chattercatcher 0.1.19 → 0.1.21

package/dist/index.js

@@ -59,6 +59,12 @@ var appSecretsSchema = z.object({
     z.object({
       apiKey: z.string().default("")
     })
+  ),
+  web: z.preprocess(
+    (value) => value ?? {},
+    z.object({
+      actionToken: z.string().default("")
+    })
   )
 });
 function createDefaultConfig() {
@@ -78,7 +84,8 @@ function createDefaultSecrets() {
     feishu: {},
     llm: {},
     embedding: {},
-    multimodal: {}
+    multimodal: {},
+    web: {}
   });
 }
 
@@ -171,6 +178,490 @@ function resolveEmbeddingApiKey(input) {
   return explicit || input.llmApiKey;
 }
 
+// src/cron/generator.ts
+var SYSTEM_PROMPT = "\u4F60\u6B63\u5728\u4E3A\u98DE\u4E66\u7FA4\u751F\u6210\u4E00\u6761\u5B9A\u65F6\u6D88\u606F\u3002\u53EF\u4EE5\u5148\u8C03\u7528\u641C\u7D22\u5DE5\u5177\u68C0\u7D22\u672C\u5730\u7FA4\u804A\u77E5\u8BC6\u5E93\u3002\u6700\u7EC8\u8F93\u51FA\u5FC5\u987B\u662F\u53EF\u4EE5\u76F4\u63A5\u53D1\u5230\u7FA4\u91CC\u7684\u7EAF\u6587\u672C\uFF0C\u4E0D\u8981\u8F93\u51FA\u5DE5\u5177\u8C03\u7528\u8BF4\u660E\u3002";
+function evidenceToText(evidence) {
+  if (evidence.length === 0) {
+    return "\u65E0\u68C0\u7D22\u8BC1\u636E\u3002";
+  }
+  return evidence.map((item, index) => `${index + 1}. ${item.text}`).join("\n");
+}
+function toolResultContent(results) {
+  return JSON.stringify(results.map((item) => ({ id: item.id, text: item.text, score: item.score, source: item.source })));
+}
+async function generateCronJobMessage(input) {
+  if (!input.model.completeWithTools) {
+    throw new Error("\u5F53\u524D LLM \u5BA2\u6237\u7AEF\u4E0D\u652F\u6301\u5DE5\u5177\u8C03\u7528\u3002");
+  }
+  const messages = [
+    { role: "system", content: SYSTEM_PROMPT },
+    { role: "user", content: `\u5F53\u524D\u65F6\u95F4\uFF1A${input.now.toISOString()}
+\u4EFB\u52A1\u63D0\u793A\u8BCD\uFF1A${input.prompt}` }
+  ];
+  const toolsByName = new Map(input.tools.map((tool) => [tool.name, tool]));
+  const evidence = [];
+  const maxModelTurns = input.maxModelTurns ?? 3;
+  const maxToolCalls = input.maxToolCalls ?? 6;
+  let toolCallsUsed = 0;
+  for (let turn = 0; turn < maxModelTurns; turn += 1) {
+    const result = await input.model.completeWithTools(messages, input.tools);
+    messages.push({ role: "assistant", content: result.content, toolCalls: result.toolCalls, reasoningContent: result.reasoningContent });
+    if (result.toolCalls.length === 0) {
+      break;
+    }
+    for (const call of result.toolCalls) {
+      if (toolCallsUsed >= maxToolCalls) {
+        return input.model.complete([
+          { role: "system", content: SYSTEM_PROMPT },
+          {
+            role: "user",
+            content: `\u5F53\u524D\u65F6\u95F4\uFF1A${input.now.toISOString()}
+\u4EFB\u52A1\u63D0\u793A\u8BCD\uFF1A${input.prompt}
+
+\u8BC1\u636E\uFF1A
+${evidenceToText(evidence)}`
+          }
+        ]);
+      }
+      toolCallsUsed += 1;
+      const tool = toolsByName.get(call.name);
+      if (!tool) {
+        messages.push({ role: "tool", toolCallId: call.id, content: JSON.stringify({ error: `\u672A\u77E5\u5DE5\u5177\uFF1A${call.name}` }) });
+        continue;
+      }
+      try {
+        const results = await tool.execute(call.input);
+        evidence.push(...results);
+        messages.push({ role: "tool", toolCallId: call.id, content: toolResultContent(results) });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        messages.push({ role: "tool", toolCallId: call.id, content: JSON.stringify({ error: message }) });
+      }
+    }
+  }
+  return input.model.complete([
+    { role: "system", content: SYSTEM_PROMPT },
+    {
+      role: "user",
+      content: `\u5F53\u524D\u65F6\u95F4\uFF1A${input.now.toISOString()}
+\u4EFB\u52A1\u63D0\u793A\u8BCD\uFF1A${input.prompt}
+
+\u8BC1\u636E\uFF1A
+${evidenceToText(evidence)}`
+    }
+  ]);
+}
+
+// src/cron/jobs.ts
+import crypto from "crypto";
+
+// src/cron/schedule.ts
+function isValidCronSchedule(schedule) {
+  return parseCronSchedule(schedule) !== null;
+}
+function matchesCronSchedule(schedule, date) {
+  const parsed = parseCronSchedule(schedule);
+  if (!parsed) {
+    return false;
+  }
+  return matchesParsedSchedule(parsed, date);
+}
+function getNextCronRun(schedule, after) {
+  const parsed = parseCronSchedule(schedule);
+  if (!parsed) {
+    return null;
+  }
+  const candidate = new Date(after);
+  candidate.setSeconds(0, 0);
+  candidate.setMinutes(candidate.getMinutes() + 1);
+  const maxMinutes = 5 * 366 * 24 * 60;
+  for (let i = 0; i < maxMinutes; i += 1) {
+    if (matchesParsedSchedule(parsed, candidate)) {
+      return new Date(candidate);
+    }
+    candidate.setMinutes(candidate.getMinutes() + 1);
+  }
+  return null;
+}
+function matchesParsedSchedule(schedule, date) {
+  const dayOfMonthMatches = schedule.dayOfMonth.matches(date.getDate());
+  const dayOfWeekMatches = schedule.dayOfWeek.matches(date.getDay());
+  const dayMatches = schedule.dayOfMonth.wildcard || schedule.dayOfWeek.wildcard ? dayOfMonthMatches && dayOfWeekMatches : dayOfMonthMatches || dayOfWeekMatches;
+  return schedule.minute.matches(date.getMinutes()) && schedule.hour.matches(date.getHours()) && dayMatches && schedule.month.matches(date.getMonth() + 1);
+}
+function parseCronSchedule(schedule) {
+  const fields = schedule.trim().split(/\s+/);
+  if (fields.length !== 5) {
+    return null;
+  }
+  const minute = parseMinuteField(fields[0]);
+  const hour = parseExactOrWildcardField(fields[1], 0, 23);
+  const dayOfMonth = parseExactOrWildcardField(fields[2], 1, 31);
+  const month = parseExactOrWildcardField(fields[3], 1, 12);
+  const dayOfWeek = parseExactOrWildcardField(fields[4], 0, 6);
+  if (!minute || !hour || !dayOfMonth || !month || !dayOfWeek) {
+    return null;
+  }
+  return { minute, hour, dayOfMonth, month, dayOfWeek };
+}
+function parseMinuteField(field) {
+  if (field === "*") {
+    return { wildcard: true, matches: () => true };
+  }
+  const stepMatch = /^\*\/(\d+)$/.exec(field);
+  if (stepMatch) {
+    const step = Number(stepMatch[1]);
+    if (!Number.isInteger(step) || step <= 0 || step > 59) {
+      return null;
+    }
+    return { wildcard: false, matches: (value) => value % step === 0 };
+  }
+  if (field.includes(",")) {
+    const values = field.split(",").map((part) => parseExactNumber(part, 0, 59));
+    if (values.some((value) => value === null)) {
+      return null;
+    }
+    const allowed = new Set(values);
+    return { wildcard: false, matches: (value) => allowed.has(value) };
+  }
+  const exact = parseExactNumber(field, 0, 59);
+  if (exact === null) {
+    return null;
+  }
+  return { wildcard: false, matches: (value) => value === exact };
+}
+function parseExactOrWildcardField(field, min, max) {
+  if (field === "*") {
+    return { wildcard: true, matches: () => true };
+  }
+  const exact = parseExactNumber(field, min, max);
+  if (exact === null) {
+    return null;
+  }
+  return { wildcard: false, matches: (value) => value === exact };
+}
+function parseExactNumber(field, min, max) {
+  if (!/^\d+$/.test(field)) {
+    return null;
+  }
+  const value = Number(field);
+  if (!Number.isInteger(value) || value < min || value > max) {
+    return null;
+  }
+  return value;
+}
+
+// src/cron/jobs.ts
+var CronJobRepository = class {
+  constructor(database, options = {}) {
+    this.database = database;
+    this.now = options.now ?? (() => /* @__PURE__ */ new Date());
+  }
+  database;
+  now;
+  create(input) {
+    const schedule = input.schedule.trim();
+    const prompt = input.prompt.trim();
+    if (!isValidCronSchedule(schedule)) {
+      throw new Error("cron \u8868\u8FBE\u5F0F\u65E0\u6548\u3002");
+    }
+    if (!prompt) {
+      throw new Error("\u5B9A\u65F6\u4EFB\u52A1 prompt \u4E0D\u80FD\u4E3A\u7A7A\u3002");
+    }
+    const now = this.now();
+    const nextRunAt = getNextCronRun(schedule, now);
+    if (!nextRunAt) {
+      throw new Error("\u65E0\u6CD5\u8BA1\u7B97\u4E0B\u4E00\u6B21\u6267\u884C\u65F6\u95F4\u3002");
+    }
+    const record = {
+      id: crypto.randomUUID(),
+      chatId: input.chatId,
+      createdByOpenId: input.createdByOpenId,
+      schedule,
+      prompt,
+      status: "active",
+      nextRunAt: nextRunAt.toISOString(),
+      createdAt: now.toISOString(),
+      updatedAt: now.toISOString()
+    };
+    this.database.prepare(
+      `
+        INSERT INTO cron_jobs (
+          id, chat_id, created_by_open_id, schedule, prompt, status,
