId);
   };
+  const resumeMessage = async (current, message) => {
+    inheritFromParent(current, message.chatId, message.parentChatId);
+    let target2 = {
+      ...bindingOf2(current, message.chatId),
+      reply: anchorOfMessage(adapterFor(current.platform), message)
+    };
+    const chatKey = chatKeyOf(target2);
+    if (await handleCommand(target2, message.text, message.senderId)) return;
+    if (target2.projectId === "") {
+      if (!await prepareMessage(target2, message)) return;
+      target2 = { ...bindingOf2(current, message.chatId), reply: target2.reply };
+    }
+    const boundThread = chatOf(core.state, chatKey).threadId;
+    if (boundThread !== null && message.text !== "" && await questionFlow.answerByText(chatKey, boundThread, message.text)) {
+      return;
+    }
+    const project = await projectOrNull(host.projects, target2.projectId);
+    if (project === null || project.archivedAt != null) {
+      if (project === null) {
+        host.log.warn("chat cannot start work: the chat's project is gone", {
+          bot: target2.displayName,
+          projectId: target2.projectId
+        });
+      }
+      if (archivedReplyCooldown.tryAcquire(chatKey)) {
+        await deliver(
+          target2,
+          project === null ? t("reply.projectMissing") : t("reply.projectArchived", { title: project.title })
+        );
+      }
+      return;
+    }
+    const routed = targetOf(target2);
+    const attachmentsOnly = message.text.trim() === "" && message.resources.length > 0;
+    if (routed.kind === "team") {
+      if (message.resources.length > 0) await deliver(target2, t("reply.attachmentsNoTeam"));
+      if (attachmentsOnly) return;
+      const leadThreadId = await startTeamGoal(target2, message);
+      if (leadThreadId !== null) await markWorking(target2, leadThreadId, message.messageId);
+      return;
+    }
+    if (attachmentsOnly) {
+      await receiveAttachmentsOnly(target2, message);
+      return;
+    }
+    const branchChatId = hasWaitingAttachments(chatKey) ? void 0 : message.branchChatId;
+    if (branchChatId === void 0) {
+      await openTurn(target2, message);
+      return;
+    }
+    enqueueForChat(chatKeyOf({ rowId: current.rowId, chatId: branchChatId }), async () => {
+      inheritFromParent(current, branchChatId, message.chatId);
+      await openTurn({ ...bindingOf2(current, branchChatId), reply: target2.reply }, message);
+    });
+  };
   const inboundHandlersFor = (bot) => ({
     onError: (message) => host.log.warn("chat inbound connection failed", {
       platform: bot.platform,
@@ -129065,12 +129175,13 @@ var makeInbound = (core, deps) => {
     },
     noteChatAlias: (alias, chatId) => noteChatAlias(bot, alias, chatId),
     knowsChatAlias: (alias) => chatAliasOf(core.state, bot.rowId, alias) !== void 0,
+    onGreeting: (chatId, senderId) => greet(bot.rowId, chatId, senderId),
     onMessage: (received) => {
       const current = currentBot(bot.rowId);
       if (current === void 0) return;
       const message = settleChat(current, received);
       const arrived = bindingOf2(current, message.chatId);
-      if (alreadyHandled(`m:${chatKeyOf(arrived)}:${message.messageId}`)) return;
+      if (alreadyHandled(current.rowId, `m:${message.chatId}:${message.messageId}`)) return;
       if (message.chatKind !== void 0 && chatOf(core.state, chatKeyOf(arrived)).chatKind !== message.chatKind) {
         commit("chat-updated", { chatKey: chatKeyOf(arrived), chatKind: message.chatKind });
       }
@@ -129084,7 +129195,7 @@ var makeInbound = (core, deps) => {
           if (!unsupportedReplyCooldown.tryAcquire(chatKeyOf(arrived))) return;
           await deliver(
             arrived,
-            unsupported === "folder" ? t("reply.unsupportedFolder") : t("reply.unsupportedType", { type: unsupported })
+            unsupported === "folder" ? t("reply.unsupportedFolder") : unsupported === "voice" ? t("reply.unsupportedVoice") : t("reply.unsupportedType", { type: unsupported })
           );
         });
         return;
@@ -129097,69 +129208,129 @@ var makeInbound = (core, deps) => {
         });
         return;
       }
-      enqueueForChat(chatKeyOf(arrived), async () => {
-        inheritFromParent(current, message.chatId, message.parentChatId);
-        const target2 = {
-          ...bindingOf2(current, message.chatId),
-          reply: anchorOfMessage(adapterFor(current.platform), message)
-        };
-        const chatKey = chatKeyOf(target2);
-        if (await handleCommand(target2, message.text, message.senderId)) return;
-        if (target2.projectId === "") {
-          const asked = message.text.trim();
-          if (/^[1-9]\d{0,2}$/u.test(asked) && listedProjectsByChat.has(chatKey)) {
-            await handleRepo(target2, asked);
-          } else if (projectPromptCooldown.tryAcquire(chatKey)) {
-            await promptProject(target2);
-          }
-          return;
-        }
-        const boundThread = chatOf(core.state, chatKey).threadId;
-        if (boundThread !== null && message.text !== "" && await questionFlow.answerByText(chatKey, boundThread, message.text)) {
-          return;
+      enqueueForChat(chatKeyOf(arrived), () => resumeMessage(current, message));
+    }
+  });
+  return { inboundHandlersFor, resumeMessage };
+};
+
+// src/inboundStore.ts
+import * as NodeFSP from "node:fs/promises";
+import * as NodePath from "node:path";
+var SEEN_LIMIT = 1e3;
+var fileIo = {
+  readFile: (path) => NodeFSP.readFile(path, "utf8"),
+  mkdir: async (path) => {
+    await NodeFSP.mkdir(path, { recursive: true });
+  },
+  writeFile: (path, contents) => NodeFSP.writeFile(path, contents, "utf8"),
+  rename: (from, to) => NodeFSP.rename(from, to)
+};
+var isRecord2 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+var decode = (contents) => {
+  const value2 = JSON.parse(contents);
+  if (!isRecord2(value2) || value2["version"] !== 1 || !isRecord2(value2["bots"]))
+    throw new Error("invalid inbound store");
+  const bots = /* @__PURE__ */ new Map();
+  for (const [rowId, row] of Object.entries(value2["bots"])) {
+    if (!isRecord2(row) || !Array.isArray(row["seenIds"]) || !row["seenIds"].every((id) => typeof id === "string"))
+      throw new Error("invalid inbound bot row");
+    const telegram = row["telegram"];
+    if (telegram !== void 0 && (!isRecord2(telegram) || typeof telegram["tokenHash"] !== "string" || telegram["tokenHash"] === "" || typeof telegram["offset"] !== "number" || !Number.isSafeInteger(telegram["offset"]) || telegram["offset"] < 0))
+      throw new Error("invalid telegram cursor");
+    bots.set(rowId, {
+      seenIds: row["seenIds"].slice(-SEEN_LIMIT),
+      ...telegram === void 0 ? {} : {
+        telegram: {
+          tokenHash: telegram["tokenHash"],
+          offset: telegram["offset"]
         }
-        const project = await projectOrNull(host.projects, target2.projectId);
-        if (project === null || project.archivedAt != null) {
-          if (project === null) {
-            host.log.warn("chat cannot start work: the chat's project is gone", {
-              bot: target2.displayName,
-              projectId: target2.projectId
-            });
-          }
-          if (archivedReplyCooldown.tryAcquire(chatKey)) {
-            await deliver(
-              target2,
-              project === null ? t("reply.projectMissing") : t("reply.projectArchived", { title: project.title })
-            );
+      }
+    });
+  }
+  return bots;
+};
+var makeInboundStore = (input) => {
+  const io = input.io ?? fileIo;
+  const path = NodePath.join(input.dataDir, "inbound.json");
+  const temporary = `${path}.tmp`;
+  let bots = /* @__PURE__ */ new Map();
+  let dirty = false;
+  let writing;
+  const warn = (message, error) => input.log.warn(message, { error: describeError(error) });
+  const ready = io.readFile(path).then(
+    (contents) => {
+      try {
+        bots = decode(contents);
+      } catch (error) {
+        warn("chat could not restore inbound state", error);
+      }
+    },
+    (error) => {
+      if (!isRecord2(error) || error["code"] !== "ENOENT")
+        warn("chat could not restore inbound state", error);
+    }
+  );
+  const write = () => {
+    writing ??= Promise.resolve().then(async () => {
+      try {
+        while (dirty) {
+          dirty = false;
+          const contents = JSON.stringify({ version: 1, bots: Object.fromEntries(bots) });
+          try {
+            await io.mkdir(input.dataDir);
+            await io.writeFile(temporary, contents);
+            await io.rename(temporary, path);
+          } catch (error) {
+            dirty = true;
+            warn("chat could not save inbound state", error);
+            break;
           }
-          return;
-        }
-        const routed = targetOf(target2);
-        const attachmentsOnly = message.text.trim() === "" && message.resources.length > 0;
-        if (routed.kind === "team") {
-          if (message.resources.length > 0) await deliver(target2, t("reply.attachmentsNoTeam"));
-          if (attachmentsOnly) return;
-          const leadThreadId = await startTeamGoal(target2, message);
-          if (leadThreadId !== null) await markWorking(target2, leadThreadId, message.messageId);
-          return;
-        }
-        if (attachmentsOnly) {
-          await receiveAttachmentsOnly(target2, message);
-          return;
-        }
-        const branchChatId = hasWaitingAttachments(chatKey) ? void 0 : message.branchChatId;
-        if (branchChatId === void 0) {
-          await openTurn(target2, message);
-          return;
         }
-        enqueueForChat(chatKeyOf({ rowId: current.rowId, chatId: branchChatId }), async () => {
-          inheritFromParent(current, branchChatId, message.chatId);
-          await openTurn({ ...bindingOf2(current, branchChatId), reply: target2.reply }, message);
-        });
-      });
+      } finally {
+        writing = void 0;
+      }
+    });
+    return writing;
+  };
+  const changed = () => {
+    dirty = true;
+    void write();
+  };
+  const rowOf = (rowId) => {
+    let row = bots.get(rowId);
+    if (row === void 0) {
+      row = { seenIds: [] };
+      bots.set(rowId, row);
     }
-  });
-  return { inboundHandlersFor };
+    return row;
+  };
+  return {
+    ready,
+    claim: (rowId, id) => {
+      const row = rowOf(rowId);
+      if (row.seenIds.includes(id)) return false;
+      row.seenIds.push(id);
+      if (row.seenIds.length > SEEN_LIMIT) row.seenIds.shift();
+      changed();
+      return true;
+    },
+    readCursor: (rowId, tokenHash) => {
+      const cursor = bots.get(rowId)?.telegram;
+      return cursor?.tokenHash === tokenHash ? cursor.offset : void 0;
+    },
+    saveCursor: (rowId, tokenHash, offset) => {
+      const row = rowOf(rowId);
+      if (row.telegram?.tokenHash === tokenHash && row.telegram.offset === offset) return;
+      if (row.telegram?.tokenHash !== tokenHash) row.seenIds = [];
+      row.telegram = { tokenHash, offset };
+      changed();
+    },
+    flush: async () => {
+      await ready;
+      if (dirty || writing) await write();
+    }
+  };
 };
 
 // src/interactions.ts
@@ -129925,6 +130096,8 @@ var consolePath = {
 var APP_EVENTS = ["im.message.receive_v1"];
 var CARD_CALLBACKS = ["card.action.trigger"];
 var SCOPES = [
+  // 让「补全权限」查询应用自身已开通的权限，并列出缺项。
+  "application:application:self_manage",
   // 收发消息、改卡片、读消息。
   "im:message",
   // 群里 @ 机器人的消息（入站的主路径）。
@@ -129949,7 +130122,7 @@ var SCOPES = [
   // 「在弄了」表情回执（`larkApi.ts` 的 `addReaction`）。unconfirmed
   "im:message.reactions:write_only"
 ];
-var isTenantScope = (name) => name.startsWith("im:");
+var isTenantScope = (name) => name.startsWith("im:") || name === "application:application:self_manage";
 var appMarker = (environmentId) => `[ycodium:${environmentId.slice(0, 8)}]`;
 var DEFAULT_APP_NAME = "Ycodium Agent";
 var DEFAULT_APP_DESCRIPTION = "Ycodium chat bot";
@@ -130000,6 +130173,16 @@ var makeFlowItemSchema = (shape) => ({
     },
     fills: shape.fills,
     messageKey: { type: "string" },
+    tone: { type: "string", enum: ["caution"] },
+    link: {
+      type: "object",
+      additionalProperties: false,
+      required: ["url", "labelKey"],
+      properties: {
+        url: { type: "string", pattern: "^https://" },
+        labelKey: { type: "string" }
+      }
+    },
     warnings: {
       type: "array",
       items: {
@@ -130013,6 +130196,7 @@ var makeFlowItemSchema = (shape) => ({
       }
     },
     reasonKey: { type: "string" },
+    noteKey: { type: "string" },
     detail: { type: "string" }
   },
   oneOf: [
@@ -131656,8 +131840,8 @@ var resourceOf = (element, index) => {
   }
   return null;
 };
-var placeholderOf = (element, index) => `<${mediaOf(element)} ${String(index)}>`;
-var serializeElement = (element, index, botIds) => {
+var placeholderOf = (resource, index) => `<${resource.media} ${String(index)}>`;
+var serializeElement = (element, resourceText, botIds) => {
   switch (element.tag) {
     case "text":
       return styledText(element.text ?? "", element.style);
@@ -131680,12 +131864,12 @@ ${element.text ?? ""}
     case "img":
     case "media":
     case "file":
-      return index === null ? "" : placeholderOf(element, index);
+      return resourceText ?? "";
     default:
       return "";
   }
 };
-var serializePost = (content, botIds = /* @__PURE__ */ new Set()) => {
+var serializePost = (content, botIds = /* @__PURE__ */ new Set(), renderResource = placeholderOf) => {
   let parsed;
   try {
     parsed = JSON.parse(content);
@@ -131694,31 +131878,31 @@ var serializePost = (content, botIds = /* @__PURE__ */ new Set()) => {
   }
   const elements = (parsed.content ?? []).flat();
   const resources = [];
-  const indexOf = /* @__PURE__ */ new Map();
+  const resourceTextOf = /* @__PURE__ */ new Map();
   for (const element of elements) {
     const resource = resourceOf(element, resources.length + 1);
     if (resource === null) continue;
     resources.push(resource);
-    indexOf.set(element, resources.length);
+    resourceTextOf.set(element, renderResource(resource, resources.length));
   }
   const md2 = parsed.md;
   if (typeof md2 === "string" && md2.trim() !== "") {
-    const placeholderByKey = /* @__PURE__ */ new Map();
+    const resourceTextByKey = /* @__PURE__ */ new Map();
     for (const element of elements) {
-      const index = indexOf.get(element);
+      const resourceText = resourceTextOf.get(element);
       const key = element.tag === "img" ? element.image_key : element.file_key;
-      if (index !== void 0 && nonEmpty4(key)) {
-        placeholderByKey.set(key, placeholderOf(element, index));
+      if (resourceText !== void 0 && nonEmpty4(key)) {
+        resourceTextByKey.set(key, resourceText);
       }
     }
     const text5 = md2.replace(
       /!\[(?:img|video|file)\]\(([^)]+)\)/g,
-      (whole, rawKey) => placeholderByKey.get(rawKey.trim()) ?? whole
+      (whole, rawKey) => resourceTextByKey.get(rawKey.trim()) ?? whole
     );
     return { text: text5, resources };
   }
   const paragraphs = (parsed.content ?? []).map(
-    (row) => row.map((element) => serializeElement(element, indexOf.get(element) ?? null, botIds)).join("")
+    (row) => row.map((element) => serializeElement(element, resourceTextOf.get(element), botIds)).join("")
   );
   const text4 = paragraphs.map((line) => line.trim()).filter((line) => line !== "").join("\n");
   if (text4 === "" && resources.length === 0) return void 0;
@@ -131859,6 +132043,7 @@ var LARK_TEXT_MAX_CHARS = 3500;
 var LarkApiError = class extends Error {
   operation;
   code;
+  msg;
   status;
   retryAfterMs;
   constructor(operation, code2, message, http = {}) {
@@ -131866,11 +132051,13 @@ var LarkApiError = class extends Error {
     this.name = "LarkApiError";
     this.operation = operation;
     this.code = code2;
+    this.msg = message;
     this.status = http.status;
     this.retryAfterMs = http.retryAfterMs;
   }
 };
-var isLarkPermissionError = (error) => error instanceof LarkApiError && (error.code === 99991672 || error.code === 99991679 || error.status === 401 || error.status === 403);
+var isLarkPermissionCode = (code2) => code2 === 99991672 || code2 === 99991679;
+var isLarkPermissionError = (error) => error instanceof LarkApiError && (isLarkPermissionCode(error.code) || error.status === 401 || error.status === 403);
 var LARK_RATE_LIMITED = 99991400;
 var isReplyRejected = (error) => error instanceof LarkApiError && error.status === void 0 && error.code !== LARK_RATE_LIMITED;
 var larkSendVerdict = (error) => {
@@ -131885,14 +132072,20 @@ var larkSendVerdict = (error) => {
 };
 var readEnvelope = async (operation, response) => {
   if (!response.ok) {
-    await response.body?.cancel().catch(() => void 0);
-    throw new LarkApiError(operation, void 0, `HTTP ${String(response.status)}`, {
-      status: response.status,
-      retryAfterMs: parseRetryAfterMs(
-        response.headers.get("retry-after") ?? response.headers.get("x-ogw-ratelimit-reset"),
-        Date.now()
-      ) ?? void 0
-    });
+    const body2 = await response.json().catch(() => void 0);
+    const envelope2 = typeof body2 === "object" && body2 !== null ? body2 : void 0;
+    throw new LarkApiError(
+      operation,
+      typeof envelope2?.code === "number" ? envelope2.code : void 0,
+      typeof envelope2?.msg === "string" ? envelope2.msg : `HTTP ${String(response.status)}`,
+      {
+        status: response.status,
+        retryAfterMs: parseRetryAfterMs(
+          response.headers.get("retry-after") ?? response.headers.get("x-ogw-ratelimit-reset"),
+          Date.now()
+        ) ?? void 0
+      }
+    );
   }
   const body = await response.json();
   const envelope = body;
@@ -131913,6 +132106,19 @@ var fetchTenantToken = async (input) => {
   }
   return { token: body.tenant_access_token, expiresInSeconds: body.expire ?? 0 };
 };
+var fetchAppTenantScopes = async (input) => {
+  const response = await input.http(`${LARK_BASE}/application/v6/applications/me?lang=zh_cn`, {
+    headers: { authorization: `Bearer ${input.token}` }
+  });
+  const body = await readEnvelope("applications/me", response);
+  const scopes = body.data?.app?.scopes;
+  if (!Array.isArray(scopes)) return void 0;
+  if (scopes.some(
+    (entry) => entry === null || typeof entry !== "object" || typeof entry.scope !== "string" || !Array.isArray(entry.token_types)
+  ))
+    return void 0;
+  return scopes.filter((entry) => entry.token_types.includes("tenant")).map((entry) => entry.scope);
+};
 var postMessage = async (input) => {
   const headers = {
     authorization: `Bearer ${input.token}`,
@@ -131950,16 +132156,31 @@ var postMessage = async (input) => {
   });
   return sent?.message_id ?? null;
 };
-var readMessage = async (input) => {
+var readMessageItems = async (input) => {
   const response = await input.http(
-    `${LARK_BASE}/im/v1/messages/${encodeURIComponent(input.messageId)}`,
+    `${LARK_BASE}/im/v1/messages/${encodeURIComponent(input.messageId)}${input.withSenderName ? "?with_sender_name=true" : ""}`,
     {
       headers: { authorization: `Bearer ${input.token}` },
       ...input.signal === void 0 ? {} : { signal: input.signal }
     }
   );
-  const body = await readEnvelope("message.get", response);
-  return body.data?.items?.[0];
+  const body = await readEnvelope(input.operation, response);
+  return body.data?.items;
+};
+var readMessage = async (input) => (await readMessageItems({
+  ...input,
+  operation: "message.get"
+}))?.[0];
+var fetchMergeForwardMessages = async (input) => {
+  const items = await readMessageItems({
+    ...input,
+    operation: "merge_forward.get",
+    withSenderName: true
+  });
+  if (!items?.length) {
+    throw new LarkApiError("merge_forward.get", 0, "the response carried no messages");
+  }
+  return items;
 };
 var fetchMessageThreadId = async (input) => (await readMessage(input))?.thread_id || void 0;
 var fetchMessageReference = async (input) => {
@@ -132203,9 +132424,9 @@ function getDecodeCache(exclude) {
   }
   return cache;
 }
-function decode(string, exclude) {
+function decode2(string, exclude) {
   if (typeof exclude !== "string") {
-    exclude = decode.defaultChars;
+    exclude = decode2.defaultChars;
   }
   const cache = getDecodeCache(exclude);
   return string.replace(/(%[a-f0-9]{2})+/gi, function(seq) {
@@ -132264,9 +132485,9 @@ function decode(string, exclude) {
     return result;
   });
 }
-decode.defaultChars = ";/?:@&=+$,#";
-decode.componentChars = "";
-var decode_default = decode;
+decode2.defaultChars = ";/?:@&=+$,#";
+decode2.componentChars = "";
+var decode_default = decode2;
 
