@ycodium-ai/plugin-im 0.2.3208 → 0.2.3210

package/dist/index.js

@@ -23360,7 +23360,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash7 } = __require("crypto");
+    var { randomBytes, createHash: createHash8 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -24028,7 +24028,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash7("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -24397,7 +24397,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash7 } = __require("crypto");
+    var { createHash: createHash8 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -24704,7 +24704,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash7("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -125575,14 +125575,14 @@ ${lines.join("\n")}
         const senderOpenId = event.sender.sender_id.open_id;
         const senderFallbackId = (_d = (_c = event.sender.sender_id.user_id) !== null && _c !== void 0 ? _c : event.sender.sender_id.union_id) !== null && _d !== void 0 ? _d : "";
         const senderId = senderOpenId !== null && senderOpenId !== void 0 ? senderOpenId : senderFallbackId;
-        const senderName = senderOpenId ? (_e = opts.resolveSenderName) === null || _e === void 0 ? void 0 : _e.call(opts, senderOpenId) : void 0;
+        const senderName2 = senderOpenId ? (_e = opts.resolveSenderName) === null || _e === void 0 ? void 0 : _e.call(opts, senderOpenId) : void 0;
         const createMs = msg.create_time ? parseInt(msg.create_time, 10) : 0;
         return {
           messageId: msg.message_id,
           chatId: msg.chat_id,
           chatType: msg.chat_type,
           senderId,
-          senderName,
+          senderName: senderName2,
           content,
           rawContentType: msg.message_type,
           resources,
@@ -126850,6 +126850,7 @@ var SETTINGS_REMOVE_TARGET_COMMAND = "settings.removeTarget";
 var LARK_SETUP_SESSION_COMMAND = "larkSetup.session";
 var BOT_ACTION_COMMANDS = {
   checkConnection: "im.settings.checkConnection",
+  reconnect: "im.settings.reconnect",
   copyDiagnostics: "im.settings.copyDiagnostics",
   larkRepair: "im.settings.larkRepair"
 };
@@ -127474,6 +127475,14 @@ var pickProject = (arg, listed, rows) => {
   return prefixed.length === 1 ? prefixed[0]?.projectId ?? null : null;
 };
 
+// src/messageIdentityFormat.ts
+var IDENTITY_VERSION = "im1";
+var identityPrefix = (operation) => `${IDENTITY_VERSION}-${operation}-`;
+var identityDigest = (id, operation) => {
+  const prefix = identityPrefix(operation);
+  return id.startsWith(prefix) ? id.slice(prefix.length) : void 0;
+};
+
 // src/sessionList.ts
 var SESSION_LIST_MAX = 20;
 var isSessionRunning = (status) => status === "running";
@@ -127488,7 +127497,10 @@ var ageLabel = (updatedAt, now, t) => {
   if (hours < 24) return t("sessions.age.hours", { count: hours });
   return t("sessions.age.days", { count: Math.floor(hours / 24) });
 };
-var shortId = (threadId) => threadId.slice(0, SESSION_ID_SHORT_LENGTH);
+var shortId = (threadId) => threadId.slice(
+  0,
+  (identityDigest(threadId, "thread") === void 0 ? 0 : identityPrefix("thread").length) + SESSION_ID_SHORT_LENGTH
+);
 var sessionLine = (row, position, now, t) => {
   const title = row.title.replace(/\s+/g, " ").trim() || t("sessions.untitled");
   const age = ageLabel(row.updatedAt, now, t);
@@ -128130,30 +128142,36 @@ var startConnections = (core, inboundHandlersFor) => {
       }
     };
   };
-  const reconcile = () => {
+  const plan = () => {
     const bots = disposed ? [] : core.bots();
     const wanted = /* @__PURE__ */ new Map();
-    const credentials3 = /* @__PURE__ */ new Map();
+    const credentials2 = /* @__PURE__ */ new Map();
     const duplicates = /* @__PURE__ */ new Map();
     for (const bot of bots) {
       const adapter = adapterFor(bot.platform);
       if (adapter === void 0) continue;
       const fingerprint = `${bot.platform}:${adapter.columns.map((column) => bot.values[column.key] ?? "").join(" ")}`;
-      const duplicateOf = credentials3.get(fingerprint);
+      const duplicateOf = credentials2.get(fingerprint);
       if (duplicateOf !== void 0) {
         duplicates.set(bot.rowId, duplicateOf);
-        if (statuses.get(bot.rowId)?.duplicateOf !== duplicateOf) {
-          record3(bot.rowId, { state: "duplicate", duplicateOf });
-        }
-        host.log.warn("chat did not connect a bot that repeats another bot's credentials", {
-          bot: bot.displayName,
-          platform: bot.platform
-        });
         continue;
       }
-      credentials3.set(fingerprint, bot.rowId);
+      credentials2.set(fingerprint, bot.rowId);
       wanted.set(bot.rowId, { bot, key: connectionKey(adapter, bot) });
     }
+    return { bots, wanted, duplicates };
+  };
+  const reconcile = () => {
+    const { bots, wanted, duplicates } = plan();
+    for (const bot of bots) {
+      const duplicateOf = duplicates.get(bot.rowId);
+      if (duplicateOf === void 0) continue;
+      record3(bot.rowId, { state: "duplicate", duplicateOf });
+      host.log.warn("chat did not connect a bot that repeats another bot's credentials", {
+        bot: bot.displayName,
+        platform: bot.platform
+      });
+    }
     for (const [rowId, connection] of live) {
       if (wanted.get(rowId)?.key === connection.key) continue;
       connection.close();
@@ -128174,6 +128192,23 @@ var startConnections = (core, inboundHandlersFor) => {
   });
   return {
     reconcile,
+    reconnect: (rowId) => {
+      live.get(rowId)?.close();
+      live.delete(rowId);
+      const { wanted, duplicates } = plan();
+      const duplicateOf = duplicates.get(rowId);
+      if (duplicateOf !== void 0) {
+        record3(rowId, { state: "duplicate", duplicateOf });
+        return { started: false, reason: "duplicate" };
+      }
+      const target2 = wanted.get(rowId);
+      if (target2 === void 0) {
+        remove(rowId);
+        return { started: false, reason: disposed ? "inactive" : "notConfigured" };
+      }
+      live.set(rowId, open(target2.bot, target2.key));
+      return { started: true };
+    },
     subscribe: (listener) => {
       if (!disposed) listeners.add(listener);
       listener(Object.fromEntries(statuses));
@@ -128982,6 +129017,25 @@ var makeInboundAttachments = (core) => {
 
 // src/inbound.ts
 import { projectOrNull } from "@ycodium-ai/plugin-api";
+
+// src/greetings.ts
+var GREETING_COOLDOWN_MS = 12 * 60 * 6e4;
+var GREETING_KEY_LIMIT = 1e3;
+var makeGreetings = (core, enqueueForChat, now) => {
+  const cooldown = makeCooldown(GREETING_COOLDOWN_MS, now, GREETING_KEY_LIMIT);
+  return (rowId, chatId, senderId) => {
+    const bot = core.bots().find((candidate) => candidate.rowId === rowId);
+    if (bot === void 0 || !isAllowedSender(bot, senderId)) return;
+    if (!cooldown.tryAcquire(`${rowId}:${senderId}`)) return;
+    enqueueForChat(chatKeyOf({ rowId, chatId }), async () => {
+      const current = core.bots().find((candidate) => candidate.rowId === rowId);
+      if (current === void 0 || !isAllowedSender(current, senderId)) return;
+      await core.deliver(core.bindingOf(current, chatId), core.t("reply.welcome"));
+    });
+  };
+};
+
+// src/inbound.ts
 var ARCHIVED_REPLY_COOLDOWN_MS = 10 * 6e4;
 var UNSUPPORTED_REPLY_COOLDOWN_MS = 6e4;
 var NOT_ALLOWED_REPLY_COOLDOWN_MS = 10 * 6e4;
@@ -128989,6 +129043,8 @@ var NOT_ALLOWED_REPLY_KEY_LIMIT = 1e3;
 var makeInbound = (core, deps) => {
   const { host, t, adapterFor, commit, deliver, bindingOf: bindingOf2, bots } = core;
   const { enqueueForChat } = deps;
+  const now = deps.now ?? (() => Date.now());
+  const greet = makeGreetings(core, enqueueForChat, now);
   const { handleCommand, targetOf } = deps.commands;
   const { prepareMessage } = deps.chatSetup;
   const { questionFlow, handleButtonClick } = deps.interactions;
@@ -128997,11 +129053,11 @@ var makeInbound = (core, deps) => {
   const { startTurn, receiveAttachmentsOnly, hasWaitingAttachments } = deps.turns;
   const { startTeamGoal } = deps.teams;
   const { markWorking } = deps.acknowledgements;
-  const archivedReplyCooldown = makeCooldown(ARCHIVED_REPLY_COOLDOWN_MS, () => Date.now());
-  const unsupportedReplyCooldown = makeCooldown(UNSUPPORTED_REPLY_COOLDOWN_MS, () => Date.now());
+  const archivedReplyCooldown = makeCooldown(ARCHIVED_REPLY_COOLDOWN_MS, now);
+  const unsupportedReplyCooldown = makeCooldown(UNSUPPORTED_REPLY_COOLDOWN_MS, now);
   const notAllowedReplyCooldown = makeCooldown(
     NOT_ALLOWED_REPLY_COOLDOWN_MS,
-    () => Date.now(),
+    now,
     NOT_ALLOWED_REPLY_KEY_LIMIT
   );
   const { inboundState } = deps;
@@ -129037,6 +129093,7 @@ var makeInbound = (core, deps) => {
     commit("chat-aliased", { rowId: bot.rowId, alias, chatId });
   };
   const settleChat = (bot, message) => {
+    message = { ...message, originalChatId: message.originalChatId ?? message.chatId };
     if (message.chatAlias === void 0) return message;
     const known = chatAliasOf(core.state, bot.rowId, message.chatAlias);
     if (known === void 0) noteChatAlias(bot, message.chatAlias, message.chatId);
@@ -129118,6 +129175,7 @@ var makeInbound = (core, deps) => {
     },
     noteChatAlias: (alias, chatId) => noteChatAlias(bot, alias, chatId),
     knowsChatAlias: (alias) => chatAliasOf(core.state, bot.rowId, alias) !== void 0,
+    onGreeting: (chatId, senderId) => greet(bot.rowId, chatId, senderId),
     onMessage: (received) => {
       const current = currentBot(bot.rowId);
       if (current === void 0) return;
@@ -129137,7 +129195,7 @@ var makeInbound = (core, deps) => {
           if (!unsupportedReplyCooldown.tryAcquire(chatKeyOf(arrived))) return;
           await deliver(
             arrived,
-            unsupported === "folder" ? t("reply.unsupportedFolder") : t("reply.unsupportedType", { type: unsupported })
+            unsupported === "folder" ? t("reply.unsupportedFolder") : unsupported === "voice" ? t("reply.unsupportedVoice") : t("reply.unsupportedType", { type: unsupported })
           );
         });
         return;
@@ -130038,6 +130096,8 @@ var consolePath = {
 var APP_EVENTS = ["im.message.receive_v1"];
 var CARD_CALLBACKS = ["card.action.trigger"];
 var SCOPES = [
+  // 让「补全权限」查询应用自身已开通的权限，并列出缺项。
+  "application:application:self_manage",
   // 收发消息、改卡片、读消息。
   "im:message",
   // 群里 @ 机器人的消息（入站的主路径）。
@@ -130062,7 +130122,7 @@ var SCOPES = [
   // 「在弄了」表情回执（`larkApi.ts` 的 `addReaction`）。unconfirmed
   "im:message.reactions:write_only"
 ];
-var isTenantScope = (name) => name.startsWith("im:");
+var isTenantScope = (name) => name.startsWith("im:") || name === "application:application:self_manage";
 var appMarker = (environmentId) => `[ycodium:${environmentId.slice(0, 8)}]`;
 var DEFAULT_APP_NAME = "Ycodium Agent";
 var DEFAULT_APP_DESCRIPTION = "Ycodium chat bot";
@@ -130113,6 +130173,16 @@ var makeFlowItemSchema = (shape) => ({
     },
     fills: shape.fills,
     messageKey: { type: "string" },
+    tone: { type: "string", enum: ["caution"] },
+    link: {
+      type: "object",
+      additionalProperties: false,
+      required: ["url", "labelKey"],
+      properties: {
+        url: { type: "string", pattern: "^https://" },
+        labelKey: { type: "string" }
+      }
+    },
     warnings: {
       type: "array",
       items: {
@@ -130126,6 +130196,7 @@ var makeFlowItemSchema = (shape) => ({
       }
     },
     reasonKey: { type: "string" },
+    noteKey: { type: "string" },
     detail: { type: "string" }
   },
   oneOf: [
@@ -131769,8 +131840,8 @@ var resourceOf = (element, index) => {
   }
   return null;
 };
-var placeholderOf = (element, index) => `<${mediaOf(element)} ${String(index)}>`;
-var serializeElement = (element, index, botIds) => {
+var placeholderOf = (resource, index) => `<${resource.media} ${String(index)}>`;
+var serializeElement = (element, resourceText, botIds) => {
   switch (element.tag) {
     case "text":
       return styledText(element.text ?? "", element.style);
@@ -131793,12 +131864,12 @@ ${element.text ?? ""}
     case "img":
     case "media":
     case "file":
-      return index === null ? "" : placeholderOf(element, index);
+      return resourceText ?? "";
     default:
       return "";
   }
 };
-var serializePost = (content, botIds = /* @__PURE__ */ new Set()) => {
+var serializePost = (content, botIds = /* @__PURE__ */ new Set(), renderResource = placeholderOf) => {
   let parsed;
   try {
     parsed = JSON.parse(content);
@@ -131807,31 +131878,31 @@ var serializePost = (content, botIds = /* @__PURE__ */ new Set()) => {
   }
   const elements = (parsed.content ?? []).flat();
   const resources = [];
-  const indexOf = /* @__PURE__ */ new Map();
+  const resourceTextOf = /* @__PURE__ */ new Map();
   for (const element of elements) {
     const resource = resourceOf(element, resources.length + 1);
     if (resource === null) continue;
     resources.push(resource);
-    indexOf.set(element, resources.length);
+    resourceTextOf.set(element, renderResource(resource, resources.length));
   }
   const md2 = parsed.md;
   if (typeof md2 === "string" && md2.trim() !== "") {
-    const placeholderByKey = /* @__PURE__ */ new Map();
+    const resourceTextByKey = /* @__PURE__ */ new Map();
     for (const element of elements) {
-      const index = indexOf.get(element);
+      const resourceText = resourceTextOf.get(element);
       const key = element.tag === "img" ? element.image_key : element.file_key;
-      if (index !== void 0 && nonEmpty4(key)) {
-        placeholderByKey.set(key, placeholderOf(element, index));
+      if (resourceText !== void 0 && nonEmpty4(key)) {
+        resourceTextByKey.set(key, resourceText);
       }
     }
     const text5 = md2.replace(
       /!\[(?:img|video|file)\]\(([^)]+)\)/g,
-      (whole, rawKey) => placeholderByKey.get(rawKey.trim()) ?? whole
+      (whole, rawKey) => resourceTextByKey.get(rawKey.trim()) ?? whole
     );
     return { text: text5, resources };
   }
   const paragraphs = (parsed.content ?? []).map(
-    (row) => row.map((element) => serializeElement(element, indexOf.get(element) ?? null, botIds)).join("")
+    (row) => row.map((element) => serializeElement(element, resourceTextOf.get(element), botIds)).join("")
   );
   const text4 = paragraphs.map((line) => line.trim()).filter((line) => line !== "").join("\n");
   if (text4 === "" && resources.length === 0) return void 0;
@@ -131972,6 +132043,7 @@ var LARK_TEXT_MAX_CHARS = 3500;
 var LarkApiError = class extends Error {
   operation;
   code;
+  msg;
   status;
   retryAfterMs;
   constructor(operation, code2, message, http = {}) {
@@ -131979,11 +132051,13 @@ var LarkApiError = class extends Error {
     this.name = "LarkApiError";
     this.operation = operation;
     this.code = code2;
+    this.msg = message;
     this.status = http.status;
     this.retryAfterMs = http.retryAfterMs;
   }
 };
-var isLarkPermissionError = (error) => error instanceof LarkApiError && (error.code === 99991672 || error.code === 99991679 || error.status === 401 || error.status === 403);
+var isLarkPermissionCode = (code2) => code2 === 99991672 || code2 === 99991679;
+var isLarkPermissionError = (error) => error instanceof LarkApiError && (isLarkPermissionCode(error.code) || error.status === 401 || error.status === 403);
 var LARK_RATE_LIMITED = 99991400;
 var isReplyRejected = (error) => error instanceof LarkApiError && error.status === void 0 && error.code !== LARK_RATE_LIMITED;
 var larkSendVerdict = (error) => {
@@ -131998,14 +132072,20 @@ var larkSendVerdict = (error) => {
 };
 var readEnvelope = async (operation, response) => {
   if (!response.ok) {
-    await response.body?.cancel().catch(() => void 0);
-    throw new LarkApiError(operation, void 0, `HTTP ${String(response.status)}`, {
-      status: response.status,
-      retryAfterMs: parseRetryAfterMs(
-        response.headers.get("retry-after") ?? response.headers.get("x-ogw-ratelimit-reset"),
-        Date.now()
-      ) ?? void 0
-    });
+    const body2 = await response.json().catch(() => void 0);
+    const envelope2 = typeof body2 === "object" && body2 !== null ? body2 : void 0;
+    throw new LarkApiError(
+      operation,
+      typeof envelope2?.code === "number" ? envelope2.code : void 0,
+      typeof envelope2?.msg === "string" ? envelope2.msg : `HTTP ${String(response.status)}`,
+      {
+        status: response.status,
+        retryAfterMs: parseRetryAfterMs(
+          response.headers.get("retry-after") ?? response.headers.get("x-ogw-ratelimit-reset"),
+          Date.now()
+        ) ?? void 0
+      }
+    );
   }
   const body = await response.json();
   const envelope = body;
@@ -132026,6 +132106,19 @@ var fetchTenantToken = async (input) => {
   }
   return { token: body.tenant_access_token, expiresInSeconds: body.expire ?? 0 };
 };
+var fetchAppTenantScopes = async (input) => {
+  const response = await input.http(`${LARK_BASE}/application/v6/applications/me?lang=zh_cn`, {
+    headers: { authorization: `Bearer ${input.token}` }
+  });
+  const body = await readEnvelope("applications/me", response);
+  const scopes = body.data?.app?.scopes;
+  if (!Array.isArray(scopes)) return void 0;
+  if (scopes.some(
+    (entry) => entry === null || typeof entry !== "object" || typeof entry.scope !== "string" || !Array.isArray(entry.token_types)
+  ))
+    return void 0;
+  return scopes.filter((entry) => entry.token_types.includes("tenant")).map((entry) => entry.scope);
+};
 var postMessage = async (input) => {
   const headers = {
     authorization: `Bearer ${input.token}`,
@@ -132063,16 +132156,31 @@ var postMessage = async (input) => {
   });
   return sent?.message_id ?? null;
 };
-var readMessage = async (input) => {
+var readMessageItems = async (input) => {
   const response = await input.http(
-    `${LARK_BASE}/im/v1/messages/${encodeURIComponent(input.messageId)}`,
+    `${LARK_BASE}/im/v1/messages/${encodeURIComponent(input.messageId)}${input.withSenderName ? "?with_sender_name=true" : ""}`,
     {
       headers: { authorization: `Bearer ${input.token}` },
       ...input.signal === void 0 ? {} : { signal: input.signal }
     }
   );
-  const body = await readEnvelope("message.get", response);
-  return body.data?.items?.[0];
+  const body = await readEnvelope(input.operation, response);
+  return body.data?.items;
+};
+var readMessage = async (input) => (await readMessageItems({
+  ...input,
+  operation: "message.get"
+}))?.[0];
+var fetchMergeForwardMessages = async (input) => {
+  const items = await readMessageItems({
+    ...input,
+    operation: "merge_forward.get",
+    withSenderName: true
+  });
+  if (!items?.length) {
+    throw new LarkApiError("merge_forward.get", 0, "the response carried no messages");
+  }
+  return items;
 };
 var fetchMessageThreadId = async (input) => (await readMessage(input))?.thread_id || void 0;
 var fetchMessageReference = async (input) => {
@@ -137646,6 +137754,50 @@ var buildChoiceCard = (card) => {
 