+          last_run_at, next_run_at, last_error, created_at, updated_at
+        )
+        VALUES (
+          @id, @chatId, @createdByOpenId, @schedule, @prompt, @status,
+          NULL, @nextRunAt, NULL, @createdAt, @updatedAt
+        )
+      `
+    ).run(record);
+    return record;
+  }
+  get(id) {
+    return this.listByWhere("WHERE id = ?", [id], 1)[0] ?? null;
+  }
+  list(limit = 100) {
+    return this.listByWhere("", [], limit);
+  }
+  listByChat(chatId, limit = 50) {
+    return this.listByWhere(
+      "WHERE chat_id = ? AND status = 'active'",
+      [chatId],
+      limit
+    );
+  }
+  listDue(now, limit = 20) {
+    const rows = this.database.prepare(
+      `
+        SELECT
+          id,
+          chat_id AS chatId,
+          created_by_open_id AS createdByOpenId,
+          schedule,
+          prompt,
+          status,
+          last_run_at AS lastRunAt,
+          next_run_at AS nextRunAt,
+          last_error AS lastError,
+          created_at AS createdAt,
+          updated_at AS updatedAt
+        FROM cron_jobs
+        WHERE status = 'active' AND next_run_at <= ?
+        ORDER BY next_run_at ASC, updated_at ASC
+        LIMIT ?
+      `
+    ).all(now.toISOString(), limit);
+    return rows.map((row) => ({
+      id: row.id,
+      chatId: row.chatId,
+      createdByOpenId: row.createdByOpenId ?? void 0,
+      schedule: row.schedule,
+      prompt: row.prompt,
+      status: row.status,
+      lastRunAt: row.lastRunAt ?? void 0,
+      nextRunAt: row.nextRunAt,
+      lastError: row.lastError ?? void 0,
+      createdAt: row.createdAt,
+      updatedAt: row.updatedAt
+    }));
+  }
+  deleteByChat(id, chatId) {
+    const now = this.now().toISOString();
+    const result = this.database.prepare(
+      `
+        UPDATE cron_jobs
+        SET status = 'deleted', updated_at = @updatedAt
+        WHERE id = @id AND chat_id = @chatId AND status = 'active'
+      `
+    ).run({ id, chatId, updatedAt: now });
+    return result.changes > 0;
+  }
+  markSuccess(id, ranAt) {
+    const job = this.get(id);
+    if (!job) {
+      return;
+    }
+    const nextRunAt = getNextCronRun(job.schedule, ranAt);
+    if (!nextRunAt) {
+      throw new Error("\u65E0\u6CD5\u8BA1\u7B97\u4E0B\u4E00\u6B21\u6267\u884C\u65F6\u95F4\u3002");
+    }
+    this.database.prepare(
+      `
+        UPDATE cron_jobs
+        SET last_run_at = @lastRunAt, next_run_at = @nextRunAt, last_error = NULL, updated_at = @updatedAt
+        WHERE id = @id AND status = 'active'
+      `
+    ).run({
+      id,
+      lastRunAt: ranAt.toISOString(),
+      nextRunAt: nextRunAt.toISOString(),
+      updatedAt: ranAt.toISOString()
+    });
+  }
+  markFailure(id, error, failedAt) {
+    const job = this.get(id);
+    if (!job) {
+      return;
+    }
+    const nextRunAt = getNextCronRun(job.schedule, failedAt);
+    if (!nextRunAt) {
+      throw new Error("\u65E0\u6CD5\u8BA1\u7B97\u4E0B\u4E00\u6B21\u6267\u884C\u65F6\u95F4\u3002");
+    }
+    this.database.prepare(
+      `
+        UPDATE cron_jobs
+        SET last_run_at = @lastRunAt, last_error = @lastError, next_run_at = @nextRunAt, updated_at = @updatedAt
+        WHERE id = @id AND status = 'active'
+      `
+    ).run({
+      id,
+      lastRunAt: failedAt.toISOString(),
+      lastError: error,
+      nextRunAt: nextRunAt.toISOString(),
+      updatedAt: failedAt.toISOString()
+    });
+  }
+  listByWhere(whereSql, params, limit) {
+    const rows = this.database.prepare(
+      `
+        SELECT
+          id,
+          chat_id AS chatId,
+          created_by_open_id AS createdByOpenId,
+          schedule,
+          prompt,
+          status,
+          last_run_at AS lastRunAt,
+          next_run_at AS nextRunAt,
+          last_error AS lastError,
+          created_at AS createdAt,
+          updated_at AS updatedAt
+        FROM cron_jobs
+        ${whereSql}
+        ORDER BY updated_at DESC
+        LIMIT ?
+      `
+    ).all(...params, limit);
+    return rows.map((row) => ({
+      id: row.id,
+      chatId: row.chatId,
+      createdByOpenId: row.createdByOpenId ?? void 0,
+      schedule: row.schedule,
+      prompt: row.prompt,
+      status: row.status,
+      lastRunAt: row.lastRunAt ?? void 0,
+      nextRunAt: row.nextRunAt,
+      lastError: row.lastError ?? void 0,
+      createdAt: row.createdAt,
+      updatedAt: row.updatedAt
+    }));
+  }
+};
+
+// src/cron/scheduler.ts
+function createCronJobScheduler(options) {
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  const setIntervalFn = options.setIntervalFn ?? setInterval;
+  const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
+  const logger = options.logger ?? console;
+  let timer;
+  let running = false;
+  const runDueNow = async () => {
+    if (running) {
+      return;
+    }
+    running = true;
+    const startedAt = now();
+    try {
+      const jobs = options.repository.listDue(startedAt);
+      for (const job of jobs) {
+        try {
+          const text = await options.generateMessage(job, startedAt);
+          await options.sendTextToChat(job.chatId, text);
+          options.repository.markSuccess(job.id, startedAt);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          options.repository.markFailure(job.id, message, startedAt);
+          logger.error(`CRONJob \u6267\u884C\u5931\u8D25\uFF1A${job.id} ${message}`);
+        }
+      }
+    } finally {
+      running = false;
+    }
+  };
+  return {
+    start() {
+      if (timer) {
+        return;
+      }
+      void runDueNow();
+      timer = setIntervalFn(() => {
+        void runDueNow();
+      }, 6e4);
+    },
+    stop() {
+      if (!timer) {
+        return;
+      }
+      clearIntervalFn(timer);
+      timer = void 0;
+    },
+    runDueNow
+  };
+}
+
+// src/cron/tools.ts
+function readString(input, key) {
+  const value = typeof input === "object" && input !== null && key in input ? input[key] : void 0;
+  if (typeof value !== "string" || !value.trim()) {
+    throw new Error(`${key} \u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32\u3002`);
+  }
+  return value.trim();
+}
+function createCronJobTools(input) {
+  return [
+    {
+      name: "create_cron_job",
+      description: "Create a scheduled AI message for the current Feishu chat only. The schedule must be a five-field cron string.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          schedule: {
+            type: "string",
+            description: "Five-field cron schedule, for example 0 9 * * *."
+          },
+          prompt: {
+            type: "string",
+            description: "Prompt used later to generate the scheduled message."
+          }
+        },
+        required: ["schedule", "prompt"],
+        additionalProperties: false
+      },
+      execute: async (rawInput) => {
+        const job = input.repository.create({
+          chatId: input.chatId,
+          createdByOpenId: input.createdByOpenId,
+          schedule: readString(rawInput, "schedule"),
+          prompt: readString(rawInput, "prompt")
+        });
+        return JSON.stringify({ ok: true, job });
+      }
+    },
+    {
+      name: "list_cron_jobs",
+      description: "List active scheduled AI messages for the current Feishu chat only.",
+      inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      execute: async () => JSON.stringify({ ok: true, jobs: input.repository.listByChat(input.chatId) })
+    },
+    {
+      name: "delete_cron_job",
+      description: "Delete a scheduled AI message by ID, only if it belongs to the current Feishu chat.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          id: {
+            type: "string",
+            description: "Cron job ID returned by create_cron_job or list_cron_jobs."
+          }
+        },
+        required: ["id"],
+        additionalProperties: false
+      },
+      execute: async (rawInput) => {
+        const id = readString(rawInput, "id");
+        const ok = input.repository.deleteByChat(id, input.chatId);
+        return JSON.stringify({
+          ok,
+          id,
+          message: ok ? "\u5B9A\u65F6\u4EFB\u52A1\u5DF2\u5220\u9664\u3002" : "\u6CA1\u6709\u627E\u5230\u5F53\u524D\u7FA4\u91CC\u7684\u8FD9\u4E2A\u5B9A\u65F6\u4EFB\u52A1\u3002"
+        });
+      }
+    }
+  ];
+}
+
 // src/data/deletion.ts
 import fs2 from "fs/promises";
 import path4 from "path";
@@ -451,6 +942,23 @@ function migrateDatabase(database) {
     );
 
