maka-agent 0.2.0-dev.22.20260905 → 0.2.0-dev.23.20260906

package/node_modules/@maka/core/dist/workhub-creation-intent.js

@@ -74,7 +74,9 @@ const DIRECT_STOP_REQUEST = /^\s*(?:(?:please|kindly)\s+)?(?:stop|cancel|termina
 // which is usually work to do inside a Session, and English admits no
 // equivalent either.
 const DIRECT_CHINESE_STOP_REQUEST = /^\s*(?:(?:请|请帮我|帮我|麻烦你?)\s*)?(?:停止|停掉|停下|取消|终止|中止)\s*(?:(?:这个|该)?(?:会话|工作|任务)\s*)?(.+?)\s*[。！]?\s*$/iu;
-const UNSAFE_STOP_TARGET = /^(?:it|this|that|one|everything|all|current|session|work|task|job|(?:this|that|current)\s+(?:session|work|task|job)|它|这个|那个|全部|当前|会话|工作|任务|(?:这个|那个|当前)(?:会话|工作|任务))$/iu;
+const DIRECT_RESUME_REQUEST = /^\s*(?:(?:please|kindly)\s+)?resume\s+(?:(?:the|this)\s+)?(?:(?:session|work|task|job)\s+)?(.+?)\s*[.!。！]?\s*$/iu;
+const DIRECT_CHINESE_RESUME_REQUEST = /^\s*(?:(?:请|请帮我|帮我|麻烦你?)\s*)?(?:恢复|恢復|接着跑|接著跑)\s*(?:(?:这个|该)?(?:会话|工作|任务)\s*)?(.+?)\s*[。！]?\s*$/iu;
+const UNSAFE_NAMED_ACTION_TARGET = /^(?:it|this|that|one|everything|all|current|session|work|task|job|(?:this|that|current)\s+(?:session|work|task|job)|它|这个|那个|全部|当前|会话|工作|任务|(?:这个|那个|当前)(?:会话|工作|任务))$/iu;
 /**
  * Whether trusted user text affirmatively asks WorkHub to create a new Session.
  *
@@ -219,8 +221,14 @@ export function readWorkHubRequestIntent(value) {
             : { kind: 'unusable' };
     const correctionCue = hasWorkHubCorrectionCue(source);
     const existingTarget = affirmativeWorkHubExistingCorrectionTarget(source);
-    const stopCue = directWorkHubStopCue(source, literalMask.malformed);
-    const stopTarget = stopCue ? directWorkHubStopTarget(source, false) : undefined;
+    const stop = directWorkHubNamedAction(source, literalMask.malformed, [
+        DIRECT_STOP_REQUEST,
+        DIRECT_CHINESE_STOP_REQUEST,
+    ]);
+    const resume = directWorkHubNamedAction(source, literalMask.malformed, [
+        DIRECT_RESUME_REQUEST,
+        DIRECT_CHINESE_RESUME_REQUEST,
+    ]);
     const actions = allMatches(masked, EXECUTION_ACTION);
     const execution = literalMask.malformed || naming.kind === 'unusable' || hasDominatingDeliberation(masked)
         ? 'non_executable'
@@ -237,9 +245,14 @@ export function readWorkHubRequestIntent(value) {
             ...(existingTarget ? { existingTarget } : {}),
         },
         stop: {
-            cue: stopCue,
-            imperative: Boolean(stopTarget),
-            ...(stopTarget ? { target: stopTarget } : {}),
+            cue: stop.cue,
+            imperative: Boolean(stop.target),
+            ...(stop.target ? { target: stop.target } : {}),
+        },
+        resume: {
+            cue: resume.cue,
+            imperative: Boolean(resume.target),
+            ...(resume.target ? { target: resume.target } : {}),
         },
     };
 }
@@ -331,6 +344,14 @@ export function matchWorkHubSessionName(reference, sessionName) {
     }
     return { kind: 'named', remainder: normalizedTarget.slice(matchedName.length).trim() };
 }
+/** Whether a direct stop/resume reference names exactly this Session. */
+export function workHubNamedDelegationActionTargetsSession(action, sessionName) {
+    if (!action.imperative || !action.target)
+        return false;
+    const match = matchWorkHubSessionName(action.target, sessionName);
+    return (match.kind === 'elided_name_punctuation' ||
+        (match.kind === 'named' && /^[.!?。！？]*$/u.test(match.remainder)));
+}
 /**
  * The correction policy's tail rule. A correction may name its target and then
  * say what to do with it, but a withdrawal anywhere in the reference retracts
@@ -355,24 +376,17 @@ export function workHubCorrectionAdmitsReference(reference, match) {
 function correctionTargetMatchesSession(target, sessionName) {
     return workHubCorrectionAdmitsReference(target, matchWorkHubSessionName(target, sessionName));
 }
-function directWorkHubStopTarget(value, malformedLiteral) {
+function directWorkHubNamedAction(value, malformedLiteral, patterns) {
     if (malformedLiteral || /[?？]\s*$/u.test(value))
-        return undefined;
-    const match = DIRECT_STOP_REQUEST.exec(value) ?? DIRECT_CHINESE_STOP_REQUEST.exec(value);
+        return { cue: false };
+    const match = patterns[0].exec(value) ?? patterns[1].exec(value);
     const rawTarget = match?.[1]?.trim();
     if (!rawTarget)
-        return undefined;
-    const target = stripMatchingStopQuotes(rawTarget.replace(/[.!。！]+\s*$/u, '').trim());
-    if (!target || UNSAFE_STOP_TARGET.test(target))
-        return undefined;
-    return target;
-}
-function directWorkHubStopCue(value, malformedLiteral) {
-    if (malformedLiteral || /[?？]\s*$/u.test(value))
-        return false;
-    return Boolean(DIRECT_STOP_REQUEST.test(value) || DIRECT_CHINESE_STOP_REQUEST.test(value));
+        return { cue: Boolean(match) };
+    const target = stripMatchingActionQuotes(rawTarget.replace(/[.!。！]+\s*$/u, '').trim());
+    return !target || UNSAFE_NAMED_ACTION_TARGET.test(target) ? { cue: true } : { cue: true, target };
 }
-function stripMatchingStopQuotes(value) {
+function stripMatchingActionQuotes(value) {
     const pairs = new Map([
         ['"', '"'],
         ["'", "'"],

