dsh-lark-bot 0.19.10 → 0.19.12

package/dist/cli.js

@@ -296,6 +296,16 @@ var init_profile_package = __esm({
   }
 });
 
+// src/adapters/model-choice.ts
+function resolveModelChoice(preferenceModel, envModel) {
+  return preferenceModel?.trim() || envModel;
+}
+var init_model_choice = __esm({
+  "src/adapters/model-choice.ts"() {
+    "use strict";
+  }
+});
+
 // src/adapters/dsh/acp-runtime.ts
 import { spawn as spawn4 } from "cross-spawn";
 import { existsSync as existsSync4, realpathSync as realpathSync3 } from "fs";
@@ -666,7 +676,7 @@ async function buildAcpAgentAdapter(env, preferences) {
     home: homedir2(),
     env: process.env,
     provider: env.provider,
-    model: preferences.model ?? env.model,
+    model: resolveModelChoice(preferences.model, env.model),
     ...env.dshExplicit ? { command: env.dshCommand, args: env.dshArgs } : {}
   };
   const ensure = await ensureAcpProfile(runtimeOptions);
@@ -679,7 +689,7 @@ async function buildAcpAgentAdapter(env, preferences) {
   return new AcpDshAdapter({
     launch,
     provider: env.provider,
-    model: preferences.model ?? env.model
+    model: resolveModelChoice(preferences.model, env.model)
   });
 }
 var AcpDshAdapter;
@@ -688,6 +698,7 @@ var init_acp_adapter = __esm({
     "use strict";
     init_acp_runtime();
     init_event_channel();
+    init_model_choice();
     AcpDshAdapter = class {
       id = "dsh-acp";
       displayName = "DeepSeek Harness (ACP)";
@@ -972,12 +983,18 @@ async function listProcesses(platform = process.platform, run = captureOutput) {
   return listProcessesPosix(run);
 }
 async function listProcessesPosix(run) {
-  const { stdout } = await run("ps", ["-axo", "pid=,args="], 1e4);
+  const { stdout } = await run("ps", ["-axo", "pid=,ppid=,args="], 1e4);
   const result = [];
   for (const line of stdout.split("\n")) {
-    const match = /^\s*(\d+)\s+(.+)$/.exec(line);
-    if (match) {
-      result.push({ pid: Number(match[1]), cmdline: match[2] ?? "" });
+    const match = /^\s*(\d+)\s+(\d+)\s+(.+)$/.exec(line);
+    if (!match) continue;
+    const pid = Number(match[1]);
+    const ppid = Number(match[2]);
+    if (!Number.isInteger(pid) || pid <= 0) continue;
+    if (Number.isInteger(ppid) && ppid > 0) {
+      result.push({ pid, ppid, cmdline: match[3] ?? "" });
+    } else {
+      result.push({ pid, cmdline: match[3] ?? "" });
     }
   }
   return result;
@@ -989,7 +1006,7 @@ async function listProcessesWindows(run) {
       "-NoProfile",
       "-NonInteractive",
       "-Command",
-      "Get-CimInstance Win32_Process | Select-Object ProcessId, CommandLine | ConvertTo-Json -Compress"
+      "Get-CimInstance Win32_Process | Select-Object ProcessId, ParentProcessId, CommandLine | ConvertTo-Json -Compress"
     ],
     1e4
   );
@@ -1000,8 +1017,11 @@ async function listProcessesWindows(run) {
       if (typeof row !== "object" || row === null) return [];
       const record = row;
       const pid = Number(record.ProcessId);
+      const ppid = Number(record.ParentProcessId);
       const cmdline = record.CommandLine;
-      return Number.isInteger(pid) && pid > 0 && typeof cmdline === "string" ? [{ pid, cmdline }] : [];
+      if (!Number.isInteger(pid) || pid <= 0 || typeof cmdline !== "string") return [];
+      if (Number.isInteger(ppid) && ppid > 0) return [{ pid, ppid, cmdline }];
+      return [{ pid, cmdline }];
     });
   } catch {
     return [];
@@ -1703,7 +1723,7 @@ var DshProviderManager = class {
     try {
       catalogProviders = await this.catalog.listProviders();
     } catch (error) {
-      log.warn("model-catalog", "refresh-failed", {
+      log.info("model-catalog", "refresh-failed", {
         error: error instanceof Error ? error.message : String(error)
       });
     }
@@ -3442,6 +3462,7 @@ var WebDshAdapter = class {
 };
 