 // ../../node_modules/.pnpm/mdurl@2.1.0/node_modules/mdurl/lib/encode.mjs
 var encodeCache = {};
@@ -133287,12 +133508,12 @@ var LinkifyIt = class {
   *
   * See [twitter mentions example](https://github.com/markdown-it/linkify-it/blob/master/examples/twitter.mjs).
   */
-  add(schema, definition = null) {
-    if (!definition) delete this.__schemas__[schema];
+  add(schema, definition2 = null) {
+    if (!definition2) delete this.__schemas__[schema];
     else {
       const def = {
         normalize: (match, self2) => self2.normalize(match),
-        ...definition
+        ...definition2
       };
       this.__schemas__[schema] = def;
     }
@@ -137533,6 +137754,50 @@ var buildChoiceCard = (card) => {
 
 // src/larkInbound.ts
 var import_node_sdk = __toESM(require_lib2(), 1);
+
+// src/larkConnectionHints.ts
+var larkConnectionHint = (error) => {
+  if (error instanceof LarkApiError) {
+    if (error.operation === "auth") {
+      if (error.code === 10003 || error.code === 20002) return "larkCredentials";
+      if (error.code === 10014) {
+        const msg = error.msg.toLowerCase();
+        if (msg.includes("app id not exists") || msg.includes("app secret invalid")) {
+          return "larkCredentials";
+        }
+        return msg.includes("unauthorized") ? "larkAppUnavailable" : void 0;
+      }
+    }
+    switch (error.code) {
+      case 99991672:
+        return "larkScope";
+      case 230006:
+      case 232025:
+        return "larkBotOff";
+      case 232034:
+        return "larkAppUnavailable";
+      default:
+        return void 0;
+    }
+  }
+  const code2 = error instanceof Error ? /^pullConnectConfig failed: code=(\d+), msg=/u.exec(error.message)?.[1] : void 0;
+  return code2 === "1000040344" || code2 === "1000040345" || code2 === "1000040346" ? "larkCredentials" : void 0;
+};
+
+// src/larkCredentials.ts
+var isLarkAppId = (appId) => /^cli_[0-9a-fA-F]{16}$/u.test(appId);
+var larkCredentials = (bot) => {
+  const appId = bot.values["larkAppId"] ?? "";
+  const appSecret = bot.values["larkAppSecret"] ?? "";
+  const issues = [];
+  if (appId === "") issues.push({ column: "larkAppId", code: "required" });
+  else if (!isLarkAppId(appId)) issues.push({ column: "larkAppId", code: "format" });
+  if (appSecret === "") issues.push({ column: "larkAppSecret", code: "required" });
+  const error = issues.some((issue) => issue.code === "required") ? "missing app id or secret in saved config" : issues.length > 0 ? "malformed app id in saved config" : void 0;
+  return { appId, appSecret, issues, error };
+};
+
+// src/larkInbound.ts
 var isOwnMention = (mention, appId) => mention.id?.app_id === appId || mention.mentioned_type === "bot";
 var mentionsApp = (event, appId) => (event.message?.mentions ?? []).some((mention) => isOwnMention(mention, appId));
 var mentionsSomeoneElse = (event, appId) => (event.message?.mentions ?? []).some(
@@ -137546,12 +137811,12 @@ var passesGroupGate = (event, appId, groupMention, messageType) => {
 };
 var RESOURCE_MESSAGE_TYPES = /* @__PURE__ */ new Set(["image", "file", "audio", "media"]);
 var UNSUPPORTED_MESSAGE_TYPES = /* @__PURE__ */ new Set([
+  "audio",
   "sticker",
   "folder",
   "share_chat",
   "share_user",
   "system",
-  "merge_forward",
   "interactive"
 ]);
 var botIdsOf = (mentions, appId) => {
@@ -137589,10 +137854,6 @@ var readResource = (messageType, content) => {
     const name = key("file_name") ?? "file";
     return { fileKey, kind: "file", name, mimeType: mimeFromName(name) };
   }
-  if (messageType === "audio") {
-    const fileKey = key("file_key");
-    return fileKey === null ? null : { fileKey, kind: "file", name: "voice.opus", mimeType: "audio/ogg" };
-  }
   if (messageType === "media") {
     const fileKey = key("file_key");
     if (fileKey === null) return null;
@@ -137621,7 +137882,11 @@ var parseInboundMessage = (event, appId, groupMention = "always", topicOnMention
   const rootGiven = typeof message.root_id === "string" && message.root_id !== "";
   const rootId = rootGiven && message.root_id !== void 0 ? message.root_id : messageId;
   const topic = chatType === "p2p" || !inThread ? {} : threadId === void 0 ? { topic: { rootMessageId: messageId } } : { topic: { rootMessageId: rootId, threadId, rootGiven } };
-  if (UNSUPPORTED_MESSAGE_TYPES.has(messageType)) {
+  if (messageType === "audio") {
+    const fileKey = readJson(message.content)?.["file_key"];
+    if (typeof fileKey !== "string" || fileKey === "") return null;
+  }
+  if (messageType === "merge_forward" || UNSUPPORTED_MESSAGE_TYPES.has(messageType)) {
     return {
       messageId,
       chatId,
@@ -137631,7 +137896,7 @@ var parseInboundMessage = (event, appId, groupMention = "always", topicOnMention
       resources: [],
       inThread,
       ...topic,
-      unsupportedType: messageType
+      ...messageType === "merge_forward" ? { mergeForward: true, ...parentMessageId ? { parentMessageId } : {} } : { unsupportedType: messageType === "audio" ? "voice" : messageType }
     };
   }
   const mentions = message.mentions ?? [];
@@ -137723,7 +137988,6 @@ var cardActionOperator = (event) => {
   }
   return null;
 };
-var isLarkAppId = (appId) => /^cli_[0-9a-fA-F]{16}$/u.test(appId);
 var startLarkInbound = (input) => {
   const dispatcher = new import_node_sdk.EventDispatcher({}).register({
     "im.message.receive_v1": (event) => {
@@ -137766,7 +138030,11 @@ var startLarkInbound = (input) => {
     }
   });
   if (!isLarkAppId(input.appId)) {
-    input.onConnectionState?.({ state: "failed", reason: "invalid-app-id" });
+    input.onConnectionState?.({
+      state: "failed",
+      reason: "invalid-app-id",
+      hint: "larkCredentials"
+    });
     return { close: () => void 0 };
   }
   let closed = false;
@@ -137775,7 +138043,13 @@ var startLarkInbound = (input) => {
   };
   const failed = (error) => {
     if (!closed) {
-      input.onConnectionState?.({ state: "failed", reason: "disconnected", error });
+      const hint = larkConnectionHint(error);
+      input.onConnectionState?.({
+        state: "failed",
+        reason: hint === "larkCredentials" ? "credentials-rejected" : "disconnected",
+        error,
+        ...hint === void 0 ? {} : { hint }
+      });
     }
   };
   const client = new import_node_sdk.WSClient({
@@ -137801,6 +138075,24 @@ var startLarkInbound = (input) => {
   };
 };
 
+// src/boundedSeen.ts
+var makeBoundedSeen = (limit) => {
+  const seen = /* @__PURE__ */ new Set();
+  return {
+    has: (key) => seen.has(key),
+    /** 记下这个键：第一次见返回 true；已经记着返回 false（不重排，最早记的先被忘）。 */
+    claim: (key) => {
+      if (seen.has(key)) return false;
+      seen.add(key);
+      if (seen.size > limit) {
+        const oldest = seen.values().next().value;
+        if (oldest !== void 0) seen.delete(oldest);
+      }
+      return true;
+    }
+  };
+};
+
 // src/deadline.ts
 var withDeadline2 = async (timeoutMs, load) => {
   const signal = AbortSignal.timeout(timeoutMs);
@@ -137993,15 +138285,157 @@ var makeLarkMessageContext = (deps) => {
     if (message.chatType !== "group" || message.senderOpenId === null) return {};
     const name = contactDenied ? null : userName(message.senderOpenId);
     const chat = chatInfo(message.chatId);
-    const fields = (senderName, info) => ({
-      ...senderName ? { senderName } : {},
+    const fields = (senderName2, info) => ({
+      ...senderName2 ? { senderName: senderName2 } : {},
       ...info?.name ? { chatTitle: info.name } : {}
     });
-    return name instanceof Promise || chat instanceof Promise ? Promise.all([name, chat]).then(([senderName, info]) => fields(senderName, info)) : fields(name, chat);
+    return name instanceof Promise || chat instanceof Promise ? Promise.all([name, chat]).then(([senderName2, info]) => fields(senderName2, info)) : fields(name, chat);
   };
   return { chatInfo, forMessage, loadReference, topicRootForSession };
 };
 