package/node_modules/@maka/eval/harbor/egress-proxy/entrypoint.sh

@@ -59,4 +59,5 @@ exec mitmdump \
   --set block_global=false \
   --set rawtcp=false \
   --set confdir="$STATE_DIR" \
-  --scripts /opt/maka-eval/egress_filter.py
+  --scripts /opt/maka-eval/egress_filter.py \
+  "$@"

package/node_modules/@maka/runtime/dist/ai-sdk-turn.js

@@ -735,6 +735,49 @@ export class AiSdkTurn {
         let contextReportedWindowNoteWritten = false;
         let contextOverflowAfterCompactionNoteWritten = false;
         let contextWindowSuggestionNoteWritten = false;
+        // A compaction decision is known the moment its stage reports it — the
+        // pre-turn replay resolves its fold before the first request goes out —
+        // while the settlement path is skipped entirely by a stop or a stream
+        // error. Write both notes when the decision is known, once per send,
+        // whichever stage reports first (#4850).
+        const appendCompactionDecisionNotes = async (contextBudget) => {
+            if (!contextCompactionFailedOpenNoteWritten &&
+                shouldAppendContextCompactionFailedOpenNote(contextBudget)) {
+                // The most recent stage that refused the fold: a send can carry both a
+                // priorReplay and an activeStep refusal after a diagnostic merge, and
+                // array order would pin the stale one.
+                const failOpenReason = contextBudget?.compactionDecisions
+                    ?.filter((decision) => decision.boundaryKind === 'historyCompact' && decision.decision === 'failedOpen')
+                    .at(-1)?.failOpenReason;
+                const note = {
+                    type: 'system_note',
+                    id: this.deps.newId(),
+                    turnId,
+                    ts: this.deps.now(),
+                    kind: 'context_compaction_failed_open',
+                    ...(failOpenReason !== undefined ? { data: { failOpenReason } } : {}),
+                };
+                // Mark written only after the append lands: a failed write must leave
+                // the flag down so the settlement fallback can still record the note.
+                contextCompactionFailedOpenNoteWritten = await this.deps.backend
+                    .appendMessage(note)
+                    .then(() => true)
+                    .catch(() => false);
+            }
+            if (!contextCompactedNoteWritten && shouldAppendContextCompactedNote(contextBudget)) {
+                const note = {
+                    type: 'system_note',
+                    id: this.deps.newId(),
+                    turnId,
+                    ts: this.deps.now(),
+                    kind: 'context_compacted',
+                };
+                contextCompactedNoteWritten = await this.deps.backend
+                    .appendMessage(note)
+                    .then(() => true)
+                    .catch(() => false);
+            }
+        };
         // Request index (0-based) at which the active prune last rewrote the
         // request. A step Maka pruned is not append-only, so usage may legitimately
         // shrink.
@@ -912,6 +955,10 @@ export class AiSdkTurn {
             yield* this.drain(queue);
             return;
         }
+        // The pre-turn replay's fold decision is final here: surface it now so a
+        // stop or stream error later in the send cannot keep it from the
+        // transcript (#4850).
+        await appendCompactionDecisionNotes(priorReplay.contextBudget);
         if (midTurnState) {
             // Roll-forward seed: the latest durable checkpoint (loaded or written at
             // turn start) so a mid-turn summary only re-reads the newly folded span.
@@ -2058,30 +2105,10 @@ export class AiSdkTurn {
                             ...usageFields,
                         };
                         await this.deps.backend.appendMessage(tu).catch(() => { });
-                        if (!contextCompactionFailedOpenNoteWritten &&
-                            shouldAppendContextCompactionFailedOpenNote(contextBudgetForUsage)) {
-                            contextCompactionFailedOpenNoteWritten = true;
-                            const note = {
-                                type: 'system_note',
-                                id: this.deps.newId(),
-                                turnId,
-                                ts: this.deps.now(),
-                                kind: 'context_compaction_failed_open',
-                            };
-                            await this.deps.backend.appendMessage(note).catch(() => { });
-                        }
-                        if (!contextCompactedNoteWritten &&
-                            shouldAppendContextCompactedNote(contextBudgetForUsage)) {
-                            contextCompactedNoteWritten = true;
-                            const note = {
-                                type: 'system_note',
-                                id: this.deps.newId(),
-                                turnId,
-                                ts: this.deps.now(),
-                                kind: 'context_compacted',
-                            };
-                            await this.deps.backend.appendMessage(note).catch(() => { });
-                        }
+                        // Settlement fallback: a mid-turn or request-hook fold is only
+                        // known here. Notes already written at decision time are skipped
+                        // by the flags inside.
+                        await appendCompactionDecisionNotes(contextBudgetForUsage);
                         queue.push({
                             type: 'token_usage',
                             id: this.deps.newId(),