     CREATE INDEX IF NOT EXISTS image_multimodal_tasks_status_idx ON image_multimodal_tasks(status, updated_at);
+
+    CREATE TABLE IF NOT EXISTS cron_jobs (
+      id TEXT PRIMARY KEY,
+      chat_id TEXT NOT NULL,
+      created_by_open_id TEXT,
+      schedule TEXT NOT NULL,
+      prompt TEXT NOT NULL,
+      status TEXT NOT NULL CHECK(status IN ('active','deleted')),
+      last_run_at TEXT,
+      next_run_at TEXT NOT NULL,
+      last_error TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS cron_jobs_chat_status_idx ON cron_jobs(chat_id, status, updated_at);
+    CREATE INDEX IF NOT EXISTS cron_jobs_due_idx ON cron_jobs(status, next_run_at);
   `);
 }
 
@@ -458,13 +966,13 @@ function migrateDatabase(database) {
 import fs6 from "fs/promises";
 
 // src/files/jobs.ts
-import crypto from "crypto";
+import crypto2 from "crypto";
 import path6 from "path";
 function nowIso() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function stableJobId(sourcePath) {
-  return crypto.createHash("sha256").update(path6.resolve(sourcePath)).digest("hex").slice(0, 32);
+  return crypto2.createHash("sha256").update(path6.resolve(sourcePath)).digest("hex").slice(0, 32);
 }
 function parseWarnings(value) {
   try {
@@ -881,7 +1389,8 @@ function toOpenAIMessage(message) {
           arguments: JSON.stringify(toolCall.input)
         }
       }))
-    } : {}
+    } : {},
+    ...message.reasoningContent ? { reasoning_content: message.reasoningContent } : {}
   };
 }
 function toOpenAITool(tool) {
@@ -927,7 +1436,8 @@ var OpenAICompatibleChatModel = class {
       throw new Error(`LLM \u8BF7\u6C42\u5931\u8D25\uFF1A${response.status} ${body}`);
     }
     const data = await response.json();
-    const content = data.choices?.[0]?.message?.content?.trim();
+    const message = data.choices?.[0]?.message;
+    const content = message?.content?.trim();
     if (!content) {
       throw new Error("LLM \u8FD4\u56DE\u4E3A\u7A7A\u3002");
     }
@@ -959,7 +1469,8 @@ var OpenAICompatibleChatModel = class {
     const message = data.choices?.[0]?.message;
     return {
       content: message?.content ?? "",
-      toolCalls: parseToolCalls(message)
+      toolCalls: parseToolCalls(message),
+      reasoningContent: message?.reasoning_content ?? void 0
     };
   }
 };
@@ -1011,7 +1522,7 @@ function createEmbeddingModel(config, secrets) {
 }
 
 // src/messages/repository.ts
-import crypto2 from "crypto";
+import crypto3 from "crypto";
 
 // src/messages/chunker.ts
 function chunkText(text, maxChars = 900, overlapChars = 120) {
@@ -1040,7 +1551,7 @@ function nowIso2() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function stableId(parts) {
-  return crypto2.createHash("sha256").update(parts.join("")).digest("hex").slice(0, 32);
+  return crypto3.createHash("sha256").update(parts.join("")).digest("hex").slice(0, 32);
 }
 function escapeFtsQuery(query) {
   const terms = query.trim().split(/\s+/).map((term) => term.replace(/"/g, '""')).filter(Boolean);
@@ -1070,6 +1581,22 @@ function buildSearchTerms(query) {
   }
   return [trimmed];
 }
+function buildScopeWhere(scope) {
+  const clauses = [];
+  const params = [];
+  if (scope?.platform) {
+    clauses.push("m.platform = ?");
+    params.push(scope.platform);
+  }
+  if (scope?.platformChatId) {
+    clauses.push("c.platform_chat_id = ?");
+    params.push(scope.platformChatId);
+  }
+  return {
+    where: clauses.length > 0 ? `AND ${clauses.join(" AND ")}` : "",
+    params
+  };
+}
 function parseRawPayload(value) {
   try {
     const parsed = JSON.parse(value);
@@ -1275,6 +1802,7 @@ var MessageRepository = class {
     const ftsQuery = escapeFtsQuery(query);
     const excludedIds = options.excludeMessageIds ?? [];
     const excludedWhere = excludedIds.length > 0 ? `AND fts.message_id NOT IN (${excludedIds.map(() => "?").join(", ")})` : "";
+    const scope = buildScopeWhere(options.scope);
     const ftsResults = this.database.prepare(
       `
         SELECT
@@ -1293,10 +1821,11 @@ var MessageRepository = class {
         JOIN chats c ON c.id = m.chat_id
         WHERE message_chunks_fts MATCH ?
         ${excludedWhere}
+        ${scope.where}
         ORDER BY bm25(message_chunks_fts)
         LIMIT ?
       `
-    ).all(ftsQuery, ...excludedIds, limit);
+    ).all(ftsQuery, ...excludedIds, ...scope.params, limit);
     if (ftsResults.length > 0) {
       return ftsResults;
     }
@@ -1324,10 +1853,11 @@ var MessageRepository = class {
         JOIN chats c ON c.id = m.chat_id
         WHERE (${where})
         ${likeExcludedWhere}
+        ${scope.where}
         ORDER BY m.sent_at DESC
         LIMIT ?
       `
-    ).all(...params, ...excludedIds, limit);
+    ).all(...params, ...excludedIds, ...scope.params, limit);
   }
   getChatCount() {
     return this.database.prepare("SELECT COUNT(*) AS count FROM chats").get().count;
@@ -1387,7 +1917,7 @@ var MessageRepository = class {
 };
 
 // src/episodes/repository.ts
-import crypto3 from "crypto";
+import crypto4 from "crypto";
 
 // src/episodes/sanitizer.ts
 var SECRET_PATTERNS = [
@@ -1414,7 +1944,7 @@ function nowIso3() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function stableId2(parts) {
-  return crypto3.createHash("sha256").update(parts.join("")).digest("hex").slice(0, 32);
+  return crypto4.createHash("sha256").update(parts.join("")).digest("hex").slice(0, 32);
 }
 function escapeFtsQuery2(query) {
   const terms = query.trim().split(/\s+/).map((term) => term.replace(/[^\p{L}\p{N}_-]+/gu, " ").trim()).flatMap((term) => term.split(/\s+/)).filter(Boolean);
@@ -1427,6 +1957,22 @@ function toMillis(value) {
   const time = Date.parse(value);
   return Number.isFinite(time) ? time : 0;
 }
+function buildScopeWhere2(scope) {
+  const clauses = [];
+  const params = [];
+  if (scope?.platform) {
+    clauses.push("c.platform = ?");
+    params.push(scope.platform);
+  }
+  if (scope?.platformChatId) {
+    clauses.push("c.platform_chat_id = ?");
+    params.push(scope.platformChatId);
+  }
+  return {
+    where: clauses.length > 0 ? `AND ${clauses.join(" AND ")}` : "",
+    params
+  };
+}
 var EpisodeRepository = class {
   constructor(database) {
     this.database = database;
@@ -1609,8 +2155,9 @@ var EpisodeRepository = class {
         `
     ).all(limit);
   }
-  searchEpisodes(query, limit = 8) {
+  searchEpisodes(query, limit = 8, scope) {
     const ftsQuery = escapeFtsQuery2(query);
+    const scopeWhere = buildScopeWhere2(scope);
     return this.database.prepare(
       `
           SELECT
@@ -1638,11 +2185,12 @@ var EpisodeRepository = class {
           JOIN memory_episodes e ON e.id = fts.episode_id
           JOIN chats c ON c.id = e.chat_id
           WHERE memory_episodes_fts MATCH ?
+          ${scopeWhere.where}
           GROUP BY e.id
           ORDER BY e.ended_at DESC
           LIMIT ?
         `
-    ).all(ftsQuery, limit).map((row) => {
+    ).all(ftsQuery, ...scopeWhere.params, limit).map((row) => {
       const item = row;
       return {
         ...item,
@@ -1672,8 +2220,8 @@ var EpisodeFtsRetriever = class {
     this.episodes = episodes;
   }
   episodes;
-  async retrieve(question) {
-    return this.episodes.searchEpisodes(question, 8).map(toEpisodeEvidence);
+  async retrieve(question, scope) {
+    return this.episodes.searchEpisodes(question, 8, scope).map(toEpisodeEvidence);
   }
 };
 
@@ -1699,8 +2247,9 @@ var HybridRetriever = class {
   }
   retrievers;
   options;
-  async retrieve(question) {
-    const results = await Promise.all(this.retrievers.map((retriever) => retriever.retrieve(question)));
+  async retrieve(question, scope) {
+    const effectiveScope = scope ?? this.options.scope;
+    const results = await Promise.all(this.retrievers.map((retriever) => retriever.retrieve(question, effectiveScope)));
     const merged = /* @__PURE__ */ new Map();
     for (const evidenceList of results) {
       for (const evidence of evidenceList) {
@@ -1741,9 +2290,10 @@ var MessageFtsRetriever = class {
   }
   messages;
   options;
-  async retrieve(question) {
+  async retrieve(question, scope) {
     const results = this.messages.searchMessages(question, 8, {
-      excludeMessageIds: this.options.excludeMessageIds
+      excludeMessageIds: this.options.excludeMessageIds,
+      scope
     });
     return results.map((result) => ({
       id: result.chunkId,
@@ -1778,17 +2328,17 @@ function parseSearchInput(input) {
   const limit = Math.min(12, Math.max(1, Math.floor(numericLimit)));
   return { query, limit };
 }
-async function runRetriever(retriever, input) {
+async function runRetriever(retriever, input, scope) {
   const { query, limit } = parseSearchInput(input);
-  const results = await retriever.retrieve(query);
+  const results = await retriever.retrieve(query, scope);
   return results.slice(0, limit);
 }
-function createSearchTool(name, description, retriever) {
+function createSearchTool(name, description, retriever, scope) {
   return {
     name,
     description,
     inputSchema: searchInputSchema,
-    execute: (input) => runRetriever(retriever, input)
+    execute: (input) => runRetriever(retriever, input, scope)
   };
 }
 function createRagSearchTools(input) {
@@ -1796,17 +2346,20 @@ function createRagSearchTools(input) {
     createSearchTool(
       "hybrid_search",
       "Search across all indexed RAG evidence using the default hybrid retrieval strategy.",
-      input.hybrid
+      input.hybrid,
+      input.scope
     ),
     createSearchTool(
       "search_messages",
       "Search chat messages only when the answer likely depends on message-level evidence.",
-      input.messages
+      input.messages,
+      input.scope
     ),
     createSearchTool(
       "search_episodes",
       "Search episode summaries only when the answer likely depends on longer-running context.",
-      input.episodes
+      input.episodes,
+      input.scope
     )
   ];
   if (input.semantic) {
@@ -1814,7 +2367,8 @@ function createRagSearchTools(input) {
       createSearchTool(
         "semantic_search",
         "Search semantic vector evidence only when broader conceptual recall is needed.",
-        input.semantic
+        input.semantic,
+        input.scope
       )
     );
   }
@@ -1859,6 +2413,22 @@ function toEvidenceSource2(row) {
     timestamp: row.sentAt
   };
 }
+function buildScopeWhere3(scope) {
+  const clauses = [];
+  const params = [];
+  if (scope?.platform) {
+    clauses.push("m.platform = ?");
+    params.push(scope.platform);
+  }
+  if (scope?.platformChatId) {
+    clauses.push("c.platform_chat_id = ?");
+    params.push(scope.platformChatId);
+  }
+  return {
+    where: clauses.length > 0 ? `AND ${clauses.join(" AND ")}` : "",
+    params
+  };
+}
 var SqliteVectorStore = class {
   constructor(database, options) {
     this.database = database;
@@ -1893,10 +2463,11 @@ var SqliteVectorStore = class {
     });
     transaction(records);
   }
-  async search(vector, limit) {
+  async search(vector, limit, scope) {
     if (limit <= 0) {
       return [];
     }
+    const scopeWhere = buildScopeWhere3(scope);
     const rows = this.database.prepare(
       `
         SELECT
@@ -1911,8 +2482,9 @@ var SqliteVectorStore = class {
         JOIN messages m ON m.id = mc.message_id
         JOIN chats c ON c.id = m.chat_id
         WHERE e.model = ?
+        ${scopeWhere.where}
       `
-    ).all(this.options.model);
+    ).all(this.options.model, ...scopeWhere.params);
     return rows.flatMap((row) => {
       const storedVector = parseEmbeddingJson(row.embeddingJson);
       if (storedVector.length === 0) {
@@ -1944,9 +2516,9 @@ var VectorRetriever = class {
   embedding;
   store;
   limit;
-  async retrieve(question) {
+  async retrieve(question, scope) {
     const vector = await this.embedding.embed(question);
-    return this.store.search(vector, this.limit);
+    return this.store.search(vector, this.limit, scope);
   }
 };
 