 // src/larkInbound.ts
 var import_node_sdk = __toESM(require_lib2(), 1);
+
+// src/larkConnectionHints.ts
+var larkConnectionHint = (error) => {
+  if (error instanceof LarkApiError) {
+    if (error.operation === "auth") {
+      if (error.code === 10003 || error.code === 20002) return "larkCredentials";
+      if (error.code === 10014) {
+        const msg = error.msg.toLowerCase();
+        if (msg.includes("app id not exists") || msg.includes("app secret invalid")) {
+          return "larkCredentials";
+        }
+        return msg.includes("unauthorized") ? "larkAppUnavailable" : void 0;
+      }
+    }
+    switch (error.code) {
+      case 99991672:
+        return "larkScope";
+      case 230006:
+      case 232025:
+        return "larkBotOff";
+      case 232034:
+        return "larkAppUnavailable";
+      default:
+        return void 0;
+    }
+  }
+  const code2 = error instanceof Error ? /^pullConnectConfig failed: code=(\d+), msg=/u.exec(error.message)?.[1] : void 0;
+  return code2 === "1000040344" || code2 === "1000040345" || code2 === "1000040346" ? "larkCredentials" : void 0;
+};
+
+// src/larkCredentials.ts
+var isLarkAppId = (appId) => /^cli_[0-9a-fA-F]{16}$/u.test(appId);
+var larkCredentials = (bot) => {
+  const appId = bot.values["larkAppId"] ?? "";
+  const appSecret = bot.values["larkAppSecret"] ?? "";
+  const issues = [];
+  if (appId === "") issues.push({ column: "larkAppId", code: "required" });
+  else if (!isLarkAppId(appId)) issues.push({ column: "larkAppId", code: "format" });
+  if (appSecret === "") issues.push({ column: "larkAppSecret", code: "required" });
+  const error = issues.some((issue) => issue.code === "required") ? "missing app id or secret in saved config" : issues.length > 0 ? "malformed app id in saved config" : void 0;
+  return { appId, appSecret, issues, error };
+};
+
+// src/larkInbound.ts
 var isOwnMention = (mention, appId) => mention.id?.app_id === appId || mention.mentioned_type === "bot";
 var mentionsApp = (event, appId) => (event.message?.mentions ?? []).some((mention) => isOwnMention(mention, appId));
 var mentionsSomeoneElse = (event, appId) => (event.message?.mentions ?? []).some(
@@ -137659,12 +137811,12 @@ var passesGroupGate = (event, appId, groupMention, messageType) => {
 };
 var RESOURCE_MESSAGE_TYPES = /* @__PURE__ */ new Set(["image", "file", "audio", "media"]);
 var UNSUPPORTED_MESSAGE_TYPES = /* @__PURE__ */ new Set([
+  "audio",
   "sticker",
   "folder",
   "share_chat",
   "share_user",
   "system",
-  "merge_forward",
   "interactive"
 ]);
 var botIdsOf = (mentions, appId) => {
@@ -137702,10 +137854,6 @@ var readResource = (messageType, content) => {
     const name = key("file_name") ?? "file";
     return { fileKey, kind: "file", name, mimeType: mimeFromName(name) };
   }
-  if (messageType === "audio") {
-    const fileKey = key("file_key");
-    return fileKey === null ? null : { fileKey, kind: "file", name: "voice.opus", mimeType: "audio/ogg" };
-  }
   if (messageType === "media") {
     const fileKey = key("file_key");
     if (fileKey === null) return null;
@@ -137734,7 +137882,11 @@ var parseInboundMessage = (event, appId, groupMention = "always", topicOnMention
   const rootGiven = typeof message.root_id === "string" && message.root_id !== "";
   const rootId = rootGiven && message.root_id !== void 0 ? message.root_id : messageId;
   const topic = chatType === "p2p" || !inThread ? {} : threadId === void 0 ? { topic: { rootMessageId: messageId } } : { topic: { rootMessageId: rootId, threadId, rootGiven } };
-  if (UNSUPPORTED_MESSAGE_TYPES.has(messageType)) {
+  if (messageType === "audio") {
+    const fileKey = readJson(message.content)?.["file_key"];
+    if (typeof fileKey !== "string" || fileKey === "") return null;
+  }
+  if (messageType === "merge_forward" || UNSUPPORTED_MESSAGE_TYPES.has(messageType)) {
     return {
       messageId,
       chatId,
@@ -137744,7 +137896,7 @@ var parseInboundMessage = (event, appId, groupMention = "always", topicOnMention
       resources: [],
       inThread,
       ...topic,
-      unsupportedType: messageType
+      ...messageType === "merge_forward" ? { mergeForward: true, ...parentMessageId ? { parentMessageId } : {} } : { unsupportedType: messageType === "audio" ? "voice" : messageType }
     };
   }
   const mentions = message.mentions ?? [];
@@ -137836,7 +137988,6 @@ var cardActionOperator = (event) => {
   }
   return null;
 };
-var isLarkAppId = (appId) => /^cli_[0-9a-fA-F]{16}$/u.test(appId);
 var startLarkInbound = (input) => {
   const dispatcher = new import_node_sdk.EventDispatcher({}).register({
     "im.message.receive_v1": (event) => {
@@ -137879,7 +138030,11 @@ var startLarkInbound = (input) => {
     }
   });
   if (!isLarkAppId(input.appId)) {
-    input.onConnectionState?.({ state: "failed", reason: "invalid-app-id" });
+    input.onConnectionState?.({
+      state: "failed",
+      reason: "invalid-app-id",
+      hint: "larkCredentials"
+    });
     return { close: () => void 0 };
   }
   let closed = false;
@@ -137888,7 +138043,13 @@ var startLarkInbound = (input) => {
   };
   const failed = (error) => {
     if (!closed) {
-      input.onConnectionState?.({ state: "failed", reason: "disconnected", error });
+      const hint = larkConnectionHint(error);
+      input.onConnectionState?.({
+        state: "failed",
+        reason: hint === "larkCredentials" ? "credentials-rejected" : "disconnected",
+        error,
+        ...hint === void 0 ? {} : { hint }
+      });
     }
   };
   const client = new import_node_sdk.WSClient({
@@ -138124,15 +138285,157 @@ var makeLarkMessageContext = (deps) => {
     if (message.chatType !== "group" || message.senderOpenId === null) return {};
     const name = contactDenied ? null : userName(message.senderOpenId);
     const chat = chatInfo(message.chatId);
-    const fields = (senderName, info) => ({
-      ...senderName ? { senderName } : {},
+    const fields = (senderName2, info) => ({
+      ...senderName2 ? { senderName: senderName2 } : {},
       ...info?.name ? { chatTitle: info.name } : {}
     });
-    return name instanceof Promise || chat instanceof Promise ? Promise.all([name, chat]).then(([senderName, info]) => fields(senderName, info)) : fields(name, chat);
+    return name instanceof Promise || chat instanceof Promise ? Promise.all([name, chat]).then(([senderName2, info]) => fields(senderName2, info)) : fields(name, chat);
   };
   return { chatInfo, forMessage, loadReference, topicRootForSession };
 };
 
