opencode-feishu-plugin 0.1.0 → 0.1.1

package/dist/index.js

@@ -11,7 +11,7 @@ import { EventEmitter } from 'events';
 import fs, { mkdirSync, createWriteStream, readFileSync, statSync, realpathSync } from 'fs';
 import qs from 'querystring';
 import { homedir } from 'os';
-import { readdir, readFile } from 'fs/promises';
+import { readFile, readdir } from 'fs/promises';
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -146690,6 +146690,410 @@ function decideRoute(facts) {
   if (facts.rootKnown) return { kind: "use-session", source: "root" };
   return { kind: "create-in-thread" };
 }
+var SYSTEM_DIRS = [
+  "/etc",
+  "/usr",
+  "/bin",
+  "/sbin",
+  "/lib",
+  "/lib64",
+  "/boot",
+  "/dev",
+  "/proc",
+  "/sys",
+  "/run",
+  "/root",
+  "/var"
+];
+function isUnder(child, root) {
+  if (!root || root === "/") return true;
+  const normalizedRoot = root.endsWith(sep) ? root.slice(0, -1) : root;
+  return child === normalizedRoot || child.startsWith(`${normalizedRoot}${sep}`);
+}
+function isSystemPath(path2) {
+  return SYSTEM_DIRS.some((dir) => isUnder(path2, dir));
+}
+function validateDirectory(rawPath, allowedRoots, deps = {}) {
+  const raw = rawPath.trim();
+  const roots = allowedRoots.map((r) => resolve$1(r)).filter((r) => r && r !== "");
+  if (roots.length === 0) {
+    return err("empty", "\u672A\u914D\u7F6E\u5141\u8BB8\u7684\u5DE5\u4F5C\u76EE\u5F55\u6839\uFF08`allowedRoots`\uFF09\uFF0C\u65E0\u6CD5\u786E\u5B9A\u9ED8\u8BA4\u76EE\u5F55\u3002");
+  }
+  let target;
+  if (!raw) {
+    target = roots[0];
+  } else {
+    if (!isAbsolute(raw)) return err("not_absolute", "\u76EE\u5F55\u5FC5\u987B\u662F**\u7EDD\u5BF9\u8DEF\u5F84**\uFF08\u4EE5 `/` \u5F00\u5934\uFF09\u3002");
+    target = resolve$1(raw);
+  }
+  const stat = deps.statSync ?? statSync;
+  const realpath = deps.realpathSync ?? realpathSync;
+  const mkdir = deps.mkdirSync ?? mkdirSync;
+  const blocked = forbiddenReason(target);
+  if (blocked) return blocked;
+  if (!roots.some((root) => isUnder(target, root))) {
+    return err("outside_allowed", outsideMessage(roots));
+  }
+  let exists2 = true;
+  try {
+    if (!stat(target).isDirectory()) return err("not_dir", `\u4E0D\u662F\u76EE\u5F55\uFF1A\`${target}\``);
+  } catch {
+    exists2 = false;
+  }
+  if (!exists2) {
+    try {
+      mkdir(target, { recursive: true });
+    } catch {
+      return err("create_failed", `\u76EE\u5F55\u4E0D\u5B58\u5728\u4E14\u65E0\u6CD5\u521B\u5EFA\uFF1A\`${target}\`\u3002\u8BF7\u68C0\u67E5\u8DEF\u5F84\u4E0E\u6743\u9650\u3002`);
+    }
+  }
+  let real = target;
+  try {
+    real = realpath(target);
+  } catch {
+    real = target;
+  }
+  const blockedReal = forbiddenReason(real);
+  if (blockedReal) return blockedReal;
+  if (!roots.some((root) => isUnder(real, root))) {
+    return err("outside_allowed", outsideMessage(roots));
+  }
+  return { ok: true, path: real };
+}
+function outsideMessage(roots) {
+  return `\u76EE\u5F55\u4E0D\u5728\u5141\u8BB8\u8303\u56F4\u5185\u3002\u5141\u8BB8\u7684\u6839\u76EE\u5F55\uFF1A${roots.map((r) => `\`${r}\``).join("\u3001")}\u3002`;
+}
+function forbiddenReason(path2) {
+  if (path2 === sep) return err("forbidden", "\u4E0D\u80FD\u4F7F\u7528\u6839\u76EE\u5F55 `/`\uFF0C\u8BF7\u9009\u62E9\u5177\u4F53\u7684\u9879\u76EE\u5B50\u76EE\u5F55\u3002");
+  if (isSystemPath(path2)) return err("system", `\u7CFB\u7EDF\u76EE\u5F55\u4E0D\u53EF\u4F5C\u4E3A\u5DE5\u4F5C\u76EE\u5F55\uFF1A\`${path2}\`\u3002`);
+  return void 0;
+}
+function err(reason, message) {
+  return { ok: false, reason, message };
+}
+
+// src/feishu/perm-presets.ts
+var SHELL_ACTIONS = ["shell", "bash"];
+var PERMISSION_PRESETS = [
+  { id: "readonly", icon: "\u{1F512}", label: "\u53EA\u8BFB", description: "\u7981\u6B62\u7F16\u8F91 / \u6267\u884C / \u5199\u5165\uFF0C\u6700\u5B89\u5168\u3002" },
+  { id: "edit", icon: "\u270F\uFE0F", label: "\u53EF\u7F16\u8F91", description: "\u5141\u8BB8\u6539\u6587\u4EF6\uFF1B\u6267\u884C\u547D\u4EE4\u9700\u4F60\u5BA1\u6279\u3002" },
+  {
+    id: "askHigh",
+    icon: "\u26A0\uFE0F",
+    label: "\u9AD8\u98CE\u9669\u5BA1\u6279",
+    description: "\u7EE7\u627F\u9ED8\u8BA4\u89C4\u5219\uFF0C\u5BF9 shell / \u7F16\u8F91 / \u5916\u90E8\u76EE\u5F55\u9010\u6B21\u5BA1\u6279\u3002"
+  },
+  { id: "trust", icon: "\u{1F513}", label: "\u5B8C\u5168\u4FE1\u4EFB", description: "\u653E\u884C\u5168\u90E8\u64CD\u4F5C\uFF0C\u8BF7\u8C28\u614E\u4F7F\u7528\u3002" }
+];
+var ASK_ACTIONS = {
+  readonly: [],
+  edit: ["shell", "bash"],
+  askHigh: ["shell", "bash", "edit", "external_directory"],
+  trust: []
+};
+var PRESET_IDS = PERMISSION_PRESETS.map((p) => p.id);
+function isPermissionPreset(value3) {
+  return typeof value3 === "string" && PRESET_IDS.includes(value3);
+}
+function presetInfo(preset) {
+  return PERMISSION_PRESETS.find((p) => p.id === preset) ?? PERMISSION_PRESETS[1];
+}
+function presetLabel(preset) {
+  const info = presetInfo(preset);
+  return `${info.icon} ${info.label}`;
+}
+function presetToRuleset(preset) {
+  switch (preset) {
+    case "readonly": {
+      const actions = ["edit", "write", ...SHELL_ACTIONS];
+      return actions.map((action) => ({ action, resource: "*", effect: "deny" }));
+    }
+    case "edit": {
+      return [
+        { action: "edit", resource: "*", effect: "allow" },
+        ...SHELL_ACTIONS.map((action) => ({ action, resource: "*", effect: "ask" }))
+      ];
+    }
+    case "askHigh":
+      return [];
+    case "trust":
+      return [{ action: "*", resource: "*", effect: "allow" }];
+    default:
+      return [];
+  }
+}
+function presetGateMode(preset) {
+  return preset === "readonly" || preset === "trust" ? "off" : "gate";
+}
+function presetAskActions(preset) {
+  return ASK_ACTIONS[preset] ?? [];
+}
+
+// src/feishu/wizard.ts
+var WIZARD_KEY_PREFIX = "feishu:v2:setup:";
+var STEPS = ["dir", "model", "perm", "confirm"];
+function wizardStart(title, anchorMessageId) {
+  return {
+    step: "dir",
+    ...title && title.trim() ? { title: title.trim() } : {},
+    ...anchorMessageId ? { anchorMessageId } : {}
+  };
+}
+function reduceWizard(state, action) {
+  switch (action.type) {
+    case "start":
+      return wizardStart(action.title, action.anchorMessageId);
+    case "setDir":
+      return state ? { ...state, dir: action.dir, step: "model" } : void 0;
+    case "setModel":
+      return state ? { ...state, model: action.model, step: "perm" } : void 0;
+    case "setPerm":
+      return state ? { ...state, perm: action.perm, step: "confirm" } : void 0;
+    case "setPage":
+      return state ? { ...state, page: Math.max(0, Math.floor(action.page)) } : void 0;
+    case "cancel":
+      return void 0;
+    default:
+      return state;
+  }
+}
+function asString3(value3) {
+  return typeof value3 === "string" ? value3 : "";
+}
+function parseModel(value3) {
+  if (typeof value3 !== "object" || value3 === null) return void 0;
+  const rec = value3;
+  const providerID = asString3(rec.providerID);
+  const id2 = asString3(rec.id);
+  if (!providerID || !id2) return void 0;
+  const name = asString3(rec.name);
+  return { providerID, id: id2, ...name ? { name } : {} };
+}
+function parseWizardState(value3) {
+  if (typeof value3 !== "object" || value3 === null) return void 0;
+  const rec = value3;
+  const step = asString3(rec.step);
+  if (!STEPS.includes(step)) return void 0;
+  const dir = asString3(rec.dir);
+  const title = asString3(rec.title);
+  const anchorMessageId = asString3(rec.anchorMessageId);
+  const model = parseModel(rec.model);
+  const perm = isPermissionPreset(rec.perm) ? rec.perm : void 0;
+  const page = typeof rec.page === "number" && Number.isFinite(rec.page) ? Math.max(0, Math.floor(rec.page)) : void 0;
+  return {
+    step,
+    ...dir ? { dir } : {},
+    ...model ? { model } : {},
+    ...perm ? { perm } : {},
+    ...title ? { title } : {},
+    ...page !== void 0 ? { page } : {},
+    ...anchorMessageId ? { anchorMessageId } : {}
+  };
+}
+var WizardStore = class {
+  constructor(storage, log2) {
+    this.storage = storage;
+    this.log = log2;
+  }
+  storage;
+  log;
+  key(chatId) {
+    return `${WIZARD_KEY_PREFIX}${chatId}`;
+  }
+  async get(chatId) {
+    if (!chatId) return void 0;
+    try {
+      return parseWizardState(await this.storage.get(this.key(chatId)));
+    } catch (err2) {
+      this.log.warn("\u5411\u5BFC\u72B6\u6001\u8BFB\u53D6\u5931\u8D25", { chatId, error: errorMessage(err2) });
+      return void 0;
+    }
+  }
+  async set(chatId, state) {
+    if (!chatId) return;
+    try {
+      if (!state) {
+        await this.storage.remove(this.key(chatId));
+        return;
+      }
+      await this.storage.set(this.key(chatId), state);
+    } catch (err2) {