package/node_modules/@maka/runtime/dist/bots/base-adapter.js

@@ -18,6 +18,7 @@
  */
 import { EventEmitter } from 'node:events';
 import { hasBotChannelCredentials } from '@maka/core/bot-chat-settings';
+import { classifyGeneralizedError, redactSecrets } from '@maka/core/redaction';
 export class BaseBotAdapter extends EventEmitter {
     platform;
     settings;
@@ -62,10 +63,26 @@ export class BaseBotAdapter extends EventEmitter {
     emitStatusChange() {
         this.emit('statusChange', this.getStatus());
     }
+    recordFailure(error, code) {
+        const diagnostic = botDiagnosticMessage(this.settings, error);
+        this.reason = code ?? classifyGeneralizedError(diagnostic) ?? 'connection_failed';
+        console.warn(`[bots:${this.platform}] ${this.reason}: ${diagnostic}`);
+    }
     connectionKind() {
         return 'none';
     }
 }
+export function botDiagnosticMessage(settings, error) {
+    let message = error instanceof Error ? error.message : String(error);
+    for (const secret of [settings.token.trim(), settings.appSecret?.trim()]) {
+        if (!secret)
+            continue;
+        message = message
+            .replaceAll(secret, '[redacted]')
+            .replaceAll(encodeURIComponent(secret), '[redacted]');
+    }
+    return redactSecrets(message);
+}
 export function botReadinessFromSettings(settings) {
     if (!settings.enabled)
         return 'scaffolded';