@@ -1967,7 +2539,7 @@ async function createHybridRetriever(input) {
     retrievers.push(new VectorRetriever(createEmbeddingModel(input.config, input.secrets), vectorStore));
   }
   return {
-    retriever: new HybridRetriever(retrievers),
+    retriever: new HybridRetriever(retrievers, { scope: input.scope }),
     close: () => {
       for (const closer of closers) {
         closer();
@@ -1984,7 +2556,7 @@ async function createAgenticRagSearchTools(input) {
   ) : void 0;
   const hybrid = new HybridRetriever(semantic ? [episodes, messages, semantic] : [episodes, messages]);
   return {
-    tools: createRagSearchTools({ hybrid, messages, episodes, semantic }),
+    tools: createRagSearchTools({ hybrid, messages, episodes, semantic, scope: input.scope }),
     close: () => {
     }
   };
@@ -2489,11 +3061,11 @@ function createIndexingScheduler(options) {
   const setIntervalFn = options.setIntervalFn ?? setInterval;
   const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
   const logger = options.logger ?? console;
-  const parsed = parseCronSchedule(options.schedule);
+  const parsed = parseCronSchedule2(options.schedule);
   let timer;
   let running = false;
   const runDueNow = async () => {
-    if (!parsed || running || !matchesParsedSchedule(parsed, now())) {
+    if (!parsed || running || !matchesParsedSchedule2(parsed, now())) {
       return;
     }
     running = true;
@@ -2525,25 +3097,25 @@ function createIndexingScheduler(options) {
     runDueNow
   };
 }
-function matchesParsedSchedule(schedule, date) {
+function matchesParsedSchedule2(schedule, date) {
   return schedule.minute(date.getMinutes()) && schedule.hour(date.getHours()) && schedule.dayOfMonth(date.getDate()) && schedule.month(date.getMonth() + 1) && schedule.dayOfWeek(date.getDay());
 }
-function parseCronSchedule(schedule) {
+function parseCronSchedule2(schedule) {
   const fields = schedule.trim().split(/\s+/);
   if (fields.length !== 5) {
     return null;
   }
-  const minute = parseMinuteField(fields[0]);
-  const hour = parseExactOrWildcardField(fields[1], 0, 23);
-  const dayOfMonth = parseExactOrWildcardField(fields[2], 1, 31);
-  const month = parseExactOrWildcardField(fields[3], 1, 12);
-  const dayOfWeek = parseExactOrWildcardField(fields[4], 0, 6);
+  const minute = parseMinuteField2(fields[0]);
+  const hour = parseExactOrWildcardField2(fields[1], 0, 23);
+  const dayOfMonth = parseExactOrWildcardField2(fields[2], 1, 31);
+  const month = parseExactOrWildcardField2(fields[3], 1, 12);
+  const dayOfWeek = parseExactOrWildcardField2(fields[4], 0, 6);
   if (!minute || !hour || !dayOfMonth || !month || !dayOfWeek) {
     return null;
   }
   return { minute, hour, dayOfMonth, month, dayOfWeek };
 }
-function parseMinuteField(field) {
+function parseMinuteField2(field) {
   if (field === "*") {
     return () => true;
   }
@@ -2556,30 +3128,30 @@ function parseMinuteField(field) {
     return (value) => value % step === 0;
   }
   if (field.includes(",")) {
-    const values = field.split(",").map((part) => parseExactNumber(part, 0, 59));
+    const values = field.split(",").map((part) => parseExactNumber2(part, 0, 59));
     if (values.some((value) => value === null)) {
       return null;
     }
     const allowed = new Set(values);
     return (value) => allowed.has(value);
   }
-  const exact = parseExactNumber(field, 0, 59);
+  const exact = parseExactNumber2(field, 0, 59);
   if (exact === null) {
     return null;
   }
   return (value) => value === exact;
 }
-function parseExactOrWildcardField(field, min, max) {
+function parseExactOrWildcardField2(field, min, max) {
   if (field === "*") {
     return () => true;
   }
-  const exact = parseExactNumber(field, min, max);
+  const exact = parseExactNumber2(field, min, max);
   if (exact === null) {
     return null;
   }
   return (value) => value === exact;
 }
-function parseExactNumber(field, min, max) {
+function parseExactNumber2(field, min, max) {
   if (!/^\d+$/.test(field)) {
     return null;
   }
@@ -2669,12 +3241,12 @@ async function processMessagesNow(input) {
 }
 