+      this.log.warn("\u5411\u5BFC\u72B6\u6001\u5199\u5165\u5931\u8D25", { chatId, error: errorMessage(err2) });
+    }
+  }
+  /** 应用一个动作并持久化；返回新状态（取消后为 undefined）。 */
+  async apply(chatId, action) {
+    const current = action.type === "start" ? void 0 : await this.get(chatId);
+    const next = reduceWizard(current, action);
+    await this.set(chatId, next);
+    return next;
+  }
+  async start(chatId, title, anchorMessageId) {
+    const state = wizardStart(title, anchorMessageId);
+    await this.set(chatId, state);
+    return state;
+  }
+  async cancel(chatId) {
+    await this.set(chatId, void 0);
+  }
+};
+
+// src/feishu/recent.ts
+var RECENT_DIRS_KEY = "feishu:v2:recent:dirs";
+var RECENT_MODELS_KEY = "feishu:v2:recent:models";
+function isRecord5(value3) {
+  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
+}
+function modelKey(model) {
+  return `${model.providerID}/${model.id}`;
+}
+function parseModel2(value3) {
+  if (!isRecord5(value3)) return void 0;
+  const providerID = typeof value3.providerID === "string" ? value3.providerID : "";
+  const id2 = typeof value3.id === "string" ? value3.id : "";
+  if (!providerID || !id2) return void 0;
+  const name = typeof value3.name === "string" ? value3.name : "";
+  return { providerID, id: id2, ...name ? { name } : {} };
+}
+var RecentStore = class {
+  constructor(storage, log2, limits) {
+    this.storage = storage;
+    this.log = log2;
+    this.limits = limits;
+  }
+  storage;
+  log;
+  limits;
+  async listDirs() {
+    const raw = await this.read(RECENT_DIRS_KEY);
+    return Array.isArray(raw) ? raw.filter((v) => typeof v === "string") : [];
+  }
+  async addDir(dir) {
+    const value3 = dir.trim();
+    if (!value3) return;
+    const list = [value3, ...(await this.listDirs()).filter((d) => d !== value3)];
+    await this.write(RECENT_DIRS_KEY, list.slice(0, Math.max(1, this.limits.dirs)));
+  }
+  async listModels() {
+    const raw = await this.read(RECENT_MODELS_KEY);
+    if (!Array.isArray(raw)) return [];
+    return raw.map(parseModel2).filter((m) => Boolean(m));
+  }
+  async addModel(model) {
+    if (!model.providerID || !model.id) return;
+    const key = modelKey(model);
+    const list = [model, ...(await this.listModels()).filter((m) => modelKey(m) !== key)];
+    await this.write(RECENT_MODELS_KEY, list.slice(0, Math.max(1, this.limits.models)));
+  }
+  async read(key) {
+    try {
+      return await this.storage.get(key);
+    } catch (err2) {
+      this.log.warn("\u6700\u8FD1\u8BB0\u5F55\u8BFB\u53D6\u5931\u8D25", { key, error: errorMessage(err2) });
+      return void 0;
+    }
+  }
+  async write(key, value3) {
+    try {
+      await this.storage.set(key, value3);
+    } catch (err2) {
+      this.log.warn("\u6700\u8FD1\u8BB0\u5F55\u5199\u5165\u5931\u8D25", { key, error: errorMessage(err2) });
+    }
+  }
+};
+
+// src/feishu/models.ts
+function isRecord6(value3) {
+  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
+}
+function str3(value3) {
+  return typeof value3 === "string" ? value3 : "";
+}
+function normalizeModelList(raw) {
+  const arr = Array.isArray(raw) ? raw : isRecord6(raw) && Array.isArray(raw.data) ? raw.data : [];
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of arr) {
+    if (!isRecord6(item)) continue;
+    if (item.enabled === false) continue;
+    const providerID = str3(item.providerID);
+    const id2 = str3(item.id) || str3(item.modelID);
+    if (!providerID || !id2) continue;
+    const key = `${providerID}/${id2}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    const time = isRecord6(item.time) ? item.time : {};
+    const released = typeof time.released === "number" && Number.isFinite(time.released) ? time.released : void 0;
+    const status = str3(item.status) || void 0;
+    out.push({
+      providerID,
+      id: id2,
+      name: str3(item.name) || id2,
+      ...released !== void 0 ? { released } : {},
+      ...status ? { status } : {}
+    });
+  }
+  return out;
+}
+function modelLabel(model) {
+  return model.name && model.name.trim() ? model.name.trim() : `${model.providerID}/${model.id}`;
+}
+function sameModel(a, b) {
+  if (!a || !b) return false;
+  return a.providerID === b.providerID && a.id === b.id;
+}
+function extractSessionModel(raw) {
+  if (!isRecord6(raw)) return void 0;
+  const candidate = isRecord6(raw.model) ? raw.model : raw;
+  const providerID = str3(candidate.providerID);
+  const id2 = str3(candidate.id);
+  if (!providerID || !id2) return void 0;
+  return { providerID, id: id2 };
+}
+function matchesQuery(model, query) {
+  const haystack = `${model.name} ${model.id} ${model.providerID} ${model.providerID}/${model.id}`.toLowerCase();
+  const tokens = query.toLowerCase().split(/\s+/).filter(Boolean);
+  return tokens.length > 0 && tokens.every((t) => haystack.includes(t));
+}
+function sortModels(models) {
+  return [...models].sort((a, b) => {
+    const ar = a.released ?? 0;
+    const br = b.released ?? 0;
+    if (ar !== br) return br - ar;
+    return a.name.localeCompare(b.name);
+  });
+}
+function matchModel(query, models) {
+  const q = query.trim();
+  if (!q) return { ok: false, reason: "empty", candidates: [] };
+  const lower = q.toLowerCase();
+  const byRef = models.find((m) => `${m.providerID}/${m.id}`.toLowerCase() === lower);
+  if (byRef) return { ok: true, model: byRef };
+  const byId = models.filter((m) => m.id.toLowerCase() === lower);
+  if (byId.length === 1) return { ok: true, model: byId[0] };
+  if (byId.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(byId).slice(0, 5) };
+  const byName = models.filter((m) => m.name.toLowerCase() === lower);
+  if (byName.length === 1) return { ok: true, model: byName[0] };
+  if (byName.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(byName).slice(0, 5) };
+  const fuzzy = models.filter((m) => matchesQuery(m, q));
+  if (fuzzy.length === 1) return { ok: true, model: fuzzy[0] };
+  if (fuzzy.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(fuzzy).slice(0, 5) };
+  return { ok: false, reason: "not_found", candidates: [] };
+}
+function modelMatchErrorText(reason, candidates) {
+  switch (reason) {
+    case "empty":
+      return "\u7528\u6CD5\uFF1A`/model <\u5173\u952E\u8BCD>`\uFF0C\u4F8B\u5982 `/model claude`\u3002";
+    case "ambiguous":
+      return [
+        "\u5339\u914D\u5230\u591A\u4E2A\u6A21\u578B\uFF0C\u8BF7\u8F93\u5165\u66F4\u7CBE\u786E\u7684\u5173\u952E\u8BCD\uFF1A",
+        ...candidates.map((m) => `- ${modelLabel(m)}\uFF08\`${m.providerID}/${m.id}\`\uFF09`)
+      ].join("\n");
+    case "not_found":
+    default:
+      return "\u6CA1\u6709\u5339\u914D\u7684\u6A21\u578B\uFF0C\u8BD5\u8BD5\u66F4\u77ED\u7684\u5173\u952E\u8BCD\u6216\u5148\u53D1\u9001 `/model` \u67E5\u770B\u5217\u8868\u3002";
+  }
+}
 
 // src/feishu/session-list.ts
 function normalizeSessionList(raw) {
@@ -146706,10 +147110,10 @@ function normalizeSessionList(raw) {
   return sortByUpdatedDesc(out);
 }
 function normalizeSessionInfo(raw) {
-  if (!isRecord5(raw)) return void 0;
-  const sessionID = str3(raw.id) || str3(raw.sessionID);
+  if (!isRecord7(raw)) return void 0;
+  const sessionID = str4(raw.id) || str4(raw.sessionID);
   if (!sessionID) return void 0;
-  const title = str3(raw.title) || str3(raw.slug);
+  const title = str4(raw.title) || str4(raw.slug);
   const updatedAt = extractUpdatedAt(raw);
   const directory = extractDirectory(raw);
   return {
@@ -146741,7 +147145,7 @@ function toMillis2(value3) {
     const ms = value3.getTime();
     return Number.isFinite(ms) && ms > 0 ? ms : 0;
   }
-  if (isRecord5(value3)) {
+  if (isRecord7(value3)) {
     for (const key of ["epochMillis", "epochMilliseconds", "millis", "value"]) {
       const ms = toMillis2(value3[key]);
       if (ms > 0) return ms;
@@ -146784,7 +147188,7 @@ function directoryTail(dir) {
 }
 function extractArray(raw) {
   if (Array.isArray(raw)) return raw;
-  if (isRecord5(raw)) {
+  if (isRecord7(raw)) {
     for (const key of ["data", "sessions", "items"]) {
       if (Array.isArray(raw[key])) return raw[key];
     }
@@ -146792,7 +147196,7 @@ function extractArray(raw) {
   return void 0;
 }
 function extractUpdatedAt(raw) {
-  const time = isRecord5(raw.time) ? raw.time : void 0;
+  const time = isRecord7(raw.time) ? raw.time : void 0;
   const candidates = [
     time?.updated,
     raw.updatedAt,
@@ -146808,22 +147212,226 @@ function extractUpdatedAt(raw) {
   return 0;
 }
 function extractDirectory(raw) {
-  if (isRecord5(raw.location)) {
-    const directory = str3(raw.location.directory);
+  if (isRecord7(raw.location)) {
+    const directory = str4(raw.location.directory);
     if (directory) return directory;
   }
-  return str3(raw.directory) || (typeof raw.location === "string" ? raw.location : "");