 // src/adapters/index.ts
+init_model_choice();
 async function resolveAdapterRoute(input, source) {
   const provider = input.provider?.trim() || void 0;
   const model = input.model?.trim() || void 0;
@@ -3461,7 +3482,7 @@ async function resolveAdapterRoute(input, source) {
   return void 0;
 }
 async function buildAgentAdapter(env, preferences = { stopGraceMs: void 0, model: void 0 }) {
-  const configuredModel = preferences.model ?? env.model;
+  const configuredModel = resolveModelChoice(preferences.model, env.model);
   const managedRoute = env.adapterMode === "sdk" || env.adapterMode === "acp" ? await resolveAdapterRoute(
     { provider: env.provider, model: configuredModel },
     new DshProviderManager({ env: process.env })
@@ -3493,7 +3514,7 @@ async function buildAgentAdapter(env, preferences = { stopGraceMs: void 0, model
       return new WebDshAdapter({
         baseUrl: env.webBaseUrl,
         provider: env.provider,
-        model: preferences.model ?? env.model
+        model: resolveModelChoice(preferences.model, env.model)
       });
     }
     case "sdk":
@@ -3700,6 +3721,10 @@ var DEFAULTS = {
   guardianBridgeProfile: "default",
   upgradeNotify: false,
   upgradeCheckIntervalMs: 6 * 60 * 6e4,
+  channelPingTimeoutSec: 30,
+  channelKeepalive: true,
+  channelKeepaliveMs: 15e3,
+  channelHealthPollMs: 5e3,
   sessionBackfillMessages: 20,
   sessionBackfillBytes: 64 * 1024,
   sessionStreamUpdateMs: 800
@@ -3930,6 +3955,22 @@ function loadRuntimeEnv(source = process.env) {
       source.DSH_LARK_GUARDIAN_ENGINE_DEAD_MS,
       DEFAULTS.guardianEngineDeadMs,
       "DSH_LARK_GUARDIAN_ENGINE_DEAD_MS"
+    ),
+    channelPingTimeoutSec: parsePositiveIntMin(
+      source.DSH_LARK_CHANNEL_PING_TIMEOUT_SEC,
+      DEFAULTS.channelPingTimeoutSec,
+      "DSH_LARK_CHANNEL_PING_TIMEOUT_SEC"
+    ),
+    channelKeepalive: parseBoolean(source.DSH_LARK_CHANNEL_KEEPALIVE, DEFAULTS.channelKeepalive),
+    channelKeepaliveMs: parsePositiveIntMin(
+      source.DSH_LARK_CHANNEL_KEEPALIVE_MS,
+      DEFAULTS.channelKeepaliveMs,
+      "DSH_LARK_CHANNEL_KEEPALIVE_MS"
+    ),
+    channelHealthPollMs: parsePositiveIntMin(
+      source.DSH_LARK_CHANNEL_HEALTH_POLL_MS,
+      DEFAULTS.channelHealthPollMs,
+      "DSH_LARK_CHANNEL_HEALTH_POLL_MS"
     )
   };
 }
@@ -4169,17 +4210,36 @@ var ConfigStore = class {
 };
 
 // src/guardian/install.ts
-init_own_package();
-init_dsh_runtime();
-init_process();
 import { mkdir as mkdir8, readFile as readFile8, rm as rm3, writeFile as writeFile5 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
 import { homedir as homedir6 } from "os";
-import { delimiter, dirname as dirname9, join as join11 } from "path";
+import { dirname as dirname10, join as join11 } from "path";
+
+// src/platform/path.ts
+import { delimiter, dirname as dirname8 } from "path";
+function sanitizeServicePath(nodeBin, inheritedPath = process.env.PATH) {
+  const entries = [dirname8(nodeBin), ...inheritedPath?.split(delimiter) ?? []];
+  const seen = /* @__PURE__ */ new Set();
+  return entries.filter((entry) => {
+    if (!entry) return false;
+    const normalized = entry.replaceAll("\\", "/");
+    if (normalized.includes("/node_modules/.bin") || /\/_npx(?:\/|$)/.test(normalized) || /\/guardian\/update-worker\/npm-cache(?:\/|$)/.test(normalized)) {
+      return false;
+    }
+    if (seen.has(entry)) return false;
+    seen.add(entry);
+    return true;
+  }).join(delimiter);
+}
+
+// src/guardian/install.ts
+init_own_package();
+init_dsh_runtime();
+init_process();
 
 // src/guardian/state.ts
 import { readFile as readFile7 } from "fs/promises";
-import { dirname as dirname8 } from "path";
+import { dirname as dirname9 } from "path";
 import { mkdir as mkdir7 } from "fs/promises";
 var DEFAULT_DSH_PROFILE = "dsh-lark";
 var DEFAULT_BRIDGE_PROFILE = "default";
@@ -4221,7 +4281,7 @@ async function loadGuardianState(file, fallback) {
 }
 async function saveGuardianState(file, state) {
   const next = { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  await mkdir7(dirname8(file), { recursive: true });
+  await mkdir7(dirname9(file), { recursive: true });
   await writeFileAtomic(file, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
 }
@@ -4275,7 +4335,7 @@ function guardianServiceFilePath(platform, root) {
 }
 function systemdUnit(nodeBin, cliEntry, env = {}) {
   const renderedEnv = {
-    PATH: env.PATH ?? dirname9(nodeBin),
+    PATH: env.PATH ?? dirname10(nodeBin),
     ...env
   };
   const envLines = Object.entries(renderedEnv).map(([key, value]) => `Environment=${key}=${value}`).join("\n");
@@ -4298,18 +4358,7 @@ function systemdUnit(nodeBin, cliEntry, env = {}) {
   ].join("\n");
 }
 function stableGuardianServicePath(nodeBin, inheritedPath = process.env.PATH) {
-  const entries = [dirname9(nodeBin), ...inheritedPath?.split(delimiter) ?? []];
-  const seen = /* @__PURE__ */ new Set();
-  return entries.filter((entry) => {
-    if (!entry) return false;
-    const normalized = entry.replaceAll("\\", "/");
-    if (normalized.includes("/node_modules/.bin") || /\/_npx(?:\/|$)/.test(normalized) || /\/guardian\/update-worker\/npm-cache(?:\/|$)/.test(normalized)) {
-      return false;
-    }
-    if (seen.has(entry)) return false;
-    seen.add(entry);
-    return true;
-  }).join(delimiter);
+  return sanitizeServicePath(nodeBin, inheritedPath);
 }
 function launchdPlist(nodeBin, cliEntry, label2 = `io.dsh-lark.${GUARDIAN_LABEL}`, logPath = "/tmp/dsh-lark-guardian.log") {
   return [
@@ -4477,15 +4526,6 @@ function guardianStatePath(root) {
   return join11(root, ".dsh-lark", "guardian.json");
 }
 