package/node_modules/@maka/runtime/dist/bots/bot-test.js

@@ -16,9 +16,9 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { generalizedErrorMessage } from '@maka/core/redaction';
 import { WebClient } from '@slack/web-api';
 import { proxiedFetch } from './proxied-fetch.js';
+import { botDiagnosticMessage } from './base-adapter.js';
 import { normalizeWechatIlinkBaseUrl, testWechatBridge, testWechatIlinkCredentials, } from './wechat-bridge.js';
 const BOT_TEST_TIMEOUT_MS = 10_000;
 /**
@@ -31,6 +31,16 @@ export function feishuOpenApiHost(domain) {
     return domain?.trim() === 'larksuite.com' ? 'open.larksuite.com' : 'open.feishu.cn';
 }
 export async function testBotChannel(provider, channel) {
+    const result = await probeBotChannel(provider, channel);
+    if (result.ok)
+        return result;
+    const errorCode = result.errorCode ?? 'connection_failed';
+    const error = result.error ? botDiagnosticMessage(channel, result.error) : undefined;
+    if (error)
+        console.warn(`[bots:${provider}] ${errorCode}: ${error}`);
+    return { ...result, errorCode, ...(error ? { error } : {}) };
+}
+async function probeBotChannel(provider, channel) {
     if (provider !== 'feishu' &&
         provider !== 'wecom' &&
         provider !== 'wechat' &&
@@ -38,7 +48,7 @@ export async function testBotChannel(provider, channel) {
         provider !== 'qq' &&
         provider !== 'slack' &&
         !channel.token.trim()) {
-        return { ok: false, error: 'Bot token is required' };
+        return { ok: false, errorCode: 'token_missing' };
     }
     switch (provider) {
         case 'telegram':
@@ -63,7 +73,7 @@ async function testSlack(channel) {
     const botToken = channel.token.trim();
     const appToken = channel.appSecret?.trim() ?? '';
     if (!botToken || !appToken) {
-        return { ok: false, error: 'Slack 需要 Bot Token 与 App-Level Token' };
+        return { ok: false, errorCode: 'slack_tokens_missing' };
     }
     try {
         const identity = await new WebClient(botToken).auth.test();
@@ -80,15 +90,14 @@ async function testSlack(channel) {
                 ...(identity.user ? { username: identity.user, displayName: identity.user } : {}),
             },
             capabilities: { auth: true, socketMode: true },
-            hint: '凭据有效，Socket Mode 连接可用。',
         };
     }
     catch (error) {
-        return { ok: false, error: generalizedErrorMessage(error) };
+        return { ok: false, error: error instanceof Error ? error.message : String(error) };
     }
 }
 async function testWechat(channel) {
-    if (channel.token.trim() && normalizeWechatIlinkBaseUrl(channel.webhookUrl)) {
+    if (normalizeWechatIlinkBaseUrl(channel.webhookUrl)) {
         return testWechatIlinkCredentials(channel);
     }
     const appId = channel.appId?.trim() ?? '';
@@ -113,7 +122,6 @@ async function testWechat(channel) {
             ok: true,
             identity: { id: appId, username: appId, displayName: appId },
             capabilities: { auth: true },
-            hint: '凭据有效；消息收发还需要公众号服务器配置和回调验证。',
         };
     }
     catch (error) {
@@ -123,9 +131,21 @@ async function testWechat(channel) {
 async function testTelegram(channel) {
     const base = `https://api.telegram.org/bot${channel.token}`;
     try {
-        const me = await (await proxiedFetch(`${base}/getMe`, { method: 'GET', timeoutMs: BOT_TEST_TIMEOUT_MS })).json();
-        if (!me.ok)
-            return { ok: false, error: me.description ?? 'Invalid bot token' };
+        const response = await proxiedFetch(`${base}/getMe`, {
+            method: 'GET',
+            timeoutMs: BOT_TEST_TIMEOUT_MS,
+        });
+        const me = await response.json().catch(() => null);
+        if (!response.ok || me?.ok !== true)
+            return {
+                ok: false,
+                errorCode: response.status === 401 || (response.ok && me?.error_code === 401)
+                    ? 'token_invalid'
+                    : 'connection_failed',
+                error: typeof me?.description === 'string' && me.description.trim()
+                    ? me.description
+                    : `Telegram getMe failed (HTTP ${response.status})`,