+  return str4(raw.directory) || (typeof raw.location === "string" ? raw.location : "");
 }
 function pad2(value3) {
   return value3 < 10 ? `0${value3}` : String(value3);
 }
-function isRecord5(value3) {
+function isRecord7(value3) {
   return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
 }
-function str3(value3) {
+function str4(value3) {
   return typeof value3 === "string" ? value3 : "";
 }
 
+// src/feishu/topic-guidance.ts
+var TOPIC_GUIDANCE_MARKER = "opencode-feishu-topic-guidance";
+function buildTopicGuidance(title) {
+  return `\u672C\u4F1A\u8BDD\u4E3B\u9898\uFF1A\u300C${title}\u300D\u3002\u82E5\u7528\u6237\u660E\u663E\u8F6C\u5411\u4E0E\u8BE5\u4E3B\u9898\u65E0\u5173\u7684\u4EFB\u52A1\uFF0C\u53EF\u7B80\u77ED\u63D0\u9192\u4ED6\u7528 /new \u5F00\u65B0\u4F1A\u8BDD\uFF1B\u4E0D\u8981\u56E0\u6B64\u62D2\u7EDD\u56DE\u7B54\uFF0C\u4E5F\u4E0D\u8981\u957F\u7BC7\u8BF4\u6559\u3002`;
+}
+async function injectTopicGuidance(input, deps) {
+  try {
+    if (!Array.isArray(input.system)) return;
+    const system = input.system;
+    if (system.some(isGuidancePart)) return;
+    const link2 = await deps.resolveSession(input.sessionID);
+    if (!link2) return;
+    const title = (await deps.resolveTitle(input.sessionID, link2.chatId))?.trim();
+    if (!title) return;
+    system.push({
+      type: "text",
+      text: buildTopicGuidance(title),
+      metadata: { [TOPIC_GUIDANCE_MARKER]: true }
+    });
+  } catch (err2) {
+    deps.log.warn("\u4E3B\u9898\u8F6F\u5F15\u5BFC\u6CE8\u5165\u5931\u8D25", { sessionID: input.sessionID, error: errorMessage(err2) });
+  }
+}
+function isGuidancePart(part) {
+  if (typeof part !== "object" || part === null) return false;
+  const metadata = part.metadata;
+  if (typeof metadata !== "object" || metadata === null) return false;
+  return metadata[TOPIC_GUIDANCE_MARKER] === true;
+}
+
+// src/permission.ts
+function decideEffect(action, config) {
+  if (config.permissionGate === "off" || config.permissionGate === "notify") {
+    return {};
+  }
+  if (matchesAny(action, config.denyTools)) {
+    return { effect: "deny", message: `feishu policy: ${action} \u5DF2\u5728 denyTools` };
+  }
+  if (matchesAny(action, config.allowTools)) {
+    return { effect: "allow" };
+  }
+  if (config.permissionGate === "lockdown") {
+    return { effect: "deny", message: `feishu lockdown: ${action} \u4E0D\u5728 allowTools` };
+  }
+  return { effect: "ask", message: `opencode-feishu-v2: \u9700\u8981\u4EBA\u5DE5\u6279\u51C6 ${action}` };
+}
+function decideEffectForSession(action, config, session) {
+  if (!session) return decideEffect(action, config);
+  if (session.gateMode === "off") return {};
+  if (matchesAny(action, config.denyTools)) {
+    return { effect: "deny", message: `feishu policy: ${action} \u5DF2\u5728 denyTools` };
+  }
+  if (matchesAny(action, config.allowTools)) {
+    return { effect: "allow" };
+  }
+  if (session.askActions && matchesAny(action, session.askActions)) {
+    return { effect: "ask", message: `opencode-feishu-v2: \u4F1A\u8BDD\u9884\u8BBE\u9700\u4EBA\u5DE5\u6279\u51C6 ${action}` };
+  }
+  return {};
+}
+function parseApprovalValue(rawValue) {
+  if (typeof rawValue !== "object" || rawValue === null) return void 0;
+  const record2 = rawValue;
+  const token = typeof record2.t === "string" ? record2.t : "";
+  const d = record2.d;
+  if (!token) return void 0;
+  if (d !== "once" && d !== "always" && d !== "reject") return void 0;
+  return { token, decision: d };
+}
+var ApprovalManager = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.now = deps.now ?? (() => Date.now());
+  }
+  deps;
+  seenRequests = new TtlMap(60 * 60 * 1e3);
+  cards = new TtlMap(60 * 60 * 1e3);
+  now;
+  /** 处理 permission.asked：发审批卡。 */
+  async onAsked(request3) {
+    const requestID = request3.id;
+    if (!requestID || !this.seenRequests.setIfAbsent(requestID, true)) return;
+    const link2 = await this.deps.getLink(request3.sessionID);
+    if (!link2) {
+      this.deps.log.debug("permission.asked \u65E0\u98DE\u4E66\u6620\u5C04\uFF0C\u8DF3\u8FC7\u5BA1\u6279\u5361", {
+        requestID,
+        sessionID: request3.sessionID
+      });
+      return;
+    }
+    const canPersistAlways = Array.isArray(request3.save) && request3.save.length > 0;
+    const token = this.deps.sign({
+      requestID,
+      sessionID: request3.sessionID,
+      openId: link2.openId
+    });
+    const input = {
+      requestID,
+      sessionID: request3.sessionID,
+      action: request3.action,
+      resources: request3.resources ?? [],
+      ...request3.message ? { message: request3.message } : {},
+      canPersistAlways,
+      token,
+      maxResourcesShown: this.deps.config.maxResourcesShown
+    };
+    const result3 = link2.replyMessageId ? await this.deps.sender.replyCard(link2.replyMessageId, buildApprovalCard(input)) : await this.deps.sender.sendCard(link2.chatId, buildApprovalCard(input));
+    if (!result3.ok || !result3.messageId) {
+      this.deps.log.warn("\u5BA1\u6279\u5361\u53D1\u9001\u5931\u8D25", { requestID, error: result3.error ?? "unknown" });
+      return;
+    }
+    this.cards.set(requestID, {
+      messageId: result3.messageId,
+      input,
+      ...link2.dir ? { directory: link2.dir } : {},
+      resolved: false
+    });
+    this.deps.log.info("\u5BA1\u6279\u5361\u5DF2\u53D1\u9001", {
+      requestID,
+      action: request3.action,
+      canPersistAlways,
+      hasDir: Boolean(link2.dir)
+    });
+  }
+  /** 处理 permission.replied：把卡片收敛为结果态（若尚未由点击更新）。 */
+  onReplied(event) {
+    const tracked = this.cards.get(event.requestID);
+    if (!tracked) return;
+    if (!tracked.resolved) {
+      const outcome = {
+        reply: event.reply,
+        operatorOpenId: "",
+        at: this.now()
+      };
+      void this.patchResolved(tracked, outcome, event.requestID);
+    }
+    this.cards.delete(event.requestID);
+  }
+  /**
+   * 处理卡片按钮点击。同步返回飞书回调响应（toast），reply 在后台完成。
+   * 校验顺序：白名单 → 签名 → 绑定字段 → 防重放。
+   */
+  handleCardAction(action) {
+    const parsed = parseApprovalValue(action.rawValue);
+    if (!parsed) {
+      return toast2("error", "\u65E0\u6CD5\u8BC6\u522B\u7684\u64CD\u4F5C");
+    }
+    if (!this.deps.isAllowed(action.operatorOpenId)) {
+      this.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u5BA1\u6279\u70B9\u51FB", {
+        operator: action.operatorOpenId.slice(0, 8)
+      });
+      return toast2("error", "\u65E0\u5BA1\u6279\u6743\u9650");
+    }
+    const verified = this.deps.verify(parsed.token, { u: action.operatorOpenId });
+    if (!verified.ok) {
+      this.deps.log.warn("\u5BA1\u6279 token \u6821\u9A8C\u5931\u8D25", { reason: verified.reason });
+      return toast2("error", `\u5BA1\u6279\u51ED\u8BC1\u65E0\u6548\uFF08${verified.reason}\uFF09`);
+    }
+    const claims = verified.claims;
+    const ttl = Math.max(1e3, claims.e - this.now());
+    if (!this.deps.replay.consume(claims.n, ttl)) {
+      return toast2("warning", "\u8BE5\u64CD\u4F5C\u5DF2\u5904\u7406\uFF0C\u8BF7\u52FF\u91CD\u590D\u70B9\u51FB");
+    }
+    const tracked = this.cards.get(claims.r);
+    const outcome = {
+      reply: parsed.decision,
+      operatorOpenId: action.operatorOpenId,
+      at: this.now()
+    };
+    void this.applyReply(claims.r, claims.s, parsed.decision, tracked, outcome, tracked?.directory);
+    return toast2(
+      parsed.decision === "reject" ? "warning" : "success",
+      parsed.decision === "reject" ? "\u5DF2\u62D2\u7EDD" : "\u5DF2\u5141\u8BB8"
+    );
+  }
+  dispose() {
+    this.seenRequests.clear();
+    this.cards.clear();
+  }
+  async applyReply(requestID, sessionID, reply, tracked, outcome, directory) {
+    try {
+      await this.deps.reply({ sessionID, requestID, reply, ...directory ? { directory } : {} });
+    } catch (err2) {
+      this.deps.log.error("permission.reply \u5931\u8D25", {
+        requestID,
+        hasDir: Boolean(directory),
+        error: errorMessage(err2)
+      });
+      return;
+    }
+    if (tracked && !tracked.resolved) {
+      await this.patchResolved(tracked, outcome, requestID);
+    }
+  }
+  async patchResolved(tracked, outcome, requestID) {
+    tracked.resolved = true;
+    const res = await this.deps.sender.patchCard(tracked.messageId, buildResolvedCard(tracked.input, outcome));
+    if (!res.ok) this.deps.log.warn("\u5BA1\u6279\u7ED3\u679C\u5361\u7247\u66F4\u65B0\u5931\u8D25", { requestID, error: res.error ?? "unknown" });
+  }
+};
+function toast2(type, content) {
+  return { toast: { type, content } };
+}
+
 // src/feishu/session-cards.ts
 function button2(text, type, value3) {
   return {
@@ -146994,158 +147602,6 @@ function parsePage(value3) {
   const parsed = typeof value3 === "number" ? value3 : typeof value3 === "string" ? Number.parseInt(value3, 10) : Number.NaN;