-// src/upgrade/detect.ts
-init_own_package();
-import { readFile as readFile10 } from "fs/promises";
-import { join as join12 } from "path";
-import { homedir as homedir7 } from "os";
-init_dsh_runtime();
-init_process();
-import { existsSync as existsSync6 } from "fs";
-
 // src/guardian/heartbeat.ts
 import { readFile as readFile9 } from "fs/promises";
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 5e3;
@@ -4496,15 +4536,25 @@ async function readHeartbeat(file) {
     if (typeof parsed.pid !== "number" || typeof parsed.startedAt !== "string" || typeof parsed.ts !== "number") {
       return void 0;
     }
-    return {
+    const payload = {
       pid: parsed.pid,
       startedAt: parsed.startedAt,
       ts: parsed.ts
     };
+    const channel = parsed.channel;
+    if (isChannelSnapshot(channel)) {
+      payload.channel = channel;
+    }
+    return payload;
   } catch {
     return void 0;
   }
 }
+function isChannelSnapshot(value) {
+  if (!value || typeof value !== "object") return false;
+  const snapshot = value;
+  return typeof snapshot.state === "string" && typeof snapshot.ready === "boolean";
+}
 function heartbeatAgeMs(payload, now = Date.now()) {
   return Math.max(0, now - payload.ts);
 }
@@ -4512,12 +4562,34 @@ function isHeartbeatFresh(payload, maxAgeMs, now = Date.now()) {
   if (payload === void 0) return false;
   return heartbeatAgeMs(payload, now) < maxAgeMs;
 }
-function startHeartbeat(file, pid, intervalMs = DEFAULT_HEARTBEAT_INTERVAL_MS) {
+function channelHealthLabel(channel) {
+  if (channel === void 0) return "\u672A\u4E0A\u62A5";
+  if (channel.ready) {
+    return `ready (generation ${channel.generation ?? "-"})`;
+  }
+  switch (channel.state) {
+    case "connecting":
+      return "connecting";
+    case "reconnecting":
+      return `reconnecting (attempt ${channel.reconnectAttempts ?? "-"})`;
+    case "failed":
+      return "failed";
+    case "stopped":
+      return "stopped";
+    default:
+      return channel.state;
+  }
+}
+function startHeartbeat(file, pid, intervalMs = DEFAULT_HEARTBEAT_INTERVAL_MS, getChannelHealth) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   let stopped = false;
   const beat = async () => {
     if (stopped) return;
     const payload = { pid, startedAt, ts: Date.now() };
+    const channel = getChannelHealth?.();
+    if (channel !== void 0) {
+      payload.channel = channel;
+    }
     try {
       await writeFileAtomic(file, `${JSON.stringify(payload)}
 `, {
@@ -4540,6 +4612,13 @@ function startHeartbeat(file, pid, intervalMs = DEFAULT_HEARTBEAT_INTERVAL_MS) {
 }
 
 // src/upgrade/detect.ts
+init_own_package();
+import { readFile as readFile10 } from "fs/promises";
+import { join as join12 } from "path";
+import { homedir as homedir7 } from "os";
+init_dsh_runtime();
+init_process();
+import { existsSync as existsSync6 } from "fs";
 async function readInstalledPackage(dshHome, profile, packageName) {
   const manifest = join12(
     dshHome,
@@ -4616,7 +4695,7 @@ async function detectUpgradeState(options = {}) {
 
 // src/upgrade/state.ts
 import { mkdir as mkdir9, readFile as readFile11 } from "fs/promises";
-import { dirname as dirname10, join as join13 } from "path";
+import { dirname as dirname11, join as join13 } from "path";
 function upgradeStatePath(root) {
   return join13(root, "upgrade-state.json");
 }
@@ -4632,7 +4711,7 @@ async function loadUpgradeState(file) {
   }
 }
 async function saveUpgradeState(file, state) {
-  await mkdir9(dirname10(file), { recursive: true });
+  await mkdir9(dirname11(file), { recursive: true });
   await writeFileAtomic(file, JSON.stringify(state, null, 2));
 }
 
@@ -4715,13 +4794,13 @@ function packageSpecFor(name, version) {
 
 // src/service/manager.ts
 import { mkdir as mkdir14, readFile as readFile14, rename as rename2, rm as rm7, stat as stat5 } from "fs/promises";
-import { dirname as dirname13, join as join19 } from "path";
+import { dirname as dirname14, join as join19 } from "path";
 import { homedir as homedir11 } from "os";
 init_dsh_runtime();
 