+            };
         return {
             ok: true,
             identity: {
@@ -134,7 +154,6 @@ async function testTelegram(channel) {
                 displayName: me.result.first_name,
             },
             messageSent: false,
-            hint: '发送 /start 给机器人后可在运行态接收消息。',
         };
     }
     catch (error) {
@@ -184,14 +203,13 @@ async function testWeCom(channel) {
     const botId = channel.appId?.trim() ?? '';
     const secret = channel.appSecret?.trim() ?? '';
     if (!botId || !secret) {
-        return { ok: false, error: '企业微信 AI 机器人需要 Bot ID 与 Secret', verified: false };
+        return { ok: false, errorCode: 'wecom_credentials_missing', verified: false };
     }
     return {
         ok: true,
         verified: false,
         identity: { id: botId, username: botId, displayName: botId },
         capabilities: { auth: false },
-        hint: '已保存凭据；企业微信 AI 机器人的连接状态以运行态长连接为准。',
     };
 }
 /**
@@ -213,7 +231,7 @@ async function testDingTalk(channel) {
     const appkey = channel.appId?.trim() ?? '';
     const appsecret = channel.appSecret?.trim() ?? '';
     if (!appkey || !appsecret) {
-        return { ok: false, error: '钉钉需要 appkey 与 appsecret' };
+        return { ok: false, errorCode: 'dingtalk_credentials_missing' };
     }
     const url = 'https://oapi.dingtalk.com/gettoken?appkey=' +
         encodeURIComponent(appkey) +
@@ -228,17 +246,16 @@ async function testDingTalk(channel) {
         if (json.errcode && json.errcode !== 0) {
             return {
                 ok: false,
-                error: json.errmsg ? `钉钉: ${json.errmsg}` : `钉钉 errcode ${json.errcode}`,
+                error: json.errmsg ? String(json.errmsg) : `errcode ${json.errcode}`,
             };
         }
         if (typeof json.access_token !== 'string' || json.access_token.length === 0) {
-            return { ok: false, error: '钉钉凭据测试未返回 access_token' };
+            return { ok: false, errorCode: 'dingtalk_no_access_token' };
         }
         return {
             ok: true,
             identity: { id: appkey, username: appkey, displayName: appkey },
             capabilities: { auth: true },
-            hint: '凭据有效；接收消息需要 outgoing 机器人或 Stream 模式配置。',
         };
     }
     catch (error) {
@@ -264,7 +281,7 @@ async function testQQ(channel) {
     const appId = channel.appId?.trim() ?? '';
     const clientSecret = channel.appSecret?.trim() ?? '';
     if (!appId || !clientSecret) {
-        return { ok: false, error: 'QQ 官方机器人需要 App ID 与 Client Secret' };
+        return { ok: false, errorCode: 'qq_credentials_missing' };
     }
     try {
         const response = await proxiedFetch('https://bots.qq.com/app/getAppAccessToken', {
@@ -276,18 +293,17 @@ async function testQQ(channel) {
         const json = await response.json().catch(() => ({}));
         if (!response.ok) {
             const message = typeof json.message === 'string' && json.message.length > 0
-                ? `QQ: ${json.message}`
+                ? json.message
                 : `HTTP ${response.status}`;
             return { ok: false, error: message };
         }
         if (typeof json.access_token !== 'string' || json.access_token.length === 0) {
-            return { ok: false, error: 'QQ 官方机器人凭据测试未返回 access_token' };
+            return { ok: false, errorCode: 'qq_no_access_token' };
         }
         return {
             ok: true,
             identity: { id: appId, username: appId, displayName: appId },
             capabilities: { auth: true },
-            hint: '凭据有效；接收消息需要 QQ Gateway WebSocket 接入。',
         };
     }
     catch (error) {
@@ -298,7 +314,7 @@ async function testFeishu(channel) {
     const appId = channel.appId ?? '';
     const appSecret = channel.appSecret || channel.token;
     if (!appId || !appSecret)
-        return { ok: false, error: 'Feishu appId and appSecret are required' };
+        return { ok: false, errorCode: 'feishu_credentials_missing' };
     // PR1197 review (P1-4): brand-switch the account host by the channel domain,
     // exactly like the onboarding flow does. A Lark tenant (larksuite.com) cannot
     // issue a tenant_access_token from the feishu.cn host, so a hardcoded host