+// src/larkMergeForward.ts
+var MAX_MESSAGES = 100;
+var MAX_MESSAGE_CHARS = 2e3;
+var MAX_BODY_CHARS = 3e4;
+var clip2 = (text4, limit, suffix = "\u2026") => {
+  if (text4.length <= limit) return text4;
+  const end = limit - suffix.length;
+  const safeEnd = /[\uD800-\uDBFF]/u.test(text4[end - 1] ?? "") ? end - 1 : end;
+  return text4.slice(0, safeEnd) + suffix;
+};
+var senderName = (message, t) => {
+  const names = message.sender?.sender_i18n_names;
+  const name = [
+    t.language === "zh-CN" ? names?.zh_cn : names?.en_us,
+    names?.zh_cn,
+    names?.en_us,
+    names?.ja_jp
+  ].find((value2) => value2?.trim());
+  return clip2(
+    name?.trim() ?? t(message.sender?.sender_type === "app" ? "mergeForward.bot" : "mergeForward.someone"),
+    120
+  ).replace(/\s+/gu, " ");
+};
+var localTime = (value2, t) => {
+  const date = new Date(Number(value2 ?? NaN));
+  if (Number.isNaN(date.getTime())) return t("mergeForward.unknownTime");
+  const pad = (n) => String(n).padStart(2, "0");
+  return `${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+};
+var resourceLabel = (kind, name, t) => {
+  const type = t.optional(`mergeForward.resource.${kind}`) ?? kind;
+  return typeof name === "string" && name.trim() ? t("mergeForward.unavailableNamed", { type, name: name.trim() }) : t("mergeForward.unavailable", { type });
+};
+var messageText = (message, t) => {
+  const type = message.msg_type ?? "unknown";
+  const content = message.body?.content;
+  let text4;
+  if (type === "post") {
+    const post = serializePost(
+      content ?? "{}",
+      void 0,
+      (resource) => resourceLabel(resource.media, resource.fileName, t)
+    );
+    text4 = post?.text ?? "[post]";
+  } else if (type === "text") {
+    const value2 = readJson(content)?.["text"];
+    text4 = typeof value2 === "string" ? value2 : "[text]";
+  } else if (["image", "file", "audio", "media", "folder"].includes(type)) {
+    text4 = resourceLabel(type === "media" ? "video" : type, readJson(content)?.["file_name"], t);
+  } else {
+    text4 = `[${type}]`;
+  }
+  const mentions = new Map((message.mentions ?? []).map((mention) => [mention.key, mention.name]));
+  text4 = text4.replace(
+    /@_user_\d+|@_all/gu,
+    (key) => `@${mentions.get(key)?.trim() || t("mergeForward.someone")}`
+  );
+  return clip2(text4.trim(), MAX_MESSAGE_CHARS, t("mergeForward.truncated"));
+};
+var orderedMessages = (rootId, items) => {
+  const byId = new Map(
+    items.filter((item) => item.message_id !== rootId).map((item) => [item.message_id, item])
+  );
+  const children = /* @__PURE__ */ new Map();
+  for (const item of byId.values()) {
+    const parent = item.upper_message_id ?? rootId;
+    const siblings = children.get(parent) ?? [];
+    siblings.push(item);
+    children.set(parent, siblings);
+  }
+  const compare = (a, b) => Number(a.create_time ?? 0) - Number(b.create_time ?? 0);
+  for (const siblings of children.values()) siblings.sort(compare);
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set([rootId]);
+  const walk = (first) => {
+    const stack = [{ message: first, depth: 0 }];
+    while (stack.length) {
+      const frame = stack.pop();
+      if (frame === void 0) break;
+      if ("end" in frame) {
+        const row = rows[frame.end];
+        if (row) row.descendants = rows.length - frame.end - 1;
+        continue;
+      }
+      if (seen.has(frame.message.message_id)) continue;
+      seen.add(frame.message.message_id);
+      const end = rows.length;
+      rows.push({ ...frame, descendants: 0 });
+      stack.push({ end });
+      for (const child of (children.get(frame.message.message_id) ?? []).toReversed()) {
+        stack.push({ message: child, depth: frame.depth + 1 });
+      }
+    }
+  };
+  for (const item of children.get(rootId) ?? []) walk(item);
+  for (const item of [...byId.values()].sort(compare)) walk(item);
+  return rows;
+};
+var serializeMergeForward = (rootId, items, t) => {
+  const rows = orderedMessages(rootId, items);
+  const lines = [t("mergeForward.title", { count: rows.length })];
+  let length = lines[0]?.length ?? 0;
+  let included = 0;
+  for (const { message, depth, descendants } of rows) {
+    if (included >= MAX_MESSAGES) break;
+    const indent = "  ".repeat(depth);
+    const body = message.msg_type === "merge_forward" ? t("mergeForward.nested", { count: descendants }) : messageText(message, t);
+    const line = `${indent}${senderName(message, t)} ${localTime(message.create_time, t)}: ${body.replaceAll("\n", `
+${indent}  `)}`;
+    const remaining = rows.length - included - 1;
+    const tail = remaining > 0 ? t("mergeForward.omitted", { count: remaining }).length + 1 : 0;
+    if (length + line.length + 1 + tail > MAX_BODY_CHARS) break;
+    lines.push(line);
+    length += line.length + 1;
+    included += 1;
+  }
+  if (included < rows.length)
+    lines.push(t("mergeForward.omitted", { count: rows.length - included }));
+  return lines.join("\n");
+};
+var loadMergeForward = async (message, deps) => {
+  try {
+    const items = await withDeadline2(1e4, async (signal) => {
+      const token = await deps.tenantToken();
+      signal.throwIfAborted();
+      return fetchMergeForwardMessages({
+        http: deps.http,
+        token,
+        messageId: message.messageId,
+        signal
+      });
+    });
+    return { ...message, text: serializeMergeForward(message.messageId, items, deps.translate) };
+  } catch (error) {
+    deps.warn("lark could not read merged forward messages", {
+      messageId: message.messageId,
+      error: describeError(error)
+    });
+    return { ...message, unsupportedType: "merge_forward" };
+  }
+};
+
 // src/larkAdapter.ts
 var TOKEN_CACHE_MAX_AGE_MS = 30 * 6e4;
 var COLUMNS = [
@@ -138164,21 +138467,9 @@ var splitTopicChatId = (chatId) => {
   return at < 0 ? { chatId } : { chatId: chatId.slice(0, at), rootMessageId: chatId.slice(at + 1) };
 };
 var topicAliasOf = (chatId, threadId) => `${chatId}:${threadId}`;
-var credentials = (binding) => ({
-  appId: binding.values["larkAppId"] ?? "",
-  appSecret: binding.values["larkAppSecret"] ?? ""
-});
-var larkConfigIssues = (binding) => {
-  const { appId, appSecret } = credentials(binding);
-  const issues = [];
-  if (appId === "") issues.push({ column: "larkAppId", code: "required" });
-  else if (!isLarkAppId(appId)) issues.push({ column: "larkAppId", code: "format" });
-  if (appSecret === "") issues.push({ column: "larkAppSecret", code: "required" });
-  return issues;
-};
 var makeLarkAdapter = (deps) => {
   const tenantToken = async (binding) => {
-    const { appId, appSecret } = credentials(binding);
+    const { appId, appSecret } = larkCredentials(binding);
     const key = `lark-tenant-token.${appId}`;
     const cached = await deps.cacheGet(key, TOKEN_CACHE_MAX_AGE_MS);
     if (typeof cached?.token === "string") return cached.token;
@@ -138251,6 +138542,7 @@ var makeLarkAdapter = (deps) => {
   };
   return {
     platform: "lark",
+    botIdentity: (bot) => larkCredentials(bot).appId,
     icon: "lark",
     label: "Lark",
     columns: COLUMNS,
@@ -138259,10 +138551,10 @@ var makeLarkAdapter = (deps) => {
       const { chatId: groupId, rootMessageId } = splitTopicChatId(chatId);
       return rootMessageId === void 0 ? void 0 : groupId;
     },
-    validate: larkConfigIssues,
-    isConfigured: (binding) => larkConfigIssues(binding).every((issue) => issue.code !== "required"),
+    validate: (binding) => larkCredentials(binding).issues,
+    isConfigured: (binding) => larkCredentials(binding).issues.every((issue) => issue.code !== "required"),
     connect: (binding, handlers) => {
-      const { appId, appSecret } = credentials(binding);
+      const { appId, appSecret } = larkCredentials(binding);
       const port = {
         noteChatAlias: handlers.noteChatAlias,
         knowsChatAlias: handlers.knowsChatAlias
@@ -138299,11 +138591,17 @@ var makeLarkAdapter = (deps) => {
           arg: click.arg
         }) ?? null,
         onMessage: (message) => {
+          const prepared = message.mergeForward ? loadMergeForward(message, {
+            http: deps.http,
+            tenantToken: () => tenantToken(binding),
+            translate: deps.translate,
+            warn: deps.log.warn
+          }) : message;
           const { topic } = message;
           const source = context.forMessage(message);
           const parentMessageId = message.parentMessageId;
           const reference2 = parentMessageId === void 0 ? null : context.loadReference(parentMessageId);
-          const deliver = (names, replyTo) => handlers.onMessage({
+          const deliver = (ready, names, replyTo) => handlers.onMessage({
             messageId: message.messageId,
             // 已经开出来的话题就是它自己那个聊天；将要开出来的（主窗口里 @ 机器人）先算群的，
             // 由核心决定要不要分出去。
@@ -138317,7 +138615,7 @@ var makeLarkAdapter = (deps) => {
             },
             senderId: message.senderOpenId,
             ...names,
-            text: message.text,
+            text: ready.text,
             topicRootForSession: context.topicRootForSession(message),
             ...replyTo === void 0 ? {} : { replyTo },
             chatKind: message.chatType === "p2p" ? "private" : "group",
@@ -138328,7 +138626,7 @@ var makeLarkAdapter = (deps) => {
               mimeType: resource.mimeType,
               kind: resource.kind
             })),
-            ...message.unsupportedType === void 0 ? {} : { unsupportedType: message.unsupportedType }
+            ...ready.unsupportedType === void 0 ? {} : { unsupportedType: ready.unsupportedType }
           });
           const pending = topic?.threadId === void 0 ? null : topicUnsettled(binding.rowId, message.chatId, {
             threadId: topic.threadId,
@@ -138336,12 +138634,12 @@ var makeLarkAdapter = (deps) => {
           });
           const key = JSON.stringify([message.chatId, topic?.threadId]);
           const earlier = pendingDeliveries.get(key);
-          if (earlier === void 0 && pending === null && reference2 === null && !(source instanceof Promise)) {
-            deliver(source);
+          if (earlier === void 0 && pending === null && reference2 === null && !(prepared instanceof Promise) && !(source instanceof Promise)) {
+            deliver(prepared, source);
           } else {
-            const completed = Promise.all([earlier, pending, reference2, source]).then(([, , replyTo, names]) => {
+            const completed = Promise.all([earlier, pending, reference2, source, prepared]).then(([, , replyTo, names, ready]) => {
               if (pendingDeliveries.get(key) === completed) pendingDeliveries.delete(key);
-              if (open) deliver(names, replyTo ?? void 0);
+              if (open) deliver(ready, names, replyTo ?? void 0);
             }).catch((error) => handlers.onError(describeError(error))).finally(() => {
               if (pendingDeliveries.get(key) === completed) pendingDeliveries.delete(key);
             });
@@ -138380,17 +138678,15 @@ var makeLarkAdapter = (deps) => {
       }
     },
     checkConnection: async (bot) => {
-      const { appId, appSecret } = credentials(bot);
-      if (appId === "" || appSecret === "") {
+      const { appId, appSecret, error: credentialError } = larkCredentials(bot);
+      if (credentialError !== void 0) {
         return {
           stage: "credentials",
           ok: false,
-          detail: "missing app id or secret in saved config"
+          detail: credentialError,
+          hint: "larkCredentials"
         };
       }
-      if (!isLarkAppId(appId)) {
-        return { stage: "credentials", ok: false, detail: "malformed app id in saved config" };
-      }
       try {
         const { expiresInSeconds } = await fetchTenantToken({ http: deps.http, appId, appSecret });
         return {
@@ -138399,7 +138695,13 @@ var makeLarkAdapter = (deps) => {
           detail: `token ok; expiresIn=${String(expiresInSeconds)}s`
         };
       } catch (error) {
-        return { stage: "tenant_access_token", ok: false, detail: describeError(error) };
+        const hint = larkConnectionHint(error);
+        return {
+          stage: "tenant_access_token",
+          ok: false,
+          detail: describeError(error),
+          ...hint === void 0 ? {} : { hint }
+        };
       }
     },
     sendImage: async (binding, image2) => {
@@ -138737,6 +139039,7 @@ var en_default = {
     projectArchived: 'Project "{{title}}" is archived. Restore it, or send /repo to pick another project, then message again.',
     projectMissing: "The project this chat was working on is no longer on this machine (it may have been deleted), so a thread cannot be started. Send /repo to pick another one.",
     threadGone: "The earlier session was deleted or archived, so this chat now starts a new one.",
+    turnFailedToStart: "This message couldn't be dispatched. Please send it again later. Reference {{ref}}.",
     turnFailed: "This turn didn't finish: {{detail}}\nReference {{ref}}. Send the message again; if it keeps failing, send /new to start a new conversation.",
     turnFailedNoDetail: "This turn didn't finish. Reference {{ref}}. Send the message again; if it keeps failing, send /new to start a new conversation.",
     turnFailedBrief: "This turn didn't finish: {{detail}}\nSend the message again; if it keeps failing, send /new to start a new conversation.",
@@ -138753,9 +139056,11 @@ var en_default = {
     attachmentsNoTeam: "Files cannot be sent to a team yet, so they were left out. Send /thread to go back to a normal session.",
     unsupportedType: "I can't process {{type}} messages yet.",
     unsupportedFolder: "Folders can't be downloaded. Zip it and send the archive instead.",
+    unsupportedVoice: "Voice messages aren't supported yet. Please send text.",
     sendingFile: "Sending {{name}}:",
     notAllowedYet: `You are not on the allow list yet. Your user id is {{id}}. Add it under Settings \u2192 Plugins \u2192 Chat, in this bot's "Allowed people" box.`,
-    received: "Got it, working on it."
+    received: "Got it, working on it.",
+    welcome: "Connected. Send text or images to get started, or send /help to see the available commands."
   },
   approval: {
     allow: "Allow",
@@ -139090,21 +139395,41 @@ var en_default = {
       failed: "Connection failed",
       notSaved: "Save this row first (credentials are read from saved config only).",
       hint: {
+        connecting: "Still connecting. There is usually a result within 20 seconds; check again in a moment.",
         badToken: "This does not look like a bot token. Copy it again from BotFather: digits, a colon, then the key.",
-        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather.",
+        unauthorized: "Telegram does not accept this token. It may have been revoked; get the current one from BotFather. Save the corrected token here to reconnect automatically; if nothing needs changing, use Reconnect below.",
         notBot: "This token does not belong to a bot. Use the token BotFather gave you.",
         webhookActive: "This bot has a webhook set by another service, so it cannot receive messages here. Remove the webhook there, then check again.",
+        larkCredentials: "Lark does not accept this App ID or App Secret. Copy both from Credentials & Basic Info for your self-built app in the Lark developer console. Save the corrected App ID and App Secret here to reconnect automatically; if nothing needs changing, use Reconnect below.",
+        larkScope: "This app is missing a required permission. In the Lark developer console, open Permission Management, add the permissions listed in the details, then publish a version.",
+        larkBotOff: "This app's bot capability is not enabled. In the Lark developer console, open App Capabilities \u2192 Bot, enable the bot, then publish a version.",
+        larkAppUnavailable: "This app is unavailable in your organization. In the Lark developer console, check that the app is enabled and published; ask your administrator to confirm it is installed and enabled for your organization.",
+        wecomBotCredentials: "WeCom does not accept this Bot ID or Secret. Open this smart bot's configuration in the WeCom admin console, select API mode \u2192 Long connection, and copy its Bot ID and Secret. These are not the callback Token or EncodingAESKey. Save the corrected Bot ID and Secret here to reconnect automatically; if nothing needs changing, use Reconnect below.",
+        wecomLongConnOff: "This smart bot's long connection mode is not enabled. Open its configuration in the WeCom admin console, select API mode \u2192 Long connection and save; the bot reconnects on its own within a minute, or use Reconnect below.",
+        wecomTakenOver: "Another machine or program is using the same Bot ID. Stop using this smart bot there, then use Reconnect below.",
         wecomTrustedIp: "Add this machine's outbound public IP to the app's trusted IP list in the WeCom admin console.",
         wecomInvalidUser: "Check that the recipient, department or tag exists and is in this app's visible range.",
-        wecomInvalidAgent: "Check the AgentId against this self-built application in the WeCom admin console."
+        wecomInvalidAgent: "Check the AgentId against this self-built application in the WeCom admin console.",
+        wecomCallbackNotSeen: "Credentials are valid, but no verified callback has arrived since this startup. In the app's Receive messages settings in the WeCom admin console, paste the callback URL shown on this bot's settings card and save; WeCom will send a verification request. This machine must be reachable by WeCom over the public internet.",
+        wecomCallbackSignature: "A callback arrived, but its signature or decryption failed; no verified callback has arrived since this startup. Match the Callback Token and EncodingAESKey to this app's Receive messages settings in the WeCom admin console, then save there to verify again."
       }
     },
+    reconnect: {
+      label: "Reconnect",
+      description: "Disconnect and reconnect this bot using its saved settings.",
+      notAvailable: "This platform can't be connected yet, so reconnecting won't help.",
+      running: "Starting to reconnect {{rowId}}\u2026",
+      done: "Reconnection started. Check the bot's connection status for the result.",
+      notSaved: "Save this row first before reconnecting. Only saved settings are used.",
+      notConfigured: "Complete and save this bot's settings before reconnecting.",
+      duplicate: "Another bot row uses these credentials. Resolve the duplicate before reconnecting.",
+      inactive: "The chat bridge is turned off. Enable it before reconnecting."
+    },
     copyDiagnostics: {
       label: "Copy diagnostics",
       description: "Run a connection probe and produce copy-paste diagnostics (no secrets).",
       running: "Building diagnostics for {{rowId}}\u2026",
-      done: "Diagnostics ready \u2014 see details below",
-      failed: "Diagnostics failed",
+      done: "Diagnostic report ready \u2014 see details below",
       notSaved: "Save this row first before copying diagnostics."
     },
     diagnostic: {
@@ -139112,16 +139437,23 @@ var en_default = {
     },
     larkRepair: {
       label: "Repair scopes",
-      description: "Check whether the saved credentials can mint a token; scopes, event subscriptions and publishing are not checked automatically.",
+      description: "List missing required scopes and a link to request them on the Feishu open platform; an app administrator then publishes the app version manually.",
       step: {
-        scopes: "Scopes \u2014 not checked",
-        events: "Event subscriptions \u2014 not checked",
-        publish: "Publishing \u2014 not checked",
-        verify: "Verify the app can still mint a tenant token"
-      },
-      done: "Only token issuance was verified. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
-      hint: "Reference: {{ref}}\n{{detail}}\nReview scopes, event subscriptions and publishing on the Feishu open platform; none were checked automatically.",
-      failed: "Could not mint a token with the saved credentials. Scopes, event subscriptions and publishing were not checked automatically; review them on the Feishu open platform.",
+        token: "Get a tenant token with the saved credentials",
+        scopes: "Check the app's granted tenant scopes"
+      },
+      missing: "Some required scopes are missing.",
+      allGranted: "All required scopes are enabled.",
+      unverified: "Unable to check scopes automatically.",
+      missingScopes: "Missing scopes:\n{{scopes}}",
+      requiredScopes: "Required scopes \u2014 check each one manually:\n{{scopes}}\n\nApps without application:application:self_manage cannot report their granted scopes, so this list could not be checked automatically.",
+      openApplyLink: "Request scopes on the Feishu open platform",
+      openCheckLink: "Check and request scopes on the Feishu open platform",
+      applyLink: "Open platform URL:\n{{url}}",
+      publishHint: "As an app administrator, select the scopes at that link. Then publish a version via App release \u2192 Version management & release \u2192 Create version, and return here to click \u201CCheck connection\u201D.",
+      botHint: "To enable the bot, go to App \u2192 Add app capability \u2192 Bot. Bot capability is not checked here.",
+      eventHint: "To receive messages, set both subscriptions in Events & Callbacks to Long connection, then add these (not checked here):\nEvents: {{events}}\nCallbacks: {{callbacks}}",
+      failed: "Could not check the app's required scopes. Review the error details and try again.",
       notLark: "This row is not a saved Lark bot."
     }
   },
@@ -139168,11 +139500,13 @@ var en_default = {
     connection: {
       failed: "The last connection attempt failed.",
       details: "Details: {{error}}",
+      reconnect: "You can try again with Reconnect below.",
       reason: {
         "not-available": "This platform can't be connected yet.",
         "invalid-app-id": "The App ID isn't in the right format.",
         disconnected: "The connection to the platform is down.",
         "subscription-failed": "The platform didn't confirm the subscription.",
+        "taken-over": "This connection was taken over elsewhere, so automatic reconnection has stopped here.",
         "token-unavailable": "Couldn't get an access token.",
         "credentials-rejected": "The platform rejected the credentials."
       },
@@ -139196,7 +139530,7 @@ var en_default = {
       done: "Done.",
       close: "Close",
       failedToRun: "Couldn't run this on the machine.",
-      saveFirst: "Save or undo your changes first. These check the saved settings.",
+      saveFirst: "Save or undo your changes first. These actions use the saved settings.",
       qrTitle: "QR code to scan with the Lark app"
     },
     step: {
@@ -139222,6 +139556,24 @@ var en_default = {
       callbackFollowsKeys: "This URL changes when Token or EncodingAESKey changes. Paste it into WeCom again after changing them."
     }
   },
+  mergeForward: {
+    title: "[Forwarded chat history, messages: {{count}}]",
+    nested: "[Nested forward, messages: {{count}}]",
+    someone: "Someone",
+    bot: "A bot",
+    unknownTime: "[unknown time]",
+    resource: {
+      image: "Image",
+      file: "File",
+      audio: "Audio",
+      video: "Video",
+      folder: "Folder"
+    },
+    unavailable: "[{{type}}: could not be retrieved]",
+    unavailableNamed: "[{{type}} {{name}}: could not be retrieved]",
+    omitted: "\u2026 not shown: {{count}} more",
+    truncated: "\u2026 [message truncated]"
+  },
   team: {
     noRoster: "This project has no team roster yet. Save a roster in the Teams tab and choose a lead first.",
     unavailable: "Could not read this project's team roster. Check that the Teams plugin is enabled and try again.",
@@ -139440,6 +139792,7 @@ var zh_CN_default = {
     projectArchived: "\u9879\u76EE\u300C{{title}}\u300D\u5DF2\u5F52\u6863\u3002\u6062\u590D\u5B83\uFF0C\u6216\u53D1 /repo \u6362\u4E2A\u9879\u76EE\uFF0C\u518D\u53D1\u6D88\u606F\u3002",
     projectMissing: "\u8FD9\u4E2A\u804A\u5929\u539F\u6765\u505A\u7684\u9879\u76EE\u5DF2\u7ECF\u4E0D\u5728\u8FD9\u53F0\u673A\u5668\u4E0A\u4E86\uFF08\u53EF\u80FD\u88AB\u5220\u4E86\uFF09\uFF0C\u5F00\u4E0D\u4E86\u4F1A\u8BDD\u3002\u53D1 /repo \u91CD\u65B0\u9009\u4E00\u4E2A\u3002",
     threadGone: "\u4E4B\u524D\u90A3\u6761\u4F1A\u8BDD\u5DF2\u88AB\u5220\u9664\u6216\u5F52\u6863\uFF0C\u8FD9\u4E2A\u804A\u5929\u6539\u4E3A\u5F00\u4E00\u6761\u65B0\u4F1A\u8BDD\u3002",
+    turnFailedToStart: "\u8FD9\u6761\u6D88\u606F\u6CA1\u80FD\u6D3E\u51FA\u53BB\uFF0C\u8BF7\u7A0D\u540E\u91CD\u53D1\u3002\u53C2\u8003\u53F7 {{ref}}\u3002",
     turnFailed: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\uFF1A{{detail}}\n\u53C2\u8003\u53F7 {{ref}}\u3002\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
     turnFailedNoDetail: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\u3002\u53C2\u8003\u53F7 {{ref}}\u3002\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
     turnFailedBrief: "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5B8C\u6210\uFF1A{{detail}}\n\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u4E00\u76F4\u4E0D\u884C\u5C31\u53D1 /new \u5F00\u4E2A\u65B0\u4F1A\u8BDD\u3002",
@@ -139456,9 +139809,11 @@ var zh_CN_default = {
     attachmentsNoTeam: "\u6587\u4EF6\u8FD8\u53D1\u4E0D\u5230\u56E2\u961F\uFF0C\u8FD9\u6B21\u6CA1\u5E26\u4E0A\u3002\u53D1 /thread \u56DE\u5230\u666E\u901A\u4F1A\u8BDD\u3002",
     unsupportedType: "\u6211\u8FD8\u4E0D\u80FD\u5904\u7406 {{type}} \u7C7B\u578B\u7684\u6D88\u606F\u3002",
     unsupportedFolder: "\u6587\u4EF6\u5939\u6CA1\u6CD5\u4E0B\u8F7D\uFF0C\u8BF7\u6253\u5305\u6210\u538B\u7F29\u6587\u4EF6\u518D\u53D1\u3002",
+    unsupportedVoice: "\u6682\u65F6\u4E0D\u652F\u6301\u8BED\u97F3\uFF0C\u8BF7\u53D1\u6587\u5B57\u3002",
     sendingFile: "\u6B63\u5728\u53D1\u9001 {{name}}\uFF1A",
     notAllowedYet: "\u4F60\u8FD8\u4E0D\u5728\u5141\u8BB8\u540D\u5355\u91CC\uFF0C\u4F60\u7684\u7528\u6237 id \u662F {{id}}\uFF0C\u8BF7\u628A\u5B83\u586B\u8FDB \u8BBE\u7F6E \u2192 \u63D2\u4EF6 \u2192 \u804A\u5929 \u2192 \u8FD9\u4E2A\u673A\u5668\u4EBA\u7684\u300C\u5141\u8BB8\u7684\u4EBA\u300D\u3002",
-    received: "\u6536\u5230\uFF0C\u5728\u5904\u7406\u3002"
+    received: "\u6536\u5230\uFF0C\u5728\u5904\u7406\u3002",
+    welcome: "\u5DF2\u8FDE\u4E0A\u3002\u76F4\u63A5\u53D1\u6587\u5B57\u6216\u56FE\u7247\u5C31\u80FD\u5F00\u59CB\uFF0C\u53D1 /help \u770B\u80FD\u7528\u7684\u547D\u4EE4\u3002"
   },
   approval: {
     allow: "\u5141\u8BB8",
@@ -139793,21 +140148,41 @@ var zh_CN_default = {
       failed: "\u8FDE\u63A5\u5931\u8D25",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u68C0\u67E5\u8FDE\u63A5\uFF08\u51ED\u636E\u53EA\u4ECE\u5DF2\u4FDD\u5B58\u914D\u7F6E\u8BFB\u53D6\uFF09\u3002",
       hint: {
+        connecting: "\u8FD8\u5728\u8FDE\u63A5\uFF0C\u4E00\u822C 20 \u79D2\u5185\u4F1A\u6709\u7ED3\u679C\uFF0C\u7A0D\u540E\u518D\u68C0\u67E5\u4E00\u6B21\u3002",
         badToken: "\u8FD9\u4E0D\u50CF\u673A\u5668\u4EBA\u7684 token\u3002\u5230 BotFather \u91CD\u65B0\u590D\u5236\u4E00\u4EFD\uFF1A\u6570\u5B57\u3001\u5192\u53F7\uFF0C\u540E\u9762\u662F\u5BC6\u94A5\u3002",
-        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\u3002",
+        unauthorized: "Telegram \u4E0D\u8BA4\u8FD9\u4E2A token\uFF0C\u53EF\u80FD\u5DF2\u7ECF\u4F5C\u5E9F\u3002\u5230 BotFather \u53D6\u73B0\u5728\u7684\u90A3\u4E00\u4EFD\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
         notBot: "\u8FD9\u4E2A token \u4E0D\u662F\u673A\u5668\u4EBA\u7684\u3002\u8BF7\u7528 BotFather \u7ED9\u7684\u90A3\u4E00\u4EFD\u3002",
         webhookActive: "\u8FD9\u4E2A\u673A\u5668\u4EBA\u88AB\u522B\u7684\u670D\u52A1\u8BBE\u4E86 webhook\uFF0C\u5728\u8FD9\u91CC\u6536\u4E0D\u5230\u6D88\u606F\u3002\u5148\u5230\u90A3\u8FB9\u64A4\u6389 webhook\uFF0C\u518D\u68C0\u67E5\u4E00\u6B21\u3002",
+        larkCredentials: "\u98DE\u4E66\u4E0D\u8BA4\u8FD9\u4E2A App ID \u6216 App Secret\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u8FD9\u4E2A\u4F01\u4E1A\u81EA\u5EFA\u5E94\u7528\u7684\u300C\u51ED\u8BC1\u4E0E\u57FA\u7840\u4FE1\u606F\u300D\u91CD\u65B0\u590D\u5236\u4E24\u9879\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        larkScope: "\u8FD9\u4E2A\u5E94\u7528\u7F3A\u5C11\u6240\u9700\u6743\u9650\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7684\u300C\u6743\u9650\u7BA1\u7406\u300D\uFF0C\u6DFB\u52A0\u8BE6\u60C5\u4E2D\u5217\u51FA\u7684\u6743\u9650\uFF0C\u518D\u53D1\u5E03\u4E00\u4E2A\u7248\u672C\u3002",
+        larkBotOff: "\u8FD9\u4E2A\u5E94\u7528\u6CA1\u6709\u542F\u7528\u673A\u5668\u4EBA\u80FD\u529B\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7684\u300C\u5E94\u7528\u80FD\u529B \u2192 \u673A\u5668\u4EBA\u300D\u542F\u7528\u673A\u5668\u4EBA\uFF0C\u518D\u53D1\u5E03\u4E00\u4E2A\u7248\u672C\u3002",
+        larkAppUnavailable: "\u8FD9\u4E2A\u5E94\u7528\u5728\u5F53\u524D\u4F01\u4E1A\u4E0D\u53EF\u7528\u3002\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u786E\u8BA4\u5E94\u7528\u5DF2\u542F\u7528\u5E76\u53D1\u5E03\uFF0C\u518D\u8BF7\u7BA1\u7406\u5458\u786E\u8BA4\u5F53\u524D\u4F01\u4E1A\u5DF2\u5B89\u88C5\u5E76\u542F\u7528\u8FD9\u4E2A\u5E94\u7528\u3002",
+        wecomBotCredentials: "\u4F01\u4E1A\u5FAE\u4FE1\u4E0D\u8BA4\u8FD9\u4E2A Bot ID \u6216 Secret\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u7684\u914D\u7F6E\u9875\uFF0C\u9009\u62E9\u300CAPI \u6A21\u5F0F \u2192 \u957F\u8FDE\u63A5\u300D\uFF0C\u91CD\u65B0\u590D\u5236 Bot ID \u548C Secret\uFF1B\u8FD9\u91CC\u7528\u7684\u4E0D\u662F\u56DE\u8C03\u6A21\u5F0F\u7684 Token \u6216 EncodingAESKey\u3002\u6539\u597D\u540E\u5728\u8FD9\u91CC\u4FDD\u5B58\uFF0C\u667A\u80FD\u673A\u5668\u4EBA\u4F1A\u81EA\u52A8\u91CD\u65B0\u8FDE\u63A5\uFF1B\u6CA1\u6709\u8981\u6539\u7684\u4E5F\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        wecomLongConnOff: "\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u6CA1\u6709\u5F00\u542F\u957F\u8FDE\u63A5\u6A21\u5F0F\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u7684\u914D\u7F6E\u9875\u9009\u62E9\u300CAPI \u6A21\u5F0F \u2192 \u957F\u8FDE\u63A5\u300D\u5E76\u4FDD\u5B58\uFF0C\u8FD9\u91CC\u4F1A\u5728\u4E00\u5206\u949F\u5185\u81EA\u52A8\u91CD\u65B0\u8FDE\u4E0A\uFF1B\u4E5F\u53EF\u4EE5\u76F4\u63A5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
+        wecomTakenOver: "\u53E6\u4E00\u53F0\u673A\u5668\u6216\u7A0B\u5E8F\u5728\u7528\u540C\u4E00\u4E2A Bot ID\u3002\u8BA9\u5B83\u505C\u7528\u8FD9\u4E2A\u667A\u80FD\u673A\u5668\u4EBA\u540E\uFF0C\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u3002",
         wecomTrustedIp: "\u628A\u8FD9\u53F0\u673A\u5668\u7684\u51FA\u7AD9\u516C\u7F51 IP \u52A0\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u4F01\u4E1A\u53EF\u4FE1 IP\u3002",
         wecomInvalidUser: "\u786E\u8BA4\u6536\u4EF6\u4EBA\u3001\u90E8\u95E8\u6216\u6807\u7B7E\u5B58\u5728\uFF0C\u5E76\u5728\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684\u53EF\u89C1\u8303\u56F4\u5185\u3002",
-        wecomInvalidAgent: "\u6838\u5BF9\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002"
+        wecomInvalidAgent: "\u6838\u5BF9\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u81EA\u5EFA\u5E94\u7528\u7684 AgentId\u3002",
+        wecomCallbackNotSeen: "\u51ED\u636E\u6709\u6548\uFF0C\u4F46\u81EA\u672C\u6B21\u542F\u52A8\u4EE5\u6765\u8FD8\u6CA1\u6536\u5230\u8FC7\u901A\u8FC7\u6821\u9A8C\u7684\u56DE\u8C03\u3002\u5230\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u300C\u63A5\u6536\u6D88\u606F\u300D\uFF0C\u586B\u5165\u673A\u5668\u4EBA\u8BBE\u7F6E\u5361\u4E0A\u663E\u793A\u7684\u56DE\u8C03\u5730\u5740\u5E76\u4FDD\u5B58\uFF1B\u4F01\u5FAE\u4F1A\u53D1\u6765\u4E00\u6B21\u6821\u9A8C\u8BF7\u6C42\u3002\u8FD9\u53F0\u673A\u5668\u5FC5\u987B\u80FD\u88AB\u4F01\u5FAE\u4ECE\u516C\u7F51\u8BBF\u95EE\u5230\u3002",
+        wecomCallbackSignature: "\u6536\u5230\u8FC7\u56DE\u8C03\uFF0C\u4F46\u7B7E\u540D\u6821\u9A8C\u6216\u89E3\u5BC6\u5931\u8D25\uFF1B\u81EA\u672C\u6B21\u542F\u52A8\u4EE5\u6765\u8FD8\u6CA1\u6536\u5230\u8FC7\u901A\u8FC7\u6821\u9A8C\u7684\u56DE\u8C03\u3002\u8BF7\u628A\u56DE\u8C03 Token \u548C EncodingAESKey \u4E0E\u4F01\u4E1A\u5FAE\u4FE1\u540E\u53F0\u8FD9\u4E2A\u5E94\u7528\u7684\u300C\u63A5\u6536\u6D88\u606F\u300D\u8BBE\u7F6E\u4FDD\u6301\u4E00\u81F4\uFF0C\u518D\u5230\u540E\u53F0\u4FDD\u5B58\u4E00\u6B21\u4EE5\u91CD\u65B0\u6821\u9A8C\u3002"
       }
     },
+    reconnect: {
+      label: "\u91CD\u65B0\u8FDE\u63A5",
+      description: "\u6309\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u65AD\u5F00\u5E76\u91CD\u65B0\u8FDE\u63A5\u8FD9\u4E2A\u673A\u5668\u4EBA\u3002",
+      notAvailable: "\u8FD9\u4E2A\u5E73\u53F0\u8FD8\u4E0D\u80FD\u8FDE\u63A5\uFF0C\u91CD\u65B0\u8FDE\u63A5\u4E5F\u8FDE\u4E0D\u4E0A\u3002",
+      running: "\u6B63\u5728\u91CD\u65B0\u8FDE\u63A5 {{rowId}} \u2026",
+      done: "\u5DF2\u5F00\u59CB\u91CD\u65B0\u8FDE\u63A5\uFF0C\u7ED3\u679C\u8BF7\u770B\u673A\u5668\u4EBA\u7684\u8FDE\u63A5\u72B6\u6001\u3002",
+      notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u91CD\u65B0\u8FDE\u63A5\uFF0C\u52A8\u4F5C\u53EA\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
+      notConfigured: "\u8BF7\u5148\u8865\u5168\u5E76\u4FDD\u5B58\u8FD9\u4E2A\u673A\u5668\u4EBA\u7684\u8BBE\u7F6E\uFF0C\u518D\u91CD\u65B0\u8FDE\u63A5\u3002",
+      duplicate: "\u53E6\u4E00\u4E2A\u673A\u5668\u4EBA\u884C\u6B63\u5728\u4F7F\u7528\u8FD9\u4EFD\u51ED\u636E\uFF0C\u8BF7\u5148\u5904\u7406\u91CD\u590D\u914D\u7F6E\u518D\u91CD\u65B0\u8FDE\u63A5\u3002",
+      inactive: "\u804A\u5929\u6865\u5DF2\u505C\u7528\uFF0C\u8BF7\u5148\u542F\u7528\u518D\u91CD\u65B0\u8FDE\u63A5\u3002"
+    },
     copyDiagnostics: {
       label: "\u590D\u5236\u8BCA\u65AD",
       description: "\u8DD1\u4E00\u6B21\u8FDE\u63A5\u63A2\u6D4B\uFF0C\u751F\u6210\u53EF\u590D\u5236\u7684\u8BCA\u65AD\u6587\u672C\uFF08\u4E0D\u542B\u5BC6\u94A5\uFF09\u3002",
       running: "\u6B63\u5728\u751F\u6210\u8BCA\u65AD {{rowId}} \u2026",
-      done: "\u8BCA\u65AD\u5DF2\u751F\u6210\uFF0C\u89C1\u4E0B\u65B9\u8BE6\u60C5",
-      failed: "\u8BCA\u65AD\u5931\u8D25",
+      done: "\u8BCA\u65AD\u62A5\u544A\u5DF2\u751F\u6210\uFF0C\u89C1\u4E0B\u65B9\u8BE6\u60C5",
       notSaved: "\u8BF7\u5148\u4FDD\u5B58\u8FD9\u4E00\u884C\u518D\u590D\u5236\u8BCA\u65AD\u3002"
     },
     diagnostic: {
@@ -139815,16 +140190,23 @@ var zh_CN_default = {
     },
     larkRepair: {
       label: "\u8865\u5168\u6743\u9650",
-      description: "\u68C0\u67E5\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u80FD\u5426\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u4E0D\u4F1A\u81EA\u52A8\u68C0\u67E5\u3002",
+      description: "\u5217\u51FA\u7F3A\u5C11\u7684\u5FC5\u9700\u6743\u9650\u548C\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7533\u8BF7\u94FE\u63A5\uFF0C\u518D\u7531\u7BA1\u7406\u5458\u624B\u52A8\u53D1\u5E03\u5E94\u7528\u7248\u672C\u3002",
       step: {
-        scopes: "\u6743\u9650\uFF1A\u672A\u68C0\u67E5",
-        events: "\u4E8B\u4EF6\u8BA2\u9605\uFF1A\u672A\u68C0\u67E5",
-        publish: "\u53D1\u5E03\uFF1A\u672A\u68C0\u67E5",
-        verify: "\u9A8C\u8BC1\u5E94\u7528\u4ECD\u53EF\u6362\u53D6 tenant token"
-      },
-      done: "\u4EC5\u6838\u5B9E\u4E86\u51ED\u636E\u4ECD\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
-      hint: "\u53C2\u8003\u53F7\uFF1A{{ref}}\n{{detail}}\n\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\uFF1B\u8FD9\u4E09\u9879\u5747\u672A\u81EA\u52A8\u68C0\u67E5\u3002",
-      failed: "\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u672A\u80FD\u6362\u53D6 token\uFF1B\u6743\u9650\u3001\u4E8B\u4EF6\u8BA2\u9605\u548C\u53D1\u5E03\u6CA1\u6709\u81EA\u52A8\u68C0\u67E5\uFF0C\u8BF7\u5230\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u3002",
+        token: "\u7528\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u6362\u53D6 tenant token",
+        scopes: "\u6838\u5BF9\u5E94\u7528\u5DF2\u5F00\u901A\u7684\u79DF\u6237\u6743\u9650"
+      },
+      missing: "\u6709\u5FC5\u9700\u6743\u9650\u5C1A\u672A\u5F00\u901A\u3002",
+      allGranted: "\u5FC5\u9700\u6743\u9650\u90FD\u5DF2\u5F00\u901A\u3002",
+      unverified: "\u65E0\u6CD5\u81EA\u52A8\u6838\u5BF9\u6743\u9650\u3002",
+      missingScopes: "\u7F3A\u5C11\u7684\u6743\u9650\uFF1A\n{{scopes}}",
+      requiredScopes: "\u5FC5\u9700\u6743\u9650\u6E05\u5355\uFF0C\u8BF7\u9010\u9879\u624B\u52A8\u6838\u5BF9\uFF1A\n{{scopes}}\n\n\u5E94\u7528\u7F3A\u5C11 application:application:self_manage \u65F6\u65E0\u6CD5\u67E5\u8BE2\u81EA\u8EAB\u5DF2\u5F00\u901A\u7684\u6743\u9650\uFF0C\u6240\u4EE5\u8FD9\u4EFD\u6E05\u5355\u6CA1\u80FD\u81EA\u52A8\u6838\u5BF9\u3002",
+      openApplyLink: "\u6253\u5F00\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u7533\u8BF7\u8FD9\u4E9B\u6743\u9650",
+      openCheckLink: "\u6253\u5F00\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u6838\u5BF9\u5E76\u7533\u8BF7\u8FD9\u4E9B\u6743\u9650",
+      applyLink: "\u5F00\u653E\u5E73\u53F0\u5730\u5740\uFF1A\n{{url}}",
+      publishHint: "\u8BF7\u5E94\u7528\u7BA1\u7406\u5458\u6253\u5F00\u4E0A\u8FF0\u94FE\u63A5\u52FE\u9009\u6743\u9650\uFF0C\u518D\u5230\u300C\u5E94\u7528\u53D1\u5E03 \u2192 \u7248\u672C\u7BA1\u7406\u4E0E\u53D1\u5E03 \u2192 \u521B\u5EFA\u7248\u672C\u300D\u53D1\u5E03\u65B0\u7248\u672C\uFF0C\u56DE\u6765\u70B9\u300C\u68C0\u67E5\u8FDE\u63A5\u300D\u786E\u8BA4\u3002",
+      botHint: "\u542F\u7528\u673A\u5668\u4EBA\u8BF7\u5230\u300C\u5E94\u7528 \u2192 \u6DFB\u52A0\u5E94\u7528\u80FD\u529B \u2192 \u673A\u5668\u4EBA\u300D\uFF1B\u8FD9\u91CC\u4E0D\u68C0\u67E5\u673A\u5668\u4EBA\u80FD\u529B\u3002",
+      eventHint: "\u6536\u6D88\u606F\u9700\u8981\u5728\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u91CC\u628A\u4E8B\u4EF6\u8BA2\u9605\u548C\u56DE\u8C03\u8BA2\u9605\u90FD\u8BBE\u4E3A\u300C\u4F7F\u7528\u957F\u8FDE\u63A5\u300D\uFF0C\u518D\u6DFB\u52A0\u4E0B\u9762\u8FD9\u4E9B\uFF08\u8FD9\u91CC\u4E0D\u68C0\u67E5\uFF09\uFF1A\n\u4E8B\u4EF6\uFF1A{{events}}\n\u56DE\u8C03\uFF1A{{callbacks}}",
+      failed: "\u672A\u80FD\u6838\u5BF9\u5E94\u7528\u7684\u5FC5\u9700\u6743\u9650\uFF0C\u8BF7\u67E5\u770B\u9519\u8BEF\u8BE6\u60C5\u540E\u91CD\u8BD5\u3002",
       notLark: "\u8FD9\u4E00\u884C\u4E0D\u662F\u5DF2\u4FDD\u5B58\u7684\u98DE\u4E66\u673A\u5668\u4EBA\u3002"
     }
   },
@@ -139871,11 +140253,13 @@ var zh_CN_default = {
     connection: {
       failed: "\u4E0A\u6B21\u8FDE\u63A5\u6CA1\u6709\u6210\u529F\u3002",
       details: "\u8BE6\u60C5\uFF1A{{error}}",
+      reconnect: "\u53EF\u4EE5\u70B9\u4E0B\u65B9\u7684\u300C\u91CD\u65B0\u8FDE\u63A5\u300D\u518D\u8BD5\u3002",
       reason: {
         "not-available": "\u8FD9\u4E2A\u5E73\u53F0\u8FD8\u4E0D\u80FD\u8FDE\u63A5\u3002",
         "invalid-app-id": "App ID \u683C\u5F0F\u4E0D\u6B63\u786E\u3002",
         disconnected: "\u548C\u5E73\u53F0\u7684\u8FDE\u63A5\u65AD\u4E86\u3002",
         "subscription-failed": "\u5E73\u53F0\u6CA1\u6709\u786E\u8BA4\u8BA2\u9605\u3002",
+        "taken-over": "\u8FD9\u91CC\u7684\u8FDE\u63A5\u5DF2\u88AB\u522B\u5904\u53D6\u4EE3\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u91CD\u8FDE\u3002",
         "token-unavailable": "\u6CA1\u80FD\u6362\u5230\u8BBF\u95EE\u4EE4\u724C\u3002",
         "credentials-rejected": "\u5E73\u53F0\u62D2\u7EDD\u4E86\u51ED\u636E\u3002"
       },
@@ -139899,7 +140283,7 @@ var zh_CN_default = {
       done: "\u5B8C\u6210\u3002",
       close: "\u5173\u95ED",
       failedToRun: "\u6CA1\u80FD\u5728\u8FD9\u53F0\u673A\u5668\u4E0A\u8FD0\u884C\u3002",
-      saveFirst: "\u5148\u4FDD\u5B58\u6216\u64A4\u9500\u6539\u52A8\u3002\u8FD9\u51E0\u9879\u68C0\u67E5\u7684\u662F\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
+      saveFirst: "\u5148\u4FDD\u5B58\u6216\u64A4\u9500\u6539\u52A8\u3002\u8FD9\u4E9B\u52A8\u4F5C\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u8BBE\u7F6E\u3002",
       qrTitle: "\u7528\u98DE\u4E66 App \u626B\u7684\u4E8C\u7EF4\u7801"
     },
     step: {
@@ -139925,6 +140309,24 @@ var zh_CN_default = {
       callbackFollowsKeys: "\u6539\u4E86 Token \u6216 EncodingAESKey\uFF0C\u8FD9\u4E2A\u5730\u5740\u4F1A\u53D8\uFF0C\u8981\u91CD\u65B0\u8D34\u8FDB\u4F01\u4E1A\u5FAE\u4FE1\u3002"
     }
   },
+  mergeForward: {
+    title: "[\u5408\u5E76\u8F6C\u53D1\u7684\u804A\u5929\u8BB0\u5F55\uFF0C\u5171 {{count}} \u6761]",
+    nested: "[\u5D4C\u5957\u8F6C\u53D1\uFF0C\u5171 {{count}} \u6761]",
+    someone: "\u67D0\u4EBA",
+    bot: "\u673A\u5668\u4EBA",
+    unknownTime: "[\u65F6\u95F4\u672A\u77E5]",
+    resource: {
+      image: "\u56FE\u7247",
+      file: "\u6587\u4EF6",
+      audio: "\u8BED\u97F3",
+      video: "\u89C6\u9891",
+      folder: "\u6587\u4EF6\u5939"
+    },
+    unavailable: "[{{type}}\uFF1A\u6CA1\u80FD\u53D6\u5230]",
+    unavailableNamed: "[{{type}} {{name}}\uFF1A\u6CA1\u80FD\u53D6\u5230]",
+    omitted: "\u2026\u2026\u8FD8\u6709 {{count}} \u6761\u6CA1\u5217\u51FA",
+    truncated: "\u2026\u2026[\u6B63\u6587\u5DF2\u622A\u65AD]"
+  },
   team: {
     noRoster: "\u8FD9\u4E2A\u9879\u76EE\u8FD8\u6CA1\u6709\u56E2\u961F\u540D\u5355\uFF0C\u5148\u5728 Teams \u6807\u7B7E\u91CC\u4FDD\u5B58\u540D\u5355\u5E76\u9009\u4E00\u540D\u8D1F\u8D23\u4EBA\u3002",
     unavailable: "\u6682\u65F6\u8BFB\u4E0D\u5230\u8FD9\u4E2A\u9879\u76EE\u7684\u56E2\u961F\u540D\u5355\uFF0C\u8BF7\u786E\u8BA4 Teams \u63D2\u4EF6\u5DF2\u542F\u7528\u540E\u91CD\u8BD5\u3002",
@@ -140390,7 +140792,7 @@ var PANEL_PAGE_SIZE = 8;
 var PANEL_CARD_LIMIT = 200;
 var LABEL_MAX_CHARS = 60;
 var PICK_KINDS = /* @__PURE__ */ new Set(["sessions", "models", "projects"]);
-var clip2 = (label) => {
+var clip3 = (label) => {
   const chars = Array.from(label);
   return chars.length <= LABEL_MAX_CHARS ? label : `${chars.slice(0, LABEL_MAX_CHARS - 1).join("")}\u2026`;
 };
@@ -140415,7 +140817,7 @@ var makePanelController = (deps) => {
     }
   };
   const button = (label, op, arg, danger) => ({
-    label: clip2(label),
+    label: clip3(label),
     action: { op, arg },
     ...danger === true ? { danger } : {}
   });
@@ -140834,6 +141236,20 @@ var makeFailureNotices = (core) => {
   const heldForCard = /* @__PURE__ */ new Map();
   const reasonOf2 = (detail) => detail?.trim() ?? "";
   return {
+    /** 派发的参考号沿用同一次请求；原始错误只进日志。 */
+    forDispatchFailure: (threadId, requestId, error) => {
+      const reference2 = stableDiagnosticRef(
+        "msg",
+        (identityDigest(requestId, "turn") ?? requestId).replaceAll("-", "")
+      );
+      core.host.log.warn("chat could not start a turn", {
+        threadId,
+        requestId,
+        reference: reference2,
+        error: describeError(error)
+      });
+      return core.t("reply.turnFailedToStart", { ref: reference2 });
+    },
     /** 一次失败通知的那句话（带新参考号，同号进日志）：实时失败事件与重启补发各取一次。 */
     forFailure: (threadId, detail) => {
       const reference2 = diagnosticRef("msg");
@@ -141686,6 +142102,35 @@ var makeTeamGoals = (core) => {
 // src/telegramAdapter.ts
 import * as NodeCrypto5 from "node:crypto";
 