 // src/service/command.ts
 import { execFile } from "child_process";
-import { basename as basename3, dirname as dirname11, join as join14 } from "path";
+import { basename as basename3, dirname as dirname12, join as join14 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var runCommand = (command, args, options) => new Promise((resolve6) => {
   execFile(
@@ -4747,7 +4826,7 @@ function resolveCliJsPath(metaUrl = import.meta.url) {
   const current = fileURLToPath2(metaUrl);
   const name = basename3(current);
   if (name === "cli.js" || name === "cli.mjs" || name === "cli.cjs") return current;
-  return join14(dirname11(current), "..", "dist", "cli.js");
+  return join14(dirname12(current), "..", "dist", "cli.js");
 }
 function slugify(value) {
   const slug = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -4790,6 +4869,9 @@ function snapshotServiceEnv(source = process.env, extraKeys = [], inherited = {}
       }
     }
   }
+  if (typeof env.PATH === "string" && env.PATH.length > 0) {
+    env.PATH = sanitizeServicePath(process.execPath, env.PATH);
+  }
   return env;
 }
 function formatEnvFile(env) {
@@ -5375,7 +5457,7 @@ var PortableServiceController = class {
 
 // src/service/windows-task.ts
 import { mkdir as mkdir13, writeFile as writeFile7 } from "fs/promises";
-import { dirname as dirname12, join as join18 } from "path";
+import { dirname as dirname13, join as join18 } from "path";
 function psQuote(value) {
   return `'${value.replace(/'/g, "''")}'`;
 }
@@ -5386,7 +5468,7 @@ function buildScheduledTaskScript(action, spec) {
     `$arguments = ${psQuote(spec.commandArgs.map((arg) => `"${arg.replace(/"/g, '\\"')}"`).join(" "))}`,
     `$log = ${psQuote(spec.logFile)}`,
     `$profile = ${psQuote(spec.profile)}`,
-    `$workDir = ${psQuote(dirname12(spec.commandPath))}`
+    `$workDir = ${psQuote(dirname13(spec.commandPath))}`
   ].join("\n");
   const install = [
     `$inner = '"' + $command + '" ' + $arguments + ' >> "' + $log + '" 2>&1'`,
@@ -5605,7 +5687,7 @@ var ServiceManager = class {
   }
   async withLifecycleLock(operation) {
     const lockDir = this.paths.serviceLockDir(this.profile);
-    await mkdir14(dirname13(lockDir), { recursive: true });
+    await mkdir14(dirname14(lockDir), { recursive: true });
     try {
       await mkdir14(lockDir);
     } catch (error) {
@@ -5645,11 +5727,39 @@ var ServiceManager = class {
     if (serviceStatus.state === "running") return;
     const process2 = await this.findProcess(this.profile);
     if (process2) {
+      if (await this.isGuardianSpawned(process2)) {
+        await this.stopGuardianSpawnedProcess(process2.pid);
+        return;
+      }
       throw new Error(
         `\u68C0\u6D4B\u5230\u672A\u53D7\u7BA1\u7684 dsh --profile ${this.profile}\uFF08pid ${process2.pid}\uFF09\u3002\u8BF7\u5148\u5728\u539F\u7EC8\u7AEF\u505C\u6B62\u5B83\uFF0C\u518D\u91CD\u8BD5\u3002`
       );
     }
   }
+  /** True when the profile process was spawned by the resident guardian. */
+  async isGuardianSpawned(process2) {
+    const ppid = process2.ppid;
+    if (!ppid) return false;
+    const parent = (await listProcesses()).find((entry) => entry.pid === ppid);
+    return parent !== void 0 && matchGuardianProcess(parent.cmdline);
+  }
+  /** Best-effort stop of a guardian-spawned profile process (grace, then kill). */
+  async stopGuardianSpawnedProcess(pid) {
+    try {
+      process.kill(pid, "SIGTERM");
+    } catch {
+      return;
+    }
+    const deadline = Date.now() + 5e3;
+    while (Date.now() < deadline && isPidAlive2(pid)) {
+      await new Promise((resolve6) => setTimeout(resolve6, 100));
+    }
+    if (!isPidAlive2(pid)) return;
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch {
+    }
+  }
   async buildSpec(requireProfile = false) {
     const previous = await this.readMetadata();
     const dshBin = this.dshBinOverride ?? discoverDshBin(this.home, this.sourceEnv) ?? previous?.dshBin;
@@ -5746,8 +5856,8 @@ var ServiceManager = class {
     }
   }
   async prepareFiles(spec, platform) {
-    await mkdir14(dirname13(spec.logFile), { recursive: true });
-    await mkdir14(dirname13(spec.envFile), { recursive: true });
+    await mkdir14(dirname14(spec.logFile), { recursive: true });
+    await mkdir14(dirname14(spec.envFile), { recursive: true });
     await writeServiceEnv(spec.envFile, spec.env);
     if (platform === "win32-task") {
       try {
@@ -5918,6 +6028,18 @@ async function runDoctorChecks(options) {
   } catch (error) {
     lines.push(`service: \u26A0\uFE0F \u72B6\u6001\u68C0\u67E5\u5931\u8D25\uFF08${error instanceof Error ? error.message : String(error)}\uFF09`);
   }
+  try {
+    const heartbeat = await readHeartbeat(
+      paths.profilePath(env.guardianBridgeProfile, "guardian", "heartbeat.json")
+    );
+    lines.push(`channel: ${channelHealthLabel(heartbeat?.channel)}`);
+    if (heartbeat?.channel && !heartbeat.channel.ready) {
+      lines.push(
+        "channel: \u26A0\uFE0F \u5F15\u64CE\u8FDB\u7A0B\u5B58\u6D3B\u4F46\u901A\u9053\u672A\u5C31\u7EEA\uFF08\u534A\u5F00/\u91CD\u8FDE/\u5931\u8D25\uFF09\uFF1B\u8BF7\u68C0\u67E5\u7F51\u7EDC\u8DEF\u7531\u6216\u91CD\u542F managed engine"
+      );
+    }
+  } catch {
+  }
   try {
     const state = await loadUpgradeState(upgradeStatePath(env.home));
     if (state?.lastUpgrade.pendingRestart === true) {
@@ -7057,6 +7179,106 @@ var LanguagePolicyStore = class {
 // src/bridge/channel.ts
 import { createLarkChannel as createLarkChannel2 } from "@larksuite/channel";
 