 // src/multimodal/tasks.ts
-import crypto4 from "crypto";
+import crypto5 from "crypto";
 function nowIso4() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function stableId3(sourceMessageId, imageKey) {
-  return crypto4.createHash("sha256").update(`${sourceMessageId}${imageKey}`).digest("hex").slice(0, 32);
+  return crypto5.createHash("sha256").update(`${sourceMessageId}${imageKey}`).digest("hex").slice(0, 32);
 }
 function mapRow(row) {
   if (!row) {
@@ -2923,238 +3495,15 @@ var ImageMultimodalWorker = class {
       this.options.tasks.markSucceeded(running.id, derivedMessageId);
       result.succeeded += 1;
     } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      this.options.tasks.markFailed(running.id, message, running.attempts >= 3);
-      result.failed += 1;
-    }
-  }
-};
-
-// src/rag/citations.ts
-function isOpaqueId(value) {
-  return Boolean(value && /^(ou|oc|om|cli|on|un|uid)_?[a-z0-9]+/i.test(value));
-}
-function formatTime(value) {
-  if (!value) {
-    return "\u672A\u77E5\u65F6\u95F4";
-  }
-  const date = new Date(value);
-  if (Number.isNaN(date.getTime())) {
-    return value;
-  }
-  const pad = (input) => String(input).padStart(2, "0");
-  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
-}
-function formatSpeaker(source) {
-  if (source.type === "file") {
-    return isOpaqueId(source.label) ? "\u6587\u4EF6" : `\u6587\u4EF6 ${source.label}`;
-  }
-  if (source.sender && !isOpaqueId(source.sender)) {
-    return source.sender;
-  }
-  return "\u7FA4\u6210\u5458";
-}
-function clipText(value, maxLength) {
-  const normalized = value.replace(/\s+/g, " ").trim();
-  return normalized.length > maxLength ? `${normalized.slice(0, maxLength)}...` : normalized;
-}
-function formatCitation(citation, options = {}) {
-  const maxTextLength = options.maxTextLength ?? 120;
-  const speaker = formatSpeaker(citation.source);
-  const time = formatTime(citation.source.timestamp);
-  const verb = citation.source.type === "file" ? "\u8BB0\u5F55" : "\u8BF4";
-  return `[${citation.marker}] ${speaker}\u5728 ${time} ${verb}\uFF1A\u201C${clipText(citation.text, maxTextLength)}\u201D`;
-}
-function formatCitations(citations, options = {}) {
-  return citations.map((citation) => formatCitation(citation, options)).join("\n");
-}
-
-// src/rag/answer.ts
-var DEFAULT_MAX_EVIDENCE_BLOCKS = 8;
-var DEFAULT_MAX_CHARS_PER_BLOCK = 1200;
-var SCORE_TIE_THRESHOLD = 0.15;
-function parseTimestamp(value) {
-  if (!value) {
-    return 0;
-  }
-  const time = Date.parse(value);
-  return Number.isFinite(time) ? time : 0;
-}
-function rankEvidenceForPrompt(evidence) {
-  return [...evidence].sort((left, right) => {
-    const scoreDiff = right.score - left.score;
-    if (Math.abs(scoreDiff) > SCORE_TIE_THRESHOLD) {
-      return scoreDiff;
-    }
-    const timeDiff = parseTimestamp(right.source.timestamp) - parseTimestamp(left.source.timestamp);
-    if (timeDiff !== 0) {
-      return timeDiff;
-    }
-    return scoreDiff;
-  });
-}
-function buildEvidencePrompt(question, evidence, options = {}) {
-  if (evidence.length === 0) {
-    throw new Error("RAG evidence is required before answer generation.");
-  }
-  const maxEvidenceBlocks = options.maxEvidenceBlocks ?? DEFAULT_MAX_EVIDENCE_BLOCKS;
-  const maxCharsPerBlock = options.maxCharsPerBlock ?? DEFAULT_MAX_CHARS_PER_BLOCK;
-  const selected = rankEvidenceForPrompt(evidence).slice(0, maxEvidenceBlocks);
-  const citations = selected.map((item, index) => ({
-    marker: `S${index + 1}`,
-    evidenceId: item.id,
-    source: item.source,
-    text: item.text
-  }));
-  const evidenceText = selected.map((item, index) => {
-    const marker = citations[index]?.marker;
-    const clippedText = item.text.length > maxCharsPerBlock ? `${item.text.slice(0, maxCharsPerBlock)}...` : item.text;
-    const sourceParts = [
-      item.source.label,
-      item.source.sender ? `\u53D1\u9001\u4EBA\uFF1A${item.source.sender}` : void 0,
-      item.source.timestamp ? `\u65F6\u95F4\uFF1A${item.source.timestamp}` : void 0,
-      item.source.location ? `\u4F4D\u7F6E\uFF1A${item.source.location}` : void 0
-    ].filter(Boolean);
-    return `[${marker}]
-\u6765\u6E90\uFF1A${sourceParts.join("\uFF1B")}
-\u5185\u5BB9\uFF1A${clippedText}`;
-  }).join("\n\n");
-  return {
-    citations,
-    messages: [
-      {
-        role: "system",
-        content: "\u4F60\u662F ChatterCatcher \u7684\u95EE\u7B54\u6A21\u5757\u3002\u53EA\u80FD\u6839\u636E\u63D0\u4F9B\u7684\u68C0\u7D22\u8BC1\u636E\u56DE\u7B54\uFF0C\u5FC5\u987B\u7B80\u77ED\u76F4\u63A5\u3002\u4E8B\u5B9E\u6027\u7ED3\u8BBA\u5FC5\u987B\u5F15\u7528 [S1] \u8FD9\u6837\u7684\u6765\u6E90\u6807\u8BB0\u3002\u8BC1\u636E\u4E0D\u8DB3\u65F6\u8BF4\u4E0D\u77E5\u9053\uFF0C\u4E0D\u8981\u731C\u3002\u82E5\u8BC1\u636E\u4E92\u76F8\u77DB\u76FE\uFF0C\u4F18\u5148\u91C7\u7528\u65F6\u95F4\u66F4\u65B0\u4E14\u8868\u8FF0\u660E\u786E\u7684\u8BC1\u636E\uFF1B\u5982\u679C\u8F83\u65B0\u7684\u8BC1\u636E\u53EA\u662F\u8BA8\u8BBA\u3001\u731C\u6D4B\u6216\u4E0D\u786E\u5B9A\u8868\u8FBE\uFF0C\u4E0D\u8981\u628A\u5B83\u5F53\u4F5C\u786E\u5B9A\u66F4\u65B0\u3002"
-      },
-      {
-        role: "user",
-        content: `\u95EE\u9898\uFF1A${question}
-
-\u8BC1\u636E\u5904\u7406\u89C4\u5219\uFF1A
-1. \u5148\u5224\u65AD\u8BC1\u636E\u662F\u5426\u8DB3\u4EE5\u56DE\u7B54\u95EE\u9898\u3002
-2. \u540C\u4E00\u4E8B\u9879\u51FA\u73B0\u591A\u4E2A\u7248\u672C\u65F6\uFF0C\u9ED8\u8BA4\u8F83\u65B0\u7684\u660E\u786E\u6D88\u606F\u4F18\u5148\u3002
-3. \u56DE\u7B54\u53EA\u5F15\u7528\u5B9E\u9645\u652F\u6491\u7ED3\u8BBA\u7684\u8BC1\u636E\u3002
-
-\u68C0\u7D22\u8BC1\u636E\uFF1A
-${evidenceText}`
-      }
-    ]
-  };
-}
-async function generateGroundedAnswer(input) {
-  const prompt = buildEvidencePrompt(input.question, input.evidence);
-  const answer = await input.model.complete(prompt.messages);
-  return {
-    answer,
-    citations: prompt.citations
-  };
-}
-
-// src/rag/agentic-qa-service.ts
-var DEFAULT_MAX_MODEL_TURNS = 4;
-var DEFAULT_MAX_TOOL_CALLS = 8;
-var DEFAULT_MAX_EVIDENCE = 12;
-var NO_EVIDENCE_ANSWER = "\u4E0D\u77E5\u9053\u3002\u5F53\u524D\u672C\u5730\u77E5\u8BC6\u5E93\u6CA1\u6709\u68C0\u7D22\u5230\u8DB3\u591F\u8BC1\u636E\u3002";
-var AGENTIC_SYSTEM_PROMPT = "\u4F60\u662F\u672C\u5730\u77E5\u8BC6\u4FE1\u606F\u6536\u96C6\u4EE3\u7406\u3002\u4F60\u7684\u804C\u8D23\u662F\u56F4\u7ED5\u7528\u6237\u95EE\u9898\u51B3\u5B9A\u662F\u5426\u8C03\u7528\u641C\u7D22\u5DE5\u5177\u3001\u9009\u62E9\u5408\u9002\u7684\u5DE5\u5177\u548C\u67E5\u8BE2\u8BCD\uFF0C\u5E76\u6839\u636E\u5F53\u524D\u7ED3\u679C\u51B3\u5B9A\u662F\u5426\u7EE7\u7EED\u641C\u7D22\u3002\u4E0D\u8981\u7F16\u9020\u4EFB\u4F55\u8BC1\u636E\u6216\u58F0\u79F0\u770B\u8FC7\u672A\u68C0\u7D22\u5230\u7684\u5185\u5BB9\u3002\u4F60\u7684\u8F93\u51FA\u53EA\u7528\u4E8E\u6536\u96C6\u8BC1\u636E\uFF0C\u6700\u7EC8\u7B54\u6848\u4F1A\u7531\u53E6\u4E00\u4E2A\u57FA\u4E8E\u8BC1\u636E\u7684\u6B65\u9AA4\u751F\u6210\u3002";
-function toToolResultContent(results) {
-  return JSON.stringify(
-    results.map((item) => ({
-      id: item.id,
-      text: item.text,
-      score: item.score,
-      source: item.source
-    }))
-  );
-}
-function toToolErrorContent(message) {
-  return JSON.stringify({ error: message });
-}
-function dedupeEvidence(evidence, maxEvidence) {
-  const deduped = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const item of evidence) {
-    if (seen.has(item.id)) {
-      continue;
-    }
-    seen.add(item.id);
-    deduped.push(item);
-    if (deduped.length >= maxEvidence) {
-      break;
-    }
-  }
-  return deduped;
-}
-async function askWithAgenticRag(input) {
-  if (!input.model.completeWithTools) {
-    throw new Error("\u5F53\u524D LLM \u5BA2\u6237\u7AEF\u4E0D\u652F\u6301\u5DE5\u5177\u8C03\u7528\u3002");
-  }
-  const maxModelTurns = input.maxModelTurns ?? DEFAULT_MAX_MODEL_TURNS;
-  const maxToolCalls = input.maxToolCalls ?? DEFAULT_MAX_TOOL_CALLS;
-  const maxEvidence = input.maxEvidence ?? DEFAULT_MAX_EVIDENCE;
-  const messages = [
-    { role: "system", content: AGENTIC_SYSTEM_PROMPT },
-    { role: "user", content: input.question }
-  ];
-  const toolsByName = new Map(input.tools.map((tool) => [tool.name, tool]));
-  let evidence = [];
-  let toolCallsUsed = 0;
-  for (let turn = 0; turn < maxModelTurns; turn += 1) {
-    const assistantResult = await input.model.completeWithTools(messages, input.tools);
-    messages.push({
-      role: "assistant",
-      content: assistantResult.content,
-      toolCalls: assistantResult.toolCalls
-    });
-    if (assistantResult.toolCalls.length === 0) {
-      break;
-    }
-    for (const toolCall of assistantResult.toolCalls) {
-      if (toolCallsUsed >= maxToolCalls) {
-        break;
-      }
-      toolCallsUsed += 1;
-      const tool = toolsByName.get(toolCall.name);
-      if (!tool) {
-        messages.push({
-          role: "tool",
-          toolCallId: toolCall.id,
-          content: toToolErrorContent(`\u672A\u77E5\u5DE5\u5177\uFF1A${toolCall.name}`)
-        });
-        continue;
-      }
-      try {
-        const results = await tool.execute(toolCall.input);
-        evidence = dedupeEvidence([...evidence, ...results], maxEvidence);
-        messages.push({
-          role: "tool",
-          toolCallId: toolCall.id,
-          content: toToolResultContent(results)
-        });
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        messages.push({
-          role: "tool",
-          toolCallId: toolCall.id,
-          content: toToolErrorContent(message)
-        });
-      }
-    }
-  }
-  if (evidence.length === 0) {
-    return {
-      answer: NO_EVIDENCE_ANSWER,
-      citations: []
-    };
-  }
-  return generateGroundedAnswer({
-    question: input.question,
-    evidence,
-    model: input.model
-  });
-}
+      const message = error instanceof Error ? error.message : String(error);
+      this.options.tasks.markFailed(running.id, message, running.attempts >= 3);
+      result.failed += 1;
+    }
+  }
+};
 