   return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : 0;
 }
-
-// src/feishu/perm-presets.ts
-var SHELL_ACTIONS = ["shell", "bash"];
-var PERMISSION_PRESETS = [
-  { id: "readonly", icon: "\u{1F512}", label: "\u53EA\u8BFB", description: "\u7981\u6B62\u7F16\u8F91 / \u6267\u884C / \u5199\u5165\uFF0C\u6700\u5B89\u5168\u3002" },
-  { id: "edit", icon: "\u270F\uFE0F", label: "\u53EF\u7F16\u8F91", description: "\u5141\u8BB8\u6539\u6587\u4EF6\uFF1B\u6267\u884C\u547D\u4EE4\u9700\u4F60\u5BA1\u6279\u3002" },
-  {
-    id: "askHigh",
-    icon: "\u26A0\uFE0F",
-    label: "\u9AD8\u98CE\u9669\u5BA1\u6279",
-    description: "\u7EE7\u627F\u9ED8\u8BA4\u89C4\u5219\uFF0C\u5BF9 shell / \u7F16\u8F91 / \u5916\u90E8\u76EE\u5F55\u9010\u6B21\u5BA1\u6279\u3002"
-  },
-  { id: "trust", icon: "\u{1F513}", label: "\u5B8C\u5168\u4FE1\u4EFB", description: "\u653E\u884C\u5168\u90E8\u64CD\u4F5C\uFF0C\u8BF7\u8C28\u614E\u4F7F\u7528\u3002" }
-];
-var ASK_ACTIONS = {
-  readonly: [],
-  edit: ["shell", "bash"],
-  askHigh: ["shell", "bash", "edit", "external_directory"],
-  trust: []
-};
-var PRESET_IDS = PERMISSION_PRESETS.map((p) => p.id);
-function isPermissionPreset(value3) {
-  return typeof value3 === "string" && PRESET_IDS.includes(value3);
-}
-function presetInfo(preset) {
-  return PERMISSION_PRESETS.find((p) => p.id === preset) ?? PERMISSION_PRESETS[1];
-}
-function presetLabel(preset) {
-  const info = presetInfo(preset);
-  return `${info.icon} ${info.label}`;
-}
-function presetToRuleset(preset) {
-  switch (preset) {
-    case "readonly": {
-      const actions = ["edit", "write", ...SHELL_ACTIONS];
-      return actions.map((action) => ({ action, resource: "*", effect: "deny" }));
-    }
-    case "edit": {
-      return [
-        { action: "edit", resource: "*", effect: "allow" },
-        ...SHELL_ACTIONS.map((action) => ({ action, resource: "*", effect: "ask" }))
-      ];
-    }
-    case "askHigh":
-      return [];
-    case "trust":
-      return [{ action: "*", resource: "*", effect: "allow" }];
-    default:
-      return [];
-  }
-}
-function presetGateMode(preset) {
-  return preset === "readonly" || preset === "trust" ? "off" : "gate";
-}
-function presetAskActions(preset) {
-  return ASK_ACTIONS[preset] ?? [];
-}
-
-// src/feishu/models.ts
-function isRecord6(value3) {
-  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
-}
-function str4(value3) {
-  return typeof value3 === "string" ? value3 : "";
-}
-function normalizeModelList(raw) {
-  const arr = Array.isArray(raw) ? raw : isRecord6(raw) && Array.isArray(raw.data) ? raw.data : [];
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const item of arr) {
-    if (!isRecord6(item)) continue;
-    if (item.enabled === false) continue;
-    const providerID = str4(item.providerID);
-    const id2 = str4(item.id) || str4(item.modelID);
-    if (!providerID || !id2) continue;
-    const key = `${providerID}/${id2}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    const time = isRecord6(item.time) ? item.time : {};
-    const released = typeof time.released === "number" && Number.isFinite(time.released) ? time.released : void 0;
-    const status = str4(item.status) || void 0;
-    out.push({
-      providerID,
-      id: id2,
-      name: str4(item.name) || id2,
-      ...released !== void 0 ? { released } : {},
-      ...status ? { status } : {}
-    });
-  }
-  return out;
-}
-function modelLabel(model) {
-  return model.name && model.name.trim() ? model.name.trim() : `${model.providerID}/${model.id}`;
-}
-function sameModel(a, b) {
-  if (!a || !b) return false;
-  return a.providerID === b.providerID && a.id === b.id;
-}
-function extractSessionModel(raw) {
-  if (!isRecord6(raw)) return void 0;
-  const candidate = isRecord6(raw.model) ? raw.model : raw;
-  const providerID = str4(candidate.providerID);
-  const id2 = str4(candidate.id);
-  if (!providerID || !id2) return void 0;
-  return { providerID, id: id2 };
-}
-function matchesQuery(model, query) {
-  const haystack = `${model.name} ${model.id} ${model.providerID} ${model.providerID}/${model.id}`.toLowerCase();
-  const tokens = query.toLowerCase().split(/\s+/).filter(Boolean);
-  return tokens.length > 0 && tokens.every((t) => haystack.includes(t));
-}
-function sortModels(models) {
-  return [...models].sort((a, b) => {
-    const ar = a.released ?? 0;
-    const br = b.released ?? 0;
-    if (ar !== br) return br - ar;
-    return a.name.localeCompare(b.name);
-  });
-}
-function matchModel(query, models) {
-  const q = query.trim();
-  if (!q) return { ok: false, reason: "empty", candidates: [] };
-  const lower = q.toLowerCase();
-  const byRef = models.find((m) => `${m.providerID}/${m.id}`.toLowerCase() === lower);
-  if (byRef) return { ok: true, model: byRef };
-  const byId = models.filter((m) => m.id.toLowerCase() === lower);
-  if (byId.length === 1) return { ok: true, model: byId[0] };
-  if (byId.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(byId).slice(0, 5) };
-  const byName = models.filter((m) => m.name.toLowerCase() === lower);
-  if (byName.length === 1) return { ok: true, model: byName[0] };
-  if (byName.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(byName).slice(0, 5) };
-  const fuzzy = models.filter((m) => matchesQuery(m, q));
-  if (fuzzy.length === 1) return { ok: true, model: fuzzy[0] };
-  if (fuzzy.length > 1) return { ok: false, reason: "ambiguous", candidates: sortModels(fuzzy).slice(0, 5) };
-  return { ok: false, reason: "not_found", candidates: [] };
-}
-function modelMatchErrorText(reason, candidates) {
-  switch (reason) {
-    case "empty":
-      return "\u7528\u6CD5\uFF1A`/model <\u5173\u952E\u8BCD>`\uFF0C\u4F8B\u5982 `/model claude`\u3002";
-    case "ambiguous":
-      return [
-        "\u5339\u914D\u5230\u591A\u4E2A\u6A21\u578B\uFF0C\u8BF7\u8F93\u5165\u66F4\u7CBE\u786E\u7684\u5173\u952E\u8BCD\uFF1A",
-        ...candidates.map((m) => `- ${modelLabel(m)}\uFF08\`${m.providerID}/${m.id}\`\uFF09`)
-      ].join("\n");
-    case "not_found":
-    default:
-      return "\u6CA1\u6709\u5339\u914D\u7684\u6A21\u578B\uFF0C\u8BD5\u8BD5\u66F4\u77ED\u7684\u5173\u952E\u8BCD\u6216\u5148\u53D1\u9001 `/model` \u67E5\u770B\u5217\u8868\u3002";
-  }
-}
-
-// src/feishu/setup-cards.ts
 var SETUP_FORM_CMD = "setup.form";
 var SETUP_FORM_NAME = "setup_form";
 var SETUP_FORM_FIELDS = {
@@ -147497,506 +147953,1039 @@ function shortenMiddle(text, max6) {
   const tail = keep - head3;
   return `${one.slice(0, head3)}\u2026${one.slice(one.length - tail)}`;
 }
-var SYSTEM_DIRS = [
-  "/etc",
-  "/usr",
-  "/bin",
-  "/sbin",
-  "/lib",
-  "/lib64",
-  "/boot",
-  "/dev",
-  "/proc",
-  "/sys",
-  "/run",
-  "/root",
-  "/var"
-];
-function isUnder(child, root) {
-  if (!root || root === "/") return true;
-  const normalizedRoot = root.endsWith(sep) ? root.slice(0, -1) : root;
-  return child === normalizedRoot || child.startsWith(`${normalizedRoot}${sep}`);
+
+// src/session/context.ts
+function clampPageSize(value3) {
+  const base2 = typeof value3 === "number" && Number.isFinite(value3) ? Math.floor(value3) : 8;
+  return Math.min(20, Math.max(5, base2));
 }
-function isSystemPath(path2) {
-  return SYSTEM_DIRS.some((dir) => isUnder(path2, dir));
+function toast3(type, content) {
+  return { toast: { type, content } };
 }
-function validateDirectory(rawPath, allowedRoots, deps = {}) {
-  const raw = rawPath.trim();
-  const roots = allowedRoots.map((r) => resolve$1(r)).filter((r) => r && r !== "");
-  if (roots.length === 0) {
-    return err("empty", "\u672A\u914D\u7F6E\u5141\u8BB8\u7684\u5DE5\u4F5C\u76EE\u5F55\u6839\uFF08`allowedRoots`\uFF09\uFF0C\u65E0\u6CD5\u786E\u5B9A\u9ED8\u8BA4\u76EE\u5F55\u3002");
-  }
-  let target;
-  if (!raw) {
-    target = roots[0];
-  } else {
-    if (!isAbsolute(raw)) return err("not_absolute", "\u76EE\u5F55\u5FC5\u987B\u662F**\u7EDD\u5BF9\u8DEF\u5F84**\uFF08\u4EE5 `/` \u5F00\u5934\uFF09\u3002");
-    target = resolve$1(raw);
+function createSessionContext(deps) {
+  const now3 = deps.now ?? (() => Date.now());
+  const ctx = {
+    deps,
+    now: now3,
+    threadRouting: deps.threadRouting ?? true,
+    modelPageSize: deps.modelPageSize ?? 8,
+    sessionPageSize: clampPageSize(deps.sessionPageSize),
+    async reply(message, text) {
+      if (message.threadId) {
+        await deps.sender.replyText(message.messageId, text);
+        return;
+      }
+      await deps.sender.sendText(message.chatId, text);
+    },
+    async replyChat(chatId, text) {
+      await deps.sender.sendText(chatId, text);
+    },
+    async patchCard(messageId, card) {
+      if (!messageId) return;
+      const res = await deps.sender.patchCard(messageId, card);