+// src/bridge/channel-health.ts
+function mapState(state) {
+  switch (state) {
+    case "connected":
+      return "ready";
+    case "reconnecting":
+      return "reconnecting";
+    case "failed":
+      return "failed";
+    case "connecting":
+      return "connecting";
+    case "idle":
+    default:
+      return "connecting";
+  }
+}
+var ChannelHealthMonitor = class {
+  channel;
+  pollMs;
+  onUpdate;
+  generation = 0;
+  connectedAt;
+  lastInboundAt;
+  lastReconnectAt;
+  lastError;
+  observedState = "connecting";
+  reconnectAttempts = 0;
+  at = 0;
+  pollTimer;
+  constructor(channel, options = {}) {
+    this.channel = channel;
+    this.pollMs = options.pollMs ?? 5e3;
+    this.onUpdate = options.onUpdate;
+  }
+  /** Latest snapshot (always a copy; safe to persist). */
+  snapshot() {
+    return {
+      state: this.observedState,
+      ready: this.observedState === "ready",
+      generation: this.generation,
+      ...this.connectedAt !== void 0 ? { connectedAt: this.connectedAt } : {},
+      reconnectAttempts: this.reconnectAttempts,
+      ...this.lastInboundAt !== void 0 ? { lastInboundAt: this.lastInboundAt } : {},
+      ...this.lastReconnectAt !== void 0 ? { lastReconnectAt: this.lastReconnectAt } : {},
+      ...this.lastError !== void 0 ? { lastError: this.lastError } : {},
+      at: this.at
+    };
+  }
+  /** Bind transport hooks from the bridge event subscription. */
+  observeMessage() {
+    this.lastInboundAt = Date.now();
+    this.markChanged();
+  }
+  observeReconnecting() {
+    this.observedState = "reconnecting";
+    this.markChanged();
+  }
+  observeReconnected() {
+    this.generation += 1;
+    const now = Date.now();
+    this.connectedAt = now;
+    this.lastReconnectAt = now;
+    this.observedState = "ready";
+    this.markChanged();
+  }
+  observeError(error) {
+    this.lastError = error instanceof Error ? error.message : String(error);
+    if (this.observedState !== "reconnecting" && this.observedState !== "failed") {
+      this.observedState = "failed";
+    }
+    this.markChanged();
+  }
+  /** Poll the SDK's connection-status snapshot. */
+  start() {
+    if (this.pollTimer) return;
+    this.refresh();
+    this.pollTimer = setInterval(() => this.refresh(), this.pollMs);
+    this.pollTimer.unref?.();
+  }
+  stop() {
+    if (this.pollTimer) {
+      clearInterval(this.pollTimer);
+      this.pollTimer = void 0;
+    }
+    this.observedState = "stopped";
+    this.markChanged();
+  }
+  refresh() {
+    const status = this.channel.getConnectionStatus?.();
+    this.observedState = mapState(status?.state);
+    this.reconnectAttempts = status?.reconnectAttempts ?? this.reconnectAttempts;
+    this.markChanged();
+  }
+  markChanged() {
+    const now = Date.now();
+    this.at = now;
+    this.onUpdate?.(this.snapshot());
+  }
+};
+
 // src/commands/index.ts
 import { stat as stat8 } from "fs/promises";
 import { homedir as homedir14 } from "os";
@@ -10299,7 +10521,7 @@ async function handleConfigHubAction(action, ctx, value = {}) {
 }
 
 // src/commands/archive.ts
-import { dirname as dirname14 } from "path";
+import { dirname as dirname15 } from "path";
 
 // src/media/outbound-files.ts
 import { constants } from "fs";
@@ -10495,7 +10717,7 @@ async function sendArchiveFiles(ctx, record, destination = {
     [record.jsonlPath, `${record.archiveId}.jsonl`]
   ]) {
     try {
-      const prepared = await prepareOutboundFile({ path, baseDir: dirname14(path), allowedRoots: [dirname14(path)], fileName });
+      const prepared = await prepareOutboundFile({ path, baseDir: dirname15(path), allowedRoots: [dirname15(path)], fileName });
       await ctx.channel.sendFile(destination.chatId, prepared.fileName, prepared.content, {
         ...destination.messageId ? { replyTo: destination.messageId } : {},
         ...destination.threadId ? { threadId: destination.threadId } : {}
@@ -13751,6 +13973,8 @@ The value is written only by the local bridge and is not sent to the agent.` },
 }
 