package/node_modules/@maka/runtime/dist/bots/dingtalk-bridge.js

@@ -163,7 +163,9 @@ export class DingTalkBotBridge extends WsBridgeBase {
     token = null;
     closeReasonPrefix = 'stream';
     checkCredentials() {
-        return this.settings.appId?.trim() && this.settings.appSecret?.trim() ? null : 'no-credentials';
+        return this.settings.appId?.trim() && this.settings.appSecret?.trim()
+            ? null
+            : 'dingtalk_credentials_missing';
     }
     decideClose(code, explicitlyStopped) {
         const decision = decideDingTalkClose(code, explicitlyStopped);
@@ -221,7 +223,7 @@ export class DingTalkBotBridge extends WsBridgeBase {
             this.connect(`${json.endpoint}?ticket=${encodeURIComponent(json.ticket)}`);
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             this.scheduleReconnect();
@@ -295,7 +297,7 @@ export class DingTalkBotBridge extends WsBridgeBase {
         }
         if (classification.kind !== 'ok') {
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-            this.reason = classification.kind === 'retry' ? 'rate-limited' : classification.description;
+            this.recordFailure(classification.kind === 'retry' ? 'rate-limited' : classification.description, classification.kind === 'retry' ? 'rate-limited' : 'send-failed');
             this.emitStatusChange();
             return null;
         }
@@ -340,7 +342,7 @@ export class DingTalkBotBridge extends WsBridgeBase {
             const response = await proxiedFetch(url, { method: 'GET', timeoutMs: 10_000 });
             const json = (await response.json().catch(() => null));
             if (!json || (json.errcode !== undefined && json.errcode !== 0)) {
-                this.reason = json?.errmsg ?? 'gettoken failed';
+                this.recordFailure(json?.errmsg ?? 'gettoken failed', 'dingtalk_no_access_token');
                 return null;
             }
             if (typeof json.access_token !== 'string')
@@ -353,7 +355,7 @@ export class DingTalkBotBridge extends WsBridgeBase {
             return this.token.value;
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             return null;
         }
     }