+// src/telegramApiResponse.ts
+var TelegramApiError = class extends Error {
+  code;
+  /** 限流（429）时平台给的等待秒数；别的错误没有。 */
+  retryAfterSeconds;
+  constructor(method, code2, description, retryAfterSeconds) {
+    super(`telegram ${method} failed (${String(code2 ?? "?")}): ${description}`);
+    this.name = "TelegramApiError";
+    this.code = code2;
+    this.retryAfterSeconds = retryAfterSeconds;
+  }
+};
+var isTelegramCredentialsRejected = (error) => error instanceof TelegramApiError && (error.code === 401 || error.code === 404);
+var readTelegramResponse = async (method, response) => {
+  const envelope = await response.json().catch((error) => {
+    if (response.ok) throw error;
+    return { ok: false, description: response.statusText || void 0 };
+  });
+  if (!response.ok || envelope?.ok !== true) {
+    throw new TelegramApiError(
+      method,
+      response.status === 401 ? 401 : envelope?.error_code ?? (response.ok ? void 0 : response.status),
+      envelope?.description ?? "no reason",
+      envelope?.parameters?.retry_after
+    );
+  }
+  return envelope.result;
+};
+
 // src/telegramApi.ts
 var API_BASE = "https://api.telegram.org";
 var POLL_TIMEOUT_SECONDS = 45;
@@ -141715,17 +142160,6 @@ var replyParameters = (messageId) => {
   return messageId === void 0 || !Number.isSafeInteger(id) ? {} : { reply_parameters: { message_id: id, allow_sending_without_reply: true } };
 };
 var chatOnly = (chatId) => ({ chat_id: splitChatId(chatId).chat });
-var TelegramApiError = class extends Error {
-  code;
-  /** 限流（429）时平台给的等待秒数；别的错误没有。 */
-  retryAfterSeconds;
-  constructor(method, code2, description, retryAfterSeconds) {
-    super(`telegram ${method} failed (${String(code2 ?? "?")}): ${description}`);
-    this.name = "TelegramApiError";
-    this.code = code2;
-    this.retryAfterSeconds = retryAfterSeconds;
-  }
-};
 var telegramSendVerdict = (error) => error instanceof TelegramApiError && (error.code === 429 || error.code === 503 && error.retryAfterSeconds !== void 0) ? {
   retry: true,
   afterMs: error.retryAfterSeconds === void 0 ? void 0 : error.retryAfterSeconds * 1e3
@@ -141760,7 +142194,6 @@ var resourceOf2 = (message) => {
     };
   }
   const media = [
-    [message.voice, "voice.ogg", "audio/ogg"],
     [message.audio, "audio", "application/octet-stream"],
     [message.video, "video.mp4", "video/mp4"],
     [message.video_note, "video-note.mp4", "video/mp4"],
@@ -141780,7 +142213,15 @@ var resourceOf2 = (message) => {
   return null;
 };
 var unsupportedTypeOf = (message) => {
-  for (const type of ["sticker", "location", "venue", "contact", "poll", "dice"]) {
+  for (const type of [
+    "voice",
+    "sticker",
+    "location",
+    "venue",
+    "contact",
+    "poll",
+    "dice"
+  ]) {
     if (message[type] !== void 0) return type;
   }
   return null;
@@ -141834,16 +142275,7 @@ var makeTelegramApi = (input) => {
       },
       timeoutMs
     );
-    const envelope = await response.json();
-    if (envelope.ok !== true) {
-      throw new TelegramApiError(
-        method,
-        envelope.error_code,
-        envelope.description ?? "no reason",
-        envelope.parameters?.retry_after
-      );
-    }
-    return envelope.result;
+    return readTelegramResponse(method, response);
   };
   const upload = async (method, field, chatId, file, replyMessageId) => {
     const form = new FormData();
@@ -141861,15 +142293,7 @@ var makeTelegramApi = (input) => {
       { method: "POST", body: form },
       UPLOAD_TIMEOUT_MS
     );
-    const envelope = await response.json();
-    if (envelope.ok !== true) {
-      throw new TelegramApiError(
-        method,
-        envelope.error_code,
-        envelope.description ?? "no reason",
-        envelope.parameters?.retry_after
-      );
-    }
+    await readTelegramResponse(method, response);
   };
   const keyboard = (rows) => ({
     inline_keyboard: rows.map(
@@ -142164,7 +142588,7 @@ var toTelegramRichMarkdown = (value2) => {
 