+// src/larkMergeForward.ts
+var MAX_MESSAGES = 100;
+var MAX_MESSAGE_CHARS = 2e3;
+var MAX_BODY_CHARS = 3e4;
+var clip2 = (text4, limit, suffix = "\u2026") => {
+  if (text4.length <= limit) return text4;
+  const end = limit - suffix.length;
+  const safeEnd = /[\uD800-\uDBFF]/u.test(text4[end - 1] ?? "") ? end - 1 : end;
+  return text4.slice(0, safeEnd) + suffix;
+};
+var senderName = (message, t) => {
+  const names = message.sender?.sender_i18n_names;
+  const name = [
+    t.language === "zh-CN" ? names?.zh_cn : names?.en_us,
+    names?.zh_cn,
+    names?.en_us,
+    names?.ja_jp
+  ].find((value2) => value2?.trim());
+  return clip2(
+    name?.trim() ?? t(message.sender?.sender_type === "app" ? "mergeForward.bot" : "mergeForward.someone"),
+    120
+  ).replace(/\s+/gu, " ");
+};
+var localTime = (value2, t) => {
+  const date = new Date(Number(value2 ?? NaN));
+  if (Number.isNaN(date.getTime())) return t("mergeForward.unknownTime");
+  const pad = (n) => String(n).padStart(2, "0");
+  return `${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+};
+var resourceLabel = (kind, name, t) => {
+  const type = t.optional(`mergeForward.resource.${kind}`) ?? kind;
+  return typeof name === "string" && name.trim() ? t("mergeForward.unavailableNamed", { type, name: name.trim() }) : t("mergeForward.unavailable", { type });
+};
+var messageText = (message, t) => {
+  const type = message.msg_type ?? "unknown";
+  const content = message.body?.content;
+  let text4;
+  if (type === "post") {
+    const post = serializePost(
+      content ?? "{}",
+      void 0,
+      (resource) => resourceLabel(resource.media, resource.fileName, t)
+    );
+    text4 = post?.text ?? "[post]";
+  } else if (type === "text") {
+    const value2 = readJson(content)?.["text"];
+    text4 = typeof value2 === "string" ? value2 : "[text]";
+  } else if (["image", "file", "audio", "media", "folder"].includes(type)) {
+    text4 = resourceLabel(type === "media" ? "video" : type, readJson(content)?.["file_name"], t);
+  } else {
+    text4 = `[${type}]`;
+  }
+  const mentions = new Map((message.mentions ?? []).map((mention) => [mention.key, mention.name]));
+  text4 = text4.replace(
+    /@_user_\d+|@_all/gu,
+    (key) => `@${mentions.get(key)?.trim() || t("mergeForward.someone")}`
+  );
+  return clip2(text4.trim(), MAX_MESSAGE_CHARS, t("mergeForward.truncated"));
+};
+var orderedMessages = (rootId, items) => {
+  const byId = new Map(
+    items.filter((item) => item.message_id !== rootId).map((item) => [item.message_id, item])
+  );
+  const children = /* @__PURE__ */ new Map();
+  for (const item of byId.values()) {
+    const parent = item.upper_message_id ?? rootId;
+    const siblings = children.get(parent) ?? [];
+    siblings.push(item);
+    children.set(parent, siblings);
+  }
+  const compare = (a, b) => Number(a.create_time ?? 0) - Number(b.create_time ?? 0);
+  for (const siblings of children.values()) siblings.sort(compare);
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set([rootId]);
+  const walk = (first) => {
+    const stack = [{ message: first, depth: 0 }];
+    while (stack.length) {
+      const frame = stack.pop();
+      if (frame === void 0) break;
+      if ("end" in frame) {
+        const row = rows[frame.end];
+        if (row) row.descendants = rows.length - frame.end - 1;
+        continue;
+      }
+      if (seen.has(frame.message.message_id)) continue;
+      seen.add(frame.message.message_id);
+      const end = rows.length;
+      rows.push({ ...frame, descendants: 0 });
+      stack.push({ end });
+      for (const child of (children.get(frame.message.message_id) ?? []).toReversed()) {
+        stack.push({ message: child, depth: frame.depth + 1 });
+      }
+    }
+  };
+  for (const item of children.get(rootId) ?? []) walk(item);
+  for (const item of [...byId.values()].sort(compare)) walk(item);
+  return rows;
+};
+var serializeMergeForward = (rootId, items, t) => {
+  const rows = orderedMessages(rootId, items);
+  const lines = [t("mergeForward.title", { count: rows.length })];
+  let length = lines[0]?.length ?? 0;
+  let included = 0;
+  for (const { message, depth, descendants } of rows) {
+    if (included >= MAX_MESSAGES) break;
+    const indent = "  ".repeat(depth);
+    const body = message.msg_type === "merge_forward" ? t("mergeForward.nested", { count: descendants }) : messageText(message, t);
+    const line = `${indent}${senderName(message, t)} ${localTime(message.create_time, t)}: ${body.replaceAll("\n", `
+${indent}  `)}`;
+    const remaining = rows.length - included - 1;
+    const tail = remaining > 0 ? t("mergeForward.omitted", { count: remaining }).length + 1 : 0;
+    if (length + line.length + 1 + tail > MAX_BODY_CHARS) break;
+    lines.push(line);
+    length += line.length + 1;
+    included += 1;
+  }
+  if (included < rows.length)
+    lines.push(t("mergeForward.omitted", { count: rows.length - included }));
+  return lines.join("\n");
+};
+var loadMergeForward = async (message, deps) => {
+  try {
+    const items = await withDeadline2(1e4, async (signal) => {
+      const token = await deps.tenantToken();
+      signal.throwIfAborted();
+      return fetchMergeForwardMessages({
+        http: deps.http,
+        token,
+        messageId: message.messageId,
+        signal
+      });
+    });
+    return { ...message, text: serializeMergeForward(message.messageId, items, deps.translate) };
+  } catch (error) {
+    deps.warn("lark could not read merged forward messages", {
+      messageId: message.messageId,
+      error: describeError(error)
+    });
+    return { ...message, unsupportedType: "merge_forward" };
+  }
+};
+
 // src/larkAdapter.ts
 var TOKEN_CACHE_MAX_AGE_MS = 30 * 6e4;
 var COLUMNS = [
@@ -138033,21 +138467,9 @@ var splitTopicChatId = (chatId) => {
   return at < 0 ? { chatId } : { chatId: chatId.slice(0, at), rootMessageId: chatId.slice(at + 1) };
 };
 var topicAliasOf = (chatId, threadId) => `${chatId}:${threadId}`;
-var credentials = (binding) => ({
-  appId: binding.values["larkAppId"] ?? "",
-  appSecret: binding.values["larkAppSecret"] ?? ""
-});
-var larkConfigIssues = (binding) => {
-  const { appId, appSecret } = credentials(binding);
-  const issues = [];
-  if (appId === "") issues.push({ column: "larkAppId", code: "required" });
-  else if (!isLarkAppId(appId)) issues.push({ column: "larkAppId", code: "format" });
-  if (appSecret === "") issues.push({ column: "larkAppSecret", code: "required" });
-  return issues;
-};
 var makeLarkAdapter = (deps) => {
   const tenantToken = async (binding) => {
-    const { appId, appSecret } = credentials(binding);
+    const { appId, appSecret } = larkCredentials(binding);
     const key = `lark-tenant-token.${appId}`;
     const cached = await deps.cacheGet(key, TOKEN_CACHE_MAX_AGE_MS);
     if (typeof cached?.token === "string") return cached.token;
@@ -138120,6 +138542,7 @@ var makeLarkAdapter = (deps) => {
   };
   return {
     platform: "lark",
+    botIdentity: (bot) => larkCredentials(bot).appId,
     icon: "lark",
     label: "Lark",
     columns: COLUMNS,
@@ -138128,10 +138551,10 @@ var makeLarkAdapter = (deps) => {
       const { chatId: groupId, rootMessageId } = splitTopicChatId(chatId);
       return rootMessageId === void 0 ? void 0 : groupId;
     },
-    validate: larkConfigIssues,
-    isConfigured: (binding) => larkConfigIssues(binding).every((issue) => issue.code !== "required"),
+    validate: (binding) => larkCredentials(binding).issues,
+    isConfigured: (binding) => larkCredentials(binding).issues.every((issue) => issue.code !== "required"),
     connect: (binding, handlers) => {
-      const { appId, appSecret } = credentials(binding);
+      const { appId, appSecret } = larkCredentials(binding);
       const port = {
         noteChatAlias: handlers.noteChatAlias,
         knowsChatAlias: handlers.knowsChatAlias
@@ -138168,11 +138591,17 @@ var makeLarkAdapter = (deps) => {
           arg: click.arg
         }) ?? null,
         onMessage: (message) => {
+          const prepared = message.mergeForward ? loadMergeForward(message, {
+            http: deps.http,
+            tenantToken: () => tenantToken(binding),
+            translate: deps.translate,
+            warn: deps.log.warn
+          }) : message;
           const { topic } = message;
           const source = context.forMessage(message);
           const parentMessageId = message.parentMessageId;
           const reference2 = parentMessageId === void 0 ? null : context.loadReference(parentMessageId);
-          const deliver = (names, replyTo) => handlers.onMessage({
+          const deliver = (ready, names, replyTo) => handlers.onMessage({
             messageId: message.messageId,
             // 已经开出来的话题就是它自己那个聊天；将要开出来的（主窗口里 @ 机器人）先算群的，
             // 由核心决定要不要分出去。
@@ -138186,7 +138615,7 @@ var makeLarkAdapter = (deps) => {
             },
             senderId: message.senderOpenId,
             ...names,
-            text: message.text,
+            text: ready.text,
             topicRootForSession: context.topicRootForSession(message),
             ...replyTo === void 0 ? {} : { replyTo },
             chatKind: message.chatType === "p2p" ? "private" : "group",
@@ -138197,7 +138626,7 @@ var makeLarkAdapter = (deps) => {
               mimeType: resource.mimeType,
               kind: resource.kind
             })),
-            ...message.unsupportedType === void 0 ? {} : { unsupportedType: message.unsupportedType }
+            ...ready.unsupportedType === void 0 ? {} : { unsupportedType: ready.unsupportedType }
           });
           const pending = topic?.threadId === void 0 ? null : topicUnsettled(binding.rowId, message.chatId, {
             threadId: topic.threadId,
@@ -138205,12 +138634,12 @@ var makeLarkAdapter = (deps) => {
           });
           const key = JSON.stringify([message.chatId, topic?.threadId]);
           const earlier = pendingDeliveries.get(key);
-          if (earlier === void 0 && pending === null && reference2 === null && !(source instanceof Promise)) {
-            deliver(source);
+          if (earlier === void 0 && pending === null && reference2 === null && !(prepared instanceof Promise) && !(source instanceof Promise)) {
+            deliver(prepared, source);
           } else {
-            const completed = Promise.all([earlier, pending, reference2, source]).then(([, , replyTo, names]) => {
+            const completed = Promise.all([earlier, pending, reference2, source, prepared]).then(([, , replyTo, names, ready]) => {
               if (pendingDeliveries.get(key) === completed) pendingDeliveries.delete(key);
-              if (open) deliver(names, replyTo ?? void 0);
+              if (open) deliver(ready, names, replyTo ?? void 0);
             }).catch((error) => handlers.onError(describeError(error))).finally(() => {
               if (pendingDeliveries.get(key) === completed) pendingDeliveries.delete(key);
             });
@@ -138249,17 +138678,15 @@ var makeLarkAdapter = (deps) => {
       }
     },
     checkConnection: async (bot) => {
-      const { appId, appSecret } = credentials(bot);
-      if (appId === "" || appSecret === "") {
+      const { appId, appSecret, error: credentialError } = larkCredentials(bot);
+      if (credentialError !== void 0) {
         return {
           stage: "credentials",
           ok: false,
-          detail: "missing app id or secret in saved config"
+          detail: credentialError,
+          hint: "larkCredentials"
         };
       }
-      if (!isLarkAppId(appId)) {
-        return { stage: "credentials", ok: false, detail: "malformed app id in saved config" };
-      }
       try {
         const { expiresInSeconds } = await fetchTenantToken({ http: deps.http, appId, appSecret });
         return {
@@ -138268,7 +138695,13 @@ var makeLarkAdapter = (deps) => {
           detail: `token ok; expiresIn=${String(expiresInSeconds)}s`
         };
       } catch (error) {
-        return { stage: "tenant_access_token", ok: false, detail: describeError(error) };
+        const hint = larkConnectionHint(error);
+        return {
+          stage: "tenant_access_token",
+          ok: false,
+          detail: describeError(error),
+          ...hint === void 0 ? {} : { hint }
+        };
       }
     },
     sendImage: async (binding, image2) => {
@@ -138606,6 +139039,7 @@ var en_default = {
     projectArchived: 'Project "{{title}}" is archived. Restore it, or send /repo to pick another project, then message again.',
     projectMissing: "The project this chat was working on is no longer on this machine (it may have been deleted), so a thread cannot be started. Send /repo to pick another one.",
     threadGone: "The earlier session was deleted or archived, so this chat now starts a new one.",
+    turnFailedToStart: "This message couldn't be dispatched. Please send it again later. Reference {{ref}}.",
     turnFailed: "This turn didn't finish: {{detail}}\nReference {{ref}}. Send the message again; if it keeps failing, send /new to start a new conversation.",
     turnFailedNoDetail: "This turn didn't finish. Reference {{ref}}. Send the message again; if it keeps failing, send /new to start a new conversation.",
     turnFailedBrief: "This turn didn't finish: {{detail}}\nSend the message again; if it keeps failing, send /new to start a new conversation.",
@@ -138622,9 +139056,11 @@ var en_default = {
     attachmentsNoTeam: "Files cannot be sent to a team yet, so they were left out. Send /thread to go back to a normal session.",
     unsupportedType: "I can't process {{type}} messages yet.",
     unsupportedFolder: "Folders can't be downloaded. Zip it and send the archive instead.",
+    unsupportedVoice: "Voice messages aren't supported yet. Please send text.",
     sendingFile: "Sending {{name}}:",
     notAllowedYet: `You are not on the allow list yet. Your user id is {{id}}. Add it under Settings \u2192 Plugins \u2192 Chat, in this bot's "Allowed people" box.`,
-    received: "Got it, working on it."
+    received: "Got it, working on it.",
+    welcome: "Connected. Send text or images to get started, or send /help to see the available commands."
   },
   approval: {
     allow: "Allow",
@@ -138928,6 +139364,7 @@ var en_default = {
     }
   },
   repo: {
+    autoSelected: "Using project {{title}}.",
     needProject: "This chat has no project yet, so I won't start any work. Pick one and I will.",
     currentLine: 'This chat works on project "{{title}}".',
     noProjects: "There are no projects on this machine yet. Add one in Ycodium first.",
@@ -138958,21 +139395,41 @@ var en_default = {
       failed: "Connection failed",
       notSaved: "Save this row first (credentials are read from saved config only).",
       hint: {
+        connecting: "Still connecting. There is usually a result within 20 seconds; check again in a moment.",
         badToken: "This does not look like a bot token. Copy it again from BotFather: digits, a colon, then the key.",
-        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather.",
+        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather. Save the corrected token here to reconnect automatically; if nothing needs changing, use Reconnect below.",
         notBot: "This token does not belong to a bot. Use the token BotFather gave you.",
         webhookActive: "This bot has a webhook set by another service, so it cannot receive messages here. Remove the webhook there, then check again.",
+        larkCredentials: "Lark does not accept this App ID or App Secret. Copy both from Credentials & Basic Info for your self-built app in the Lark developer console. Save the corrected App ID and App Secret here to reconnect automatically; if nothing needs changing, use Reconnect below.",
+        larkScope: "This app is missing a required permission. In the Lark developer console, open Permission Management, add the permissions listed in the details, then publish a version.",
+        larkBotOff: "This app's bot capability is not enabled. In the Lark developer console, open App Capabilities \u2192 Bot, enable the bot, then publish a version.",
+        larkAppUnavailable: "This app is unavailable in your organization. In the Lark developer console, check that the app is enabled and published; ask your administrator to confirm it is installed and enabled for your organization.",
+        wecomBotCredentials: "WeCom does not accept this Bot ID or Secret. Open this smart bot's configuration in the WeCom admin console, select API mode \u2192 Long connection, and copy its Bot ID and Secret. These are not the callback Token or EncodingAESKey. Save the corrected Bot ID and Secret here to reconnect automatically; if nothing needs changing, use Reconnect below.",
+        wecomLongConnOff: "This smart bot's long connection mode is not enabled. Open its configuration in the WeCom admin console, select API mode \u2192 Long connection and save; the bot reconnects on its own within a minute, or use Reconnect below.",
+        wecomTakenOver: "Another machine or program is using the same Bot ID. Stop using this smart bot there, then use Reconnect below.",
         wecomTrustedIp: "Add this machine's outbound public IP to the app's trusted IP list in the WeCom admin console.",
         wecomInvalidUser: "Check that the recipient, department or tag exists and is in this app's visible range.",
-        wecomInvalidAgent: "Check the AgentId against this self-built application in the WeCom admin console."
+        wecomInvalidAgent: "Check the AgentId against this self-built application in the WeCom admin console.",
+        wecomCallbackNotSeen: "Credentials are valid, but no verified callback has arrived since this startup. In the app's Receive messages settings in the WeCom admin console, paste the callback URL shown on this bot's settings card and save; WeCom will send a verification request. This machine must be reachable by WeCom over the public internet.",
+        wecomCallbackSignature: "A callback arrived, but its signature or decryption failed; no verified callback has arrived since this startup. Match the Callback Token and EncodingAESKey to this app's Receive messages settings in the WeCom admin console, then save there to verify again."
       }
     },
+    reconnect: {
+      label: "Reconnect",
+      description: "Disconnect and reconnect this bot using its saved settings.",
+      notAvailable: "This platform can't be connected yet, so reconnecting won't help.",
+      running: "Starting to reconnect {{rowId}}\u2026",
+      done: "Reconnection started. Check the bot's connection status for the result.",
+      notSaved: "Save this row first before reconnecting. Only saved settings are used.",
+      notConfigured: "Complete and save this bot's settings before reconnecting.",
+      duplicate: "Another bot row uses these credentials. Resolve the duplicate before reconnecting.",
+      inactive: "The chat bridge is turned off. Enable it before reconnecting."
+    },
     copyDiagnostics: {
       label: "Copy diagnostics",
       description: "Run a connection probe and produce copy-paste diagnostics (no secrets).",
       running: "Building diagnostics for {{rowId}}\u2026",
-      done: "Diagnostics ready \u2014 see details below",
-      failed: "Diagnostics failed",
+      done: "Diagnostic report ready \u2014 see details below",
       notSaved: "Save this row first before copying diagnostics."
     },
     diagnostic: {
@@ -138980,16 +139437,23 @@ var en_default = {
     },
     larkRepair: {
       label: "Repair scopes",
-      description: "Check whether the saved credentials can mint a token; scopes, event subscriptions and publishing are not checked automatically.",
+      description: "List missing required scopes and a link to request them on the Feishu open platform; an app administrator then publishes the app version manually.",
       step: {
-        scopes: "Scopes \u2014 not checked",
-        events: "Event subscriptions \u2014 not checked",
-        publish: "Publishing \u2014 not checked",
-        verify: "Verify the app can still mint a tenant token"
-      },
-      done: "Only token issuance was verified. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
-      hint: "Reference: {{ref}}\n{{detail}}\nReview scopes, event subscriptions and publishing on the Feishu open platform; none were checked automatically.",
-      failed: "Could not mint a token with the saved credentials. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
+        token: "Get a tenant token with the saved credentials",
+        scopes: "Check the app's granted tenant scopes"
+      },
+      missing: "Some required scopes are missing.",
+      allGranted: "All required scopes are enabled.",
+      unverified: "Unable to check scopes automatically.",
+      missingScopes: "Missing scopes:\n{{scopes}}",
+      requiredScopes: "Required scopes \u2014 check each one manually:\n{{scopes}}\n\nApps without application:application:self_manage cannot report their granted scopes, so this list could not be checked automatically.",
+      openApplyLink: "Request scopes on the Feishu open platform",
+      openCheckLink: "Check and request scopes on the Feishu open platform",
+      applyLink: "Open platform URL:\n{{url}}",
+      publishHint: "As an app administrator, select the scopes at that link. Then publish a version via App release \u2192 Version management & release \u2192 Create version, and return here to click \u201CCheck connection\u201D.",
+      botHint: "To enable the bot, go to App \u2192 Add app capability \u2192 Bot. Bot capability is not checked here.",
+      eventHint: "To receive messages, set both subscriptions in Events & Callbacks to Long connection, then add these (not checked here):\nEvents: {{events}}\nCallbacks: {{callbacks}}",
+      failed: "Could not check the app's required scopes. Review the error details and try again.",