 // src/bridge/channel.ts
+var DEFAULT_CHANNEL_PING_TIMEOUT_SEC = 30;
+var DEFAULT_CHANNEL_KEEPALIVE_MS = 15e3;
 async function startChannel(deps) {
   const channel = (deps.createChannel ?? createLarkChannel2)({
     appId: deps.appId,
@@ -13777,7 +14001,26 @@ async function startChannel(deps) {
     resolveChatMode: true,
     handshakeTimeoutMs: 8e3,
     httpTimeoutMs: 3e4,
-    respectProxyEnv: true
+    respectProxyEnv: true,
+    // Issue #108: detect a half-open WebSocket (TCP ESTABLISHED but Feishu no
+    // longer delivering). `pingTimeout` force-reconnects when no inbound frame
+    // arrives after the last ping; the app-level `keepalive` probes and
+    // force-reconnects, and `onUnrecoverable` fires when even that fails so the
+    // engine can exit and let the managed service / guardian restart it.
+    wsConfig: { pingTimeout: deps.channelPingTimeoutSec ?? DEFAULT_CHANNEL_PING_TIMEOUT_SEC },
+    keepalive: {
+      enabled: deps.channelKeepalive ?? true,
+      intervalMs: deps.channelKeepaliveMs ?? DEFAULT_CHANNEL_KEEPALIVE_MS,
+      onUnrecoverable: (error) => {
+        log.fail("channel", "unrecoverable", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+        deps.onChannelUnrecoverable?.(error);
+      }
+    }
+  });
+  const channelHealth = new ChannelHealthMonitor(channel, {
+    ...deps.channelHealthPollMs !== void 0 ? { pollMs: deps.channelHealthPollMs } : {}
   });
   const streaming = adaptLarkChannel(channel);
   const commandChannel = streaming;
@@ -13818,6 +14061,7 @@ async function startChannel(deps) {
   const isolationStore = deps.isolationStore ?? EMPTY_ISOLATION_STORE;
   let groupPoller;
   const processMessage = async (msg, alreadyClaimed = false) => {
+    channelHealth.observeMessage();
     if (groupPoller && !alreadyClaimed && !groupPoller.claim(msg.messageId)) return;
     const chatMode = msg.chatMode ?? msg.chatType;
     const botSender = msg.senderType === "bot";
@@ -14394,21 +14638,25 @@ ${msg.content}`,
     },
     reconnecting: () => {
       log.warn("channel", "reconnecting", {});
+      channelHealth.observeReconnecting();
       void reconnectNotifier.reconnecting().catch((error) => {
         log.fail("channel-reconnect-notice", error);
       });
     },
     reconnected: () => {
       log.info("channel", "reconnected", {});
+      channelHealth.observeReconnected();
       void reconnectNotifier.reconnected().catch((error) => {
         log.fail("channel-reconnect-notice", error);
       });
     },
     error: (error) => {
       log.fail("channel", error);
+      channelHealth.observeError(error);
     }
   });
   await channel.connect();
+  channelHealth.start();
   if (sessionProjectionBridge) {
     void sessionProjectionBridge.start().catch((error) => {
       log.fail("session-projection", error, { step: "start" });
@@ -14425,8 +14673,10 @@ ${msg.content}`,
   }
   return {
     channel,
+    channelHealth: () => channelHealth.snapshot(),
     disconnect: async () => {
       await groupPoller?.stop();
+      channelHealth.stop();
       sessionProjection?.close();
       await sessionProjectionBridge?.close();
       await channel.disconnect();
@@ -16475,7 +16725,7 @@ async function safeRemove(path) {
 import { execFile as execFile3 } from "child_process";
 import { createHash as createHash2, randomBytes as randomBytes4 } from "crypto";
 import { access as access2, copyFile, mkdir as mkdir18, realpath as realpath2 } from "fs/promises";
-import { dirname as dirname15, join as join25 } from "path";
+import { dirname as dirname16, join as join25 } from "path";
 import { promisify as promisify2 } from "util";
 var execFileAsync2 = promisify2(execFile3);
 async function defaultRunGit2(args, cwd) {
@@ -16494,7 +16744,7 @@ async function exists2(path) {
   }
 }
 async function defaultCopyRulesFile(source, target) {
-  await mkdir18(dirname15(target), { recursive: true });
+  await mkdir18(dirname16(target), { recursive: true });
   await copyFile(source, target);
 }
 function slugify2(scope) {
@@ -16712,7 +16962,7 @@ var UpdateNotifier = class {
 
 // src/bot/fleet-store.ts
 import { mkdir as mkdir19, readFile as readFile28 } from "fs/promises";
-import { dirname as dirname16 } from "path";
+import { dirname as dirname17 } from "path";
 function validBotInstanceName(name) {
   return /^[a-z][a-z0-9-]{0,31}$/u.test(name);
 }
@@ -16833,7 +17083,7 @@ var BotFleetStore = class {
     })).sort((a, b) => a.name.localeCompare(b.name));
   }
   async persist() {
-    await mkdir19(dirname16(this.path), { recursive: true });
+    await mkdir19(dirname17(this.path), { recursive: true });
     await writeFileAtomic(this.path, `${JSON.stringify(this.data, null, 2)}
 `, { mode: 384 });
   }
@@ -16853,7 +17103,7 @@ function isFleetEntry(value) {
 