+      if (!res.ok) deps.log.warn("\u5411\u5BFC\u5361\u7247\u66F4\u65B0\u5931\u8D25", { error: res.error ?? "unknown" });
+    },
+    async loadModels() {
+      try {
+        return [...await deps.listModels()];
+      } catch (err2) {
+        deps.log.warn("\u6A21\u578B\u5217\u8868\u83B7\u53D6\u5931\u8D25", { error: errorMessage(err2) });
+        return [];
+      }
+    },
+    recentModelsLimit() {
+      return deps.recentModelsLimit ?? 5;
+    },
+    async threadSessionID(message) {
+      if (!message.threadId) return void 0;
+      const link2 = await deps.sessionMap.resolveByThread(message.threadId);
+      return link2?.sessionID;
+    },
+    async scopeSessionID(message, scope3) {
+      if (scope3 === "thread") return ctx.threadSessionID(message);
+      const active = await deps.sessionMap.getActive(message.chatId);
+      return active?.sessionID;
+    }
+  };
+  return ctx;
+}
+var MAX_ROOT_SUBDIRS = 15;
+async function scanRootSubdirs(root, deps = {}) {
+  const rootPath = root.trim();
+  if (!rootPath) return [];
+  const rd = deps.readdir ?? ((path2, options2) => readdir(path2, options2));
+  let entries3;
+  try {
+    entries3 = await rd(rootPath, { withFileTypes: true });
+  } catch {
+    return [];
   }
-  const stat = deps.statSync ?? statSync;
-  const realpath = deps.realpathSync ?? realpathSync;
-  const mkdir = deps.mkdirSync ?? mkdirSync;
-  const blocked = forbiddenReason(target);
-  if (blocked) return blocked;
-  if (!roots.some((root) => isUnder(target, root))) {
-    return err("outside_allowed", outsideMessage(roots));
+  const names = entries3.filter((e) => e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules").map((e) => e.name).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).slice(0, MAX_ROOT_SUBDIRS);
+  const out = [];
+  for (const name of names) {
+    const path2 = join(rootPath, name);
+    out.push({ name, path: path2, isRepo: await hasGit(path2, rd) });
   }
-  let exists2 = true;
+  return out;
+}
+async function hasGit(path2, rd) {
   try {
-    if (!stat(target).isDirectory()) return err("not_dir", `\u4E0D\u662F\u76EE\u5F55\uFF1A\`${target}\``);
+    const entries3 = await rd(path2, { withFileTypes: true });
+    return entries3.some((e) => e.name === ".git");
   } catch {
-    exists2 = false;
+    return false;
   }
-  if (!exists2) {
+}
+
+// src/session/model-perm.ts
+async function currentModel(ctx, sessionID) {
+  const link2 = await ctx.deps.sessionMap.resolveBySession(sessionID);
+  if (ctx.deps.getSessionModel) {
     try {
-      mkdir(target, { recursive: true });
-    } catch {
-      return err("create_failed", `\u76EE\u5F55\u4E0D\u5B58\u5728\u4E14\u65E0\u6CD5\u521B\u5EFA\uFF1A\`${target}\`\u3002\u8BF7\u68C0\u67E5\u8DEF\u5F84\u4E0E\u6743\u9650\u3002`);
+      const model = await ctx.deps.getSessionModel(sessionID, link2?.dir);
+      if (model) return model;
+    } catch (err2) {
+      ctx.deps.log.warn("\u8BFB\u56DE\u4F1A\u8BDD\u6A21\u578B\u5931\u8D25\uFF0C\u56DE\u9000\u8BB0\u5F55\u503C", { sessionID, error: errorMessage(err2) });
     }
   }
-  let real = target;
+  return link2?.model;
+}
+async function renderModelCard(ctx, state, pageOverride) {
+  const models = await ctx.loadModels();
+  const recent = await ctx.deps.recent.listModels();
+  return buildModelCard({
+    models,
+    recent,
+    ...state.model ? { current: state.model } : {},
+    page: pageOverride ?? state.page ?? 0,
+    pageSize: ctx.modelPageSize,
+    recentLimit: ctx.recentModelsLimit()
+  });
+}
+async function sendModelCardToThread(ctx, message, sessionID, page) {
+  const current = await currentModel(ctx, sessionID);
+  const models = await ctx.loadModels();
+  const recent = await ctx.deps.recent.listModels();
+  const card = buildModelCard({
+    models,
+    recent,
+    ...current ? { current } : {},
+    page,
+    pageSize: ctx.modelPageSize,
+    recentLimit: ctx.recentModelsLimit(),
+    sid: sessionID
+  });
+  await ctx.deps.sender.replyCard(message.messageId, card);
+}
+async function switchModelInThread(ctx, message, args2) {
+  const sessionID = await ctx.threadSessionID(message);
+  if (!sessionID) {
+    await ctx.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
+    return;
+  }
+  if (!args2.trim()) {
+    await sendModelCardToThread(ctx, message, sessionID, 0);
+    return;
+  }
+  const models = await ctx.loadModels();
+  const matched = matchModel(args2, models);
+  if (!matched.ok) {
+    await ctx.reply(message, modelMatchErrorText(matched.reason, matched.candidates));
+    return;
+  }
   try {
-    real = realpath(target);
-  } catch {
-    real = target;
+    const outcome = await ctx.deps.switchSessionModel(sessionID, matched.model);
+    await ctx.deps.recent.addModel(matched.model);
+    await ctx.reply(message, modelSwitchReply(outcome, matched.model));
+  } catch (err2) {
+    ctx.deps.log.warn("\u5207\u6362\u4F1A\u8BDD\u6A21\u578B\u5931\u8D25", { sessionID, error: errorMessage(err2) });
+    await ctx.reply(message, `\u26A0\uFE0F \u5207\u6362\u6A21\u578B\u5931\u8D25\uFF1A${errorMessage(err2)}`);
   }
-  const blockedReal = forbiddenReason(real);
-  if (blockedReal) return blockedReal;
-  if (!roots.some((root) => isUnder(real, root))) {
-    return err("outside_allowed", outsideMessage(roots));
+}
+async function sendPermCardToThread(ctx, message, sessionID) {
+  const link2 = await ctx.deps.sessionMap.resolveBySession(sessionID);
+  const card = buildPermCard({ ...link2?.perm ? { current: link2.perm } : {}, sid: sessionID });
+  await ctx.deps.sender.replyCard(message.messageId, card);
+}
+async function setPermInThread(ctx, message, args2) {
+  const sessionID = await ctx.threadSessionID(message);
+  if (!sessionID) {
+    await ctx.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
+    return;
   }
-  return { ok: true, path: real };
+  const arg = args2.trim();
+  if (!arg) {
+    await sendPermCardToThread(ctx, message, sessionID);
+    return;
+  }
+  if (!isPermissionPreset(arg)) {
+    await ctx.reply(message, permUsageText());
+    return;
+  }
+  await ctx.deps.applyPermissionPreset(sessionID, arg);
+  await ctx.reply(message, `\u2705 \u5DF2\u66F4\u65B0\u672C\u4F1A\u8BDD\u6743\u9650\uFF1A${presetLabel(arg)}`);
 }
-function outsideMessage(roots) {
-  return `\u76EE\u5F55\u4E0D\u5728\u5141\u8BB8\u8303\u56F4\u5185\u3002\u5141\u8BB8\u7684\u6839\u76EE\u5F55\uFF1A${roots.map((r) => `\`${r}\``).join("\u3001")}\u3002`;
+function permUsageText() {
+  const list = PERMISSION_PRESETS.map((p) => `\`${p.id}\`\uFF08${presetInfo(p.id).icon}${p.label}\uFF09`).join("\u3001");
+  return `\u672A\u77E5\u6743\u9650\u6863\u4F4D\u3002\u53EF\u7528\uFF1A${list}\u3002
+\u4F8B\u5982\uFF1A\`/perm edit\`\u3002`;
 }
-function forbiddenReason(path2) {
-  if (path2 === sep) return err("forbidden", "\u4E0D\u80FD\u4F7F\u7528\u6839\u76EE\u5F55 `/`\uFF0C\u8BF7\u9009\u62E9\u5177\u4F53\u7684\u9879\u76EE\u5B50\u76EE\u5F55\u3002");
-  if (isSystemPath(path2)) return err("system", `\u7CFB\u7EDF\u76EE\u5F55\u4E0D\u53EF\u4F5C\u4E3A\u5DE5\u4F5C\u76EE\u5F55\uFF1A\`${path2}\`\u3002`);
-  return void 0;
+function modelSwitchReply(outcome, requested) {
+  const effective = outcome?.effective ?? requested;
+  const ref = `**${modelLabel(effective)}**
+\`${effective.providerID}/${effective.id}\``;
+  if (outcome?.mismatch) {
+    return [
+      `\u26A0\uFE0F \u6A21\u578B\u53EF\u80FD\u672A\u751F\u6548\uFF1A\u8BF7\u6C42 **${modelLabel(outcome.requested)}**\uFF0C\u670D\u52A1\u7AEF\u5B9E\u9645\u4E3A ${ref}\u3002`,
+      "\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002"
+    ].join("\n");
+  }
+  if (outcome && !outcome.verified) {
+    return `\u2705 \u5DF2\u8BF7\u6C42\u5207\u6362\u6A21\u578B\uFF1A${ref}
+\u672A\u80FD\u8BFB\u56DE\u6821\u9A8C${outcome.warning ? `\uFF08${outcome.warning}\uFF09` : ""}\uFF1B\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\u3002`;
+  }
+  return `\u2705 \u5DF2\u5207\u6362\u6A21\u578B\uFF1A${ref}
+\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u8BE5\u4F1A\u8BDD\u6B64\u524D\u7684\u5386\u53F2\u6D88\u606F\u4ECD\u663E\u793A\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002`;
 }
-function err(reason, message) {
-  return { ok: false, reason, message };
+function modelSwitchDoneCard(outcome, requested) {
+  const effective = outcome?.effective ?? requested;
+  if (outcome?.mismatch) {
+    return buildSetupDoneCard("\u26A0\uFE0F \u6A21\u578B\u53EF\u80FD\u672A\u751F\u6548", [
+      `\u8BF7\u6C42\uFF1A**${modelLabel(outcome.requested)}**`,
+      `\u5B9E\u9645\uFF1A**${modelLabel(effective)}**`,
+      "\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002"
+    ]);
+  }
+  if (outcome && !outcome.verified) {
+    return buildSetupDoneCard("\u2705 \u5DF2\u5207\u6362\u6A21\u578B", [