       notLark: "This row is not a saved Lark bot."
     }
   },
@@ -139036,11 +139500,13 @@ var en_default = {
     connection: {
       failed: "The last connection attempt failed.",
       details: "Details: {{error}}",
+      reconnect: "You can try again with Reconnect below.",
       reason: {
         "not-available": "This platform can't be connected yet.",
         "invalid-app-id": "The App ID isn't in the right format.",
         disconnected: "The connection to the platform is down.",
         "subscription-failed": "The platform didn't confirm the subscription.",
+        "taken-over": "This connection was taken over elsewhere, so automatic reconnection has stopped here.",
         "token-unavailable": "Couldn't get an access token.",
         "credentials-rejected": "The platform rejected the credentials."
       },
@@ -139064,7 +139530,7 @@ var en_default = {
       done: "Done.",
       close: "Close",
       failedToRun: "Couldn't run this on the machine.",
-      saveFirst: "Save or undo your changes first. These check the saved settings.",
+      saveFirst: "Save or undo your changes first. These actions use the saved settings.",
       qrTitle: "QR code to scan with the Lark app"
     },
     step: {
@@ -139090,6 +139556,24 @@ var en_default = {
       callbackFollowsKeys: "This URL changes when Token or EncodingAESKey changes. Paste it into WeCom again after changing them."
     }
   },
+  mergeForward: {
+    title: "[Forwarded chat history, messages: {{count}}]",
+    nested: "[Nested forward, messages: {{count}}]",
+    someone: "Someone",
+    bot: "A bot",
+    unknownTime: "[unknown time]",
+    resource: {
+      image: "Image",
+      file: "File",
+      audio: "Audio",
+      video: "Video",
+      folder: "Folder"
+    },
+    unavailable: "[{{type}}: could not be retrieved]",
+    unavailableNamed: "[{{type}} {{name}}: could not be retrieved]",
+    omitted: "\u2026 not shown: {{count}} more",
+    truncated: "\u2026 [message truncated]"
+  },
   team: {
     noRoster: "This project has no team roster yet. Save a roster in the Teams tab and choose a lead first.",
     unavailable: "Could not read this project's team roster. Check that the Teams plugin is enabled and try again.",
@@ -139308,6 +139792,7 @@ var zh_CN_default = {
     projectArchived: "\u9879\u76EE\u300C{{title}}\u300D\u5DF2\u5F52\u6863\u3002\u6062\u590D\u5B83\uFF0C\u6216\u53D1 /repo \u6362\u4E2A\u9879\u76EE\uFF0C\u518D\u53D1\u6D88\u606F\u3002",
     projectMissing: "\u8FD9\u4E2A\u804A\u5929\u539F\u6765\u505A\u7684\u9879\u76EE\u5DF2\u7ECF\u4E0D\u5728\u8FD9\u53F0\u673A\u5668\u4E0A\u4E86\uFF08\u53EF\u80FD\u88AB\u5220\u4E86\uFF09\uFF0C\u5F00\u4E0D\u4E86\u4F1A\u8BDD\u3002\u53D1 /repo \u91CD\u65B0\u9009\u4E00\u4E2A\u3002",
     threadGone: "\u4E4B\u524D\u90A3\u6761\u4F1A\u8BDD\u5DF2\u88AB\u5220\u9664\u6216\u5F52\u6863\uFF0C\u8FD9\u4E2A\u804A\u5929\u6539\u4E3A\u5F00\u4E00\u6761\u65B0\u4F1A\u8BDD\u3002",
+    turnFailedToStart: "\u8FD9\u6761\u6D88\u606F\u6CA1\u80FD\u6D3E\u51FA\u53BB\uFF0C\u8BF7\u7A0D\u540E\u91CD\u53D1\u3002\u53C2\u8003\u53F7 {{ref}}\u3002",
     turnFailed: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\uFF1A{{detail}}\n\u53C2\u8003\u53F7 {{ref}}\u3002\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
     turnFailedNoDetail: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\u3002\u53C2\u8003\u53F7 {{ref}}\u3002\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
     turnFailedBrief: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\uFF1A{{detail}}\n\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
@@ -139324,9 +139809,11 @@ var zh_CN_default = {
     attachmentsNoTeam: "\u6587\u4EF6\u8FD8\u53D1\u4E0D\u5230\u56E2\u961F\uFF0C\u8FD9\u6B21\u6CA1\u5E26\u4E0A\u3002\u53D1 /thread \u56DE\u5230\u666E\u901A\u4F1A\u8BDD\u3002",
     unsupportedType: "\u6211\u8FD8\u4E0D\u80FD\u5904\u7406 {{type}} \u7C7B\u578B\u7684\u6D88\u606F\u3002",
     unsupportedFolder: "\u6587\u4EF6\u5939\u6CA1\u6CD5\u4E0B\u8F7D\uFF0C\u8BF7\u6253\u5305\u6210\u538B\u7F29\u6587\u4EF6\u518D\u53D1\u3002",
+    unsupportedVoice: "\u6682\u65F6\u4E0D\u652F\u6301\u8BED\u97F3\uFF0C\u8BF7\u53D1\u6587\u5B57\u3002",
     sendingFile: "\u6B63\u5728\u53D1\u9001 {{name}}\uFF1A",
     notAllowedYet: "\u4F60\u8FD8\u4E0D\u5728\u5141\u8BB8\u540D\u5355\u91CC\uFF0C\u4F60\u7684\u7528\u6237 id \u662F {{id}}\uFF0C\u8BF7\u628A\u5B83\u586B\u8FDB \u8BBE\u7F6E \u2192 \u63D2\u4EF6 \u2192 \u804A\u5929 \u2192 \u8FD9\u4E2A\u673A\u5668\u4EBA\u7684\u300C\u5141\u8BB8\u7684\u4EBA\u300D\u3002",
-    received: "\u6536\u5230\uFF0C\u5728\u5904\u7406\u3002"
+    received: "\u6536\u5230\uFF0C\u5728\u5904\u7406\u3002",
+    welcome: "\u5DF2\u8FDE\u4E0A\u3002\u76F4\u63A5\u53D1\u6587\u5B57\u6216\u56FE\u7247\u5C31\u80FD\u5F00\u59CB\uFF0C\u53D1 /help \u770B\u80FD\u7528\u7684\u547D\u4EE4\u3002"
   },
   approval: {
     allow: "\u5141\u8BB8",
@@ -139630,6 +140117,7 @@ var zh_CN_default = {
     }
   },
   repo: {
+    autoSelected: "\u4F7F\u7528\u9879\u76EE\u300C{{title}}\u300D\u3002",
     needProject: "\u8FD9\u4E2A\u804A\u5929\u8FD8\u6CA1\u9009\u9879\u76EE\uFF0C\u9009\u5B9A\u4E4B\u524D\u6211\u4E0D\u5F00\u5DE5\u3002\u9009\u4E00\u4E2A\u5C31\u5F00\u59CB\u3002",
     currentLine: "\u8FD9\u4E2A\u804A\u5929\u73B0\u5728\u5728\u9879\u76EE\u300C{{title}}\u300D\u4E0A\u3002",
     noProjects: "\u8FD9\u53F0\u673A\u5668\u4E0A\u8FD8\u6CA1\u6709\u9879\u76EE\uFF0C\u5148\u5230 Ycodium \u91CC\u6DFB\u52A0\u4E00\u4E2A\u3002",
@@ -139660,21 +140148,41 @@ var zh_CN_default = {
       failed: "\u8FDE\u63A5\u5931\u8D25",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u68C0\u67E5\u8FDE\u63A5\uFF08\u51ED\u636E\u53EA\u4ECE\u5DF2\u4FDD\u5B58\u914D\u7F6E\u8BFB\u53D6\uFF09\u3002",
       hint: {
+        connecting: "\u8FD8\u5728\u8FDE\u63A5\uFF0C\u4E00\u822C 20 \u79D2\u5185\u4F1A\u6709\u7ED3\u679C\uFF0C\u7A0D\u540E\u518D\u68C0\u67E5\u4E00\u6B21\u3002",
         badToken: "\u8FD9\u4E0D\u50CF\u673A\u5668\u4EBA\u7684 token\u3002\u5230 BotFather \u91CD\u65B0\u590D\u5236\u4E00\u4EFD\uFF1A\u6570\u5B57\u3001\u5192\u53F7\uFF0C\u540E\u9762\u662F\u5BC6\u94A5\u3002",
-        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\u3002",
+        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
         notBot: "\u8FD9\u4E2A token \u4E0D\u662F\u673A\u5668\u4EBA\u7684\u3002\u8BF7\u7528 BotFather \u7ED9\u7684\u90A3\u4E00\u4EFD\u3002",
         webhookActive: "\u8FD9\u4E2A\u673A\u5668\u4EBA\u88AB\u522B\u7684\u670D\u52A1\u8BBE\u4E86 webhook\uFF0C\u5728\u8FD9\u91CC\u6536\u4E0D\u5230\u6D88\u606F\u3002\u5148\u5230\u90A3\u8FB9\u64A4\u6389 webhook\uFF0C\u518D\u68C0\u67E5\u4E00\u6B21\u3002",
+        larkCredentials: "\u98DE\u4E66\u4E0D\u8BA4\u8FD9\u4E2A App ID \u6216 App Secret\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u8FD9\u4E2A\u4F01\u4E1A\u81EA\u5EFA\u5E94\u7528\u7684\u300C\u51ED\u8BC1\u4E0E\u57FA\u7840\u4FE1\u606F\u300D\u91CD\u65B0\u590D\u5236\u4E24\u9879\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        larkScope: "\u8FD9\u4E2A\u5E94\u7528\u7F3A\u5C11\u6240\u9700\u6743\u9650\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7684\u300C\u6743\u9650\u7BA1\u7406\u300D\uFF0C\u6DFB\u52A0\u8BE6\u60C5\u4E2D\u5217\u51FA\u7684\u6743\u9650\uFF0C\u518D\u53D1\u5E03\u4E00\u4E2A\u7248\u672C\u3002",
+        larkBotOff: "\u8FD9\u4E2A\u5E94\u7528\u6CA1\u6709\u542F\u7528\u673A\u5668\u4EBA\u80FD\u529B\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7684\u300C\u5E94\u7528\u80FD\u529B \u2192 \u673A\u5668\u4EBA\u300D\u542F\u7528\u673A\u5668\u4EBA\uFF0C\u518D\u53D1\u5E03\u4E00\u4E2A\u7248\u672C\u3002",
+        larkAppUnavailable: "\u8FD9\u4E2A\u5E94\u7528\u5728\u5F53\u524D\u4F01\u4E1A\u4E0D\u53EF\u7528\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u786E\u8BA4\u5E94\u7528\u5DF2\u542F\u7528\u5E76\u53D1\u5E03\uFF0C\u518D\u8BF7\u7BA1\u7406\u5458\u786E\u8BA4\u5F53\u524D\u4F01\u4E1A\u5DF2\u5B89\u88C5\u5E76\u542F\u7528\u8FD9\u4E2A\u5E94\u7528\u3002",
+        wecomBotCredentials: "\u4F01\u4E1A\u5FAE\u4FE1\u4E0D\u8BA4\u8FD9\u4E2A Bot ID \u6216 Secret\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u7684\u914D\u7F6E\u9875\uFF0C\u9009\u62E9\u300CAPI \u6A21\u5F0F \u2192 \u957F\u8FDE\u63A5\u300D\uFF0C\u91CD\u65B0\u590D\u5236 Bot ID \u548C Secret\uFF1B\u8FD9\u91CC\u7528\u7684\u4E0D\u662F\u56DE\u8C03\u6A21\u5F0F\u7684 Token \u6216 EncodingAESKey\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u667A\u80FD\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        wecomLongConnOff: "\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u6CA1\u6709\u5F00\u542F\u957F\u8FDE\u63A5\u6A21\u5F0F\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u7684\u914D\u7F6E\u9875\u9009\u62E9\u300CAPI \u6A21\u5F0F \u2192 \u957F\u8FDE\u63A5\u300D\u5E76\u4FDD\u5B58\uFF0C\u8FD9\u91CC\u4F1A\u5728\u4E00\u5206\u949F\u5185\u81EA\u52A8\u91CD\u65B0\u8FDE\u4E0A\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        wecomTakenOver: "\u53E6\u4E00\u53F0\u673A\u5668\u6216\u7A0B\u5E8F\u5728\u7528\u540C\u4E00\u4E2A Bot ID\u3002\u8BA9\u5B83\u505C\u7528\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u540E\uFF0C\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
         wecomTrustedIp: "\u628A\u8FD9\u53F0\u673A\u5668\u7684\u51FA\u7AD9\u516C\u7F51 IP \u52A0\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u4F01\u4E1A\u53EF\u4FE1 IP\u3002",
         wecomInvalidUser: "\u786E\u8BA4\u6536\u4EF6\u4EBA\u3001\u90E8\u95E8\u6216\u6807\u7B7E\u5B58\u5728\uFF0C\u5E76\u5728\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u5185\u3002",
-        wecomInvalidAgent: "\u6838\u5BF9\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002"
+        wecomInvalidAgent: "\u6838\u5BF9\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002",
+        wecomCallbackNotSeen: "\u51ED\u636E\u6709\u6548\uFF0C\u4F46\u81EA\u672C\u6B21\u542F\u52A8\u4EE5\u6765\u8FD8\u6CA1\u6536\u5230\u8FC7\u901A\u8FC7\u6821\u9A8C\u7684\u56DE\u8C03\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u300C\u63A5\u6536\u6D88\u606F\u300D\uFF0C\u586B\u5165\u673A\u5668\u4EBA\u8BBE\u7F6E\u5361\u4E0A\u663E\u793A\u7684\u56DE\u8C03\u5730\u5740\u5E76\u4FDD\u5B58\uFF1B\u4F01\u5FAE\u4F1A\u53D1\u6765\u4E00\u6B21\u6821\u9A8C\u8BF7\u6C42\u3002\u8FD9\u53F0\u673A\u5668\u5FC5\u987B\u80FD\u88AB\u4F01\u5FAE\u4ECE\u516C\u7F51\u8BBF\u95EE\u5230\u3002",
+        wecomCallbackSignature: "\u6536\u5230\u8FC7\u56DE\u8C03\uFF0C\u4F46\u7B7E\u540D\u6821\u9A8C\u6216\u89E3\u5BC6\u5931\u8D25\uFF1B\u81EA\u672C\u6B21\u542F\u52A8\u4EE5\u6765\u8FD8\u6CA1\u6536\u5230\u8FC7\u901A\u8FC7\u6821\u9A8C\u7684\u56DE\u8C03\u3002\u8BF7\u628A\u56DE\u8C03 Token \u548C EncodingAESKey \u4E0E\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u300C\u63A5\u6536\u6D88\u606F\u300D\u8BBE\u7F6E\u4FDD\u6301\u4E00\u81F4\uFF0C\u518D\u5230\u540E\u53F0\u4FDD\u5B58\u4E00\u6B21\u4EE5\u91CD\u65B0\u6821\u9A8C\u3002"
       }
     },
+    reconnect: {
+      label: "\u91CD\u65B0\u8FDE\u63A5",
+      description: "\u6309\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u65AD\u5F00\u5E76\u91CD\u65B0\u8FDE\u63A5\u8FD9\u4E2A\u673A\u5668\u4EBA\u3002",
+      notAvailable: "\u8FD9\u4E2A\u5E73\u53F0\u8FD8\u4E0D\u80FD\u8FDE\u63A5\uFF0C\u91CD\u65B0\u8FDE\u63A5\u4E5F\u8FDE\u4E0D\u4E0A\u3002",
+      running: "\u6B63\u5728\u91CD\u65B0\u8FDE\u63A5 {{rowId}} \u2026",
+      done: "\u5DF2\u5F00\u59CB\u91CD\u65B0\u8FDE\u63A5\uFF0C\u7ED3\u679C\u8BF7\u770B\u673A\u5668\u4EBA\u7684\u8FDE\u63A5\u72B6\u6001\u3002",
+      notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u91CD\u65B0\u8FDE\u63A5\uFF0C\u52A8\u4F5C\u53EA\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
+      notConfigured: "\u8BF7\u5148\u8865\u5168\u5E76\u4FDD\u5B58\u8FD9\u4E2A\u673A\u5668\u4EBA\u7684\u8BBE\u7F6E\uFF0C\u518D\u91CD\u65B0\u8FDE\u63A5\u3002",
+      duplicate: "\u53E6\u4E00\u4E2A\u673A\u5668\u4EBA\u884C\u6B63\u5728\u4F7F\u7528\u8FD9\u4EFD\u51ED\u636E\uFF0C\u8BF7\u5148\u5904\u7406\u91CD\u590D\u914D\u7F6E\u518D\u91CD\u65B0\u8FDE\u63A5\u3002",
+      inactive: "\u804A\u5929\u6865\u5DF2\u505C\u7528\uFF0C\u8BF7\u5148\u542F\u7528\u518D\u91CD\u65B0\u8FDE\u63A5\u3002"
+    },
     copyDiagnostics: {
       label: "\u590D\u5236\u8BCA\u65AD",
       description: "\u8DD1\u4E00\u6B21\u8FDE\u63A5\u63A2\u6D4B\uFF0C\u751F\u6210\u53EF\u590D\u5236\u7684\u8BCA\u65AD\u6587\u672C\uFF08\u4E0D\u542B\u5BC6\u94A5\uFF09\u3002",
       running: "\u6B63\u5728\u751F\u6210\u8BCA\u65AD {{rowId}} \u2026",
-      done: "\u8BCA\u65AD\u5DF2\u751F\u6210\uFF0C\u89C1\u4E0B\u65B9\u8BE6\u60C5",
-      failed: "\u8BCA\u65AD\u5931\u8D25",
+      done: "\u8BCA\u65AD\u62A5\u544A\u5DF2\u751F\u6210\uFF0C\u89C1\u4E0B\u65B9\u8BE6\u60C5",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u590D\u5236\u8BCA\u65AD\u3002"
     },
     diagnostic: {
@@ -139682,16 +140190,23 @@ var zh_CN_default = {
     },
     larkRepair: {
       label: "\u8865\u5168\u6743\u9650",
-      description: "\u68C0\u67E5\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u80FD\u5426\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u4E0D\u4F1A\u81EA\u52A8\u68C0\u67E5\u3002",
+      description: "\u5217\u51FA\u7F3A\u5C11\u7684\u5FC5\u9700\u6743\u9650\u548C\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7533\u8BF7\u94FE\u63A5\uFF0C\u518D\u7531\u7BA1\u7406\u5458\u624B\u52A8\u53D1\u5E03\u5E94\u7528\u7248\u672C\u3002",
       step: {
-        scopes: "\u6743\u9650\uFF1A\u672A\u68C0\u67E5",
-        events: "\u4E8B\u4EF6\u8BA2\u9605\uFF1A\u672A\u68C0\u67E5",
-        publish: "\u53D1\u5E03\uFF1A\u672A\u68C0\u67E5",
-        verify: "\u9A8C\u8BC1\u5E94\u7528\u4ECD\u53EF\u6362\u53D6 tenant token"
-      },
-      done: "\u4EC5\u6838\u5B9E\u4E86\u51ED\u636E\u4ECD\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
-      hint: "\u53C2\u8003\u53F7\uFF1A{{ref}}\n{{detail}}\n\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\uFF1B\u8FD9\u4E09\u9879\u5747\u672A\u81EA\u52A8\u68C0\u67E5\u3002",
-      failed: "\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u672A\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
+        token: "\u7528\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u6362\u53D6 tenant token",
+        scopes: "\u6838\u5BF9\u5E94\u7528\u5DF2\u5F00\u901A\u7684\u79DF\u6237\u6743\u9650"
+      },
+      missing: "\u6709\u5FC5\u9700\u6743\u9650\u5C1A\u672A\u5F00\u901A\u3002",
+      allGranted: "\u5FC5\u9700\u6743\u9650\u90FD\u5DF2\u5F00\u901A\u3002",
+      unverified: "\u65E0\u6CD5\u81EA\u52A8\u6838\u5BF9\u6743\u9650\u3002",
+      missingScopes: "\u7F3A\u5C11\u7684\u6743\u9650\uFF1A\n{{scopes}}",
+      requiredScopes: "\u5FC5\u9700\u6743\u9650\u6E05\u5355\uFF0C\u8BF7\u9010\u9879\u624B\u52A8\u6838\u5BF9\uFF1A\n{{scopes}}\n\n\u5E94\u7528\u7F3A\u5C11 application:application:self_manage \u65F6\u65E0\u6CD5\u67E5\u8BE2\u81EA\u8EAB\u5DF2\u5F00\u901A\u7684\u6743\u9650\uFF0C\u6240\u4EE5\u8FD9\u4EFD\u6E05\u5355\u6CA1\u80FD\u81EA\u52A8\u6838\u5BF9\u3002",
+      openApplyLink: "\u6253\u5F00\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7533\u8BF7\u8FD9\u4E9B\u6743\u9650",
+      openCheckLink: "\u6253\u5F00\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u5E76\u7533\u8BF7\u8FD9\u4E9B\u6743\u9650",
+      applyLink: "\u5F00\u653E\u5E73\u53F0\u5730\u5740\uFF1A\n{{url}}",
+      publishHint: "\u8BF7\u5E94\u7528\u7BA1\u7406\u5458\u6253\u5F00\u4E0A\u8FF0\u94FE\u63A5\u52FE\u9009\u6743\u9650\uFF0C\u518D\u5230\u300C\u5E94\u7528\u53D1\u5E03 \u2192 \u7248\u672C\u7BA1\u7406\u4E0E\u53D1\u5E03 \u2192 \u521B\u5EFA\u7248\u672C\u300D\u53D1\u5E03\u65B0\u7248\u672C\uFF0C\u56DE\u6765\u70B9\u300C\u68C0\u67E5\u8FDE\u63A5\u300D\u786E\u8BA4\u3002",
+      botHint: "\u542F\u7528\u673A\u5668\u4EBA\u8BF7\u5230\u300C\u5E94\u7528 \u2192 \u6DFB\u52A0\u5E94\u7528\u80FD\u529B \u2192 \u673A\u5668\u4EBA\u300D\uFF1B\u8FD9\u91CC\u4E0D\u68C0\u67E5\u673A\u5668\u4EBA\u80FD\u529B\u3002",
+      eventHint: "\u6536\u6D88\u606F\u9700\u8981\u5728\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u91CC\u628A\u4E8B\u4EF6\u8BA2\u9605\u548C\u56DE\u8C03\u8BA2\u9605\u90FD\u8BBE\u4E3A\u300C\u4F7F\u7528\u957F\u8FDE\u63A5\u300D\uFF0C\u518D\u6DFB\u52A0\u4E0B\u9762\u8FD9\u4E9B\uFF08\u8FD9\u91CC\u4E0D\u68C0\u67E5\uFF09\uFF1A\n\u4E8B\u4EF6\uFF1A{{events}}\n\u56DE\u8C03\uFF1A{{callbacks}}",
+      failed: "\u672A\u80FD\u6838\u5BF9\u5E94\u7528\u7684\u5FC5\u9700\u6743\u9650\uFF0C\u8BF7\u67E5\u770B\u9519\u8BEF\u8BE6\u60C5\u540E\u91CD\u8BD5\u3002",
       notLark: "\u8FD9\u4E00\u884C\u4E0D\u662F\u5DF2\u4FDD\u5B58\u7684\u98DE\u4E66\u673A\u5668\u4EBA\u3002"
     }
   },
@@ -139738,11 +140253,13 @@ var zh_CN_default = {
     connection: {
       failed: "\u4E0A\u6B21\u8FDE\u63A5\u6CA1\u6709\u6210\u529F\u3002",
       details: "\u8BE6\u60C5\uFF1A{{error}}",
+      reconnect: "\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u518D\u8BD5\u3002",
       reason: {
         "not-available": "\u8FD9\u4E2A\u5E73\u53F0\u8FD8\u4E0D\u80FD\u8FDE\u63A5\u3002",
         "invalid-app-id": "App ID \u683C\u5F0F\u4E0D\u6B63\u786E\u3002",
         disconnected: "\u548C\u5E73\u53F0\u7684\u8FDE\u63A5\u65AD\u4E86\u3002",
         "subscription-failed": "\u5E73\u53F0\u6CA1\u6709\u786E\u8BA4\u8BA2\u9605\u3002",
+        "taken-over": "\u8FD9\u91CC\u7684\u8FDE\u63A5\u5DF2\u88AB\u522B\u5904\u53D6\u4EE3\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u91CD\u8FDE\u3002",
         "token-unavailable": "\u6CA1\u80FD\u6362\u5230\u8BBF\u95EE\u4EE4\u724C\u3002",
         "credentials-rejected": "\u5E73\u53F0\u62D2\u7EDD\u4E86\u51ED\u636E\u3002"
       },
@@ -139766,7 +140283,7 @@ var zh_CN_default = {
       done: "\u5B8C\u6210\u3002",
       close: "\u5173\u95ED",
       failedToRun: "\u6CA1\u80FD\u5728\u8FD9\u53F0\u673A\u5668\u4E0A\u8FD0\u884C\u3002",
-      saveFirst: "\u5148\u4FDD\u5B58\u6216\u64A4\u9500\u6539\u52A8\u3002\u8FD9\u51E0\u9879\u68C0\u67E5\u7684\u662F\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
+      saveFirst: "\u5148\u4FDD\u5B58\u6216\u64A4\u9500\u6539\u52A8\u3002\u8FD9\u4E9B\u52A8\u4F5C\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
       qrTitle: "\u7528\u98DE\u4E66 App \u626B\u7684\u4E8C\u7EF4\u7801"
     },
     step: {
@@ -139792,6 +140309,24 @@ var zh_CN_default = {
       callbackFollowsKeys: "\u6539\u4E86 Token \u6216 EncodingAESKey\uFF0C\u8FD9\u4E2A\u5730\u5740\u4F1A\u53D8\uFF0C\u8981\u91CD\u65B0\u8D34\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u3002"
     }
   },
+  mergeForward: {
+    title: "[\u5408\u5E76\u8F6C\u53D1\u7684\u804A\u5929\u8BB0\u5F55\uFF0C\u5171 {{count}} \u6761]",
+    nested: "[\u5D4C\u5957\u8F6C\u53D1\uFF0C\u5171 {{count}} \u6761]",
+    someone: "\u67D0\u4EBA",
+    bot: "\u673A\u5668\u4EBA",
+    unknownTime: "[\u65F6\u95F4\u672A\u77E5]",
+    resource: {
+      image: "\u56FE\u7247",
+      file: "\u6587\u4EF6",
+      audio: "\u8BED\u97F3",
+      video: "\u89C6\u9891",
+      folder: "\u6587\u4EF6\u5939"
+    },
+    unavailable: "[{{type}}\uFF1A\u6CA1\u80FD\u53D6\u5230]",
+    unavailableNamed: "[{{type}} {{name}}\uFF1A\u6CA1\u80FD\u53D6\u5230]",
+    omitted: "\u2026\u2026\u8FD8\u6709 {{count}} \u6761\u6CA1\u5217\u51FA",
+    truncated: "\u2026\u2026[\u6B63\u6587\u5DF2\u622A\u65AD]"
+  },
   team: {
     noRoster: "\u8FD9\u4E2A\u9879\u76EE\u8FD8\u6CA1\u6709\u56E2\u961F\u540D\u5355\uFF0C\u5148\u5728 Teams \u6807\u7B7E\u91CC\u4FDD\u5B58\u540D\u5355\u5E76\u9009\u4E00\u540D\u8D1F\u8D23\u4EBA\u3002",
     unavailable: "\u6682\u65F6\u8BFB\u4E0D\u5230\u8FD9\u4E2A\u9879\u76EE\u7684\u56E2\u961F\u540D\u5355\uFF0C\u8BF7\u786E\u8BA4 Teams \u63D2\u4EF6\u5DF2\u542F\u7528\u540E\u91CD\u8BD5\u3002",
@@ -140069,7 +140604,10 @@ var makeNotifications = (core, deps) => {
       const said = threadsWithSomethingToReport.delete(threadId);
       await ready;
       const targets = targetsForProject(threadId, await projectOfThread(threadId));
-      const { debt, handled, execution } = await conclusions.forTurn(threadId);
+      const owes = Object.values(conclusionDebtsOf(core.state)).some(
+        (debt2) => debt2.threadId === threadId
+      );
+      const { debt, handled, execution } = said || owes || targets.length > 0 ? await conclusions.forTurn(threadId) : { debt: void 0, handled: false, execution: null };
       if (debt !== void 0) {
         const binding = bindingForChatKey(debt.chatKey);
         if (binding !== void 0 && !streamsTo(binding, threadId) && execution?.session?.activeTurnId == null && execution?.latestTurn?.state !== "running" && execution?.latestTurn?.state !== "error" && payload.session?.status !== "error") {
@@ -140254,7 +140792,7 @@ var PANEL_PAGE_SIZE = 8;
 var PANEL_CARD_LIMIT = 200;
 var LABEL_MAX_CHARS = 60;
 var PICK_KINDS = /* @__PURE__ */ new Set(["sessions", "models", "projects"]);
-var clip2 = (label) => {
+var clip3 = (label) => {
   const chars = Array.from(label);
   return chars.length <= LABEL_MAX_CHARS ? label : `${chars.slice(0, LABEL_MAX_CHARS - 1).join("")}\u2026`;
 };
@@ -140279,7 +140817,7 @@ var makePanelController = (deps) => {
     }
   };
   const button = (label, op, arg, danger) => ({
-    label: clip2(label),
+    label: clip3(label),
     action: { op, arg },
     ...danger === true ? { danger } : {}
   });
@@ -140698,6 +141236,20 @@ var makeFailureNotices = (core) => {
   const heldForCard = /* @__PURE__ */ new Map();
   const reasonOf2 = (detail) => detail?.trim() ?? "";
   return {
+    /** 派发的参考号沿用同一次请求；原始错误只进日志。 */
+    forDispatchFailure: (threadId, requestId, error) => {
+      const reference2 = stableDiagnosticRef(
+        "msg",
+        (identityDigest(requestId, "turn") ?? requestId).replaceAll("-", "")
+      );
+      core.host.log.warn("chat could not start a turn", {
+        threadId,
+        requestId,
+        reference: reference2,
+        error: describeError(error)
+      });
+      return core.t("reply.turnFailedToStart", { ref: reference2 });
+    },
     /** 一次失败通知的那句话（带新参考号，同号进日志）：实时失败事件与重启补发各取一次。 */
     forFailure: (threadId, detail) => {
       const reference2 = diagnosticRef("msg");
@@ -141473,7 +142025,7 @@ var makeSessions = (core) => {
 