 // src/bot/handoff-guard.ts
 import { mkdir as mkdir20, readFile as readFile29 } from "fs/promises";
-import { dirname as dirname17 } from "path";
+import { dirname as dirname18 } from "path";
 var BotHandoffGuard = class {
   constructor(path) {
     this.path = path;
@@ -16901,7 +17151,7 @@ var BotHandoffGuard = class {
     }
   }
   async write(data) {
-    await mkdir20(dirname17(this.path), { recursive: true });
+    await mkdir20(dirname18(this.path), { recursive: true });
     await writeFileAtomic(this.path, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
   }
@@ -17684,7 +17934,7 @@ init_own_package();
 import { createHash as createHash3, randomUUID as randomUUID13 } from "crypto";
 import { spawn as spawn7 } from "child_process";
 import { chmod, mkdir as mkdir21, readFile as readFile31, rm as rm10 } from "fs/promises";
-import { dirname as dirname18, join as join26 } from "path";
+import { dirname as dirname19, join as join26 } from "path";
 init_own_package();
 init_process();
 function guardianUpdateFailureHint(code) {
@@ -17721,7 +17971,7 @@ async function loadState(file) {
   }
 }
 async function saveState(file, state) {
-  await mkdir21(dirname18(file), { recursive: true });
+  await mkdir21(dirname19(file), { recursive: true });
   await writeFileAtomic(file, `${JSON.stringify(state, null, 2)}
 `, { mode: 384 });
 }
@@ -17796,7 +18046,7 @@ async function runGuardianUpdateWorker(request, options = {}) {
   if (delayMs > 0) await new Promise((resolve6) => setTimeout(resolve6, delayMs));
   const spec = `${state.packageName}@${state.targetVersion}`;
   const run = options.run ?? captureOutput;
-  const workerRoot = join26(dirname18(request.stateFile), "update-worker");
+  const workerRoot = join26(dirname19(request.stateFile), "update-worker");
   const cacheRoot = join26(workerRoot, "npm-cache");
   const cacheDir = join26(
     cacheRoot,
@@ -18586,7 +18836,18 @@ async function startBridgeEngine(options) {
     },
     allowedUsers: activeProfile.access.allowedUsers,
     allowedChats: activeProfile.access.allowedChats,
-    ...options.createChannel ? { createChannel: options.createChannel } : {}
+    ...options.createChannel ? { createChannel: options.createChannel } : {},
+    channelPingTimeoutSec: env.channelPingTimeoutSec,
+    channelKeepalive: env.channelKeepalive,
+    channelKeepaliveMs: env.channelKeepaliveMs,
+    channelHealthPollMs: env.channelHealthPollMs,
+    onChannelUnrecoverable: (error) => {
+      log.fail("engine", "channel-unrecoverable", {
+        error: error instanceof Error ? error.message : String(error)
+      });
+      process.exitCode = 1;
+      setTimeout(() => process.exit(1), 300);
+    }
   };
   if (activeProfile.preferences.stopGraceMs !== void 0) {
     channelInput.stopGraceMs = activeProfile.preferences.stopGraceMs;
@@ -18651,7 +18912,8 @@ async function startBridgeEngine(options) {
   const heartbeat = startHeartbeat(
     paths.profilePath(profileName, "guardian", "heartbeat.json"),
     process.pid,
-    env.heartbeatMs
+    env.heartbeatMs,
+    () => bridge.channelHealth?.()
   );
   await updateHandoff.reconcile(currentVersion());
   void deliverUpdateResult().catch((error) => log.fail("upgrade", error, { step: "deliver-result" }));
@@ -19730,6 +19992,7 @@ var GuardianService = class {
       dshUp: this.dshUp,
       heartbeatAgeMs: this.lastHeartbeatAgeMs,
       channelConnected: this.channel !== void 0,
+      channelState: this.lastHeartbeatChannel?.state,
       safeEngine: this.safeEngine?.kind,
       safeRuns: this.safeRuns.size,
       pid: process.pid,
@@ -19740,6 +20003,9 @@ var GuardianService = class {
   }
   dshUp = false;
   lastHeartbeatAgeMs;
+  lastHeartbeatChannel;
+  /** When the engine reported a non-ready channel while its heartbeat was fresh. */
+  channelUnhealthySinceMs;
   log() {
     return this.options.logger ?? log;
   }
@@ -19774,7 +20040,24 @@ var GuardianService = class {
       const now = (this.options.now ?? Date.now)();
       const heartbeatFresh = isHeartbeatFresh(heartbeat, this.options.staleMs, now);
       this.lastHeartbeatAgeMs = heartbeat ? heartbeatAgeMs(heartbeat, now) : void 0;
+      this.lastHeartbeatChannel = heartbeat?.channel;
       if (heartbeatFresh) this.lastHeartbeatFreshAt = now;
+      const channelSnapshot = this.lastHeartbeatChannel;
+      const channelUnhealthy = heartbeatFresh && channelSnapshot !== void 0 && channelSnapshot.ready === false;
+      if (channelUnhealthy) {
+        if (this.channelUnhealthySinceMs === void 0) {
+          this.channelUnhealthySinceMs = now;
+          this.log().warn("guardian", "channel-unhealthy", {
+            dshProfile: this.state.dshProfile,
+            state: channelSnapshot.state,