 // src/plainTurnText.ts
 var RUNNING_LABEL_MAX_CHARS = 200;
-var clip3 = (text4, max) => {
+var clip4 = (text4, max) => {
   const chars = Array.from(text4);
   return chars.length <= max ? text4 : `${chars.slice(0, max - 1).join("")}\u2026`;
 };
@@ -142173,7 +142597,7 @@ var turnTextParts = (view, t) => {
   if (view.omitted > 0) names.unshift(t("card.step.omitted", { count: view.omitted }));
   const headLines = [view.title === "" ? t("card.untitled") : view.title];
   if (names.length > 0) headLines.push(names.join(" \u2192 "));
-  if (view.running !== null) headLines.push(`\u{1F527} ${clip3(view.running, RUNNING_LABEL_MAX_CHARS)}`);
+  if (view.running !== null) headLines.push(`\u{1F527} ${clip4(view.running, RUNNING_LABEL_MAX_CHARS)}`);
   const body = view.body.trim();
   const footLines = [];
   if (view.status === "working") {
@@ -142247,6 +142671,7 @@ var TELEGRAM_CARD_THROTTLE_MS = 1200;
 var FLOOD_WAIT_MAX_SECONDS = 30;
 var REMEMBERED_CARD_LIMIT = 200;
 var tokenOf = (binding) => (binding.values["telegramToken"] ?? "").trim();
+var tokenFingerprint = (bot) => NodeCrypto5.createHash("sha256").update(tokenOf(bot)).digest("hex");
 var REACTION_WORKING = "\u{1F440}";
 var REACTION_DONE = "\u{1F44D}";
 var REACTION_FAILED = "\u{1F44E}";
@@ -142353,6 +142778,7 @@ var makeTelegramAdapter = (deps) => {
   });
   return {
     platform: "telegram",
+    botIdentity: tokenFingerprint,
     icon: "telegram",
     label: "Telegram",
     quotesReplies: true,
@@ -142364,7 +142790,7 @@ var makeTelegramAdapter = (deps) => {
       };
       const stopped = new Promise((resolve) => stop = resolve);
       let running = true;
-      const tokenHash = NodeCrypto5.createHash("sha256").update(tokenOf(binding)).digest("hex");
+      const tokenHash = tokenFingerprint(binding);
       let offset = deps.readCursor(binding.rowId, tokenHash);
       const advanceOffset = (update) => {
         offset = nextOffset([update], offset ?? 0);
@@ -142450,7 +142876,7 @@ var makeTelegramAdapter = (deps) => {
               const gated = !passesGroupGate2({
                 message,
                 text: text4,
-                hasResource: resource !== null,
+                hasResource: resource !== null || message.voice !== void 0,
                 botUsername: botUsername ?? null,
                 groupMention: binding.groupMention
               });
@@ -142465,9 +142891,9 @@ var makeTelegramAdapter = (deps) => {
               if (!running) break;
               advanceOffset(update);
               const senderId = message.from === void 0 ? null : String(message.from.id);
-              const senderName = telegramDisplayName(message.from);
+              const senderName2 = telegramDisplayName(message.from);
               const chatKind = message.chat.type === "private" ? "private" : "group";
-              if (text4 === "" && resource === null) {
+              if (message.voice !== void 0 || text4 === "" && resource === null) {
                 const unsupported = unsupportedTypeOf(message);
                 if (unsupported === null) continue;
                 handlers.onMessage({
@@ -142489,7 +142915,7 @@ var makeTelegramAdapter = (deps) => {
                 ...parentChatId === void 0 ? {} : { parentChatId },
                 senderId,
                 text: text4,
-                ...senderName ? { senderName } : {},
+                ...senderName2 ? { senderName: senderName2 } : {},
                 ...message.chat.title ? { chatTitle: message.chat.title } : {},
                 ...replyTo === null ? {} : { replyTo },
                 chatKind,
@@ -142506,6 +142932,17 @@ var makeTelegramAdapter = (deps) => {
             }
           } catch (error) {
             if (!running) return;
+            if (isTelegramCredentialsRejected(error)) {
+              running = false;
+              stop();
+              handlers.onConnectionState?.({
+                state: "failed",
+                reason: "credentials-rejected",
+                hint: "unauthorized",
+                error
+              });
+              return;
+            }
             if (checkingConnection) handlers.onConnectionState?.({ state: "failed", error });
             handlers.onError(error instanceof Error ? error.message : String(error));
             await Promise.race([(deps.sleep ?? defaultSleep)(backoff), stopped]);
@@ -142517,9 +142954,9 @@ var makeTelegramAdapter = (deps) => {
       deps.log.info("telegram polling", { bot: binding.displayName });
       return {
         close: () => {
+          if (running) publishAck();
           running = false;
           stop();
-          publishAck();
           apis.delete(binding.rowId);
         }
       };
@@ -142550,12 +142987,11 @@ var makeTelegramAdapter = (deps) => {
         }
         username = me.username !== void 0 && me.username !== "" ? `@${me.username}` : "(no username)";
       } catch (error) {
-        const rejected = error instanceof TelegramApiError && (error.code === 401 || error.code === 404);
         return {
           stage: "getMe",
           ok: false,
           detail: describeError(error),
-          ...rejected ? { hint: "unauthorized" } : {}
+          ...isTelegramCredentialsRejected(error) ? { hint: "unauthorized" } : {}
         };
       }
       try {
@@ -142717,12 +143153,96 @@ ${line}`
 