 // src/teamGoals.ts
 import * as NodeCrypto4 from "node:crypto";
-var isRecord2 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+var isRecord3 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 var teamGoalRequestId = (binding, messageId) => {
   const identity = JSON.stringify([
     "im",
@@ -141515,7 +142067,7 @@ var makeTeamGoals = (core) => {
           requestId
         }
       });
-      if (isRecord2(result) && result._tag === "TeamGoalRejection") {
+      if (isRecord3(result) && result._tag === "TeamGoalRejection") {
         await deliver(
           binding,
           t(
@@ -141524,7 +142076,7 @@ var makeTeamGoals = (core) => {
         );
         return null;
       }
-      if (!isRecord2(result) || typeof result.leadThreadId !== "string" || result.leadThreadId === "" || result.leadName !== null && typeof result.leadName !== "string") {
+      if (!isRecord3(result) || typeof result.leadThreadId !== "string" || result.leadThreadId === "" || result.leadName !== null && typeof result.leadName !== "string") {
         throw new Error("team startGoal returned an invalid result");
       }
       topicRoot?.confirmConsumed();
@@ -141547,6 +142099,38 @@ var makeTeamGoals = (core) => {
   return { hasRosterFor, startTeamGoal };
 };
 
+// src/telegramAdapter.ts
+import * as NodeCrypto5 from "node:crypto";
+
+// src/telegramApiResponse.ts
+var TelegramApiError = class extends Error {
+  code;
+  /** 限流（429）时平台给的等待秒数；别的错误没有。 */
+  retryAfterSeconds;
+  constructor(method, code2, description, retryAfterSeconds) {
+    super(`telegram ${method} failed (${String(code2 ?? "?")}): ${description}`);
+    this.name = "TelegramApiError";
+    this.code = code2;
+    this.retryAfterSeconds = retryAfterSeconds;
+  }
+};
+var isTelegramCredentialsRejected = (error) => error instanceof TelegramApiError && (error.code === 401 || error.code === 404);
+var readTelegramResponse = async (method, response) => {
+  const envelope = await response.json().catch((error) => {
+    if (response.ok) throw error;
+    return { ok: false, description: response.statusText || void 0 };
+  });
+  if (!response.ok || envelope?.ok !== true) {
+    throw new TelegramApiError(
+      method,
+      response.status === 401 ? 401 : envelope?.error_code ?? (response.ok ? void 0 : response.status),
+      envelope?.description ?? "no reason",
+      envelope?.parameters?.retry_after
+    );
+  }
+  return envelope.result;
+};
+
 // src/telegramApi.ts
 var API_BASE = "https://api.telegram.org";
 var POLL_TIMEOUT_SECONDS = 45;
@@ -141571,18 +142155,11 @@ var target = (chatId) => {
   const { chat, thread } = splitChatId(chatId);
   return { chat_id: chat, ...thread === null ? {} : { message_thread_id: thread } };
 };
-var chatOnly = (chatId) => ({ chat_id: splitChatId(chatId).chat });
-var TelegramApiError = class extends Error {
-  code;
-  /** 限流（429）时平台给的等待秒数；别的错误没有。 */
-  retryAfterSeconds;
-  constructor(method, code2, description, retryAfterSeconds) {
-    super(`telegram ${method} failed (${String(code2 ?? "?")}): ${description}`);
-    this.name = "TelegramApiError";
-    this.code = code2;
-    this.retryAfterSeconds = retryAfterSeconds;
-  }
+var replyParameters = (messageId) => {
+  const id = Number(messageId);
+  return messageId === void 0 || !Number.isSafeInteger(id) ? {} : { reply_parameters: { message_id: id, allow_sending_without_reply: true } };
 };
+var chatOnly = (chatId) => ({ chat_id: splitChatId(chatId).chat });
 var telegramSendVerdict = (error) => error instanceof TelegramApiError && (error.code === 429 || error.code === 503 && error.retryAfterSeconds !== void 0) ? {
   retry: true,
   afterMs: error.retryAfterSeconds === void 0 ? void 0 : error.retryAfterSeconds * 1e3
@@ -141617,7 +142194,6 @@ var resourceOf2 = (message) => {
     };
   }
   const media = [
-    [message.voice, "voice.ogg", "audio/ogg"],
     [message.audio, "audio", "application/octet-stream"],
     [message.video, "video.mp4", "video/mp4"],
     [message.video_note, "video-note.mp4", "video/mp4"],
@@ -141637,7 +142213,15 @@ var resourceOf2 = (message) => {
   return null;
 };
 var unsupportedTypeOf = (message) => {
-  for (const type of ["sticker", "location", "venue", "contact", "poll", "dice"]) {
+  for (const type of [
+    "voice",
+    "sticker",
+    "location",
+    "venue",
+    "contact",
+    "poll",
+    "dice"
+  ]) {
     if (message[type] !== void 0) return type;
   }
   return null;
@@ -141691,24 +142275,17 @@ var makeTelegramApi = (input) => {
       },
       timeoutMs
     );
-    const envelope = await response.json();
-    if (envelope.ok !== true) {
-      throw new TelegramApiError(
-        method,
-        envelope.error_code,
-        envelope.description ?? "no reason",
-        envelope.parameters?.retry_after
-      );
-    }
-    return envelope.result;
+    return readTelegramResponse(method, response);
   };
-  const upload = async (method, field, chatId, file) => {
+  const upload = async (method, field, chatId, file, replyMessageId) => {
     const form = new FormData();
     const where = target(chatId);
     form.set("chat_id", where.chat_id);
     if (where.message_thread_id !== void 0) {
       form.set("message_thread_id", String(where.message_thread_id));
     }
+    const reply = replyParameters(replyMessageId).reply_parameters;
+    if (reply !== void 0) form.set("reply_parameters", JSON.stringify(reply));
     form.set(field, new Blob([new Uint8Array(file.bytes)], { type: file.mimeType }), file.name);
     const response = await send(
       method,
@@ -141716,24 +142293,17 @@ var makeTelegramApi = (input) => {
       { method: "POST", body: form },
       UPLOAD_TIMEOUT_MS
     );
-    const envelope = await response.json();
-    if (envelope.ok !== true) {
-      throw new TelegramApiError(
-        method,
-        envelope.error_code,
-        envelope.description ?? "no reason",
-        envelope.parameters?.retry_after
-      );
-    }
+    await readTelegramResponse(method, response);
   };
   const keyboard = (rows) => ({
     inline_keyboard: rows.map(
       (row) => row.map((button) => ({ text: button.text, callback_data: button.data }))
     )
   });
-  const sendSingle = async (method, chatId, body, rows) => {
+  const sendSingle = async (method, chatId, body, rows, replyMessageId) => {
     const sent = await call(method, {
       ...target(chatId),
+      ...replyParameters(replyMessageId),
       ...body,
       ...rows === void 0 ? {} : { reply_markup: keyboard(rows) }
     });
@@ -141793,10 +142363,11 @@ var makeTelegramApi = (input) => {
       },
       POLL_CALL_TIMEOUT_MS
     ),
-    sendMessage: async (chatId, text4, retry) => {
-      for (const chunk of splitForTelegram(text4)) {
+    sendMessage: async (chatId, text4, retry, replyMessageId) => {
+      for (const [index, chunk] of splitForTelegram(text4).entries()) {
+        const reply = index === 0 ? replyMessageId : void 0;
         await sendWithRetry(
-          () => call("sendMessage", { ...target(chatId), text: chunk }),
+          () => sendSingle("sendMessage", chatId, { text: chunk }, void 0, reply),
           telegramSendVerdict,
           retry
         );
@@ -141806,12 +142377,12 @@ var makeTelegramApi = (input) => {
      * 发一条消息，回它的 id。调用方保证 `text` 不超过单条上限（边写边更新的回复要自己
      * 在上限处翻篇，这里不替它切）。带 `rows` 就挂一块内联键盘。
      */
-    sendOne: (chatId, text4, rows) => sendSingle("sendMessage", chatId, { text: text4 }, rows),
+    sendOne: (chatId, text4, rows, replyMessageId) => sendSingle("sendMessage", chatId, { text: text4 }, rows, replyMessageId),
     /**
      * 发一条富文本，回它的 id。`markdown` 已是平台要的样子。带 `rows` 就挂一块内联键盘。
      * 调用方保证不超富文本单条上限（这里不替它切）。
      */
-    sendRichOne: (chatId, markdown, rows) => sendSingle("sendRichMessage", chatId, { rich_message: { markdown } }, rows),
+    sendRichOne: (chatId, markdown, rows, replyMessageId) => sendSingle("sendRichMessage", chatId, { rich_message: { markdown } }, rows, replyMessageId),
     /**
      * 改一条已发出的消息。内容没变（`message is not modified`）当成功。`rows` 不给就是
      * 去掉按钮：改了文字又要保留按钮的调用方得自己再传一次。
@@ -141823,20 +142394,21 @@ var makeTelegramApi = (input) => {
      */
     editRich: (chatId, messageId, markdown, rows = []) => editSingle(chatId, messageId, { rich_message: { markdown } }, rows),
     /** 带按钮的审批消息，一行一个按钮；回消息 id，之后才改得了它（平台没给就是 null）。 */
-    sendButtons: (chatId, text4, buttons) => sendSingle(
+    sendButtons: (chatId, text4, buttons, replyMessageId) => sendSingle(
       "sendMessage",
       chatId,
       { text: text4 },
-      buttons.map((button) => [{ text: button.label, data: button.token }])
+      buttons.map((button) => [{ text: button.label, data: button.token }]),
+      replyMessageId
     ),
     /** 答完点击，不然客户端上那个按钮一直转圈。带 `text` 时点击者会看到一句提示。 */
     answerCallback: (callbackQueryId, text4) => call("answerCallbackQuery", {
       callback_query_id: callbackQueryId,
       ...text4 === void 0 ? {} : { text: text4 }
     }),
-    sendPhoto: (chatId, photo) => upload("sendPhoto", "photo", chatId, photo),
+    sendPhoto: (chatId, photo, replyMessageId) => upload("sendPhoto", "photo", chatId, photo, replyMessageId),
     /** 以文件形式发（不压缩、不限尺寸比例）：什么类型都行，音频与视频也走这条。 */
-    sendDocument: (chatId, file) => upload("sendDocument", "document", chatId, file),
+    sendDocument: (chatId, file, replyMessageId) => upload("sendDocument", "document", chatId, file, replyMessageId),
     /** 取一个文件的字节。要两步：先换路径，再按路径下载。 */
     fetchFile: async (fileId, maxBytes) => {
       const file = await call("getFile", {
@@ -142016,7 +142588,7 @@ var toTelegramRichMarkdown = (value2) => {
 