+            generation: channelSnapshot.generation,
+            reconnectAttempts: channelSnapshot.reconnectAttempts,
+            lastError: channelSnapshot.lastError
+          });
+        }
+      } else {
+        this.channelUnhealthySinceMs = void 0;
+      }
       const processFound = await (this.options.findProcess ?? findProfileProcess)(
         this.state.dshProfile
       );
@@ -20822,6 +21105,7 @@ async function statusGuardianCommand(options = {}, deps = {}) {
     `\u6865\u63A5 profile\uFF1A${state.bridgeProfile}`,
     `dsh \u662F\u5426\u5728\u7EBF\uFF1A${up ? "\u662F" : "\u5426"}${processFound ? `\uFF08pid ${processFound.pid}\uFF09` : ""}`,
     `\u5FC3\u8DF3\u9F84\uFF1A${heartbeat ? `${heartbeatAgeMs(heartbeat)}ms` : "\u65E0"}`,
+    `\u98DE\u4E66\u901A\u9053\uFF1A${channelHealthLabel(heartbeat?.channel)}`,
     `\u5DF2\u89C2\u5BDF\u8FC7 dsh \u8FD0\u884C\uFF1A${state.profileSeenUp ? "\u662F" : "\u5426"}`,
     guardianProcess === void 0 ? "\u5B88\u62A4\u8FDB\u7A0B pid\uFF1A\u672A\u53D1\u73B0\uFF08\u65E0\u6CD5\u552F\u4E00\u8BC1\u660E resident guardian \u8EAB\u4EFD\uFF09" : `\u5B88\u62A4\u8FDB\u7A0B pid\uFF1A${guardianProcess.pid}`,
     `\u72B6\u6001\u6587\u4EF6\uFF1A${layout.stateFile}`,
@@ -20860,7 +21144,7 @@ function managerFor(options, version) {
     version
   });
 }
-function formatServiceStatus(status, heartbeatAge2) {
+function formatServiceStatus(status, heartbeatAge2, channel) {
   return [
     "dsh-lark-bot \u6B63\u5E38\u5F15\u64CE\u670D\u52A1",
     `  name:      ${status.name}`,
@@ -20871,7 +21155,8 @@ function formatServiceStatus(status, heartbeatAge2) {
     `  detail:    ${status.detail}`,
     `  pid:       ${status.pid ?? "-"}`,
     `  restarts:  ${status.restarts ?? "-"}`,
-    `  heartbeat: ${heartbeatAge2 === void 0 ? "\u6682\u65E0" : `${heartbeatAge2}ms`}`
+    `  heartbeat: ${heartbeatAge2 === void 0 ? "\u6682\u65E0" : `${heartbeatAge2}ms`}`,
+    `  channel:   ${channelHealthLabel(channel)}`
   ].join("\n");
 }
 async function heartbeatAge() {
@@ -20884,6 +21169,16 @@ async function heartbeatAge() {
   const heartbeat = await readHeartbeat(file);
   return heartbeat ? heartbeatAgeMs(heartbeat) : void 0;
 }
+async function heartbeatChannel() {
+  const env = loadRuntimeEnv(process.env);
+  const file = resolveAppPaths(env.home).profilePath(
+    env.guardianBridgeProfile,
+    "guardian",
+    "heartbeat.json"
+  );
+  const heartbeat = await readHeartbeat(file);
+  return heartbeat?.channel;
+}
 async function runServiceCommand(action, options = {}, deps = {}) {
   const manager = deps.manager ?? managerFor(options, deps.version ?? "0.0.0");
   const output = deps.output ?? ((text) => process.stdout.write(text));
@@ -20900,7 +21195,11 @@ ${logs.text || "\uFF08\u6682\u65E0\u65E5\u5FD7\uFF09"}
       return;
     }
     const status = action === "install" ? await manager.install() : action === "start" ? await manager.start() : action === "restart" ? await manager.restart() : action === "stop" ? await manager.stop() : action === "uninstall" ? await manager.uninstall() : await manager.status();
-    output(`${formatServiceStatus(status, await (deps.heartbeatAge ?? heartbeatAge)())}
+    const [age, channel] = await Promise.all([
+      (deps.heartbeatAge ?? heartbeatAge)(),
+      (deps.heartbeatChannel ?? heartbeatChannel)()
+    ]);
+    output(`${formatServiceStatus(status, age, channel)}
 `);
     if ((action === "install" || action === "start" || action === "restart") && status.state !== "running") process.exitCode = 1;
     if (action === "status" && (!status.installed || status.state === "error")) {
@@ -20927,7 +21226,7 @@ function followLogFile(path, lines) {
 // src/cli/commands/supervise.ts
 import { spawn as spawn10 } from "child_process";
 import { closeSync, mkdirSync, openSync } from "fs";
-import { dirname as dirname19 } from "path";
+import { dirname as dirname20 } from "path";
 import { homedir as homedir22 } from "os";
 init_dsh_runtime();
 var BASE_BACKOFF_MS = 5e3;
@@ -20961,8 +21260,8 @@ async function runSupervise(options, deps = {}) {
   const logFile = paths.serviceLogFile(profile);
   const dshBin = deps.dshBin ?? discoverDshBin(homedir22(), childEnv);
   if (!dshBin) throw new Error("\u672A\u627E\u5230 dsh CLI\uFF0Cportable supervisor \u65E0\u6CD5\u542F\u52A8 profile\u3002");
-  mkdirSync(dirname19(statusFile), { recursive: true });
-  mkdirSync(dirname19(logFile), { recursive: true });
+  mkdirSync(dirname20(statusFile), { recursive: true });
+  mkdirSync(dirname20(logFile), { recursive: true });
   const logFd = openSync(logFile, "a");
   const writeStatus = async (state, childPid, restarts2) => {
     const processIdentity = await (deps.readProcessIdentity ?? readLinuxProcessIdentity)(process.pid);