 // src/rag/qa-logs.ts
-import crypto5 from "crypto";
+import crypto6 from "crypto";
 function clampLimit(limit) {
   return Math.max(1, Math.min(200, Math.trunc(limit)));
 }
@@ -3165,7 +3514,7 @@ var QaLogRepository = class {
   database;
   create(input) {
     const record = {
-      id: `qa_${crypto5.randomUUID()}`,
+      id: `qa_${crypto6.randomUUID()}`,
       chatId: input.chatId ?? null,
       questionMessageId: input.questionMessageId ?? null,
       question: input.question,
@@ -3278,6 +3627,77 @@ function stripMentions(text, mentions) {
   }
   return result.replace(/@/g, " ").replace(/\s+/g, " ").trim();
 }
+var FEISHU_TOOL_SYSTEM_PROMPT = "\u4F60\u662F\u98DE\u4E66\u7FA4\u804A\u52A9\u624B\u3002\u4F60\u53EF\u4EE5\u5148\u641C\u7D22\u672C\u5730\u77E5\u8BC6\u6765\u56DE\u7B54\u95EE\u9898\uFF1B\u5F53\u7528\u6237\u660E\u786E\u8981\u6C42\u521B\u5EFA\u3001\u67E5\u770B\u6216\u5220\u9664\u7FA4\u6D88\u606F\u5B9A\u65F6\u4EFB\u52A1\u65F6\uFF0C\u4E5F\u53EF\u4EE5\u8C03\u7528\u5B9A\u65F6\u4EFB\u52A1\u5DE5\u5177\u3002\u5B9A\u65F6\u4EFB\u52A1\u5DE5\u5177\u53EA\u7BA1\u7406\u5F53\u524D\u7FA4\u804A\uFF0C\u4E0D\u80FD\u8DE8\u7FA4\u64CD\u4F5C\u3002\u82E5\u7528\u6237\u7528\u81EA\u7136\u8BED\u8A00\u63CF\u8FF0\u65F6\u95F4\uFF0C\u4F60\u9700\u8981\u5148\u5C06\u5176\u8F6C\u6362\u4E3A\u4E94\u5B57\u6BB5 cron \u8868\u8FBE\u5F0F\uFF08\u5206 \u65F6 \u65E5 \u6708 \u5468\uFF09\uFF0C\u518D\u8C03\u7528\u5DE5\u5177\u3002\u5BF9\u4E8E\u4E00\u822C\u95EE\u7B54\uFF0C\u5148\u6309\u9700\u8C03\u7528\u641C\u7D22\u5DE5\u5177\uFF0C\u518D\u57FA\u4E8E\u5DE5\u5177\u8FD4\u56DE\u7684\u8BC1\u636E\u76F4\u63A5\u7ED9\u51FA\u6700\u7EC8\u7B54\u6848\uFF1B\u82E5\u5F15\u7528\u4E86\u68C0\u7D22\u7ED3\u679C\uFF0C\u8981\u5728\u7B54\u6848\u91CC\u76F4\u63A5\u5199\u51FA\u5F15\u7528\u5185\u5BB9\u3002\u4E0D\u8981\u58F0\u79F0\u5B8C\u6210\u4E86\u672A\u5B9E\u9645\u8C03\u7528\u7684\u64CD\u4F5C\u3002";
+var DEFAULT_MAX_MODEL_TURNS = 4;
+var DEFAULT_MAX_TOOL_CALLS = 8;
+var FEISHU_TOOL_LOOP_FALLBACK = "\u5B9A\u65F6\u4EFB\u52A1\u64CD\u4F5C\u5DF2\u63D0\u4EA4\uFF0C\u4F46\u6A21\u578B\u6CA1\u6709\u751F\u6210\u6700\u7EC8\u56DE\u590D\u3002";
+var FEISHU_TOOL_LOOP_LIMIT_REACHED = "\u5DE5\u5177\u8C03\u7528\u6B21\u6570\u5DF2\u8FBE\u5230\u4E0A\u9650\uFF0C\u8BF7\u7F29\u5C0F\u8BF7\u6C42\u540E\u91CD\u8BD5\u3002";
+function toToolResultContent(value) {
+  return typeof value === "string" ? value : JSON.stringify(value);
+}
+function toToolErrorContent(message) {
+  return JSON.stringify({ ok: false, error: message });
+}
+async function executeFeishuTool(tool, input) {
+  const result = await tool.execute(input);
+  return toToolResultContent(result);
+}
+async function runFeishuToolLoop(input) {
+  if (!input.model.completeWithTools) {
+    throw new Error("\u5F53\u524D LLM \u5BA2\u6237\u7AEF\u4E0D\u652F\u6301\u5DE5\u5177\u8C03\u7528\u3002");
+  }
+  const maxModelTurns = input.maxModelTurns ?? DEFAULT_MAX_MODEL_TURNS;
+  const maxToolCalls = input.maxToolCalls ?? DEFAULT_MAX_TOOL_CALLS;
+  const messages = [
+    { role: "system", content: FEISHU_TOOL_SYSTEM_PROMPT },
+    { role: "user", content: input.question }
+  ];
+  const toolsByName = new Map(input.tools.map((tool) => [tool.name, tool]));
+  let toolCallsUsed = 0;
+  for (let turn = 0; turn < maxModelTurns; turn += 1) {
+    const assistantResult = await input.model.completeWithTools(messages, input.tools);
+    messages.push({
+      role: "assistant",
+      content: assistantResult.content,
+      toolCalls: assistantResult.toolCalls,
+      reasoningContent: assistantResult.reasoningContent
+    });
+    if (assistantResult.toolCalls.length === 0) {
+      return assistantResult.content || FEISHU_TOOL_LOOP_FALLBACK;
+    }
+    for (const toolCall of assistantResult.toolCalls) {
+      if (toolCallsUsed >= maxToolCalls) {
+        return FEISHU_TOOL_LOOP_LIMIT_REACHED;
+      }
+      toolCallsUsed += 1;
+      const tool = toolsByName.get(toolCall.name);
+      if (!tool) {
+        messages.push({
+          role: "tool",
+          toolCallId: toolCall.id,
+          content: toToolErrorContent(`\u672A\u77E5\u5DE5\u5177\uFF1A${toolCall.name}`)
+        });
+        continue;
+      }
+      try {
+        const result = await executeFeishuTool(tool, toolCall.input);
+        messages.push({
+          role: "tool",
+          toolCallId: toolCall.id,
+          content: result
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        messages.push({
+          role: "tool",
+          toolCallId: toolCall.id,
+          content: toToolErrorContent(message)
+        });
+      }
+    }
+  }
+  return FEISHU_TOOL_LOOP_FALLBACK;
+}
 function isMentionForBot(mention, config) {
   if (!config.feishu.botOpenId) {
     return false;
@@ -3372,27 +3792,28 @@ var FeishuQuestionHandler = class {
     });
     try {
       try {
-        const result = await askWithAgenticRag({
+        const cronTools = createCronJobTools({
+          repository: new CronJobRepository(this.options.database),
+          chatId: decision.chatId,
+          createdByOpenId: payload.event?.sender?.sender_id?.open_id
+        });
+        const allTools = [...tools, ...cronTools];
+        const answer = await runFeishuToolLoop({
           question: decision.question,
-          tools,
+          tools: allTools,
           model: this.options.model
         });
         qaLogs.create({
           chatId: decision.chatId,
           questionMessageId,
           question: decision.question,
-          answer: result.answer,
-          citations: result.citations,
-          retrievalDebug: { evidenceCount: result.citations.length },
+          answer,
+          citations: [],
+          retrievalDebug: {},
           status: "answered",
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         });
-        const citations = formatCitations(result.citations);
-        const text = citations ? `${result.answer}
-
-\u5F15\u7528\uFF1A
-${citations}` : result.answer;
-        await this.sendResponse(decision.chatId, questionMessageId, text);
+        await this.sendResponse(decision.chatId, questionMessageId, answer);
       } catch (error) {
         const message = error instanceof Error ? error.message : String(error);
         qaLogs.create({
@@ -3638,18 +4059,39 @@ function createFeishuGateway(options) {
       });
     }
   }) : void 0);
+  const cronJobScheduler = options.cronJobScheduler ?? (options.cronJobProcessor ? createCronJobScheduler({
+    repository: new CronJobRepository(options.cronJobProcessor.database),
+    sendTextToChat: (chatId, text) => options.cronJobProcessor.sender.sendTextToChat(chatId, text),
+    generateMessage: async (job, now) => {
+      const { tools, close } = await createAgenticRagSearchTools({
+        config: options.config,
+        secrets: options.secrets,
+        database: options.cronJobProcessor.database,
+        messages: new MessageRepository(options.cronJobProcessor.database),
+        scope: { platform: "feishu", platformChatId: job.chatId }
+      });
+      try {
+        return await generateCronJobMessage({ prompt: job.prompt, model: options.cronJobProcessor.model, tools, now });
+      } finally {
+        close();
+      }
+    }
+  }) : void 0);
   return {
     async start() {
       try {
         await wsClient.start({ eventDispatcher });
         indexingScheduler?.start();
+        cronJobScheduler?.start();
       } catch (error) {
         indexingScheduler?.stop();
+        cronJobScheduler?.stop();
         throw formatGatewayStartError(error);
       }
     },
     stop() {
       indexingScheduler?.stop();
+      cronJobScheduler?.stop();
       wsClient.close({ force: true });
     }
   };
@@ -3871,7 +4313,7 @@ var FeishuResourceDownloader = class _FeishuResourceDownloader {
 };
 
 // src/files/ingest.ts
-import crypto6 from "crypto";
+import crypto7 from "crypto";
 import fs11 from "fs/promises";
 import path13 from "path";
 
@@ -3935,7 +4377,7 @@ function ensureSupportedTextFile(filePath) {
   }
 }
 function stableStoredName(sourcePath, fileName) {
-  const digest = crypto6.createHash("sha256").update(sourcePath).digest("hex").slice(0, 16);
+  const digest = crypto7.createHash("sha256").update(sourcePath).digest("hex").slice(0, 16);
   return `${digest}-${fileName}`;
 }
 async function ingestLocalFile(input) {
@@ -4109,6 +4551,126 @@ var GatewayIngestor = class {
   }
 };
 