 // src/plainTurnText.ts
 var RUNNING_LABEL_MAX_CHARS = 200;
-var clip3 = (text4, max) => {
+var clip4 = (text4, max) => {
   const chars = Array.from(text4);
   return chars.length <= max ? text4 : `${chars.slice(0, max - 1).join("")}\u2026`;
 };
@@ -142025,7 +142597,7 @@ var turnTextParts = (view, t) => {
   if (view.omitted > 0) names.unshift(t("card.step.omitted", { count: view.omitted }));
   const headLines = [view.title === "" ? t("card.untitled") : view.title];
   if (names.length > 0) headLines.push(names.join(" \u2192 "));
-  if (view.running !== null) headLines.push(`\u{1F527} ${clip3(view.running, RUNNING_LABEL_MAX_CHARS)}`);
+  if (view.running !== null) headLines.push(`\u{1F527} ${clip4(view.running, RUNNING_LABEL_MAX_CHARS)}`);
   const body = view.body.trim();
   const footLines = [];
   if (view.status === "working") {
@@ -142048,7 +142620,7 @@ var makeTurnWriter = (deps) => {
   const put = async (text4) => {
     const bounded = text4.length <= deps.limit ? text4 : text4.slice(0, deps.limit);
     if (live === null) {
-      const id = await deps.messages.send(bounded);
+      const id = await deps.messages.send(bounded, first === null);
       if (id === null) throw new Error("telegram sent a message without an id");
       live = id;
       first ??= id;
@@ -142099,6 +142671,7 @@ var TELEGRAM_CARD_THROTTLE_MS = 1200;
 var FLOOD_WAIT_MAX_SECONDS = 30;
 var REMEMBERED_CARD_LIMIT = 200;
 var tokenOf = (binding) => (binding.values["telegramToken"] ?? "").trim();
+var tokenFingerprint = (bot) => NodeCrypto5.createHash("sha256").update(tokenOf(bot)).digest("hex");
 var REACTION_WORKING = "\u{1F440}";
 var REACTION_DONE = "\u{1F44D}";
 var REACTION_FAILED = "\u{1F44E}";
@@ -142188,26 +142761,27 @@ var makeTelegramAdapter = (deps) => {
     limit: TELEGRAM_TEXT_MAX_CHARS,
     ...resume === void 0 ? {} : { resume },
     messages: {
-      send: (text4) => withRichFallback(
-        toTelegramRichMarkdown(text4),
-        async (markdown) => (await apiFor(slot.binding)).sendRichOne(chatId, markdown),
-        async () => (await apiFor(slot.binding)).sendOne(chatId, text4)
-      ),
+      send: (text4, first) => {
+        const reply = first ? slot.binding.reply?.messageId : void 0;
+        return withRichFallback(
+          toTelegramRichMarkdown(text4),
+          async (markdown) => (await apiFor(slot.binding)).sendRichOne(chatId, markdown, void 0, reply),
+          async () => (await apiFor(slot.binding)).sendOne(chatId, text4, void 0, reply)
+        );
+      },
       edit: (messageId, text4) => withRichFallback(
         toTelegramRichMarkdown(text4),
-        async (markdown) => {
-          await (await apiFor(slot.binding)).editRich(chatId, messageId, markdown);
-        },
-        async () => {
-          await (await apiFor(slot.binding)).editMessage(chatId, messageId, text4);
-        }
+        async (markdown) => (await apiFor(slot.binding)).editRich(chatId, messageId, markdown),
+        async () => (await apiFor(slot.binding)).editMessage(chatId, messageId, text4)
       )
     }
   });
   return {
     platform: "telegram",
+    botIdentity: tokenFingerprint,
     icon: "telegram",
     label: "Telegram",
+    quotesReplies: true,
     columns: COLUMNS2,
     validate: telegramConfigIssues,
     isConfigured: (binding) => telegramConfigIssues(binding).length === 0,
@@ -142216,7 +142790,12 @@ var makeTelegramAdapter = (deps) => {
       };
       const stopped = new Promise((resolve) => stop = resolve);
       let running = true;
-      let offset = 0;
+      const tokenHash = tokenFingerprint(binding);
+      let offset = deps.readCursor(binding.rowId, tokenHash);
+      const advanceOffset = (update) => {
+        offset = nextOffset([update], offset ?? 0);
+        deps.saveCursor(binding.rowId, tokenHash, offset);
+      };
       let acknowledged = 0;
       let backoff = BACKOFF_START_MS;
       let botUsername;
@@ -142229,7 +142808,7 @@ var makeTelegramAdapter = (deps) => {
       });
       const publishAck = () => {
         const api = liveApi;
-        if (api === void 0 || offset <= acknowledged) return;
+        if (api === void 0 || offset === void 0 || offset <= acknowledged) return;
         const next = offset;
         acknowledged = next;
         void api.getUpdates(next, 0).catch(() => void 0);
@@ -142258,6 +142837,12 @@ var makeTelegramAdapter = (deps) => {
                 });
               });
             }
+            if (offset === void 0) {
+              const backlog = await api.getUpdates(-1, 0);
+              if (!running) return;
+              offset = nextOffset(backlog, 0);
+              deps.saveCursor(binding.rowId, tokenHash, offset);
+            }
             acknowledged = offset;
             const updates = await api.getUpdates(offset);
             if (!running) return;
@@ -142270,13 +142855,13 @@ var makeTelegramAdapter = (deps) => {
               if (callback?.data !== void 0) {
                 const operatorId = callback.from === void 0 ? null : String(callback.from.id);
                 const notice = callback.data.startsWith(PANEL_DATA_PREFIX) ? panelClick(binding.rowId, callback, operatorId, handlers) : handlers.onButton(callback.data, operatorId, callback.id);
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 await api.answerCallback(callback.id, notice ?? void 0).catch(() => void 0);
                 continue;
               }
               const message = update.message;
               if (message === void 0) {
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 continue;
               }
               const resource = resourceOf2(message);
@@ -142285,13 +142870,13 @@ var makeTelegramAdapter = (deps) => {
                 botUsername
               );
               if (text4 === null) {
-                offset = nextOffset([update], offset);
+                advanceOffset(update);
                 continue;
               }
               const gated = !passesGroupGate2({
                 message,
                 text: text4,
-                hasResource: resource !== null,
+                hasResource: resource !== null || message.voice !== void 0,
                 botUsername: botUsername ?? null,
                 groupMention: binding.groupMention
               });
@@ -142299,16 +142884,16 @@ var makeTelegramAdapter = (deps) => {
                 const solo = binding.groupMention === "always" && await isSoloGroup(String(message.chat.id));
                 if (!running) break;
                 if (!solo) {
-                  offset = nextOffset([update], offset);
+                  advanceOffset(update);
                   continue;
                 }
               }
               if (!running) break;
-              offset = nextOffset([update], offset);
+              advanceOffset(update);
               const senderId = message.from === void 0 ? null : String(message.from.id);
-              const senderName = telegramDisplayName(message.from);
+              const senderName2 = telegramDisplayName(message.from);
               const chatKind = message.chat.type === "private" ? "private" : "group";
-              if (text4 === "" && resource === null) {
+              if (message.voice !== void 0 || text4 === "" && resource === null) {
                 const unsupported = unsupportedTypeOf(message);
                 if (unsupported === null) continue;
                 handlers.onMessage({
@@ -142330,7 +142915,7 @@ var makeTelegramAdapter = (deps) => {
                 ...parentChatId === void 0 ? {} : { parentChatId },
                 senderId,
                 text: text4,
-                ...senderName ? { senderName } : {},
+                ...senderName2 ? { senderName: senderName2 } : {},
                 ...message.chat.title ? { chatTitle: message.chat.title } : {},
                 ...replyTo === null ? {} : { replyTo },
                 chatKind,
@@ -142347,6 +142932,17 @@ var makeTelegramAdapter = (deps) => {
             }
           } catch (error) {
             if (!running) return;
+            if (isTelegramCredentialsRejected(error)) {
+              running = false;
+              stop();
+              handlers.onConnectionState?.({
+                state: "failed",
+                reason: "credentials-rejected",
+                hint: "unauthorized",
+                error
+              });
+              return;
+            }
             if (checkingConnection) handlers.onConnectionState?.({ state: "failed", error });
             handlers.onError(error instanceof Error ? error.message : String(error));
             await Promise.race([(deps.sleep ?? defaultSleep)(backoff), stopped]);
@@ -142358,16 +142954,16 @@ var makeTelegramAdapter = (deps) => {
       deps.log.info("telegram polling", { bot: binding.displayName });
       return {
         close: () => {
+          if (running) publishAck();
           running = false;
           stop();
-          publishAck();
           apis.delete(binding.rowId);
         }
       };
     },
     sendText: async (binding, text4, options) => {
       const api = await apiFor(binding);
-      await api.sendMessage(binding.chatId, text4, options?.retry);
+      await api.sendMessage(binding.chatId, text4, options?.retry, binding.reply?.messageId);
     },
     checkConnection: async (bot) => {
       const token = tokenOf(bot);
@@ -142391,12 +142987,11 @@ var makeTelegramAdapter = (deps) => {
         }
         username = me.username !== void 0 && me.username !== "" ? `@${me.username}` : "(no username)";
       } catch (error) {
-        const rejected = error instanceof TelegramApiError && (error.code === 401 || error.code === 404);
         return {
           stage: "getMe",
           ok: false,
           detail: describeError(error),
-          ...rejected ? { hint: "unauthorized" } : {}
+          ...isTelegramCredentialsRejected(error) ? { hint: "unauthorized" } : {}
         };
       }
       try {
@@ -142436,25 +143031,30 @@ var makeTelegramAdapter = (deps) => {
     sendImage: async (binding, image2) => {
       const api = await apiFor(binding);
       try {
-        await api.sendPhoto(binding.chatId, image2);
+        await api.sendPhoto(binding.chatId, image2, binding.reply?.messageId);
       } catch (error) {
         if (!(error instanceof TelegramApiError && error.code === 400)) throw error;
         deps.log.info("telegram could not send the picture as a photo, sending it as a file", {
           name: image2.name,
           reason: error.message
         });
-        await api.sendDocument(binding.chatId, image2);
+        await api.sendDocument(binding.chatId, image2, binding.reply?.messageId);
       }
     },
     sendFile: async (binding, file) => {
       const api = await apiFor(binding);
-      await api.sendDocument(binding.chatId, file);
+      await api.sendDocument(binding.chatId, file, binding.reply?.messageId);
     },
     // 单张照片 10 MB、单个文件 50 MB。这两个数来自 Bot API 文档的记忆，本仓库里没有核对过。
     outboundLimits: { imageBytes: 10 * 1024 * 1024, fileBytes: 50 * 1024 * 1024 },
     askApproval: async (binding, request) => {
       const api = await apiFor(binding);
-      return api.sendButtons(binding.chatId, request.body, request.options);
+      return api.sendButtons(
+        binding.chatId,
+        request.body,
+        request.options,
+        binding.reply?.messageId
+      );
     },
     settleApproval: async (binding, cardId, settlement) => {
       const api = await apiFor(binding);
@@ -142506,7 +143106,7 @@ ${line}`
         const api = await apiFor(binding);
         const rendered = renderPanel(card, 1);
         const cardId = await withFloodWait(
-          () => api.sendOne(binding.chatId, rendered.text, rendered.rows)
+          () => api.sendOne(binding.chatId, rendered.text, rendered.rows, binding.reply?.messageId)
         );
         if (cardId !== null) {
           panelKeyboards.set(`${binding.rowId}:${binding.chatId}:${cardId}`, {
@@ -142531,7 +143131,9 @@ ${line}`
       open: async (binding, card) => {
         const api = await apiFor(binding);
         const rendered = renderChoiceCard(card);
-        return withFloodWait(() => api.sendOne(binding.chatId, rendered.text, rendered.rows));
+        return withFloodWait(
+          () => api.sendOne(binding.chatId, rendered.text, rendered.rows, binding.reply?.messageId)
+        );
       },
       update: async (binding, cardId, card) => {
         const api = await apiFor(binding);
@@ -142551,12 +143153,96 @@ ${line}`
 
 // src/turns.ts
 import { projectOrNull as projectOrNull2, threadOrNull as threadOrNull8 } from "@ycodium-ai/plugin-api";
+
+// src/dispatchRetry.ts
+var RETRY_DELAYS_MS = [1e3, 3e3];
+var retryable2 = (error) => {
+  if (typeof error !== "object" || error === null || !("_tag" in error)) return true;
+  const reason = "reason" in error ? error.reason : void 0;
+  switch (error._tag) {
+    case "PluginCapabilityError":
+      return reason === void 0 || reason === "host-unavailable";
+    case "DataCommandError":
+      return reason === "unavailable";
+    case "EnvironmentAuthorizationError":
+      return false;
+    case "OrchestrationDispatchCommandError":
+      return reason == null && (!("rejection" in error) || error.rejection == null);
+    default:
+      return true;
+  }
+};
+var dispatchTurnWithRetry = async (start, input, options = {}) => {
+  const sleep3 = options.sleep ?? abortableSleep;
+  for (let attempt = 0; ; attempt += 1) {
+    if (options.signal?.aborted) throw new Error("aborted");
+    try {
+      return await start(input);
+    } catch (error) {
+      const delay = RETRY_DELAYS_MS[attempt];
+      if (delay === void 0 || !retryable2(error)) throw error;
+      await sleep3(delay, options.signal);
+    }
+  }
+};
+
+// src/dispatchReceipt.ts
+var dispatchTurnWithReceipt = async (host, input, options) => {
+  try {
+    await dispatchTurnWithRetry((next) => host.threads.turns.start(next), input, options);
+  } catch (error) {
+    if (options.signal.aborted) throw error;
+    let receipt;
+    try {
+      receipt = await host.commands.getReceipt({
+        commandId: input.requestId,
+        commandType: "thread.turn.start",
+        threadId: input.threadId
+      });
+    } catch (receiptError) {
+      host.log.warn("chat could not read a turn command receipt", {
+        requestId: input.requestId,
+        threadId: input.threadId,
+        error: describeError(receiptError)
+      });
+      throw error;
+    }
+    if (options.signal.aborted) throw error;
+    if (receipt.status === "accepted") return;
+    if (receipt.status === "rejected")
+      throw new Error(receipt.error ?? "turn command rejected", { cause: error });
+    throw error;
+  }
+};
+
+// src/messageIdentity.ts
+import * as NodeCrypto6 from "node:crypto";
+var messageIdentity = (operation, bot, message, adapter) => {
+  const tuple = [
+    IDENTITY_VERSION,
+    operation,
+    adapter.platform,
+    adapter.botIdentity(bot),
+    message.originalChatId ?? message.chatId,
+    message.messageId
+  ];
+  return `${identityPrefix(operation)}${NodeCrypto6.createHash("sha256").update(JSON.stringify(tuple)).digest("hex")}`;
+};
+
+// src/turns.ts
 var TITLE_MAX_CHARS = 72;
 var titleFrom = (text4) => text4.replace(/\s+/g, " ").slice(0, TITLE_MAX_CHARS) || "Chat thread";
 var makeTurns = (core, deps) => {
   const { host, t, commit, bindChat, deliver } = core;
   const { queueFlow, rememberThreadProject } = deps;
   const { pendingByChat, pendingFor, collectResources } = deps.attachments;
+  const dispatchAbort = new AbortController();
+  host.onDispose(() => dispatchAbort.abort());
+  const identity = (operation, binding, message) => {
+    const adapter = core.adapterFor(binding.platform);
+    if (adapter === void 0) throw new Error(`missing IM adapter: ${binding.platform}`);
+    return messageIdentity(operation, binding, message, adapter);
+  };
   const threadStillUsable = async (binding, threadId) => {
     try {
       const thread = await threadOrNull8(host.threads, threadId, { archived: "include" });
@@ -142570,7 +143256,7 @@ var makeTurns = (core, deps) => {
     return waiting !== void 0 && waiting.threadId === threadId ? waiting : void 0;
   };
   const interactionModeOf = (chatKey) => chatOf(core.state, chatKey).plan ? "plan" : "default";
-  const ensureThread = async (binding, titleSeed) => {
+  const ensureThread = async (binding, message) => {
     const chatKey = chatKeyOf(binding);
     let threadId = chatOf(core.state, chatKey).threadId ?? void 0;
     if (threadId !== void 0 && !await threadStillUsable(binding, threadId)) {
@@ -142600,12 +143286,12 @@ var makeTurns = (core, deps) => {
       await deliver(binding, t("reply.noDefaultModel", { title: project.title }));
       return null;
     }
-    const createdThreadId = crypto.randomUUID();
+    const createdThreadId = identity("thread", binding, message);
     await host.threads.create({
-      requestId: crypto.randomUUID(),
+      requestId: identity("create", binding, message),
       threadId: createdThreadId,
       projectId: binding.projectId,
-      title: titleFrom(titleSeed),
+      title: titleFrom(message.text || message.resources[0]?.name || "Chat"),
       modelSelection,
       runtimeMode: binding.runtimeMode,
       interactionMode: interactionModeOf(chatKey),
@@ -142624,7 +143310,7 @@ var makeTurns = (core, deps) => {
   const startTurn = async (binding, message) => {
     const chatKey = chatKeyOf(binding);
     const text4 = message.text;
-    const threadId = await ensureThread(binding, text4 || message.resources[0]?.name || "Chat");
+    const threadId = await ensureThread(binding, message);
     if (threadId === null) return null;
     const topicRoot = await message.topicRootForSession?.(threadId);
     const carried = waitingFor(chatKey, threadId);
@@ -142638,7 +143324,7 @@ var makeTurns = (core, deps) => {
     );
     const attachments = [...carried?.attachments ?? [], ...own.attachments];
     const notes = [...carried?.notes ?? [], ...own.notes];
-    const userMessageId = crypto.randomUUID();
+    const userMessageId = identity("msg", binding, message);
     deps.anchors.note(threadId, userMessageId, binding);
     let intentAction;
     if (binding.queueMode === "steer") {
@@ -142650,33 +143336,39 @@ var makeTurns = (core, deps) => {
             kind: "steer",
             source: "automatic",
             turnId: activeTurnId,
-            commandId: crypto.randomUUID()
+            commandId: identity("steer", binding, message)
           };
         }
       } catch {
       }
     }
     const registered = deps.conclusions.starting(threadId);
+    const requestId = identity("turn", binding, message);
+    let failureNotice;
     try {
-      await host.threads.turns.start({
-        requestId: crypto.randomUUID(),
-        threadId,
-        message: {
-          messageId: userMessageId,
-          role: "user",
-          text: [
-            textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
-            ...notes
-          ].join("\n"),
-          attachments: attachments.map(
-            (attachment) => attachment.type === "image" ? { ...attachment, type: "image" } : { ...attachment, type: "file" }
-          )
+      await dispatchTurnWithReceipt(
+        host,
+        {
+          requestId,
+          threadId,
+          message: {
+            messageId: userMessageId,
+            role: "user",
+            text: [
+              textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
+              ...notes
+            ].join("\n"),
+            attachments: attachments.map(
+              (attachment) => attachment.type === "image" ? { ...attachment, type: "image" } : { ...attachment, type: "file" }
+            )
+          },
+          titleSeed: titleFrom(text4 || attachments[0]?.name || "Chat"),
+          runtimeMode: binding.runtimeMode,
+          interactionMode: interactionModeOf(chatKey),
+          ...intentAction !== void 0 ? { intentAction } : {}
         },
-        titleSeed: titleFrom(text4 || attachments[0]?.name || "Chat"),
-        runtimeMode: binding.runtimeMode,
-        interactionMode: interactionModeOf(chatKey),
-        ...intentAction !== void 0 ? { intentAction } : {}
-      });
+        { sleep: deps.dispatchSleep, signal: dispatchAbort.signal }
+      );
       topicRoot?.confirmConsumed();
       if (intentAction?.kind !== "steer") {
         deps.conclusions.owe({
@@ -142688,10 +143380,15 @@ var makeTurns = (core, deps) => {
       }
     } catch (error) {
       if (carried !== void 0) pendingByChat.set(chatKey, carried);
-      throw error;
+      if (dispatchAbort.signal.aborted) return null;
+      failureNotice = deps.failures.forDispatchFailure(threadId, requestId, error);
     } finally {
       registered();
     }
+    if (failureNotice !== void 0) {
+      await deliver(binding, failureNotice);
+      return null;
+    }
     deps.noteInboundUserMessage?.(userMessageId);
     host.log.info("chat started a turn from a message", {
       bot: binding.displayName,
@@ -142708,7 +143405,7 @@ var makeTurns = (core, deps) => {
     return threadId;
   };
   const receiveAttachmentsOnly = async (binding, message) => {
-    const threadId = await ensureThread(binding, message.resources[0]?.name || "Chat");
+    const threadId = await ensureThread(binding, message);
     if (threadId === null) return;
     const waiting = pendingFor(chatKeyOf(binding), threadId);
     const collected = await collectResources(
@@ -142790,6 +143487,84 @@ var makeWebSync = (core) => {
   return { noteInboundUserMessage };
 };
 