 // src/turns.ts
 import { projectOrNull as projectOrNull2, threadOrNull as threadOrNull8 } from "@ycodium-ai/plugin-api";
+
+// src/dispatchRetry.ts
+var RETRY_DELAYS_MS = [1e3, 3e3];
+var retryable2 = (error) => {
+  if (typeof error !== "object" || error === null || !("_tag" in error)) return true;
+  const reason = "reason" in error ? error.reason : void 0;
+  switch (error._tag) {
+    case "PluginCapabilityError":
+      return reason === void 0 || reason === "host-unavailable";
+    case "DataCommandError":
+      return reason === "unavailable";
+    case "EnvironmentAuthorizationError":
+      return false;
+    case "OrchestrationDispatchCommandError":
+      return reason == null && (!("rejection" in error) || error.rejection == null);
+    default:
+      return true;
+  }
+};
+var dispatchTurnWithRetry = async (start, input, options = {}) => {
+  const sleep3 = options.sleep ?? abortableSleep;
+  for (let attempt = 0; ; attempt += 1) {
+    if (options.signal?.aborted) throw new Error("aborted");
+    try {
+      return await start(input);
+    } catch (error) {
+      const delay = RETRY_DELAYS_MS[attempt];
+      if (delay === void 0 || !retryable2(error)) throw error;
+      await sleep3(delay, options.signal);
+    }
+  }
+};
+
+// src/dispatchReceipt.ts
+var dispatchTurnWithReceipt = async (host, input, options) => {
+  try {
+    await dispatchTurnWithRetry((next) => host.threads.turns.start(next), input, options);
+  } catch (error) {
+    if (options.signal.aborted) throw error;
+    let receipt;
+    try {
+      receipt = await host.commands.getReceipt({
+        commandId: input.requestId,
+        commandType: "thread.turn.start",
+        threadId: input.threadId
+      });
+    } catch (receiptError) {
+      host.log.warn("chat could not read a turn command receipt", {
+        requestId: input.requestId,
+        threadId: input.threadId,
+        error: describeError(receiptError)
+      });
+      throw error;
+    }
+    if (options.signal.aborted) throw error;
+    if (receipt.status === "accepted") return;
+    if (receipt.status === "rejected")
+      throw new Error(receipt.error ?? "turn command rejected", { cause: error });
+    throw error;
+  }
+};
+
+// src/messageIdentity.ts
+import * as NodeCrypto6 from "node:crypto";
+var messageIdentity = (operation, bot, message, adapter) => {
+  const tuple = [
+    IDENTITY_VERSION,
+    operation,
+    adapter.platform,
+    adapter.botIdentity(bot),
+    message.originalChatId ?? message.chatId,
+    message.messageId
+  ];
+  return `${identityPrefix(operation)}${NodeCrypto6.createHash("sha256").update(JSON.stringify(tuple)).digest("hex")}`;
+};
+
+// src/turns.ts
 var TITLE_MAX_CHARS = 72;
 var titleFrom = (text4) => text4.replace(/\s+/g, " ").slice(0, TITLE_MAX_CHARS) || "Chat thread";
 var makeTurns = (core, deps) => {
   const { host, t, commit, bindChat, deliver } = core;
   const { queueFlow, rememberThreadProject } = deps;
   const { pendingByChat, pendingFor, collectResources } = deps.attachments;
+  const dispatchAbort = new AbortController();
+  host.onDispose(() => dispatchAbort.abort());
+  const identity = (operation, binding, message) => {
+    const adapter = core.adapterFor(binding.platform);
+    if (adapter === void 0) throw new Error(`missing IM adapter: ${binding.platform}`);
+    return messageIdentity(operation, binding, message, adapter);
+  };
   const threadStillUsable = async (binding, threadId) => {
     try {
       const thread = await threadOrNull8(host.threads, threadId, { archived: "include" });
@@ -142736,7 +143256,7 @@ var makeTurns = (core, deps) => {
     return waiting !== void 0 && waiting.threadId === threadId ? waiting : void 0;
   };
   const interactionModeOf = (chatKey) => chatOf(core.state, chatKey).plan ? "plan" : "default";
-  const ensureThread = async (binding, titleSeed) => {
+  const ensureThread = async (binding, message) => {
     const chatKey = chatKeyOf(binding);
     let threadId = chatOf(core.state, chatKey).threadId ?? void 0;
     if (threadId !== void 0 && !await threadStillUsable(binding, threadId)) {
@@ -142766,12 +143286,12 @@ var makeTurns = (core, deps) => {
       await deliver(binding, t("reply.noDefaultModel", { title: project.title }));
       return null;
     }
-    const createdThreadId = crypto.randomUUID();
+    const createdThreadId = identity("thread", binding, message);
     await host.threads.create({
-      requestId: crypto.randomUUID(),
+      requestId: identity("create", binding, message),
       threadId: createdThreadId,
       projectId: binding.projectId,
-      title: titleFrom(titleSeed),
+      title: titleFrom(message.text || message.resources[0]?.name || "Chat"),
       modelSelection,
       runtimeMode: binding.runtimeMode,
       interactionMode: interactionModeOf(chatKey),
@@ -142790,7 +143310,7 @@ var makeTurns = (core, deps) => {
   const startTurn = async (binding, message) => {
     const chatKey = chatKeyOf(binding);
     const text4 = message.text;
-    const threadId = await ensureThread(binding, text4 || message.resources[0]?.name || "Chat");
+    const threadId = await ensureThread(binding, message);
     if (threadId === null) return null;
     const topicRoot = await message.topicRootForSession?.(threadId);
     const carried = waitingFor(chatKey, threadId);
@@ -142804,7 +143324,7 @@ var makeTurns = (core, deps) => {
     );
     const attachments = [...carried?.attachments ?? [], ...own.attachments];
     const notes = [...carried?.notes ?? [], ...own.notes];
-    const userMessageId = crypto.randomUUID();
+    const userMessageId = identity("msg", binding, message);
     deps.anchors.note(threadId, userMessageId, binding);
     let intentAction;
     if (binding.queueMode === "steer") {
@@ -142816,33 +143336,39 @@ var makeTurns = (core, deps) => {
             kind: "steer",
             source: "automatic",
             turnId: activeTurnId,
-            commandId: crypto.randomUUID()
+            commandId: identity("steer", binding, message)
           };
         }
       } catch {
       }
     }
     const registered = deps.conclusions.starting(threadId);
+    const requestId = identity("turn", binding, message);
+    let failureNotice;
     try {
-      await host.threads.turns.start({
-        requestId: crypto.randomUUID(),
-        threadId,
-        message: {
-          messageId: userMessageId,
-          role: "user",
-          text: [
-            textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
-            ...notes
-          ].join("\n"),
-          attachments: attachments.map(
-            (attachment) => attachment.type === "image" ? { ...attachment, type: "image" } : { ...attachment, type: "file" }
-          )
+      await dispatchTurnWithReceipt(
+        host,
+        {
+          requestId,
+          threadId,
+          message: {
+            messageId: userMessageId,
+            role: "user",
+            text: [
+              textWithInboundContext(message, binding.rowId, t, topicRoot?.reference),
+              ...notes
+            ].join("\n"),
+            attachments: attachments.map(
+              (attachment) => attachment.type === "image" ? { ...attachment, type: "image" } : { ...attachment, type: "file" }
+            )
+          },
+          titleSeed: titleFrom(text4 || attachments[0]?.name || "Chat"),
+          runtimeMode: binding.runtimeMode,
+          interactionMode: interactionModeOf(chatKey),
+          ...intentAction !== void 0 ? { intentAction } : {}
         },
-        titleSeed: titleFrom(text4 || attachments[0]?.name || "Chat"),
-        runtimeMode: binding.runtimeMode,
-        interactionMode: interactionModeOf(chatKey),
-        ...intentAction !== void 0 ? { intentAction } : {}
-      });
+        { sleep: deps.dispatchSleep, signal: dispatchAbort.signal }
+      );
       topicRoot?.confirmConsumed();
       if (intentAction?.kind !== "steer") {
         deps.conclusions.owe({
@@ -142854,10 +143380,15 @@ var makeTurns = (core, deps) => {
       }
     } catch (error) {
       if (carried !== void 0) pendingByChat.set(chatKey, carried);
-      throw error;
+      if (dispatchAbort.signal.aborted) return null;
+      failureNotice = deps.failures.forDispatchFailure(threadId, requestId, error);
     } finally {
       registered();
     }
+    if (failureNotice !== void 0) {
+      await deliver(binding, failureNotice);
+      return null;
+    }
     deps.noteInboundUserMessage?.(userMessageId);
     host.log.info("chat started a turn from a message", {
       bot: binding.displayName,
@@ -142874,7 +143405,7 @@ var makeTurns = (core, deps) => {
     return threadId;
   };
   const receiveAttachmentsOnly = async (binding, message) => {
-    const threadId = await ensureThread(binding, message.resources[0]?.name || "Chat");
+    const threadId = await ensureThread(binding, message);
     if (threadId === null) return;
     const waiting = pendingFor(chatKeyOf(binding), threadId);
     const collected = await collectResources(
@@ -142956,6 +143487,84 @@ var makeWebSync = (core) => {
   return { noteInboundUserMessage };
 };
 