package/node_modules/@maka/runtime/dist/bots/discord-bridge.js

@@ -153,7 +153,7 @@ function sleep(ms) {
 export class DiscordBotBridge extends GatewayBridgeBase {
     resumeGatewayUrl = null;
     checkCredentials() {
-        return this.settings.token.trim() ? null : 'no-token';
+        return this.settings.token.trim() ? null : 'token_missing';
     }
     decideClose(code, explicitlyStopped) {
         return decideDiscordClose(code, explicitlyStopped);
@@ -176,7 +176,7 @@ export class DiscordBotBridge extends GatewayBridgeBase {
             const json = await response.json().catch(() => null);
             if (!response.ok || !json || typeof json.url !== 'string') {
                 const message = json?.message;
-                this.reason = typeof message === 'string' ? message : `gateway-bot-${response.status}`;
+                this.recordFailure(message, `gateway-bot-${response.status}`);
                 this.readiness = 'configured';
                 this.emitStatusChange();
                 // Usually a transient outage — openConnection schedules the retry.
@@ -186,7 +186,7 @@ export class DiscordBotBridge extends GatewayBridgeBase {
             return `${gatewayUrl}/?v=${DISCORD_GATEWAY_VERSION}&encoding=json`;
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             return null;
@@ -257,7 +257,7 @@ export class DiscordBotBridge extends GatewayBridgeBase {
             }
             if (classification.kind !== 'ok') {
                 this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-                this.reason = classification.kind === 'retry' ? 'rate-limited' : classification.description;
+                this.recordFailure(classification.kind === 'retry' ? 'rate-limited' : classification.description, classification.kind === 'retry' ? 'rate-limited' : 'send-failed');
                 this.emitStatusChange();
                 return null;
             }

package/node_modules/@maka/runtime/dist/bots/feishu-bridge.js

@@ -17,7 +17,6 @@
  * under the License.
  */
 import { Domain, LoggerLevel, createLarkChannel, } from '@larksuiteoapi/node-sdk';
-import { generalizedErrorMessage } from '@maka/core/redaction';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
 const HANDSHAKE_TIMEOUT_MS = 15_000;
 /**
@@ -76,7 +75,7 @@ export class FeishuBotBridge extends BaseBotAdapter {
         const appId = this.settings.appId?.trim() ?? '';
         const appSecret = this.settings.appSecret?.trim() || this.settings.token.trim();
         if (!appId || !appSecret) {
-            this.reason = 'missing-feishu-credentials';
+            this.reason = 'feishu_credentials_missing';
             this.readiness = 'scaffolded';
             this.emitStatusChange();
             return;
@@ -110,7 +109,7 @@ export class FeishuBotBridge extends BaseBotAdapter {
             if (this.explicitlyStopped || this.channel !== channel)
                 return;
             this.running = false;
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             await this.disconnectChannel(channel);
@@ -142,7 +141,7 @@ export class FeishuBotBridge extends BaseBotAdapter {
         }
         catch (error) {
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error, 'send-failed');
             this.emitStatusChange();
             return null;
         }
@@ -179,7 +178,7 @@ export class FeishuBotBridge extends BaseBotAdapter {
         }), channel.on('error', (error) => {
             if (this.channel !== channel || this.explicitlyStopped)
                 return;
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'configured';
             this.emitStatusChange();
         }), channel.on('reconnecting', () => {