+// src/lark/setup/repairScopes.ts
+var SUBSCRIPTIONS = { events: APP_EVENTS.join(", "), callbacks: CARD_CALLBACKS.join(", ") };
+var repairLarkScopes = async (http, bot, emit, ref, redactor) => {
+  const { appId, appSecret, error: credentialError } = larkCredentials(bot);
+  const steps = (token2, scopes) => emit({
+    kind: "steps",
+    steps: [
+      { id: "token", labelKey: "rowAction.larkRepair.step.token", state: token2 },
+      ...scopes === void 0 ? [] : [{ id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: scopes }]
+    ]
+  });
+  const fail = (error, credentials2 = false) => {
+    const hint = credentials2 ? "larkCredentials" : larkConnectionHint(error);
+    emit({
+      kind: "failed",
+      reasonKey: hint === void 0 ? "rowAction.larkRepair.failed" : connectionHintKey(hint),
+      params: { ref, ...hint === void 0 ? {} : { hint } },
+      detail: redactor.redact(describeError(error))
+    });
+  };
+  steps("running", "pending");
+  if (credentialError !== void 0) {
+    steps("failed");
+    fail(new Error(credentialError), true);
+    return;
+  }
+  let token;
+  try {
+    ({ token } = await fetchTenantToken({ http, appId, appSecret }));
+    redactor.register(token);
+  } catch (error) {
+    steps("failed");
+    fail(error);
+    return;
+  }
+  steps("done", "running");
+  let granted;
+  try {
+    granted = await fetchAppTenantScopes({ http, token });
+  } catch (error) {
+    if (error instanceof LarkApiError && (error.status === 400 || error.status === 403 || isLarkPermissionCode(error.code))) {
+      granted = void 0;
+    } else {
+      steps("done", "failed");
+      fail(error);
+      return;
+    }
+  }
+  const missing = granted === void 0 ? SCOPES : SCOPES.filter((scope) => !granted.includes(scope));
+  steps("done", granted === void 0 ? "failed" : "done");
+  const needsAction = missing.length > 0;
+  const url = `${CONSOLE_ORIGIN}${CONSOLE_APP_PATH}/${appId}/auth?q=${missing.join(",")}&op_from=openapi&token_type=tenant`;
+  emit({
+    kind: "done",
+    fills: {},
+    ...granted === void 0 || needsAction ? { tone: "caution" } : {},
+    ...needsAction ? {
+      link: {
+        url,
+        labelKey: granted === void 0 ? "rowAction.larkRepair.openCheckLink" : "rowAction.larkRepair.openApplyLink"
+      }
+    } : {},
+    messageKey: granted === void 0 ? "rowAction.larkRepair.unverified" : needsAction ? "rowAction.larkRepair.missing" : "rowAction.larkRepair.allGranted",
+    warnings: [
+      ...needsAction ? [
+        {
+          key: granted === void 0 ? "rowAction.larkRepair.requiredScopes" : "rowAction.larkRepair.missingScopes",
+          params: { scopes: missing.join("\n") }
+        },
+        { key: "rowAction.larkRepair.applyLink", params: { url } },
+        { key: "rowAction.larkRepair.publishHint" }
+      ] : [],
+      { key: "rowAction.larkRepair.botHint" },
+      { key: "rowAction.larkRepair.eventHint", params: SUBSCRIPTIONS }
+    ]
+  });
+};
+
 // src/settingsRowActions.ts
 var ROW_PAYLOAD_SCHEMA = {
   type: "object",
@@ -142857,19 +143632,21 @@ var emitReport = (emit, report, action) => {
     });
     return;
   }
-  const suggested = report.hint !== void 0 && action.keyPrefix === "rowAction.checkConnection";
+  const connectionReasonKey = report.hint === void 0 ? "rowAction.checkConnection.failed" : connectionHintKey(report.hint);
+  const copying = action.keyPrefix === "rowAction.copyDiagnostics";
   emit({
     kind: "failed",
-    reasonKey: suggested && report.hint !== void 0 ? connectionHintKey(report.hint) : `${action.keyPrefix}.failed`,
+    reasonKey: copying ? "rowAction.copyDiagnostics.done" : connectionReasonKey,
     // 参考号由界面写在细节第一行（「参考号：…」），结论句里不带。
     params: {
       ref: report.ref,
-      ...suggested && report.hint !== void 0 ? { hint: report.hint } : {}
+      ...report.hint === void 0 ? {} : { hint: report.hint }
     },
+    ...copying ? { noteKey: connectionReasonKey } : {},
     detail
   });
 };
-var registerSettingsRowActions = (ctx, adapters) => {
+var registerSettingsRowActions = (ctx, adapters, connections) => {
   const resolveBot = (rowId) => botOf(ctx.config, adapters, rowId);
   const registerProbeAction = (action) => {
     ctx.stream({
@@ -142897,6 +143674,26 @@ var registerSettingsRowActions = (ctx, adapters) => {
     keyPrefix: "rowAction.checkConnection",
     copyable: false
   });
+  ctx.stream({
+    name: BOT_ACTION_COMMANDS.reconnect,
+    description: "Restart only this IM bot's connection using its saved settings.",
+    scope: "operate",
+    payloadSchema: ROW_PAYLOAD_SCHEMA,
+    itemSchema: ROW_ACTION_ITEM_SCHEMA,
+    buffer: { latest: 8 },
+    handle: async (payload, emit) => {
+      const rowId = typeof payload["rowId"] === "string" ? payload["rowId"] : "";
+      emit({ kind: "status", statusKey: "rowAction.reconnect.running", params: { rowId } });
+      if (resolveBot(rowId) === void 0) {
+        emit({ kind: "failed", reasonKey: "rowAction.reconnect.notSaved" });
+        return;
+      }
+      const result = connections.reconnect(rowId);
+      emit(
+        result.started ? { kind: "done", fills: {}, messageKey: "rowAction.reconnect.done" } : { kind: "failed", reasonKey: `rowAction.reconnect.${result.reason}` }
+      );
+    }
+  });
   registerProbeAction({
     name: BOT_ACTION_COMMANDS.copyDiagnostics,
     summary: "Probe an IM bot and return a copy-paste diagnostic report.",
@@ -142905,7 +143702,7 @@ var registerSettingsRowActions = (ctx, adapters) => {
   });
   ctx.stream({
     name: BOT_ACTION_COMMANDS.larkRepair,
-    description: "Guide Lark scope repair and verify the saved app can still mint a token.",
+    description: "Check required Lark scopes through the public API and list manual repair steps.",
     scope: "operate",
     payloadSchema: ROW_PAYLOAD_SCHEMA,
     itemSchema: ROW_ACTION_ITEM_SCHEMA,
@@ -142914,15 +143711,6 @@ var registerSettingsRowActions = (ctx, adapters) => {
       const rowId = typeof payload["rowId"] === "string" ? payload["rowId"] : "";
       const send = (item) => emit(item);
       const ref = diagnosticRef("setup");
-      send({
-        kind: "steps",
-        steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
-          { id: "verify", labelKey: "rowAction.larkRepair.step.verify", state: "running" }
-        ]
-      });
       const bot = resolveBot(rowId);
       if (bot === void 0 || bot.platform !== "lark") {
         send({
@@ -142932,46 +143720,20 @@ var registerSettingsRowActions = (ctx, adapters) => {
         });
         return;
       }
-      const report = await probe(adapters, bot);
-      send({
-        kind: "steps",
-        steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
-          {
-            id: "verify",
-            labelKey: "rowAction.larkRepair.step.verify",
-            state: report.ok ? "done" : "failed"
-          }
-        ]
-      });
-      if (report.ok) {
-        send({
-          kind: "done",
-          fills: {},
-          messageKey: "rowAction.larkRepair.done",
-          warnings: [
-            {
-              key: "rowAction.larkRepair.hint",
-              params: { ref, detail: formatDiagnosticCopy(report) }
-            }
-          ]
-        });
-        return;
-      }
-      send({
-        kind: "failed",
-        reasonKey: "rowAction.larkRepair.failed",
-        params: { ref },
-        detail: formatDiagnosticCopy(report)
-      });
+      const lark = adapters.find((adapter) => adapter.platform === "lark");
+      await repairLarkScopes(
+        ctx.http,
+        bot,
+        send,
+        ref,
+        botRedactor(lark?.columns ?? [], bot.values)
+      );
     }
   });
 };
 
 // src/settingsView.ts
-var isRecord3 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+var isRecord4 = (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 var hasStoredSecret = (row, key) => {
   const value2 = row[key];
   return typeof value2 === "string" && value2 !== "";
@@ -142989,10 +143751,10 @@ var targetTable = () => ({
 });
 var targetViews = (config2) => {
   const table2 = config2[DELIVERY_TARGETS_FIELD];
-  if (!isRecord3(table2)) return [];
+  if (!isRecord4(table2)) return [];
   const columns = deliveryTargetColumns();
   return Object.entries(table2).flatMap(([rowId, raw]) => {
-    if (!isRecord3(raw)) return [];
+    if (!isRecord4(raw)) return [];
     const issues = targetIssues(raw);
     const values = Object.fromEntries(
       columns.map((column) => [column.key, readString(raw, column.key)])
@@ -143004,9 +143766,9 @@ var buildSettingsView = (config2, adapters) => {
   const columns = buildBotColumns(adapters);
   const table2 = config2[BOTS_FIELD];
   const bots = [];
-  if (isRecord3(table2)) {
+  if (isRecord4(table2)) {
     for (const [rowId, raw] of Object.entries(table2)) {
-      if (!isRecord3(raw)) continue;
+      if (!isRecord4(raw)) continue;
       const platform = platformOf(raw);
       const values = {};
       const secrets = {};
@@ -143069,10 +143831,10 @@ var applyRowEdit = (config2, { field, columns }, edit) => {
   for (const key of clearSecrets) {
     if (!secretColumns.has(key)) return columnError("not-a-secret", key);
   }
-  const table2 = isRecord3(config2[field]) ? config2[field] : {};
+  const table2 = isRecord4(config2[field]) ? config2[field] : {};
   const requested = edit.rowId;
   const current = requested === void 0 ? {} : Object.hasOwn(table2, requested) ? table2[requested] : void 0;
-  if (!isRecord3(current)) return { ok: false, code: "unknown-row" };
+  if (!isRecord4(current)) return { ok: false, code: "unknown-row" };
   const rowId = requested ?? nextRowId(table2);
   const nextRow = { ...current, ...edit.values };
   const clearing = clearSecrets.filter((key) => !Object.hasOwn(secrets, key));
@@ -143090,7 +143852,7 @@ var applyBotEdit = (config2, adapters, edit) => applyRowEdit(config2, { field: B
 var applyTargetEdit = (config2, edit) => applyRowEdit(config2, targetTable(), edit);
 var removeRow = (config2, field, rowId) => {
   const table2 = config2[field];
-  if (!isRecord3(table2) || !Object.hasOwn(table2, rowId)) return null;
+  if (!isRecord4(table2) || !Object.hasOwn(table2, rowId)) return null;
   const nextTable = { ...table2 };
   delete nextTable[rowId];
   return { ...config2, [field]: nextTable };
@@ -143294,6 +144056,7 @@ var wechatConfigIssues = (bot) => tokenOf2(bot) === "" ? [{ column: "wechatBotTo
 var makeWechatAdapter = (deps) => {
   return {
     platform: "wechat",
+    botIdentity: () => "wechat-stub",
     icon: "wechat",
     // 平台名与设置表的平台选项同一个键，免得默认机器人名与选项写成两种叫法。
     label: deps.translate("platform.wechat"),
@@ -143329,7 +144092,7 @@ var makeWechatAdapter = (deps) => {
 };
 
 // src/wecomUpload.ts
-import * as NodeCrypto5 from "node:crypto";
+import * as NodeCrypto7 from "node:crypto";
 var WECOM_CHUNK_BYTES = 512 * 1024;
 var WECOM_MAX_CHUNKS = 100;
 var WECOM_MIN_UPLOAD_BYTES = 5;
@@ -143362,7 +144125,7 @@ var uploadWecomMedia = async (input) => {
     filename: clampName(input.filename),
     total_size: bytes.byteLength,
     total_chunks: totalChunks,
-    md5: NodeCrypto5.createHash("md5").update(bytes).digest("hex")
+    md5: NodeCrypto7.createHash("md5").update(bytes).digest("hex")
   });
   const uploadId = init.upload_id;
   if (typeof uploadId !== "string" || uploadId === "") {
@@ -143541,6 +144304,26 @@ var parseWecomMessage = (frame, botId) => {
 };
 var splitForWecom = (text4, limit = WECOM_TEXT_MAX_CHARS) => splitMessage(text4, limit);
 var decoder = new TextDecoder();
+var WecomAckError = class extends Error {
+  code;
+  constructor(code2, msg) {
+    super(`WeCom ack failed: ${String(code2)} ${msg}`);
+    this.name = "WecomAckError";
+    this.code = code2;
+  }
+};
+var subscriptionHint = (error) => {
+  if (!(error instanceof WecomAckError)) return void 0;
+  switch (error.code) {
+    case 853e3:
+    case 40058:
+      return "wecomBotCredentials";
+    case 846601:
+      return "wecomLongConnOff";
+    default:
+      return void 0;
+  }
+};
 var runWecomClient = (input) => {
   let sequence = 0;
   const nextRequestId = (kind) => `${kind}_${++sequence}`;
@@ -143571,32 +144354,47 @@ var runWecomClient = (input) => {
     if (typeof frame !== "object" || frame === null) return;
     const requestId = frame.headers?.req_id;
     if (typeof frame.cmd !== "string") {
-      if (typeof requestId !== "string") return;
+      const error = typeof frame.errcode === "number" && frame.errcode !== 0 ? new WecomAckError(frame.errcode, frame.errmsg ?? "") : null;
+      if (typeof requestId !== "string") {
+        if (error !== null) settleAck(subscribeId, error, frame);
+        return;
+      }
       if (requestId.startsWith("ping")) {
         missedPong = 0;
         return;
       }
-      const error = typeof frame.errcode === "number" && frame.errcode !== 0 ? new Error(`WeCom ack failed: ${String(frame.errcode)} ${frame.errmsg ?? ""}`) : null;
       const stream = openStreams.get(requestId);
       if (stream !== void 0 && error !== null) stream.failed = true;
       settleAck(requestId, error, frame);
       return;
     }
+    if (frame.cmd === "aibot_event_callback" && frame.body?.event?.eventtype === "disconnected_event") {
+      finish("taken-over");
+      return;
+    }
     if (frame.cmd !== "aibot_msg_callback") return;
     const message = parseWecomMessage(frame, input.botId);
     if (message !== null) input.handlers.onMessage(message);
   };
-  const finish = (error = new Error("WeCom connection closed"), reason = "disconnected") => {
+  const finish = (reason = "disconnected", error = reason === "taken-over" ? void 0 : new Error("WeCom connection closed")) => {
     if (finished) return;
     finished = true;
-    if (!closed) input.handlers.onConnectionState?.({ state: "failed", error, reason });
+    const hint = reason === "taken-over" ? "wecomTakenOver" : reason === "subscription-failed" ? subscriptionHint(error) : void 0;
+    const failureReason = hint === "wecomBotCredentials" ? "credentials-rejected" : reason;
+    if (!closed)
+      input.handlers.onConnectionState?.({
+        state: "failed",
+        ...error === void 0 ? {} : { error },
+        reason: failureReason,
+        ...hint === void 0 ? {} : { hint }
+      });
     clearInterval(heartbeat);
     openStreams.clear();
     void input.socket.close().catch(() => void 0);
     for (const requestId of pendingAcks.keys()) {
       settleAck(requestId, new Error("WeCom connection closed"));
     }
-    ended.resolve();
+    ended.resolve(failureReason === "subscription-failed" ? "disconnected" : failureReason);
   };
   const readLoop = async () => {
     try {
@@ -143607,7 +144405,7 @@ var runWecomClient = (input) => {
       if (!closed) {
         input.handlers.onError(error instanceof Error ? error.message : String(error));
       }
-      finish(error);
+      finish("disconnected", error);
     }
     finish();
   };
@@ -143615,7 +144413,7 @@ var runWecomClient = (input) => {
     if (finished) return;
     if (missedPong >= MAX_MISSED_PONGS) {
       input.handlers.onError("socket hang up: missed pong");
-      finish(new Error("socket hang up: missed pong"));
+      finish("disconnected", new Error("socket hang up: missed pong"));
       return;
     }
     missedPong += 1;
@@ -143642,7 +144440,7 @@ var runWecomClient = (input) => {
     },
     (error) => {
       if (!closed) input.handlers.onError(error instanceof Error ? error.message : String(error));
-      finish(error, "subscription-failed");
+      finish("subscription-failed", error);
       return false;
     }
   );
@@ -143777,7 +144575,7 @@ var runWecomClient = (input) => {
 };
 
 // src/wecomMedia.ts
-import * as NodeCrypto6 from "node:crypto";
+import * as NodeCrypto8 from "node:crypto";
 
 // src/wecomPadding.ts
 var PADDING_BLOCK = 32;
@@ -143808,7 +144606,7 @@ var decryptWecomMedia = (cipher, aesKey) => {
   if (cipher.byteLength === 0 || cipher.byteLength % AES_BLOCK !== 0) {
     throw new WecomDecryptError("the ciphertext is not a whole number of blocks");
   }
-  const decipher = NodeCrypto6.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
+  const decipher = NodeCrypto8.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
   decipher.setAutoPadding(false);
   const plain = Buffer.concat([decipher.update(cipher), decipher.final()]);
   const unpadded = stripPadding(plain);
@@ -143872,13 +144670,13 @@ var COLUMNS4 = [
   { key: "wecomBotSecret", kind: "password", labelKey: "column.wecomBotSecret.label" }
 ];
 var defaultSleep2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-var credentials2 = (binding) => ({
+var credentials = (binding) => ({
   botId: binding.values["wecomBotId"] ?? "",
   botSecret: binding.values["wecomBotSecret"] ?? "",
   endpoint: normalizeWecomEndpoint(binding.values["wecomEndpoint"] || DEFAULT_WECOM_ENDPOINT)
 });
 var wecomConfigIssues = (binding) => {
-  const { botId, botSecret } = credentials2(binding);
+  const { botId, botSecret } = credentials(binding);
   const issues = [];
   if (botId === "") issues.push({ column: "wecomBotId", code: "required" });
   if (botSecret === "") issues.push({ column: "wecomBotSecret", code: "required" });
@@ -143886,6 +144684,7 @@ var wecomConfigIssues = (binding) => {
 };
 var makeWecomAdapter = (deps) => {
   const clients = /* @__PURE__ */ new Map();
+  const managedConnections = /* @__PURE__ */ new Map();
   const t = deps.translate;
   const liveStreams = /* @__PURE__ */ new Map();
   const rememberStream = (key, entry) => {
@@ -143924,6 +144723,7 @@ ${kept}`;
   };
   return {
     platform: "wecom",
+    botIdentity: (bot) => credentials(bot).botId,
     icon: "wecom",
     label: "WeCom",
     columns: COLUMNS4,
@@ -143931,15 +144731,22 @@ ${kept}`;
     validate: wecomConfigIssues,
     isConfigured: (binding) => wecomConfigIssues(binding).length === 0,
     connect: (binding, handlers) => {
-      const { botId, botSecret, endpoint } = credentials2(binding);
+      const { botId, botSecret, endpoint } = credentials(binding);
+      const managed = { endpoint };
+      managedConnections.set(binding.rowId, managed);
       let stopped = false;
       let current = null;
       const stopSignal = Promise.withResolvers();
+      const onConnectionState = (state) => {
+        if (stopped) return;
+        managed.state = state;
+        handlers.onConnectionState?.(state);
+      };
       const runOnce = async () => {
         const socket = await deps.connectSocket(endpoint);
         if (stopped) {
           await socket.close();
-          return false;
+          return { healthy: false, stopRetrying: false };
         }
         const client = runWecomClient({
           socket: {
@@ -143951,9 +144758,7 @@ ${kept}`;
           botSecret,
           handlers: {
             onError: handlers.onError,
-            onConnectionState: (state) => {
-              if (!stopped) handlers.onConnectionState?.(state);
-            },
+            onConnectionState,
             onMessage: (message) => {
               if (message.chatType !== "single") return;
               client.rememberRequest(message.chatId, message.requestId);
@@ -143983,20 +144788,25 @@ ${kept}`;
           if (ok) deps.log.info("wecom connected", { bot: binding.displayName });
           return ok;
         });
-        await client.ended;
+        const reason = await client.ended;
         if (clients.get(binding.rowId) === client) clients.delete(binding.rowId);
         current = null;
-        return healthy;
+        return {
+          healthy: await healthy,
+          stopRetrying: reason === "taken-over" || reason === "credentials-rejected"
+        };
       };
       const supervise = async () => {
         let backoff = BACKOFF_START_MS2;
         for (; ; ) {
           if (stopped) return;
           try {
-            if (await runOnce()) backoff = BACKOFF_START_MS2;
+            const result = await runOnce();
+            if (result.stopRetrying) return;
+            if (result.healthy) backoff = BACKOFF_START_MS2;
           } catch (error) {
             if (stopped) return;
-            handlers.onConnectionState?.({ state: "failed", error, reason: "disconnected" });
+            onConnectionState({ state: "failed", error, reason: "disconnected" });
             handlers.onError(error instanceof Error ? error.message : String(error));
           }
           if (stopped) return;
@@ -144011,6 +144821,9 @@ ${kept}`;
           stopped = true;
           stopSignal.resolve();
           current?.close();
+          if (managedConnections.get(binding.rowId) === managed) {
+            managedConnections.delete(binding.rowId);
+          }
         }
       };
     },
@@ -144023,12 +144836,33 @@ ${kept}`;
       await client.sendText(binding.chatId, text4);
     },
     checkConnection: async (bot) => {
-      const { botId, botSecret, endpoint } = credentials2(bot);
+      const managed = managedConnections.get(bot.rowId);
+      if (managed !== void 0) {
+        const state = managed.state;
+        const detail = `managed connection, ${managed.endpoint}`;
+        if (state?.state === "connected") {
+          return {
+            stage: "aibot_subscribe",
+            ok: true,
+            detail: `subscription confirmed (${detail})`
+          };
+        }
+        return {
+          stage: "aibot_subscribe",
+          ok: false,
+          detail: state === void 0 ? `connecting (${detail})` : `${state.error === void 0 ? state.reason ?? "connection failed" : describeError(state.error)} (${detail})`,
+          // 还没回报状态只是开连到订阅回执之间：宿主开连 10 秒、订阅回执 10 秒（wecomApi 的 SUBSCRIBE_TIMEOUT_MS）
+          // 都会超时转 failed，所以不会一直停在「还在连接」。
+          ...state === void 0 ? { hint: "connecting" } : state.state === "failed" && state.hint !== void 0 ? { hint: state.hint } : {}
+        };
+      }
+      const { botId, botSecret, endpoint } = credentials(bot);
       if (botId === "" || botSecret === "") {
         return {
           stage: "credentials",
           ok: false,
-          detail: "missing bot id or secret in saved config"
+          detail: "missing bot id or secret in saved config",
+          hint: "wecomBotCredentials"
         };
       }
       let stage = "websocket";
@@ -144036,6 +144870,7 @@ ${kept}`;
         const socket = await deps.connectSocket(endpoint);
         stage = "aibot_subscribe";
         let detail = "WeCom connection closed before subscribe ack";
+        let hint;
         let closing;
         const client = runWecomClient({
           socket: {
@@ -144047,6 +144882,9 @@ ${kept}`;
           botSecret,
           handlers: {
             onMessage: () => void 0,
+            onConnectionState: (state) => {
+              if (state.state === "failed") hint = state.hint;
+            },
             onError: (error) => {
               detail = error;
             }
@@ -144054,7 +144892,12 @@ ${kept}`;
         });
         try {
           const ok = await client.ready;
-          return { stage, ok, detail: ok ? `subscription confirmed (${endpoint})` : detail };
+          return {
+            stage,
+            ok,
+            detail: ok ? `subscription confirmed (${endpoint})` : detail,
+            ...!ok && hint !== void 0 ? { hint } : {}
+          };
         } finally {
           client.close();
           await closing;
@@ -144406,7 +145249,7 @@ import * as NodeHttp2 from "node:http";
 import * as NodeNet from "node:net";
 