+// src/lark/setup/repairScopes.ts
+var SUBSCRIPTIONS = { events: APP_EVENTS.join(", "), callbacks: CARD_CALLBACKS.join(", ") };
+var repairLarkScopes = async (http, bot, emit, ref, redactor) => {
+  const { appId, appSecret, error: credentialError } = larkCredentials(bot);
+  const steps = (token2, scopes) => emit({
+    kind: "steps",
+    steps: [
+      { id: "token", labelKey: "rowAction.larkRepair.step.token", state: token2 },
+      ...scopes === void 0 ? [] : [{ id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: scopes }]
+    ]
+  });
+  const fail = (error, credentials2 = false) => {
+    const hint = credentials2 ? "larkCredentials" : larkConnectionHint(error);
+    emit({
+      kind: "failed",
+      reasonKey: hint === void 0 ? "rowAction.larkRepair.failed" : connectionHintKey(hint),
+      params: { ref, ...hint === void 0 ? {} : { hint } },
+      detail: redactor.redact(describeError(error))
+    });
+  };
+  steps("running", "pending");
+  if (credentialError !== void 0) {
+    steps("failed");
+    fail(new Error(credentialError), true);
+    return;
+  }
+  let token;
+  try {
+    ({ token } = await fetchTenantToken({ http, appId, appSecret }));
+    redactor.register(token);
+  } catch (error) {
+    steps("failed");
+    fail(error);
+    return;
+  }
+  steps("done", "running");
+  let granted;
+  try {
+    granted = await fetchAppTenantScopes({ http, token });
+  } catch (error) {
+    if (error instanceof LarkApiError && (error.status === 400 || error.status === 403 || isLarkPermissionCode(error.code))) {
+      granted = void 0;
+    } else {
+      steps("done", "failed");
+      fail(error);
+      return;
+    }
+  }
+  const missing = granted === void 0 ? SCOPES : SCOPES.filter((scope) => !granted.includes(scope));
+  steps("done", granted === void 0 ? "failed" : "done");
+  const needsAction = missing.length > 0;
+  const url = `${CONSOLE_ORIGIN}${CONSOLE_APP_PATH}/${appId}/auth?q=${missing.join(",")}&op_from=openapi&token_type=tenant`;
+  emit({
+    kind: "done",
+    fills: {},
+    ...granted === void 0 || needsAction ? { tone: "caution" } : {},
+    ...needsAction ? {
+      link: {
+        url,
+        labelKey: granted === void 0 ? "rowAction.larkRepair.openCheckLink" : "rowAction.larkRepair.openApplyLink"
+      }
+    } : {},
+    messageKey: granted === void 0 ? "rowAction.larkRepair.unverified" : needsAction ? "rowAction.larkRepair.missing" : "rowAction.larkRepair.allGranted",
+    warnings: [
+      ...needsAction ? [
+        {
+          key: granted === void 0 ? "rowAction.larkRepair.requiredScopes" : "rowAction.larkRepair.missingScopes",
+          params: { scopes: missing.join("\n") }
+        },
+        { key: "rowAction.larkRepair.applyLink", params: { url } },
+        { key: "rowAction.larkRepair.publishHint" }
+      ] : [],
+      { key: "rowAction.larkRepair.botHint" },
+      { key: "rowAction.larkRepair.eventHint", params: SUBSCRIPTIONS }
+    ]
+  });
+};
+
 // src/settingsRowActions.ts
 var ROW_PAYLOAD_SCHEMA = {
   type: "object",
@@ -143023,19 +143632,21 @@ var emitReport = (emit, report, action) => {
     });
     return;
   }
-  const suggested = report.hint !== void 0 && action.keyPrefix === "rowAction.checkConnection";
+  const connectionReasonKey = report.hint === void 0 ? "rowAction.checkConnection.failed" : connectionHintKey(report.hint);
+  const copying = action.keyPrefix === "rowAction.copyDiagnostics";
   emit({
     kind: "failed",
-    reasonKey: suggested && report.hint !== void 0 ? connectionHintKey(report.hint) : `${action.keyPrefix}.failed`,
+    reasonKey: copying ? "rowAction.copyDiagnostics.done" : connectionReasonKey,
     // 参考号由界面写在细节第一行（「参考号：…」），结论句里不带。
     params: {
       ref: report.ref,
-      ...suggested && report.hint !== void 0 ? { hint: report.hint } : {}
+      ...report.hint === void 0 ? {} : { hint: report.hint }
     },
+    ...copying ? { noteKey: connectionReasonKey } : {},
     detail
   });
 };
-var registerSettingsRowActions = (ctx, adapters) => {
+var registerSettingsRowActions = (ctx, adapters, connections) => {
   const resolveBot = (rowId) => botOf(ctx.config, adapters, rowId);
   const registerProbeAction = (action) => {
     ctx.stream({
@@ -143063,6 +143674,26 @@ var registerSettingsRowActions = (ctx, adapters) => {
     keyPrefix: "rowAction.checkConnection",
     copyable: false
   });
+  ctx.stream({
+    name: BOT_ACTION_COMMANDS.reconnect,
+    description: "Restart only this IM bot's connection using its saved settings.",
+    scope: "operate",
+    payloadSchema: ROW_PAYLOAD_SCHEMA,
+    itemSchema: ROW_ACTION_ITEM_SCHEMA,
+    buffer: { latest: 8 },
+    handle: async (payload, emit) => {
+      const rowId = typeof payload["rowId"] === "string" ? payload["rowId"] : "";
+      emit({ kind: "status", statusKey: "rowAction.reconnect.running", params: { rowId } });
+      if (resolveBot(rowId) === void 0) {
+        emit({ kind: "failed", reasonKey: "rowAction.reconnect.notSaved" });
+        return;
+      }
+      const result = connections.reconnect(rowId);
+      emit(
+        result.started ? { kind: "done", fills: {}, messageKey: "rowAction.reconnect.done" } : { kind: "failed", reasonKey: `rowAction.reconnect.${result.reason}` }
+      );
+    }
+  });
   registerProbeAction({
     name: BOT_ACTION_COMMANDS.copyDiagnostics,
     summary: "Probe an IM bot and return a copy-paste diagnostic report.",
@@ -143071,7 +143702,7 @@ var registerSettingsRowActions = (ctx, adapters) => {
   });
   ctx.stream({
     name: BOT_ACTION_COMMANDS.larkRepair,
-    description: "Guide Lark scope repair and verify the saved app can still mint a token.",
+    description: "Check required Lark scopes through the public API and list manual repair steps.",
     scope: "operate",
     payloadSchema: ROW_PAYLOAD_SCHEMA,
     itemSchema: ROW_ACTION_ITEM_SCHEMA,
@@ -143080,15 +143711,6 @@ var registerSettingsRowActions = (ctx, adapters) => {
       const rowId = typeof payload["rowId"] === "string" ? payload["rowId"] : "";
       const send = (item) => emit(item);
       const ref = diagnosticRef("setup");
-      send({
-        kind: "steps",
-        steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
-          { id: "verify", labelKey: "rowAction.larkRepair.step.verify", state: "running" }
-        ]
-      });
       const bot = resolveBot(rowId);
       if (bot === void 0 || bot.platform !== "lark") {
         send({
@@ -143098,40 +143720,14 @@ var registerSettingsRowActions = (ctx, adapters) => {
         });
         return;
       }
-      const report = await probe(adapters, bot);
-      send({
-        kind: "steps",
-        steps: [
-          { id: "scopes", labelKey: "rowAction.larkRepair.step.scopes", state: "skipped" },
-          { id: "events", labelKey: "rowAction.larkRepair.step.events", state: "skipped" },
-          { id: "publish", labelKey: "rowAction.larkRepair.step.publish", state: "skipped" },
-          {
-            id: "verify",
-            labelKey: "rowAction.larkRepair.step.verify",
-            state: report.ok ? "done" : "failed"
-          }
-        ]
-      });
-      if (report.ok) {
-        send({
-          kind: "done",
-          fills: {},
-          messageKey: "rowAction.larkRepair.done",
-          warnings: [
-            {
-              key: "rowAction.larkRepair.hint",
-              params: { ref, detail: formatDiagnosticCopy(report) }
-            }
-          ]
-        });
-        return;
-      }
-      send({
-        kind: "failed",
-        reasonKey: "rowAction.larkRepair.failed",
-        params: { ref },
-        detail: formatDiagnosticCopy(report)
-      });
+      const lark = adapters.find((adapter) => adapter.platform === "lark");
+      await repairLarkScopes(
+        ctx.http,
+        bot,
+        send,
+        ref,
+        botRedactor(lark?.columns ?? [], bot.values)
+      );
     }
   });
 };
@@ -143460,6 +144056,7 @@ var wechatConfigIssues = (bot) => tokenOf2(bot) === "" ? [{ column: "wechatBotTo
 var makeWechatAdapter = (deps) => {
   return {
     platform: "wechat",
+    botIdentity: () => "wechat-stub",
     icon: "wechat",
     // 平台名与设置表的平台选项同一个键，免得默认机器人名与选项写成两种叫法。
     label: deps.translate("platform.wechat"),
@@ -143495,7 +144092,7 @@ var makeWechatAdapter = (deps) => {
 };
 
 // src/wecomUpload.ts
-import * as NodeCrypto6 from "node:crypto";
+import * as NodeCrypto7 from "node:crypto";
 var WECOM_CHUNK_BYTES = 512 * 1024;
 var WECOM_MAX_CHUNKS = 100;
 var WECOM_MIN_UPLOAD_BYTES = 5;
@@ -143528,7 +144125,7 @@ var uploadWecomMedia = async (input) => {
     filename: clampName(input.filename),
     total_size: bytes.byteLength,
     total_chunks: totalChunks,
-    md5: NodeCrypto6.createHash("md5").update(bytes).digest("hex")
+    md5: NodeCrypto7.createHash("md5").update(bytes).digest("hex")
   });
   const uploadId = init.upload_id;
   if (typeof uploadId !== "string" || uploadId === "") {
@@ -143707,6 +144304,26 @@ var parseWecomMessage = (frame, botId) => {
 };
 var splitForWecom = (text4, limit = WECOM_TEXT_MAX_CHARS) => splitMessage(text4, limit);
 var decoder = new TextDecoder();
+var WecomAckError = class extends Error {
+  code;
+  constructor(code2, msg) {
+    super(`WeCom ack failed: ${String(code2)} ${msg}`);
+    this.name = "WecomAckError";
+    this.code = code2;
+  }
+};
+var subscriptionHint = (error) => {
+  if (!(error instanceof WecomAckError)) return void 0;
+  switch (error.code) {
+    case 853e3:
+    case 40058:
+      return "wecomBotCredentials";
+    case 846601:
+      return "wecomLongConnOff";
+    default:
+      return void 0;
+  }
+};
 var runWecomClient = (input) => {
   let sequence = 0;
   const nextRequestId = (kind) => `${kind}_${++sequence}`;
@@ -143737,32 +144354,47 @@ var runWecomClient = (input) => {
     if (typeof frame !== "object" || frame === null) return;
     const requestId = frame.headers?.req_id;
     if (typeof frame.cmd !== "string") {
-      if (typeof requestId !== "string") return;
+      const error = typeof frame.errcode === "number" && frame.errcode !== 0 ? new WecomAckError(frame.errcode, frame.errmsg ?? "") : null;
+      if (typeof requestId !== "string") {
+        if (error !== null) settleAck(subscribeId, error, frame);
+        return;
+      }
       if (requestId.startsWith("ping")) {
         missedPong = 0;
         return;
       }
-      const error = typeof frame.errcode === "number" && frame.errcode !== 0 ? new Error(`WeCom ack failed: ${String(frame.errcode)} ${frame.errmsg ?? ""}`) : null;
       const stream = openStreams.get(requestId);
       if (stream !== void 0 && error !== null) stream.failed = true;
       settleAck(requestId, error, frame);
       return;
     }
+    if (frame.cmd === "aibot_event_callback" && frame.body?.event?.eventtype === "disconnected_event") {
+      finish("taken-over");
+      return;
+    }
     if (frame.cmd !== "aibot_msg_callback") return;
     const message = parseWecomMessage(frame, input.botId);
     if (message !== null) input.handlers.onMessage(message);
   };
-  const finish = (error = new Error("WeCom connection closed"), reason = "disconnected") => {
+  const finish = (reason = "disconnected", error = reason === "taken-over" ? void 0 : new Error("WeCom connection closed")) => {
     if (finished) return;
     finished = true;
-    if (!closed) input.handlers.onConnectionState?.({ state: "failed", error, reason });
+    const hint = reason === "taken-over" ? "wecomTakenOver" : reason === "subscription-failed" ? subscriptionHint(error) : void 0;
+    const failureReason = hint === "wecomBotCredentials" ? "credentials-rejected" : reason;
+    if (!closed)
+      input.handlers.onConnectionState?.({
+        state: "failed",
+        ...error === void 0 ? {} : { error },
+        reason: failureReason,
+        ...hint === void 0 ? {} : { hint }
+      });
     clearInterval(heartbeat);
     openStreams.clear();
     void input.socket.close().catch(() => void 0);
     for (const requestId of pendingAcks.keys()) {
       settleAck(requestId, new Error("WeCom connection closed"));
     }
-    ended.resolve();
+    ended.resolve(failureReason === "subscription-failed" ? "disconnected" : failureReason);
   };
   const readLoop = async () => {
     try {
@@ -143773,7 +144405,7 @@ var runWecomClient = (input) => {
       if (!closed) {
         input.handlers.onError(error instanceof Error ? error.message : String(error));
       }
-      finish(error);
+      finish("disconnected", error);
     }
     finish();
   };
@@ -143781,7 +144413,7 @@ var runWecomClient = (input) => {
     if (finished) return;
     if (missedPong >= MAX_MISSED_PONGS) {
       input.handlers.onError("socket hang up: missed pong");
-      finish(new Error("socket hang up: missed pong"));
+      finish("disconnected", new Error("socket hang up: missed pong"));
       return;
     }
     missedPong += 1;
@@ -143808,7 +144440,7 @@ var runWecomClient = (input) => {
     },
     (error) => {
       if (!closed) input.handlers.onError(error instanceof Error ? error.message : String(error));
-      finish(error, "subscription-failed");
+      finish("subscription-failed", error);
       return false;
     }
   );
@@ -143943,7 +144575,7 @@ var runWecomClient = (input) => {
 };
 
 // src/wecomMedia.ts
-import * as NodeCrypto7 from "node:crypto";
+import * as NodeCrypto8 from "node:crypto";
 