package/node_modules/@maka/runtime/dist/bots/qq-bridge.js

@@ -199,7 +199,9 @@ function sleep(ms) {
 export class QQBotBridge extends GatewayBridgeBase {
     token = null;
     checkCredentials() {
-        return this.settings.appId?.trim() && this.settings.appSecret?.trim() ? null : 'no-credentials';
+        return this.settings.appId?.trim() && this.settings.appSecret?.trim()
+            ? null
+            : 'qq_credentials_missing';
     }
     decideClose(code, explicitlyStopped) {
         return decideQQClose(code, explicitlyStopped);
@@ -227,7 +229,7 @@ export class QQBotBridge extends GatewayBridgeBase {
             return json.url;
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             return null;
@@ -311,7 +313,7 @@ export class QQBotBridge extends GatewayBridgeBase {
         }
         if (classification.kind !== 'ok') {
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-            this.reason = classification.kind === 'retry' ? 'rate-limited' : classification.description;
+            this.recordFailure(classification.kind === 'retry' ? 'rate-limited' : classification.description, classification.kind === 'retry' ? 'rate-limited' : 'send-failed');
             this.emitStatusChange();
             return null;
         }
@@ -399,7 +401,7 @@ export class QQBotBridge extends GatewayBridgeBase {
             return this.token.value;
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             return null;
         }
     }

package/node_modules/@maka/runtime/dist/bots/slack-bridge.js

@@ -16,7 +16,6 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { generalizedErrorMessage } from '@maka/core/redaction';
 import { SocketModeClient } from '@slack/socket-mode';
 import { WebClient } from '@slack/web-api';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
@@ -54,7 +53,7 @@ export class SlackBotBridge extends BaseBotAdapter {
         if (!botToken || !appToken) {
             this.running = false;
             this.readiness = botReadinessFromSettings(this.settings);
-            this.reason = 'missing-slack-tokens';
+            this.reason = 'slack_tokens_missing';
             this.emitStatusChange();
             return;
         }
@@ -106,7 +105,7 @@ export class SlackBotBridge extends BaseBotAdapter {
         catch (error) {
             this.running = false;
             this.readiness = 'degraded';
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.emitStatusChange();
             await this.stopTransport();
             throw error;
@@ -132,7 +131,7 @@ export class SlackBotBridge extends BaseBotAdapter {
         }
         catch (error) {
             this.readiness = 'degraded';
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error, 'send-failed');
             this.emitStatusChange();
             return null;
         }

package/node_modules/@maka/runtime/dist/bots/telegram-bridge.js

@@ -16,7 +16,6 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { generalizedErrorMessage } from '@maka/core/redaction';
 import { truncateUtf16Safe } from '@maka/core/text-sanitize';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
 import { proxiedFetch } from './proxied-fetch.js';
@@ -216,7 +215,7 @@ export class TelegramBotBridge extends BaseBotAdapter {
             return;
         }
         if (!this.settings.token.trim()) {
-            this.reason = 'no-token';
+            this.reason = 'token_missing';
             this.readiness = 'scaffolded';
             return;
         }
@@ -255,7 +254,7 @@ export class TelegramBotBridge extends BaseBotAdapter {
             }
             if (classification.kind !== 'ok') {
                 this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-                this.reason = classification.kind === 'retry' ? 'rate-limited' : classification.description;
+                this.recordFailure(classification.kind === 'retry' ? 'rate-limited' : classification.description, classification.kind === 'retry' ? 'rate-limited' : 'send-failed');
                 this.emitStatusChange();
                 return null;
             }
@@ -331,7 +330,7 @@ export class TelegramBotBridge extends BaseBotAdapter {
         try {
             const me = await telegramApi(this.settings.token, 'getMe');
             if (!me.ok) {
-                this.reason = me.description ?? 'get-me-failed';
+                this.recordFailure(me.description ?? 'get-me-failed', me.error_code === 401 ? 'token_invalid' : 'get-me-failed');
                 this.readiness = 'configured';
                 this.emitStatusChange();
                 return;
@@ -351,7 +350,7 @@ export class TelegramBotBridge extends BaseBotAdapter {
             void this.pollTelegram();
         }
         catch (error) {
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.readiness =
                 this.readiness === 'operational' ? 'degraded' : botReadinessFromSettings(this.settings);
             this.emitStatusChange();