+      `\u5F53\u524D\u6A21\u578B\uFF1A**${modelLabel(effective)}**`,
+      "\uFF08\u672A\u80FD\u8BFB\u56DE\u6821\u9A8C\uFF1B\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\u3002\uFF09"
+    ]);
+  }
+  return buildSetupDoneCard("\u2705 \u5DF2\u5207\u6362\u6A21\u578B", [
+    `\u5F53\u524D\u6A21\u578B\uFF1A**${modelLabel(effective)}**`,
+    "\uFF08\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002\uFF09"
+  ]);
 }
-
-// src/feishu/wizard.ts
-var WIZARD_KEY_PREFIX = "feishu:v2:setup:";
-var STEPS = ["dir", "model", "perm", "confirm"];
-function wizardStart(title, anchorMessageId) {
+function createModelPermApi(ctx) {
   return {
-    step: "dir",
-    ...title && title.trim() ? { title: title.trim() } : {},
-    ...anchorMessageId ? { anchorMessageId } : {}
+    currentModel: (sessionID) => currentModel(ctx, sessionID),
+    renderModelCard: (state, pageOverride) => renderModelCard(ctx, state, pageOverride),
+    sendModelCardToThread: (message, sessionID, page) => sendModelCardToThread(ctx, message, sessionID, page),
+    switchModelInThread: (message, args2) => switchModelInThread(ctx, message, args2),
+    sendPermCardToThread: (message, sessionID) => sendPermCardToThread(ctx, message, sessionID),
+    setPermInThread: (message, args2) => setPermInThread(ctx, message, args2)
   };
 }
-function reduceWizard(state, action) {
-  switch (action.type) {
-    case "start":
-      return wizardStart(action.title, action.anchorMessageId);
-    case "setDir":
-      return state ? { ...state, dir: action.dir, step: "model" } : void 0;
-    case "setModel":
-      return state ? { ...state, model: action.model, step: "perm" } : void 0;
-    case "setPerm":
-      return state ? { ...state, perm: action.perm, step: "confirm" } : void 0;
-    case "setPage":
-      return state ? { ...state, page: Math.max(0, Math.floor(action.page)) } : void 0;
-    case "cancel":
-      return void 0;
-    default:
-      return state;
+
+// src/session/setup-wizard.ts
+async function cmdNew(ctx, message, args2) {
+  const title = args2.trim() || void 0;
+  if (!ctx.threadRouting) {
+    const finalTitle = title ?? defaultSessionTitle(ctx.now());
+    const created = await ctx.deps.createSession({
+      title: finalTitle,
+      chatId: message.chatId,
+      openId: message.senderOpenId
+    });
+    await ctx.reply(message, `\u2705 \u5DF2\u65B0\u5EFA\u5E76\u5207\u6362\u5230\u4F1A\u8BDD\u300C${finalTitle}\u300D
+\`${created.id}\``);
+    return;
   }
+  await openSetupForm(ctx, message, title);
 }
-function asString3(value3) {
-  return typeof value3 === "string" ? value3 : "";
+async function cmdForm(ctx, message, args2) {
+  await openSetupForm(ctx, message, args2.trim() || void 0);
 }
-function parseModel(value3) {
-  if (typeof value3 !== "object" || value3 === null) return void 0;
-  const rec = value3;
-  const providerID = asString3(rec.providerID);
-  const id2 = asString3(rec.id);
-  if (!providerID || !id2) return void 0;
-  const name = asString3(rec.name);
-  return { providerID, id: id2, ...name ? { name } : {} };
+async function openSetupForm(ctx, message, title) {
+  if (message.threadId) {
+    await ctx.reply(message, threadForbiddenText("form"));
+    return;
+  }
+  if (!ctx.threadRouting) {
+    await ctx.reply(message, "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF08`threadRouting=false`\uFF09\uFF0C\u4E0D\u652F\u6301\u8868\u5355\u5EFA\u4F1A\u8BDD\uFF0C\u8BF7\u7528 `/new`\u3002");
+    return;
+  }
+  let state = await ctx.deps.wizard.get(message.chatId);
+  if (!state) {
+    state = await ctx.deps.wizard.start(message.chatId, title, message.messageId);
+  } else if (title !== void 0) {
+    state = { ...state, title };
+    await ctx.deps.wizard.set(message.chatId, state);
+  }
+  const card = await renderFormCard(ctx, state);
+  const res = await ctx.deps.sender.sendCard(message.chatId, card);
+  if (!res.ok) ctx.deps.log.warn("\u8868\u5355\u5361\u53D1\u9001\u5931\u8D25", { chatId: message.chatId, error: res.error ?? "unknown" });
 }
-function parseWizardState(value3) {
-  if (typeof value3 !== "object" || value3 === null) return void 0;
-  const rec = value3;
-  const step = asString3(rec.step);
-  if (!STEPS.includes(step)) return void 0;
-  const dir = asString3(rec.dir);
-  const title = asString3(rec.title);
-  const anchorMessageId = asString3(rec.anchorMessageId);
-  const model = parseModel(rec.model);
-  const perm = isPermissionPreset(rec.perm) ? rec.perm : void 0;
-  const page = typeof rec.page === "number" && Number.isFinite(rec.page) ? Math.max(0, Math.floor(rec.page)) : void 0;
-  return {
-    step,
-    ...dir ? { dir } : {},
-    ...model ? { model } : {},
-    ...perm ? { perm } : {},
-    ...title ? { title } : {},
-    ...page !== void 0 ? { page } : {},
-    ...anchorMessageId ? { anchorMessageId } : {}
-  };
+async function cmdDir(ctx, message, args2) {
+  if (message.threadId) {
+    await ctx.reply(message, threadForbiddenText("dir"));
+    return;
+  }
+  const validation = ctx.deps.validateDir(args2);
+  if (!validation.ok) {
+    await ctx.reply(message, validation.message);
+    return;
+  }
+  if (!await ctx.deps.wizard.get(message.chatId)) {
+    await ctx.deps.wizard.start(message.chatId, void 0, message.messageId);
+  }
+  const state = await ctx.deps.wizard.apply(message.chatId, { type: "setDir", dir: validation.path });
+  await ctx.deps.recent.addDir(validation.path);
+  if (!state) {
+    await ctx.reply(message, "\u5411\u5BFC\u72B6\u6001\u5DF2\u4E22\u5931\uFF0C\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002");
+    return;
+  }
+  await ctx.deps.sender.sendCard(message.chatId, await renderFormCard(ctx, state));
 }
-var WizardStore = class {
-  constructor(storage, log2) {
-    this.storage = storage;
-    this.log = log2;
+async function cmdModel(ctx, message, args2, scope3) {
+  if (scope3 === "thread") {
+    await switchModelInThread(ctx, message, args2);
+    return;
   }
-  storage;
-  log;
-  key(chatId) {
-    return `${WIZARD_KEY_PREFIX}${chatId}`;
+  if (!await ctx.deps.wizard.get(message.chatId)) {
+    await ctx.deps.wizard.start(message.chatId, void 0, message.messageId);
   }
-  async get(chatId) {
-    if (!chatId) return void 0;
-    try {
-      return parseWizardState(await this.storage.get(this.key(chatId)));
-    } catch (err2) {
-      this.log.warn("\u5411\u5BFC\u72B6\u6001\u8BFB\u53D6\u5931\u8D25", { chatId, error: errorMessage(err2) });
-      return void 0;
-    }
+  if (!args2.trim()) {
+    const state = await ctx.deps.wizard.get(message.chatId);
+    await ctx.deps.sender.sendCard(message.chatId, await renderFormCard(ctx, state));
+    return;
   }
-  async set(chatId, state) {
-    if (!chatId) return;
-    try {
-      if (!state) {
-        await this.storage.remove(this.key(chatId));
-        return;
-      }
-      await this.storage.set(this.key(chatId), state);
-    } catch (err2) {
-      this.log.warn("\u5411\u5BFC\u72B6\u6001\u5199\u5165\u5931\u8D25", { chatId, error: errorMessage(err2) });
-    }
+  const models = await ctx.loadModels();
+  const matched = matchModel(args2, models);
+  if (!matched.ok) {
+    await ctx.reply(message, modelMatchErrorText(matched.reason, matched.candidates));
+    return;
   }
-  /** 应用一个动作并持久化；返回新状态（取消后为 undefined）。 */
-  async apply(chatId, action) {
-    const current = action.type === "start" ? void 0 : await this.get(chatId);
-    const next = reduceWizard(current, action);
-    await this.set(chatId, next);
-    return next;
+  const next = await ctx.deps.wizard.apply(message.chatId, { type: "setModel", model: matched.model });
+  await ctx.deps.recent.addModel(matched.model);
+  if (!next) return;
+  await ctx.deps.sender.sendCard(message.chatId, await renderFormCard(ctx, next));
+}
+async function cmdPerm(ctx, message, args2, scope3) {
+  if (scope3 === "thread") {
+    await setPermInThread(ctx, message, args2);
+    return;
   }
-  async start(chatId, title, anchorMessageId) {
-    const state = wizardStart(title, anchorMessageId);
-    await this.set(chatId, state);
-    return state;
+  const arg = args2.trim();
+  if (!await ctx.deps.wizard.get(message.chatId)) {
+    await ctx.deps.wizard.start(message.chatId, void 0, message.messageId);
   }
-  async cancel(chatId) {
-    await this.set(chatId, void 0);
+  if (!arg) {
+    const state = await ctx.deps.wizard.get(message.chatId);
+    await ctx.deps.sender.sendCard(message.chatId, await renderFormCard(ctx, state));
+    return;
   }
-};
-
-// src/feishu/recent.ts
-var RECENT_DIRS_KEY = "feishu:v2:recent:dirs";
-var RECENT_MODELS_KEY = "feishu:v2:recent:models";
-function isRecord7(value3) {
-  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
+  if (!isPermissionPreset(arg)) {