 // src/wecomAppCrypto.ts
-import * as NodeCrypto7 from "node:crypto";
+import * as NodeCrypto9 from "node:crypto";
 var AES_KEY_BYTES = 32;
 var RANDOM_BYTES = 16;
 var WecomAppCryptoError = class extends Error {
@@ -144429,13 +145272,13 @@ var timingSafeEqualString2 = (a, b) => {
   const left = Buffer.from(a);
   const right = Buffer.from(b);
   if (left.length === 0 || left.length !== right.length) return false;
-  return NodeCrypto7.timingSafeEqual(left, right);
+  return NodeCrypto9.timingSafeEqual(left, right);
 };
-var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto7.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
+var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto9.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
 var verifySignature = (token, timestamp, nonce, encrypt, signature) => timingSafeEqualString2(computeSignature(token, timestamp, nonce, encrypt), signature);
 var decrypt = (encodingAESKey, encryptText, expectReceiveId) => {
   const { key, iv } = parseEncodingAESKey(encodingAESKey);
-  const decipher = NodeCrypto7.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = NodeCrypto9.createDecipheriv("aes-256-cbc", key, iv);
   decipher.setAutoPadding(false);
   let deciphered;
   try {
@@ -144494,10 +145337,10 @@ var createWecomAppCrypto = (input) => {
     decrypt: (encryptText) => decrypt(encodingAESKey, encryptText, corpId).message
   };
 };
-var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto7.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
+var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto9.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
 
 // src/wecomAppParse.ts
-var isRecord4 = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
+var isRecord5 = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
 var isXmlFormat = (raw) => {
   const trimmed = raw.trim();
   return trimmed.startsWith("<") && trimmed.endsWith(">");
@@ -144531,7 +145374,6 @@ var parseWecomAppPlainMessage = (raw) => {
       text: xml["Content"] !== void 0 ? { content: xml["Content"] } : void 0,
       image: xml["PicUrl"] ? { url: xml["PicUrl"] } : void 0,
       mediaId: xml["MediaId"] ?? xml["mediaid"],
-      recognition: xml["Recognition"],
       event: (xml["Event"] ?? xml["event"] ?? "").toLowerCase() || void 0,
       eventKey: xml["EventKey"],
       chatid: xml["ChatId"]
@@ -144543,7 +145385,7 @@ var parseWecomAppPlainMessage = (raw) => {
   } catch {
     return null;
   }
-  if (!isRecord4(data)) return null;
+  if (!isRecord5(data)) return null;
   const fromRaw = data["from"];
   const textRaw = data["text"];
   const imageRaw = data["image"];
@@ -144552,12 +145394,11 @@ var parseWecomAppPlainMessage = (raw) => {
     msgtype: String(data["msgtype"] ?? data["MsgType"] ?? "").toLowerCase(),
     createTime: data["createTime"] !== void 0 ? String(data["createTime"]) : data["CreateTime"] !== void 0 ? String(data["CreateTime"]) : void 0,
     agentId: data["agentid"] !== void 0 ? String(data["agentid"]) : data["AgentID"] !== void 0 ? String(data["AgentID"]) : void 0,
-    from: isRecord4(fromRaw) ? { userid: typeof fromRaw["userid"] === "string" ? fromRaw["userid"] : void 0 } : typeof data["FromUserName"] === "string" ? { userid: data["FromUserName"] } : void 0,
+    from: isRecord5(fromRaw) ? { userid: typeof fromRaw["userid"] === "string" ? fromRaw["userid"] : void 0 } : typeof data["FromUserName"] === "string" ? { userid: data["FromUserName"] } : void 0,
     to: typeof data["to"] === "string" ? data["to"] : void 0,
-    text: isRecord4(textRaw) ? { content: typeof textRaw["content"] === "string" ? textRaw["content"] : void 0 } : void 0,
-    image: isRecord4(imageRaw) ? { url: typeof imageRaw["url"] === "string" ? imageRaw["url"] : void 0 } : void 0,
+    text: isRecord5(textRaw) ? { content: typeof textRaw["content"] === "string" ? textRaw["content"] : void 0 } : void 0,
+    image: isRecord5(imageRaw) ? { url: typeof imageRaw["url"] === "string" ? imageRaw["url"] : void 0 } : void 0,
     mediaId: typeof data["mediaid"] === "string" ? data["mediaid"] : void 0,
-    recognition: typeof data["recognition"] === "string" ? data["recognition"] : void 0,
     event: String(data["event"] ?? data["eventtype"] ?? "").toLowerCase() || void 0,
     eventKey: typeof data["eventkey"] === "string" ? data["eventkey"] : void 0,
     chatid: typeof data["chatid"] === "string" ? data["chatid"] : void 0
@@ -144621,13 +145462,16 @@ var startWecomAppCallbackServer = async (options) => {
     }
     try {
       if (!crypto2.verifySignature(signature, timestamp, nonce, echostr)) {
+        route.onVerification?.(false);
         writeText(res, 401, "unauthorized");
         return;
       }
       const plaintext = crypto2.decrypt(echostr);
+      route.onVerification?.(true);
       route.log?.info("wecom-app URL verification succeeded", { bot: route.botRowId });
       writeText(res, 200, plaintext);
     } catch (error) {
+      route.onVerification?.(false);
       route.log?.warn("wecom-app URL verification failed", {
         bot: route.botRowId,
         error: error instanceof Error ? error.message : String(error)
@@ -144689,11 +145533,13 @@ var startWecomAppCallbackServer = async (options) => {
     let plaintext;
     try {
       if (!crypto2.verifySignature(signature, timestamp, nonce, encrypt)) {
+        route.onVerification?.(false);
         writeText(res, 401, "unauthorized");
         return;
       }
       plaintext = crypto2.decrypt(encrypt);
     } catch (error) {
+      route.onVerification?.(false);
       route.log?.warn("wecom-app callback signature or decrypt failed", {
         bot: route.botRowId,
         error: error instanceof Error ? error.message : String(error)
@@ -144701,6 +145547,7 @@ var startWecomAppCallbackServer = async (options) => {
       writeText(res, 401, "unauthorized");
       return;
     }
+    route.onVerification?.(true);
     const message = parseWecomAppPlainMessage(plaintext);
     if (message === null) {
       writeText(res, 400, "invalid message");
@@ -144879,11 +145726,11 @@ var validateWecomAppBot = (bot) => {
 };
 var readWecomAppConnectConfig = (bot) => {
   const issues = validateWecomAppBot(bot);
-  const credentials3 = wecomAppCredentials(bot);
-  const listenPort = parseListenPort(credentials3.listenPortRaw);
-  const listenHost = parseListenHost(credentials3.listenHostRaw);
+  const credentials2 = wecomAppCredentials(bot);
+  const listenPort = parseListenPort(credentials2.listenPortRaw);
+  const listenHost = parseListenHost(credentials2.listenHostRaw);
   if (issues.length > 0 || listenPort === null || listenHost === null) return { ok: false, issues };
-  return { ok: true, credentials: credentials3, listenHost, listenPort };
+  return { ok: true, credentials: credentials2, listenHost, listenPort };
 };
 
 // src/wecomAppAdapter.ts
@@ -144943,6 +145790,7 @@ var WECOM_APP_MIN_BYTES = 5;
 var WECOM_APP_IMAGE_TYPES = /* @__PURE__ */ new Set(["image/jpeg", "image/png"]);
 var CREDENTIAL_ERROR_CODES = /* @__PURE__ */ new Set(["40001", "40013", "40014", "40056", "42001", "60020"]);
 var joinCallbackUrl = (baseOrOrigin, path) => `${baseOrOrigin}${path}`;
+var callbackHealthKey = (rowId, c) => JSON.stringify([rowId, c.corpId, c.token, c.encodingAESKey]);
 var wecomAppPublicFields = (bot) => {
   const c = wecomAppCredentials(bot);
   if (c.token === "" || c.encodingAESKey === "") {
@@ -144979,6 +145827,7 @@ var makeWecomAppAdapter = (deps) => {
     fetch: deps.fetch
   });
   const callbackHub = makeWecomAppCallbackHub();
+  const callbackHealth = /* @__PURE__ */ new Map();
   const connectionFor = (binding) => {
     const api = apis.get(binding.rowId);
     if (api === void 0) {
@@ -145008,7 +145857,6 @@ var makeWecomAppAdapter = (deps) => {
     });
   };
   const toInbound = (message, handlers, botName) => {
-    if (message.msgtype === "event") return;
     if (message.chatid !== void 0 && message.chatid !== "") {
       deps.log.info("wecom-app ignored a group message; only direct messages are supported", {
         bot: botName
@@ -145017,6 +145865,12 @@ var makeWecomAppAdapter = (deps) => {
     }
     const chatId = message.from?.userid ?? "";
     if (chatId === "") return;
+    if (message.msgtype === "event") {
+      if (message.event === "subscribe" || message.event === "enter_agent") {
+        handlers.onGreeting?.(chatId, chatId);
+      }
+      return;
+    }
     const messageId = message.msgid ?? `${chatId}:${message.createTime ?? Date.now()}`;
     const base2 = { messageId, chatId, senderId: chatId };
     if (message.msgtype === "text") {
@@ -145042,6 +145896,10 @@ var makeWecomAppAdapter = (deps) => {
   };
   return {
     platform: "wecom-app",
+    botIdentity: (bot) => {
+      const { corpId, agentId } = wecomAppCredentials(bot);
+      return JSON.stringify([corpId, agentId]);
+    },
     icon: "wecom",
     label: deps.translate("platform.wecom-app"),
     columns: COLUMNS5,
@@ -145067,8 +145925,7 @@ var makeWecomAppAdapter = (deps) => {
       };
     },
     /**
-     * 自建应用是回调式渠道：入站由企微推到我们的 listener，没有可探的长连接；能探的是出站
-     * 凭据——和真实发送同一条路，向 gettoken 换一次 access_token。
+     * 出站凭据走真实发送的 gettoken；入站只能报告本次运行已观察到的回调。
      */
     checkConnection: async (bot) => {
       const outbound = validateWecomAppBot(bot).filter(
@@ -145089,11 +145946,21 @@ var makeWecomAppAdapter = (deps) => {
         };
       }
       try {
-        await newApi(wecomAppCredentials(bot)).getAccessToken();
+        const credentials2 = wecomAppCredentials(bot);
+        await newApi(credentials2).getAccessToken();
+        const health = callbackHealth.get(callbackHealthKey(bot.rowId, credentials2));
+        if (health?.lastReceivedAt === void 0) {
+          return {
+            stage: "callback",
+            ok: false,
+            hint: health?.lastRejectedAt === void 0 ? "wecomCallbackNotSeen" : "wecomCallbackSignature",
+            detail: health?.lastRejectedAt === void 0 ? "access_token ok; no verified callback since this startup" : `access_token ok; last callback signature or decryption failure since this startup: ${health.lastRejectedAt}`
+          };
+        }
         return {
-          stage: "gettoken",
+          stage: "callback",
           ok: true,
-          detail: "access_token ok (callback reachability is not probed)"
+          detail: `access_token ok; last verified callback since this startup: ${health.lastReceivedAt}`
         };
       } catch (error) {
         return {
@@ -145131,7 +145998,14 @@ var makeWecomAppAdapter = (deps) => {
           encodingAESKey: c.encodingAESKey,
           corpId: c.corpId,
           log: deps.log,
-          onInbound: (message) => toInbound(message, handlers, bot.displayName)
+          onInbound: (message) => toInbound(message, handlers, bot.displayName),
+          onVerification: (verified) => {
+            const key = callbackHealthKey(bot.rowId, c);
+            callbackHealth.set(key, {
+              ...callbackHealth.get(key),
+              ...verified ? { lastReceivedAt: (/* @__PURE__ */ new Date()).toISOString() } : { lastRejectedAt: (/* @__PURE__ */ new Date()).toISOString() }
+            });
+          }
         });
       } catch (error) {
         apis.delete(bot.rowId);
@@ -145221,10 +146095,18 @@ var makeWecomAppAdapter = (deps) => {
 };
 
 // src/index.ts
-var imPlugin = definePlugin({
+var definition = {
   id: "im",
-  apiVersion: 18,
-  activate: async (ctx) => {
+  apiVersion: 20,
+  // 第二个参数只给插件自己的测试夹具：换掉文件 IO 与派发重试的等待。宿主只传 ctx。
+  activate: async (ctx, testing = {}) => {
+    const { dispatchSleep } = testing;
+    const inboundState = makeInboundStore({
+      dataDir: ctx.paths.dataDir,
+      log: ctx.log,
+      io: testing.inboundIo
+    });
+    ctx.onDispose(inboundState.flush);
     const { t, setLanguage } = makeLiveTranslate(
       parseReplyLanguage(ctx.config[REPLY_LANGUAGE_FIELD])
     );
@@ -145246,6 +146128,8 @@ var imPlugin = definePlugin({
         // Telegram 在不少网络里要绕代理，而绕不绕、绕哪个是按行配的 —— 这是插件面上
         // `ctx.proxies` 的第一个真实消费者。
         fetchVia: (proxy) => ctx.proxies.fetch(proxy),
+        readCursor: inboundState.readCursor,
+        saveCursor: inboundState.saveCursor,
         translate: t,
         log: {
           info: (message, fields) => ctx.log.info(message, fields),
@@ -145283,13 +146167,13 @@ var imPlugin = definePlugin({
     ctx.settingsCard(buildSettingsCard(adapters));
     const updateSettings = makeSettingsUpdater(ctx.settings);
     registerLarkSetup(ctx, { updateSettings });
-    registerSettingsRowActions(ctx, adapters);
     const core = makeImCore({
       host: {
         log: ctx.log,
         projections: ctx.projections,
         projects: ctx.projects,
         threads: ctx.threads,
+        commands: ctx.commands,
         approvals: ctx.approvals,
         plugins: ctx.plugins,
         attachments: ctx.attachments,
@@ -145302,7 +146186,8 @@ var imPlugin = definePlugin({
       config: () => ctx.config,
       derivedState: ctx.derivedState,
       t,
-      adapters
+      adapters,
+      inboundReady: inboundState.ready
     });
     const acknowledgements = makeAcknowledgements(core);
     const failures = makeFailureNotices(core);
@@ -145338,7 +146223,9 @@ var imPlugin = definePlugin({
       queueFlow: interactions.queueFlow,
       rememberThreadProject: notifications.rememberThreadProject,
       noteInboundUserMessage: webSync.noteInboundUserMessage,
-      anchors: replyAnchors
+      anchors: replyAnchors,
+      failures,
+      dispatchSleep
     });
     const sessions = makeSessions(core);
     const modelPlan = makeModelPlan(core, turns);
@@ -145353,6 +146240,7 @@ var imPlugin = definePlugin({
     });
     const chatSetup = makeChatSetup(core, {
       rows: projectRows,
+      resumeMessage: (bot, message) => inbound.resumeMessage(bot, message),
       openPicker: (chatKey, rows, reply) => panelWiring.panel.openProjects(chatKey, rows, reply)
     });
     const commands = makeCommands(core, {
@@ -145365,10 +146253,10 @@ var imPlugin = definePlugin({
       openPanel: (chatKey, reply) => panelWiring.panel.open(chatKey, reply)
     });
     const inbound = makeInbound(core, {
+      inboundState,
       enqueueForChat: chatQueue.enqueueForChat,
       commands,
       chatSetup,
-      rows: projectRows,
       interactions,
       approvals,
       panelWiring,
@@ -145394,6 +146282,7 @@ var imPlugin = definePlugin({
       ]
     });
     const connections = startConnections(core, inbound.inboundHandlersFor);
+    registerSettingsRowActions(ctx, adapters, connections);
     registerSettingsCommands(ctx, adapters, updateSettings, connections);
     const { bots, connecting } = connections.reconcile();
     const deliveryHttp = makeDeliveryHttp({
@@ -145412,8 +146301,11 @@ var imPlugin = definePlugin({
     }
     ctx.log.info("chat plugin active", { bots, connecting });
   }
-});
+};
+var activateImPlugin = definition.activate;
+var imPlugin = definePlugin(definition);
 var index_default = imPlugin;
 export {
+  activateImPlugin,
   index_default as default
 };