+// src/rag/answer.ts
+var DEFAULT_MAX_EVIDENCE_BLOCKS = 8;
+var DEFAULT_MAX_CHARS_PER_BLOCK = 1200;
+var SCORE_TIE_THRESHOLD = 0.15;
+function parseTimestamp(value) {
+  if (!value) {
+    return 0;
+  }
+  const time = Date.parse(value);
+  return Number.isFinite(time) ? time : 0;
+}
+function rankEvidenceForPrompt(evidence) {
+  return [...evidence].sort((left, right) => {
+    const scoreDiff = right.score - left.score;
+    if (Math.abs(scoreDiff) > SCORE_TIE_THRESHOLD) {
+      return scoreDiff;
+    }
+    const timeDiff = parseTimestamp(right.source.timestamp) - parseTimestamp(left.source.timestamp);
+    if (timeDiff !== 0) {
+      return timeDiff;
+    }
+    return scoreDiff;
+  });
+}
+function buildEvidencePrompt(question, evidence, options = {}) {
+  if (evidence.length === 0) {
+    throw new Error("RAG evidence is required before answer generation.");
+  }
+  const maxEvidenceBlocks = options.maxEvidenceBlocks ?? DEFAULT_MAX_EVIDENCE_BLOCKS;
+  const maxCharsPerBlock = options.maxCharsPerBlock ?? DEFAULT_MAX_CHARS_PER_BLOCK;
+  const selected = rankEvidenceForPrompt(evidence).slice(0, maxEvidenceBlocks);
+  const citations = selected.map((item, index) => ({
+    marker: `S${index + 1}`,
+    evidenceId: item.id,
+    source: item.source,
+    text: item.text
+  }));
+  const evidenceText = selected.map((item, index) => {
+    const marker = citations[index]?.marker;
+    const clippedText = item.text.length > maxCharsPerBlock ? `${item.text.slice(0, maxCharsPerBlock)}...` : item.text;
+    const sourceParts = [
+      item.source.label,
+      item.source.sender ? `\u53D1\u9001\u4EBA\uFF1A${item.source.sender}` : void 0,
+      item.source.timestamp ? `\u65F6\u95F4\uFF1A${item.source.timestamp}` : void 0,
+      item.source.location ? `\u4F4D\u7F6E\uFF1A${item.source.location}` : void 0
+    ].filter(Boolean);
+    return `[${marker}]
+\u6765\u6E90\uFF1A${sourceParts.join("\uFF1B")}
+\u5185\u5BB9\uFF1A${clippedText}`;
+  }).join("\n\n");
+  return {
+    citations,
+    messages: [
+      {
+        role: "system",
+        content: "\u4F60\u662F ChatterCatcher \u7684\u95EE\u7B54\u6A21\u5757\u3002\u53EA\u80FD\u6839\u636E\u63D0\u4F9B\u7684\u68C0\u7D22\u8BC1\u636E\u56DE\u7B54\uFF0C\u5FC5\u987B\u7B80\u77ED\u76F4\u63A5\u3002\u4E8B\u5B9E\u6027\u7ED3\u8BBA\u5FC5\u987B\u5F15\u7528 [S1] \u8FD9\u6837\u7684\u6765\u6E90\u6807\u8BB0\u3002\u8BC1\u636E\u4E0D\u8DB3\u65F6\u8BF4\u4E0D\u77E5\u9053\uFF0C\u4E0D\u8981\u731C\u3002\u82E5\u8BC1\u636E\u4E92\u76F8\u77DB\u76FE\uFF0C\u4F18\u5148\u91C7\u7528\u65F6\u95F4\u66F4\u65B0\u4E14\u8868\u8FF0\u660E\u786E\u7684\u8BC1\u636E\uFF1B\u5982\u679C\u8F83\u65B0\u7684\u8BC1\u636E\u53EA\u662F\u8BA8\u8BBA\u3001\u731C\u6D4B\u6216\u4E0D\u786E\u5B9A\u8868\u8FBE\uFF0C\u4E0D\u8981\u628A\u5B83\u5F53\u4F5C\u786E\u5B9A\u66F4\u65B0\u3002"
+      },
+      {
+        role: "user",
+        content: `\u95EE\u9898\uFF1A${question}
+
+\u8BC1\u636E\u5904\u7406\u89C4\u5219\uFF1A
+1. \u5148\u5224\u65AD\u8BC1\u636E\u662F\u5426\u8DB3\u4EE5\u56DE\u7B54\u95EE\u9898\u3002
+2. \u540C\u4E00\u4E8B\u9879\u51FA\u73B0\u591A\u4E2A\u7248\u672C\u65F6\uFF0C\u9ED8\u8BA4\u8F83\u65B0\u7684\u660E\u786E\u6D88\u606F\u4F18\u5148\u3002
+3. \u56DE\u7B54\u53EA\u5F15\u7528\u5B9E\u9645\u652F\u6491\u7ED3\u8BBA\u7684\u8BC1\u636E\u3002
+
+\u68C0\u7D22\u8BC1\u636E\uFF1A
+${evidenceText}`
+      }
+    ]
+  };
+}
+async function generateGroundedAnswer(input) {
+  const prompt = buildEvidencePrompt(input.question, input.evidence);
+  const answer = await input.model.complete(prompt.messages);
+  return {
+    answer,
+    citations: prompt.citations
+  };
+}
+
+// src/rag/citations.ts
+function isOpaqueId(value) {
+  return Boolean(value && /^(ou|oc|om|cli|on|un|uid)_?[a-z0-9]+/i.test(value));
+}
+function formatTime(value) {
+  if (!value) {
+    return "\u672A\u77E5\u65F6\u95F4";
+  }
+  const date = new Date(value);
+  if (Number.isNaN(date.getTime())) {
+    return value;
+  }
+  const pad = (input) => String(input).padStart(2, "0");
+  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+}
+function formatSpeaker(source) {
+  if (source.type === "file") {
+    return isOpaqueId(source.label) ? "\u6587\u4EF6" : `\u6587\u4EF6 ${source.label}`;
+  }
+  if (source.sender && !isOpaqueId(source.sender)) {
+    return source.sender;
+  }
+  return "\u7FA4\u6210\u5458";
+}
+function clipText(value, maxLength) {
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length > maxLength ? `${normalized.slice(0, maxLength)}...` : normalized;
+}
+function formatCitation(citation, options = {}) {
+  const maxTextLength = options.maxTextLength ?? 120;
+  const speaker = formatSpeaker(citation.source);
+  const time = formatTime(citation.source.timestamp);
+  const verb = citation.source.type === "file" ? "\u8BB0\u5F55" : "\u8BF4";
+  return `[${citation.marker}] ${speaker}\u5728 ${time} ${verb}\uFF1A\u201C${clipText(citation.text, maxTextLength)}\u201D`;
+}
+function formatCitations(citations, options = {}) {
+  return citations.map((citation) => formatCitation(citation, options)).join("\n");
+}
+
 // src/rag/qa-service.ts
 async function askWithRag(input) {
   const evidence = await input.retriever.retrieve(input.question);
@@ -4133,7 +4695,7 @@ var MemoryVectorStore = class {
       this.records.set(record.id, record);
     }
   }
-  async search(vector, limit) {
+  async search(vector, limit, _scope) {
     return [...this.records.values()].map((record) => {
       const vectorScore = cosineSimilarity(vector, record.vector);
       return {
@@ -4146,6 +4708,7 @@ var MemoryVectorStore = class {
 };
 
 // src/web/server.ts
+import crypto8 from "crypto";
 import Fastify from "fastify";
 function buildHtml() {
   return `<!doctype html>
@@ -4293,6 +4856,10 @@ function buildHtml() {
             <h2>\u89E3\u6790\u4EFB\u52A1</h2>
             <div id="file-jobs" class="empty">\u6B63\u5728\u8BFB\u53D6...</div>
           </section>
+          <section>
+            <h2>\u5B9A\u65F6\u4EFB\u52A1</h2>
+            <div id="cron-jobs" class="empty">\u6B63\u5728\u8BFB\u53D6...</div>
+          </section>
           <section>
             <h2>\u672C\u5730\u64CD\u4F5C</h2>
             <p><code>chattercatcher settings</code> \u4FEE\u6539\u914D\u7F6E\u3002</p>
@@ -4309,10 +4876,13 @@ function buildHtml() {
       const chats = document.querySelector("#chats");
       const files = document.querySelector("#files");
       const fileJobs = document.querySelector("#file-jobs");
+      const cronJobs = document.querySelector("#cron-jobs");
       const qaLogs = document.querySelector("#qa-logs");
       const processMessages = document.querySelector("#process-messages");
       const actionStatus = document.querySelector("#action-status");
 
+      let webActionToken = "__WEB_ACTION_TOKEN__";
+
       function fmt(value) {
         return value == null || value === "" ? "-" : String(value);
       }
@@ -4501,6 +5071,36 @@ function buildHtml() {
         \`;
       }
 
+      function renderCronJobs(items) {
+        if (items.length === 0) {
+          cronJobs.className = "empty";
+          cronJobs.textContent = "\u8FD8\u6CA1\u6709\u5B9A\u65F6\u4EFB\u52A1\u3002\u53EF\u5728\u98DE\u4E66\u7FA4\u91CC @ \u673A\u5668\u4EBA\u521B\u5EFA\u3002";
+          return;
+        }
+        cronJobs.className = "";
+        cronJobs.innerHTML = \`
+          <table>
+            <thead><tr><th>\u4EFB\u52A1</th><th>\u72B6\u6001</th></tr></thead>
+            <tbody>
+              \${items.map((item) => \`
+                <tr>
+                  <td>
+                    <div>\${escapeHtml(item.schedule)}</div>
+                    <div class="message" title="\${escapeHtml(item.prompt)}">\${escapeHtml(item.prompt)}</div>
+                    <div class="path" title="\${escapeHtml(item.id)}">ID: \${escapeHtml(item.id)}</div>
+                    <div class="path" title="\${escapeHtml(item.chatId)}">\u7FA4: \${escapeHtml(item.chatId)}</div>
+                    <div class="path">\u4E0B\u6B21: \${escapeHtml(formatDateTime(item.nextRunAt))}</div>
+                    <div class="path" title="\${escapeHtml(item.lastError || "")}">\${escapeHtml(item.lastError || "")}</div>
+                    \${item.status === "active" ? \`<button type="button" data-delete-cron-job="\${escapeHtml(item.id)}">\u5220\u9664</button>\` : ""}
+                  </td>
+                  <td>\${escapeHtml(item.status)}</td>
+                </tr>
+              \`).join("")}
+            </tbody>
+          </table>
+        \`;
+      }
+
       function renderQaLogs(items) {
         if (items.length === 0) {
           qaLogs.className = "empty";
@@ -4532,29 +5132,38 @@ function buildHtml() {
       }
 