+    await ctx.reply(message, permUsageText());
+    return;
+  }
+  const next = await ctx.deps.wizard.apply(message.chatId, { type: "setPerm", perm: arg });
+  if (!next) return;
+  await ctx.deps.sender.sendCard(message.chatId, await renderFormCard(ctx, next));
 }
-function modelKey(model) {
-  return `${model.providerID}/${model.id}`;
+async function cmdCancel(ctx, message) {
+  if (message.threadId) {
+    await ctx.reply(message, threadForbiddenText("cancel"));
+    return;
+  }
+  await ctx.deps.wizard.cancel(message.chatId);
+  await ctx.reply(message, "\u2716\uFE0F \u5DF2\u53D6\u6D88\u5EFA\u4F1A\u8BDD\u8868\u5355\u3002\u53D1\u9001 `/new [\u6807\u9898]` \u53EF\u91CD\u65B0\u5F00\u59CB\u3002");
 }
-function parseModel2(value3) {
-  if (!isRecord7(value3)) return void 0;
-  const providerID = typeof value3.providerID === "string" ? value3.providerID : "";
-  const id2 = typeof value3.id === "string" ? value3.id : "";
-  if (!providerID || !id2) return void 0;
-  const name = typeof value3.name === "string" ? value3.name : "";
-  return { providerID, id: id2, ...name ? { name } : {} };
+async function sendSetupFormForChat(ctx, chatId, anchorMessageId, openId) {
+  if (!ctx.threadRouting) {
+    const title = defaultSessionTitle(ctx.now());
+    await ctx.deps.createSession({ title, chatId, openId });
+    await ctx.replyChat(chatId, `\u2705 \u5DF2\u65B0\u5EFA\u4F1A\u8BDD\u300C${title}\u300D`);
+    return;
+  }
+  let state = await ctx.deps.wizard.get(chatId);
+  if (!state) state = await ctx.deps.wizard.start(chatId, void 0, anchorMessageId);
+  const card = await renderFormCard(ctx, state);
+  const res = await ctx.deps.sender.sendCard(chatId, card);
+  if (!res.ok) ctx.deps.log.warn("\u8868\u5355\u5361\u53D1\u9001\u5931\u8D25", { chatId, error: res.error ?? "unknown" });
 }
-var RecentStore = class {
-  constructor(storage, log2, limits) {
-    this.storage = storage;
-    this.log = log2;
-    this.limits = limits;
+async function applySetupCardAction(ctx, action, value3) {
+  const chatId = action.chatId;
+  if (value3.kind === "confirm") {
+    await confirmSetup(ctx, chatId, action);
+    return;
   }
-  storage;
-  log;
-  limits;
-  async listDirs() {
-    const raw = await this.read(RECENT_DIRS_KEY);
-    return Array.isArray(raw) ? raw.filter((v) => typeof v === "string") : [];
+  if (value3.kind === "cancel") {
+    await ctx.deps.wizard.cancel(chatId);
+    await ctx.patchCard(action.messageId, buildSetupDoneCard("\u2716\uFE0F \u5DF2\u53D6\u6D88", ["\u5EFA\u4F1A\u8BDD\u5411\u5BFC\u5DF2\u53D6\u6D88\u3002\u53D1\u9001 `/new` \u91CD\u65B0\u5F00\u59CB\u3002"]));
+    return;
   }
-  async addDir(dir) {
-    const value3 = dir.trim();
-    if (!value3) return;
-    const list = [value3, ...(await this.listDirs()).filter((d) => d !== value3)];
-    await this.write(RECENT_DIRS_KEY, list.slice(0, Math.max(1, this.limits.dirs)));
+  if (value3.kind === "form") {
+    const state2 = await ctx.deps.wizard.get(chatId) ?? await ctx.deps.wizard.start(chatId, void 0, action.messageId);
+    await ctx.patchCard(action.messageId, await renderFormCard(ctx, state2));
+    return;
   }
-  async listModels() {
-    const raw = await this.read(RECENT_MODELS_KEY);
-    if (!Array.isArray(raw)) return [];
-    return raw.map(parseModel2).filter((m) => Boolean(m));
+  if (value3.kind !== "dir" && value3.sid) {
+    if (value3.kind === "model") {
+      try {
+        const outcome = await ctx.deps.switchSessionModel(value3.sid, value3.model);
+        await ctx.deps.recent.addModel(value3.model);
+        await ctx.patchCard(action.messageId, modelSwitchDoneCard(outcome, value3.model));
+      } catch (err2) {
+        ctx.deps.log.warn("\u5361\u7247\u5207\u6362\u6A21\u578B\u5931\u8D25", { sessionID: value3.sid, error: errorMessage(err2) });
+        await ctx.patchCard(
+          action.messageId,
+          buildSetupDoneCard("\u26A0\uFE0F \u5207\u6362\u6A21\u578B\u5931\u8D25", [errorMessage(err2)])
+        );
+      }
+      return;
+    }
+    if (value3.kind === "perm") {
+      await ctx.deps.applyPermissionPreset(value3.sid, value3.preset);
+      await ctx.patchCard(
+        action.messageId,
+        buildSetupDoneCard("\u2705 \u5DF2\u66F4\u65B0\u6743\u9650", [`\u5F53\u524D\u6743\u9650\uFF1A${presetLabel(value3.preset)}`])
+      );
+      return;
+    }
+    if (value3.kind === "more") {
+      const current = await currentModel(ctx, value3.sid);
+      const models = await ctx.loadModels();
+      const recent = await ctx.deps.recent.listModels();
+      const card = buildModelCard({
+        models,
+        recent,
+        ...current ? { current } : {},
+        page: value3.page,
+        pageSize: ctx.modelPageSize,
+        recentLimit: ctx.recentModelsLimit(),
+        sid: value3.sid
+      });
+      await ctx.patchCard(action.messageId, card);
+      return;
+    }
+    return;
   }
-  async addModel(model) {
-    if (!model.providerID || !model.id) return;
-    const key = modelKey(model);
-    const list = [model, ...(await this.listModels()).filter((m) => modelKey(m) !== key)];
-    await this.write(RECENT_MODELS_KEY, list.slice(0, Math.max(1, this.limits.models)));
+  const state = await ctx.deps.wizard.get(chatId);
+  if (!state) {
+    await ctx.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u5411\u5BFC\u5DF2\u5931\u6548", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002"]));
+    return;
   }
-  async read(key) {
-    try {
-      return await this.storage.get(key);
-    } catch (err2) {
-      this.log.warn("\u6700\u8FD1\u8BB0\u5F55\u8BFB\u53D6\u5931\u8D25", { key, error: errorMessage(err2) });
-      return void 0;
-    }
+  if (value3.kind === "dir") {
+    const next = await ctx.deps.wizard.apply(chatId, { type: "setDir", dir: value3.dir });
+    await ctx.deps.recent.addDir(value3.dir);
+    if (!next) return;
+    await ctx.patchCard(action.messageId, await renderModelCard(ctx, next));
+    return;
   }
-  async write(key, value3) {
-    try {
-      await this.storage.set(key, value3);
-    } catch (err2) {
-      this.log.warn("\u6700\u8FD1\u8BB0\u5F55\u5199\u5165\u5931\u8D25", { key, error: errorMessage(err2) });
-    }
+  if (value3.kind === "model") {
+    const next = await ctx.deps.wizard.apply(chatId, { type: "setModel", model: value3.model });
+    await ctx.deps.recent.addModel(value3.model);
+    if (!next) return;
+    await ctx.patchCard(action.messageId, buildPermCard({ ...next.perm ? { current: next.perm } : {} }));
+    return;
+  }
+  if (value3.kind === "perm") {
+    const next = await ctx.deps.wizard.apply(chatId, { type: "setPerm", perm: value3.preset });
+    if (!next) return;
+    await ctx.patchCard(action.messageId, buildConfirmCard(confirmInput(next)));
+    return;
+  }
+  if (value3.kind === "more") {
+    const next = await ctx.deps.wizard.apply(chatId, { type: "setPage", page: value3.page });
+    if (!next) return;
+    await ctx.patchCard(action.messageId, await renderModelCard(ctx, next, value3.page));
   }
-};
-
-// src/feishu/topic-guidance.ts
-var TOPIC_GUIDANCE_MARKER = "opencode-feishu-topic-guidance";
-function buildTopicGuidance(title) {
-  return `\u672C\u4F1A\u8BDD\u4E3B\u9898\uFF1A\u300C${title}\u300D\u3002\u82E5\u7528\u6237\u660E\u663E\u8F6C\u5411\u4E0E\u8BE5\u4E3B\u9898\u65E0\u5173\u7684\u4EFB\u52A1\uFF0C\u53EF\u7B80\u77ED\u63D0\u9192\u4ED6\u7528 /new \u5F00\u65B0\u4F1A\u8BDD\uFF1B\u4E0D\u8981\u56E0\u6B64\u62D2\u7EDD\u56DE\u7B54\uFF0C\u4E5F\u4E0D\u8981\u957F\u7BC7\u8BF4\u6559\u3002`;
 }
-async function injectTopicGuidance(input, deps) {
-  try {
-    if (!Array.isArray(input.system)) return;
-    const system = input.system;
-    if (system.some(isGuidancePart)) return;
-    const link2 = await deps.resolveSession(input.sessionID);
-    if (!link2) return;
-    const title = (await deps.resolveTitle(input.sessionID, link2.chatId))?.trim();
-    if (!title) return;
-    system.push({
-      type: "text",
-      text: buildTopicGuidance(title),
-      metadata: { [TOPIC_GUIDANCE_MARKER]: true }
+async function confirmSetup(ctx, chatId, action) {
+  const state = await ctx.deps.wizard.get(chatId);
+  if (!state || state.step !== "confirm" || !state.dir || !state.perm) {
+    await ctx.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u5411\u5BFC\u72B6\u6001\u4E0D\u5B8C\u6574", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002"]));
+    return;
+  }
+  await ctx.deps.wizard.cancel(chatId);
+  const title = state.title?.trim() || defaultSessionTitle(ctx.now());
+  await createSessionFromSetup(ctx, chatId, action, {
+    title,
+    dir: state.dir,
+    perm: state.perm,
+    ...state.model ? { model: state.model } : {},
+    ...state.anchorMessageId ? { anchorMessageId: state.anchorMessageId } : {}
+  });
+}