 // src/wecomPadding.ts
 var PADDING_BLOCK = 32;
@@ -143974,7 +144606,7 @@ var decryptWecomMedia = (cipher, aesKey) => {
   if (cipher.byteLength === 0 || cipher.byteLength % AES_BLOCK !== 0) {
     throw new WecomDecryptError("the ciphertext is not a whole number of blocks");
   }
-  const decipher = NodeCrypto7.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
+  const decipher = NodeCrypto8.createDecipheriv("aes-256-cbc", key, key.subarray(0, IV_BYTES));
   decipher.setAutoPadding(false);
   const plain = Buffer.concat([decipher.update(cipher), decipher.final()]);
   const unpadded = stripPadding(plain);
@@ -144038,13 +144670,13 @@ var COLUMNS4 = [
   { key: "wecomBotSecret", kind: "password", labelKey: "column.wecomBotSecret.label" }
 ];
 var defaultSleep2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-var credentials2 = (binding) => ({
+var credentials = (binding) => ({
   botId: binding.values["wecomBotId"] ?? "",
   botSecret: binding.values["wecomBotSecret"] ?? "",
   endpoint: normalizeWecomEndpoint(binding.values["wecomEndpoint"] || DEFAULT_WECOM_ENDPOINT)
 });
 var wecomConfigIssues = (binding) => {
-  const { botId, botSecret } = credentials2(binding);
+  const { botId, botSecret } = credentials(binding);
   const issues = [];
   if (botId === "") issues.push({ column: "wecomBotId", code: "required" });
   if (botSecret === "") issues.push({ column: "wecomBotSecret", code: "required" });
@@ -144052,6 +144684,7 @@ var wecomConfigIssues = (binding) => {
 };
 var makeWecomAdapter = (deps) => {
   const clients = /* @__PURE__ */ new Map();
+  const managedConnections = /* @__PURE__ */ new Map();
   const t = deps.translate;
   const liveStreams = /* @__PURE__ */ new Map();
   const rememberStream = (key, entry) => {
@@ -144090,6 +144723,7 @@ ${kept}`;
   };
   return {
     platform: "wecom",
+    botIdentity: (bot) => credentials(bot).botId,
     icon: "wecom",
     label: "WeCom",
     columns: COLUMNS4,
@@ -144097,15 +144731,22 @@ ${kept}`;
     validate: wecomConfigIssues,
     isConfigured: (binding) => wecomConfigIssues(binding).length === 0,
     connect: (binding, handlers) => {
-      const { botId, botSecret, endpoint } = credentials2(binding);
+      const { botId, botSecret, endpoint } = credentials(binding);
+      const managed = { endpoint };
+      managedConnections.set(binding.rowId, managed);
       let stopped = false;
       let current = null;
       const stopSignal = Promise.withResolvers();
+      const onConnectionState = (state) => {
+        if (stopped) return;
+        managed.state = state;
+        handlers.onConnectionState?.(state);
+      };
       const runOnce = async () => {
         const socket = await deps.connectSocket(endpoint);
         if (stopped) {
           await socket.close();
-          return false;
+          return { healthy: false, stopRetrying: false };
         }
         const client = runWecomClient({
           socket: {
@@ -144117,9 +144758,7 @@ ${kept}`;
           botSecret,
           handlers: {
             onError: handlers.onError,
-            onConnectionState: (state) => {
-              if (!stopped) handlers.onConnectionState?.(state);
-            },
+            onConnectionState,
             onMessage: (message) => {
               if (message.chatType !== "single") return;
               client.rememberRequest(message.chatId, message.requestId);
@@ -144149,20 +144788,25 @@ ${kept}`;
           if (ok) deps.log.info("wecom connected", { bot: binding.displayName });
           return ok;
         });
-        await client.ended;
+        const reason = await client.ended;
         if (clients.get(binding.rowId) === client) clients.delete(binding.rowId);
         current = null;
-        return healthy;
+        return {
+          healthy: await healthy,
+          stopRetrying: reason === "taken-over" || reason === "credentials-rejected"
+        };
       };
       const supervise = async () => {
         let backoff = BACKOFF_START_MS2;
         for (; ; ) {
           if (stopped) return;
           try {
-            if (await runOnce()) backoff = BACKOFF_START_MS2;
+            const result = await runOnce();
+            if (result.stopRetrying) return;
+            if (result.healthy) backoff = BACKOFF_START_MS2;
           } catch (error) {
             if (stopped) return;
-            handlers.onConnectionState?.({ state: "failed", error, reason: "disconnected" });
+            onConnectionState({ state: "failed", error, reason: "disconnected" });
             handlers.onError(error instanceof Error ? error.message : String(error));
           }
           if (stopped) return;
@@ -144177,6 +144821,9 @@ ${kept}`;
           stopped = true;
           stopSignal.resolve();
           current?.close();
+          if (managedConnections.get(binding.rowId) === managed) {
+            managedConnections.delete(binding.rowId);
+          }
         }
       };
     },
@@ -144189,12 +144836,33 @@ ${kept}`;
       await client.sendText(binding.chatId, text4);
     },
     checkConnection: async (bot) => {
-      const { botId, botSecret, endpoint } = credentials2(bot);
+      const managed = managedConnections.get(bot.rowId);
+      if (managed !== void 0) {
+        const state = managed.state;
+        const detail = `managed connection, ${managed.endpoint}`;
+        if (state?.state === "connected") {
+          return {
+            stage: "aibot_subscribe",
+            ok: true,
+            detail: `subscription confirmed (${detail})`
+          };
+        }
+        return {
+          stage: "aibot_subscribe",
+          ok: false,
+          detail: state === void 0 ? `connecting (${detail})` : `${state.error === void 0 ? state.reason ?? "connection failed" : describeError(state.error)} (${detail})`,
+          // 还没回报状态只是开连到订阅回执之间：宿主开连 10 秒、订阅回执 10 秒（wecomApi 的 SUBSCRIBE_TIMEOUT_MS）
+          // 都会超时转 failed，所以不会一直停在「还在连接」。
+          ...state === void 0 ? { hint: "connecting" } : state.state === "failed" && state.hint !== void 0 ? { hint: state.hint } : {}
+        };
+      }
+      const { botId, botSecret, endpoint } = credentials(bot);
       if (botId === "" || botSecret === "") {
         return {
           stage: "credentials",
           ok: false,
-          detail: "missing bot id or secret in saved config"
+          detail: "missing bot id or secret in saved config",
+          hint: "wecomBotCredentials"
         };
       }
       let stage = "websocket";
@@ -144202,6 +144870,7 @@ ${kept}`;
         const socket = await deps.connectSocket(endpoint);
         stage = "aibot_subscribe";
         let detail = "WeCom connection closed before subscribe ack";
+        let hint;
         let closing;
         const client = runWecomClient({
           socket: {
@@ -144213,6 +144882,9 @@ ${kept}`;
           botSecret,
           handlers: {
             onMessage: () => void 0,
+            onConnectionState: (state) => {
+              if (state.state === "failed") hint = state.hint;
+            },
             onError: (error) => {
               detail = error;
             }
@@ -144220,7 +144892,12 @@ ${kept}`;
         });
         try {
           const ok = await client.ready;
-          return { stage, ok, detail: ok ? `subscription confirmed (${endpoint})` : detail };
+          return {
+            stage,
+            ok,
+            detail: ok ? `subscription confirmed (${endpoint})` : detail,
+            ...!ok && hint !== void 0 ? { hint } : {}
+          };
         } finally {
           client.close();
           await closing;
@@ -144572,7 +145249,7 @@ import * as NodeHttp2 from "node:http";
 import * as NodeNet from "node:net";
 
 // src/wecomAppCrypto.ts
-import * as NodeCrypto8 from "node:crypto";
+import * as NodeCrypto9 from "node:crypto";
 var AES_KEY_BYTES = 32;
 var RANDOM_BYTES = 16;
 var WecomAppCryptoError = class extends Error {
@@ -144595,13 +145272,13 @@ var timingSafeEqualString2 = (a, b) => {
   const left = Buffer.from(a);
   const right = Buffer.from(b);
   if (left.length === 0 || left.length !== right.length) return false;
-  return NodeCrypto8.timingSafeEqual(left, right);
+  return NodeCrypto9.timingSafeEqual(left, right);
 };
-var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto8.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
+var computeSignature = (token, timestamp, nonce, encrypt) => NodeCrypto9.createHash("sha1").update([token, timestamp, nonce, encrypt].sort().join("")).digest("hex");
 var verifySignature = (token, timestamp, nonce, encrypt, signature) => timingSafeEqualString2(computeSignature(token, timestamp, nonce, encrypt), signature);
 var decrypt = (encodingAESKey, encryptText, expectReceiveId) => {
   const { key, iv } = parseEncodingAESKey(encodingAESKey);
-  const decipher = NodeCrypto8.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = NodeCrypto9.createDecipheriv("aes-256-cbc", key, iv);
   decipher.setAutoPadding(false);
   let deciphered;
   try {
@@ -144660,7 +145337,7 @@ var createWecomAppCrypto = (input) => {
     decrypt: (encryptText) => decrypt(encodingAESKey, encryptText, corpId).message
   };
 };
-var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto8.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
+var deriveCallbackPathSecret = (token, encodingAESKey) => NodeCrypto9.createHash("sha256").update(`${token.trim()}:${encodingAESKey.trim()}`).digest("hex").slice(0, 24);
 
 // src/wecomAppParse.ts
 var isRecord5 = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
@@ -144697,7 +145374,6 @@ var parseWecomAppPlainMessage = (raw) => {
       text: xml["Content"] !== void 0 ? { content: xml["Content"] } : void 0,
       image: xml["PicUrl"] ? { url: xml["PicUrl"] } : void 0,
       mediaId: xml["MediaId"] ?? xml["mediaid"],
-      recognition: xml["Recognition"],
       event: (xml["Event"] ?? xml["event"] ?? "").toLowerCase() || void 0,
       eventKey: xml["EventKey"],
       chatid: xml["ChatId"]
@@ -144723,7 +145399,6 @@ var parseWecomAppPlainMessage = (raw) => {
     text: isRecord5(textRaw) ? { content: typeof textRaw["content"] === "string" ? textRaw["content"] : void 0 } : void 0,
     image: isRecord5(imageRaw) ? { url: typeof imageRaw["url"] === "string" ? imageRaw["url"] : void 0 } : void 0,
     mediaId: typeof data["mediaid"] === "string" ? data["mediaid"] : void 0,
-    recognition: typeof data["recognition"] === "string" ? data["recognition"] : void 0,
     event: String(data["event"] ?? data["eventtype"] ?? "").toLowerCase() || void 0,
     eventKey: typeof data["eventkey"] === "string" ? data["eventkey"] : void 0,
     chatid: typeof data["chatid"] === "string" ? data["chatid"] : void 0
@@ -144787,13 +145462,16 @@ var startWecomAppCallbackServer = async (options) => {
     }
     try {
       if (!crypto2.verifySignature(signature, timestamp, nonce, echostr)) {
+        route.onVerification?.(false);
         writeText(res, 401, "unauthorized");
         return;
       }
       const plaintext = crypto2.decrypt(echostr);
+      route.onVerification?.(true);
       route.log?.info("wecom-app URL verification succeeded", { bot: route.botRowId });
       writeText(res, 200, plaintext);
     } catch (error) {
+      route.onVerification?.(false);
       route.log?.warn("wecom-app URL verification failed", {
         bot: route.botRowId,
         error: error instanceof Error ? error.message : String(error)
@@ -144855,11 +145533,13 @@ var startWecomAppCallbackServer = async (options) => {
     let plaintext;
     try {
       if (!crypto2.verifySignature(signature, timestamp, nonce, encrypt)) {
+        route.onVerification?.(false);
         writeText(res, 401, "unauthorized");
         return;
       }
       plaintext = crypto2.decrypt(encrypt);
     } catch (error) {
+      route.onVerification?.(false);
       route.log?.warn("wecom-app callback signature or decrypt failed", {
         bot: route.botRowId,
         error: error instanceof Error ? error.message : String(error)
@@ -144867,6 +145547,7 @@ var startWecomAppCallbackServer = async (options) => {
       writeText(res, 401, "unauthorized");
       return;
     }
+    route.onVerification?.(true);
     const message = parseWecomAppPlainMessage(plaintext);
     if (message === null) {
       writeText(res, 400, "invalid message");
@@ -145045,11 +145726,11 @@ var validateWecomAppBot = (bot) => {
 };
 var readWecomAppConnectConfig = (bot) => {
   const issues = validateWecomAppBot(bot);
-  const credentials3 = wecomAppCredentials(bot);
-  const listenPort = parseListenPort(credentials3.listenPortRaw);
-  const listenHost = parseListenHost(credentials3.listenHostRaw);
+  const credentials2 = wecomAppCredentials(bot);
+  const listenPort = parseListenPort(credentials2.listenPortRaw);
+  const listenHost = parseListenHost(credentials2.listenHostRaw);
   if (issues.length > 0 || listenPort === null || listenHost === null) return { ok: false, issues };
-  return { ok: true, credentials: credentials3, listenHost, listenPort };
+  return { ok: true, credentials: credentials2, listenHost, listenPort };
 };
 
 // src/wecomAppAdapter.ts
@@ -145109,6 +145790,7 @@ var WECOM_APP_MIN_BYTES = 5;
 var WECOM_APP_IMAGE_TYPES = /* @__PURE__ */ new Set(["image/jpeg", "image/png"]);
 var CREDENTIAL_ERROR_CODES = /* @__PURE__ */ new Set(["40001", "40013", "40014", "40056", "42001", "60020"]);
 var joinCallbackUrl = (baseOrOrigin, path) => `${baseOrOrigin}${path}`;
+var callbackHealthKey = (rowId, c) => JSON.stringify([rowId, c.corpId, c.token, c.encodingAESKey]);
 var wecomAppPublicFields = (bot) => {
   const c = wecomAppCredentials(bot);
   if (c.token === "" || c.encodingAESKey === "") {
@@ -145145,6 +145827,7 @@ var makeWecomAppAdapter = (deps) => {
     fetch: deps.fetch
   });
   const callbackHub = makeWecomAppCallbackHub();
+  const callbackHealth = /* @__PURE__ */ new Map();
   const connectionFor = (binding) => {
     const api = apis.get(binding.rowId);
     if (api === void 0) {
@@ -145174,7 +145857,6 @@ var makeWecomAppAdapter = (deps) => {
     });
   };
   const toInbound = (message, handlers, botName) => {
-    if (message.msgtype === "event") return;
     if (message.chatid !== void 0 && message.chatid !== "") {
       deps.log.info("wecom-app ignored a group message; only direct messages are supported", {
         bot: botName
@@ -145183,6 +145865,12 @@ var makeWecomAppAdapter = (deps) => {
     }
     const chatId = message.from?.userid ?? "";
     if (chatId === "") return;
+    if (message.msgtype === "event") {
+      if (message.event === "subscribe" || message.event === "enter_agent") {
+        handlers.onGreeting?.(chatId, chatId);
+      }
+      return;
+    }
     const messageId = message.msgid ?? `${chatId}:${message.createTime ?? Date.now()}`;
     const base2 = { messageId, chatId, senderId: chatId };
     if (message.msgtype === "text") {
@@ -145208,6 +145896,10 @@ var makeWecomAppAdapter = (deps) => {
   };
   return {
     platform: "wecom-app",
+    botIdentity: (bot) => {
+      const { corpId, agentId } = wecomAppCredentials(bot);
+      return JSON.stringify([corpId, agentId]);
+    },
     icon: "wecom",
     label: deps.translate("platform.wecom-app"),
     columns: COLUMNS5,
@@ -145233,8 +145925,7 @@ var makeWecomAppAdapter = (deps) => {
       };
     },
     /**
-     * 自建应用是回调式渠道：入站由企微推到我们的 listener，没有可探的长连接；能探的是出站
-     * 凭据——和真实发送同一条路，向 gettoken 换一次 access_token。
+     * 出站凭据走真实发送的 gettoken；入站只能报告本次运行已观察到的回调。
      */
     checkConnection: async (bot) => {
       const outbound = validateWecomAppBot(bot).filter(
@@ -145255,11 +145946,21 @@ var makeWecomAppAdapter = (deps) => {
         };
       }
       try {
-        await newApi(wecomAppCredentials(bot)).getAccessToken();
+        const credentials2 = wecomAppCredentials(bot);
+        await newApi(credentials2).getAccessToken();
+        const health = callbackHealth.get(callbackHealthKey(bot.rowId, credentials2));
+        if (health?.lastReceivedAt === void 0) {
+          return {
+            stage: "callback",
+            ok: false,
+            hint: health?.lastRejectedAt === void 0 ? "wecomCallbackNotSeen" : "wecomCallbackSignature",
+            detail: health?.lastRejectedAt === void 0 ? "access_token ok; no verified callback since this startup" : `access_token ok; last callback signature or decryption failure since this startup: ${health.lastRejectedAt}`
+          };
+        }
         return {
-          stage: "gettoken",
+          stage: "callback",
           ok: true,
-          detail: "access_token ok (callback reachability is not probed)"
+          detail: `access_token ok; last verified callback since this startup: ${health.lastReceivedAt}`
         };
       } catch (error) {
         return {
@@ -145297,7 +145998,14 @@ var makeWecomAppAdapter = (deps) => {
           encodingAESKey: c.encodingAESKey,
           corpId: c.corpId,
           log: deps.log,
-          onInbound: (message) => toInbound(message, handlers, bot.displayName)
+          onInbound: (message) => toInbound(message, handlers, bot.displayName),
+          onVerification: (verified) => {
+            const key = callbackHealthKey(bot.rowId, c);
+            callbackHealth.set(key, {
+              ...callbackHealth.get(key),
+              ...verified ? { lastReceivedAt: (/* @__PURE__ */ new Date()).toISOString() } : { lastRejectedAt: (/* @__PURE__ */ new Date()).toISOString() }
+            });
+          }
         });
       } catch (error) {
         apis.delete(bot.rowId);
@@ -145389,12 +146097,14 @@ var makeWecomAppAdapter = (deps) => {
 // src/index.ts
 var definition = {
   id: "im",
-  apiVersion: 19,
-  activate: async (ctx, inboundIo) => {
+  apiVersion: 20,
+  // 第二个参数只给插件自己的测试夹具：换掉文件 IO 与派发重试的等待。宿主只传 ctx。
+  activate: async (ctx, testing = {}) => {
+    const { dispatchSleep } = testing;
     const inboundState = makeInboundStore({
       dataDir: ctx.paths.dataDir,
       log: ctx.log,
-      io: inboundIo
+      io: testing.inboundIo
     });
     ctx.onDispose(inboundState.flush);
     const { t, setLanguage } = makeLiveTranslate(
@@ -145457,13 +146167,13 @@ var definition = {
     ctx.settingsCard(buildSettingsCard(adapters));
     const updateSettings = makeSettingsUpdater(ctx.settings);
     registerLarkSetup(ctx, { updateSettings });
-    registerSettingsRowActions(ctx, adapters);
     const core = makeImCore({
       host: {
         log: ctx.log,
         projections: ctx.projections,
         projects: ctx.projects,
         threads: ctx.threads,
+        commands: ctx.commands,
         approvals: ctx.approvals,
         plugins: ctx.plugins,
         attachments: ctx.attachments,
@@ -145513,7 +146223,9 @@ var definition = {
       queueFlow: interactions.queueFlow,
       rememberThreadProject: notifications.rememberThreadProject,
       noteInboundUserMessage: webSync.noteInboundUserMessage,
-      anchors: replyAnchors
+      anchors: replyAnchors,
+      failures,
+      dispatchSleep
     });
     const sessions = makeSessions(core);
     const modelPlan = makeModelPlan(core, turns);
@@ -145570,6 +146282,7 @@ var definition = {
       ]
     });
     const connections = startConnections(core, inbound.inboundHandlersFor);
+    registerSettingsRowActions(ctx, adapters, connections);
     registerSettingsCommands(ctx, adapters, updateSettings, connections);
     const { bots, connecting } = connections.reconcile();
     const deliveryHttp = makeDeliveryHttp({