       async function load() {
-        const [status, recent, episodeList, chatList, fileList, jobList, qaLogList] = await Promise.all([
-          fetch("/api/status").then((response) => response.json()),
-          fetch("/api/messages/recent?limit=20").then((response) => response.json()),
-          fetch("/api/episodes?limit=10").then((response) => response.json()),
-          fetch("/api/chats").then((response) => response.json()),
-          fetch("/api/files").then((response) => response.json()),
-          fetch("/api/file-jobs").then((response) => response.json()),
-          fetch("/api/qa-logs?limit=10").then((response) => response.json()),
-        ]);
-        renderMetrics(status);
-        renderMessages(recent.items);
-        renderEpisodes(episodeList.items);
-        renderChats(chatList.items);
-        renderFiles(fileList.items);
-        renderFileJobs(jobList.items);
-        renderQaLogs(qaLogList.items);
+        try {
+          const [status, recent, episodeList, chatList, fileList, jobList, qaLogList, cronJobList] = await Promise.all([
+            fetch("/api/status").then((response) => response.json()),
+            fetch("/api/messages/recent?limit=20").then((response) => response.json()),
+            fetch("/api/episodes?limit=10").then((response) => response.json()),
+            fetch("/api/chats").then((response) => response.json()),
+            fetch("/api/files").then((response) => response.json()),
+            fetch("/api/file-jobs").then((response) => response.json()),
+            fetch("/api/qa-logs?limit=10").then((response) => response.json()),
+            fetch("/api/cron-jobs").then((response) => response.json()),
+          ]);
+          renderMetrics(status);
+          renderMessages(recent.items);
+          renderEpisodes(episodeList.items);
+          renderChats(chatList.items);
+          renderFiles(fileList.items);
+          renderFileJobs(jobList.items);
+          renderQaLogs(qaLogList.items);
+          renderCronJobs(cronJobList.items);
+        } catch (error) {
+          metrics.innerHTML = '<div class="empty">\u6570\u636E\u52A0\u8F7D\u5931\u8D25\uFF1A' + escapeHtml(error instanceof Error ? error.message : String(error)) + '</div>';
+        }
       }
 
       async function processNow() {
         processMessages.disabled = true;
         actionStatus.textContent = "\u6B63\u5728\u5904\u7406\u6D88\u606F\u7D22\u5F15...";
         try {
-          const response = await fetch("/api/process/messages", { method: "POST" });
+          const response = await fetch("/api/process/messages", {
+            method: "POST",
+            headers: { "x-chattercatcher-web-token": webActionToken },
+          });
           const result = await response.json();
           if (!response.ok) {
             actionStatus.textContent = result.message || "\u5904\u7406\u5931\u8D25\u3002";
@@ -4574,6 +5183,28 @@ function buildHtml() {
         }
       }
 
+      document.addEventListener("click", async (event) => {
+        const target = event.target;
+        if (!(target instanceof HTMLElement)) return;
+        const id = target.dataset.deleteCronJob;
+        if (!id) return;
+        target.setAttribute("disabled", "disabled");
+        actionStatus.textContent = "\u6B63\u5728\u5220\u9664\u5B9A\u65F6\u4EFB\u52A1...";
+        try {
+          const response = await fetch(\`/api/cron-jobs/\${encodeURIComponent(id)}\`, {
+            method: "DELETE",
+            headers: { "x-chattercatcher-web-token": webActionToken },
+          });
+          const result = await response.json();
+          actionStatus.textContent = result.ok ? "\u5B9A\u65F6\u4EFB\u52A1\u5DF2\u5220\u9664\u3002" : result.message || "\u5220\u9664\u5931\u8D25\u3002";
+          await load();
+        } catch (error) {
+          actionStatus.textContent = error instanceof Error ? error.message : String(error);
+        } finally {
+          target.removeAttribute("disabled");
+        }
+      });
+
       processMessages.addEventListener("click", () => void processNow());
       void load();
       setInterval(() => {
@@ -4589,6 +5220,16 @@ function parseLimit(value, fallback, max) {
   const rawLimit = Number(value ?? fallback);
   return Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), max) : fallback;
 }
+function getWebActionToken(secrets) {
+  return secrets.web.actionToken;
+}
+function readHeader(value) {
+  return Array.isArray(value) ? value[0] : value;
+}
+function isAuthorizedWebAction(request, token) {
+  const provided = readHeader(request.headers["x-chattercatcher-web-token"]);
+  return provided === token;
+}
 function createWebApp(config) {
   const app = Fastify({ logger: false });
   const database = openDatabase(config);
@@ -4596,30 +5237,44 @@ function createWebApp(config) {
   const episodes = new EpisodeRepository(database);
   const fileJobs = new FileJobRepository(database);
   const qaLogs = new QaLogRepository(database);
+  const cronJobs = new CronJobRepository(database);
+  let webActionToken = "";
+  const tokenReady = (async () => {
+    const secrets = await loadSecrets();
+    if (!secrets.web.actionToken) {
+      secrets.web.actionToken = crypto8.randomBytes(32).toString("hex");
+      await saveSecrets(secrets);
+    }
+    webActionToken = getWebActionToken(secrets);
+  })();
   app.addHook("onClose", async () => {
     database.close();
   });
-  app.get("/api/status", async () => ({
-    app: "ChatterCatcher",
-    gateway: getGatewayStatus(config),
-    data: {
-      chats: messages.getChatCount(),
-      messages: messages.getMessageCount(),
-      episodes: episodes.getEpisodeCount(),
-      files: messages.listFiles(1e3).length,
-      qaLogs: qaLogs.getCount()
-    },
-    rag: {
-      mode: "required",
-      note: "\u95EE\u7B54\u5FC5\u987B\u5148\u68C0\u7D22\u8BC1\u636E\uFF0C\u7981\u6B62\u5168\u91CF\u4E0A\u4E0B\u6587\u5806\u53E0\u3002",
-      retrieval: {
-        keyword: "SQLite FTS5",
-        vector: "SQLite embedding",
-        hybrid: true
-      }
-    },
-    web: config.web
-  }));
+  app.get("/api/status", async () => {
+    await tokenReady;
+    return {
+      app: "ChatterCatcher",
+      gateway: getGatewayStatus(config),
+      data: {
+        chats: messages.getChatCount(),
+        messages: messages.getMessageCount(),
+        episodes: episodes.getEpisodeCount(),
+        files: messages.listFiles(1e3).length,
+        qaLogs: qaLogs.getCount(),
+        cronJobs: cronJobs.list(1e3).length
+      },
+      rag: {
+        mode: "required",
+        note: "\u95EE\u7B54\u5FC5\u987B\u5148\u68C0\u7D22\u8BC1\u636E\uFF0C\u7981\u6B62\u5168\u91CF\u4E0A\u4E0B\u6587\u5806\u53E0\u3002",
+        retrieval: {
+          keyword: "SQLite FTS5",
+          vector: "SQLite embedding",
+          hybrid: true
+        }
+      },
+      web: config.web
+    };
+  });
   app.get("/api/chats", async () => ({
     items: messages.listChats()
   }));
@@ -4654,7 +5309,33 @@ function createWebApp(config) {
       items: qaLogs.listRecent(limit)
     };
   });
-  app.post("/api/process/messages", async (_request, reply) => {
+  app.get("/api/cron-jobs", async (request) => {
+    const limit = parseLimit(request.query.limit, 50, 200);
+    return {
+      items: cronJobs.list(limit)
+    };
+  });
+  app.delete("/api/cron-jobs/:id", async (request, reply) => {
+    await tokenReady;
+    if (!isAuthorizedWebAction(request, webActionToken)) {
+      reply.code(403);
+      return { ok: false, message: "Web \u64CD\u4F5C\u672A\u6388\u6743\u3002" };
+    }
+    const id = request.params.id;
+    const job = cronJobs.get(id);
+    if (!job) {
+      reply.code(404);
+      return { ok: false, message: "\u6CA1\u6709\u627E\u5230\u5B9A\u65F6\u4EFB\u52A1\u3002" };
+    }
+    const ok = cronJobs.deleteByChat(id, job.chatId);
+    return { ok };
+  });
+  app.post("/api/process/messages", async (request, reply) => {
+    await tokenReady;
+    if (!isAuthorizedWebAction(request, webActionToken)) {
+      reply.code(403);
+      return { status: "failed", message: "Web \u64CD\u4F5C\u672A\u6388\u6743\u3002" };
+    }
     try {
       return await processMessagesNow({
         config,
@@ -4671,8 +5352,9 @@ function createWebApp(config) {
     }
   });
   app.get("/", async (_request, reply) => {
+    await tokenReady;
     reply.type("text/html; charset=utf-8");
-    return buildHtml();
+    return buildHtml().replaceAll("__WEB_ACTION_TOKEN__", webActionToken);
   });
   return app;
 }
@@ -4684,6 +5366,7 @@ async function startWebServer(config) {
   console.log(`ChatterCatcher Web UI: ${url}`);
 }
 export {
+  CronJobRepository,
   EpisodeRepository,
   FeishuMessageSender,
   FeishuQuestionHandler,
@@ -4706,6 +5389,8 @@ export {
   cosineSimilarity,
   createAgenticRagSearchTools,
   createChatModel,
+  createCronJobScheduler,
+  createCronJobTools,
   createDefaultConfig,
   createDefaultSecrets,
   createEmbeddingModel,
@@ -4722,6 +5407,7 @@ export {
   formatCitation,
   formatCitations,
   formatDoctorChecks,
+  generateCronJobMessage,
   generateGroundedAnswer,
   getDatabasePath,
   getFeishuQuestionDecision,
@@ -4729,6 +5415,7 @@ export {
   getGatewayPidPath,
   getGatewayRuntimeState,
   getLogsDirectory,
+  getNextCronRun,
   hasEmbeddingConfig,
   indexMessageChunks,
   ingestLocalFile,
@@ -4736,11 +5423,13 @@ export {
   isProcessRunning,
   isSupportedParseFile,
   isSupportedTextFile,
+  isValidCronSchedule,
   listLogFiles,
   loadConfig,
   loadSecrets,
   mapDomain,
   maskSecret,
+  matchesCronSchedule,
   migrateDatabase,
   normalizeFeishuReceiveMessageEvent,
   normalizeLineCount,