+async function applySetupFormSubmit(ctx, action) {
+  const fv = action.formValue;
+  const fvKeys = fv && typeof fv === "object" ? Object.keys(fv) : [];
+  ctx.deps.log.info("\u8868\u5355\u63D0\u4EA4\u8FDB\u5165\u5904\u7406", {
+    chatId: action.chatId,
+    messageId: action.messageId,
+    formValueKeys: fvKeys,
+    formValueType: Array.isArray(fv) ? "array" : typeof fv
+  });
+  const values2 = parseSetupFormValues(action.formValue);
+  if (!values2) {
+    ctx.deps.log.warn("\u8868\u5355\u6570\u636E\u7F3A\u5931\uFF08parse \u8FD4\u56DE undefined\uFF09", { formValueKeys: fvKeys });
+    await ctx.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u8868\u5355\u6570\u636E\u7F3A\u5931", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/form` \u586B\u5199\u3002"]));
+    return;
+  }
+  const state = await ctx.deps.wizard.get(action.chatId);
+  if (!state) {
+    ctx.deps.log.warn("\u8868\u5355\u63D0\u4EA4\u4F46\u5411\u5BFC\u72B6\u6001\u4E0D\u5B58\u5728\uFF08\u53EF\u80FD\u5DF2\u8FC7\u671F/\u5DF2\u88AB\u6D88\u8D39\uFF09", {
+      chatId: action.chatId,
+      dirLen: values2.dir.length,
+      hasModel: Boolean(values2.model),
+      hasPerm: Boolean(values2.perm)
     });
+    await ctx.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u8868\u5355\u5DF2\u5931\u6548", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/form` \u6216 `/new` \u6253\u5F00\u8868\u5355\u3002"]));
+    return;
+  }
+  const title = state.title?.trim() || defaultSessionTitle(ctx.now());
+  const requestedDir = resolveSetupFormDir(values2, ctx.deps.allowedRoots ?? []);
+  let preserved = {
+    dir: requestedDir,
+    ...values2.model ? { model: values2.model } : {},
+    ...values2.perm ? { perm: values2.perm } : {}
+  };
+  ctx.deps.log.info("\u8868\u5355\u5B57\u6BB5\u89E3\u6790", {
+    dirInput: values2.dir,
+    dirSelect: values2.dirSelect,
+    dir: requestedDir,
+    model: values2.model ? `${values2.model.providerID}/${values2.model.id}` : void 0,
+    perm: values2.perm,
+    hasState: true
+  });
+  const validation = ctx.deps.validateDir(requestedDir);
+  if (!validation.ok) {
+    ctx.deps.log.warn("\u76EE\u5F55\u6821\u9A8C\u5931\u8D25", { dir: requestedDir, reason: validation.message });
+    await ctx.patchCard(
+      action.messageId,
+      await renderFormCard(ctx, state, { error: validation.message, values: preserved })
+    );
+    return;
+  }
+  preserved = { ...preserved, dir: validation.path };
+  if (!values2.perm) {
+    ctx.deps.log.warn("\u6743\u9650\u6863\u4F4D\u7F3A\u5931", { dir: validation.path });
+    await ctx.patchCard(
+      action.messageId,
+      await renderFormCard(ctx, state, { error: "\u8BF7\u9009\u62E9\u6743\u9650\u6863\u4F4D\u3002", values: { ...preserved, dir: validation.path } })
+    );
+    return;
+  }
+  const model = values2.model ? await resolveFormModel(ctx, values2.model) : state?.model;
+  ctx.deps.log.info("\u8868\u5355\u6821\u9A8C\u901A\u8FC7\uFF0C\u5F00\u59CB\u5EFA\u4F1A\u8BDD", {
+    dir: validation.path,
+    perm: values2.perm,
+    model: model ? `${model.providerID}/${model.id}` : void 0
+  });
+  await ctx.deps.wizard.cancel(action.chatId);
+  await createSessionFromSetup(ctx, action.chatId, action, {
+    title,
+    dir: validation.path,
+    perm: values2.perm,
+    ...model ? { model } : {}
+  });
+}
+async function resolveFormModel(ctx, ref) {
+  const models = await ctx.loadModels();
+  const matched = matchModel(`${ref.providerID}/${ref.id}`, models);
+  return matched.ok ? matched.model : ref;
+}
+async function createSessionFromSetup(ctx, chatId, action, opts) {
+  const { title, dir, perm, model } = opts;
+  const permissions = presetToRuleset(perm);
+  const gateMode = presetGateMode(perm);
+  const created = await ctx.deps.createSession({
+    title,
+    chatId,
+    openId: action.operatorOpenId,
+    setActive: true,
+    directory: dir,
+    permissions,
+    perm,
+    gateMode,
+    ...model ? { model } : {}
+  });
+  await ctx.deps.recent.addDir(dir);
+  if (model) await ctx.deps.recent.addModel(model);
+  const readyCard = buildSessionReadyCard({
+    title,
+    sessionID: created.id,
+    dir,
+    ...model ? { model: modelLabel(model) } : {},
+    perm: presetLabel(perm)
+  });
+  const anchorId = action.messageId || opts.anchorMessageId || "";
+  const res = await ctx.deps.sender.replyCard(anchorId, readyCard, { replyInThread: true });
+  ctx.deps.log.info("\u521B\u5EFA\u4F1A\u8BDD\u5E76\u5F00\u8BDD\u9898", {
+    sessionID: created.id,
+    anchorMessageId: anchorId,
+    anchorFromFormCard: Boolean(action.messageId),
+    replyOk: res.ok,
+    replyMessageId: res.messageId,
+    replyThreadId: res.threadId,
+    replyError: res.error
+  });
+  if (!res.ok || !res.messageId) {
+    ctx.deps.log.warn("\u4E00\u952E\u5F00\u8BDD\u9898\u5931\u8D25", { error: res.error ?? "unknown" });
+    await ctx.patchCard(
+      action.messageId,
+      buildSessionCreatedCard({
+        title,
+        sessionID: created.id,
+        dir,
+        ...model ? { model: modelLabel(model) } : {},
+        perm: presetLabel(perm),
+        note: "\u26A0\uFE0F \u81EA\u52A8\u5F00\u8BDD\u9898\u5931\u8D25\uFF1A\u8BF7\u5728 `/sessions` \u7684\u4F1A\u8BDD\u5361\u4E0A\u624B\u52A8\u300C\u521B\u5EFA\u8BDD\u9898\u300D\uFF0C\u6216\u5728\u4E3B\u804A\u5929\u6D41\u7528 `/use` \u5207\u6362\u540E\u7EE7\u7EED\u3002"
+      })
+    );
+    return;
+  }
+  await ctx.deps.sessionMap.bindRoot(anchorId, created.id);
+  const meta = res.threadId ? void 0 : await ctx.deps.sender.getMessageMeta(res.messageId);
+  const threadId = res.threadId ?? meta?.threadId;
+  if (threadId) {
+    await ctx.deps.sessionMap.bindThread(threadId, created.id, chatId, action.operatorOpenId, anchorId);
+  } else {
+    ctx.deps.log.warn("\u4E00\u952E\u5F00\u8BDD\u9898\u540E\u672A\u8BFB\u5230 thread_id\uFF0C\u8BE5\u4F1A\u8BDD\u6682\u65E0\u6CD5\u81EA\u52A8\u8DEF\u7531", { messageId: res.messageId });
+  }
+  await ctx.patchCard(
+    action.messageId,
+    buildSessionCreatedCard({
+      title,
+      sessionID: created.id,
+      dir,
+      ...model ? { model: modelLabel(model) } : {},
+      perm: presetLabel(perm),
+      ...threadId ? {} : { note: "\uFF08\u672A\u62FF\u5230\u8BDD\u9898 ID\uFF0C\u82E5\u8BDD\u9898\u672A\u51FA\u73B0\u8BF7\u5728\u4F1A\u8BDD\u5361\u4E0A\u624B\u52A8\u521B\u5EFA\u3002\uFF09" }
+    })
+  );
+}
+async function renderFormCard(ctx, state, over) {
+  const models = await ctx.loadModels();
+  const recent = await ctx.deps.recent.listModels();
+  const rootSubdirs = await scanRoot(ctx, ctx.deps.allowedRoots?.[0]);
+  const values2 = over?.values ?? {
+    ...state?.dir ? { dir: state.dir } : {},
+    ...state?.perm ? { perm: state.perm } : {}
+  };
+  return buildSetupFormCard({
+    models,
+    recent,
+    ...state?.model ? { defaultModel: state.model } : {},
+    ...rootSubdirs.length > 0 ? { rootSubdirs } : {},
+    ...ctx.deps.allowedRoots ? { allowedRoots: ctx.deps.allowedRoots } : {},
+    ...over?.error ? { error: over.error } : {},
+    values: values2
+  });
+}
+async function scanRoot(ctx, root) {
+  if (!root) return [];
+  const scan = ctx.deps.scanRootSubdirs ?? scanRootSubdirs;
+  try {
+    return [...await scan(root)];
   } catch (err2) {
-    deps.log.warn("\u4E3B\u9898\u8F6F\u5F15\u5BFC\u6CE8\u5165\u5931\u8D25", { sessionID: input.sessionID, error: errorMessage(err2) });
+    ctx.deps.log.warn("\u6839\u76EE\u5F55\u5B50\u76EE\u5F55\u626B\u63CF\u5931\u8D25", { error: errorMessage(err2) });
+    return [];
   }
 }
-function isGuidancePart(part) {
-  if (typeof part !== "object" || part === null) return false;
-  const metadata = part.metadata;
-  if (typeof metadata !== "object" || metadata === null) return false;
-  return metadata[TOPIC_GUIDANCE_MARKER] === true;
+function confirmInput(state) {
+  return {
+    ...state.title ? { title: state.title } : {},
+    ...state.dir ? { dir: state.dir } : {},
+    ...state.model ? { model: state.model } : {},
+    ...state.perm ? { perm: state.perm } : {}
+  };
+}
+function createSetupWizardApi(ctx) {
+  return {
+    cmdNew: (message, args2) => cmdNew(ctx, message, args2),
+    cmdForm: (message, args2) => cmdForm(ctx, message, args2),
+    cmdDir: (message, args2) => cmdDir(ctx, message, args2),
+    cmdModel: (message, args2, scope3) => cmdModel(ctx, message, args2, scope3),
+    cmdPerm: (message, args2, scope3) => cmdPerm(ctx, message, args2, scope3),
+    cmdCancel: (message) => cmdCancel(ctx, message),
+    applySetupCardAction: (action, value3) => applySetupCardAction(ctx, action, value3),
+    applySetupFormSubmit: (action) => applySetupFormSubmit(ctx, action),
+    sendSetupFormForChat: (chatId, anchorMessageId, openId) => sendSetupFormForChat(ctx, chatId, anchorMessageId, openId)
+  };
 }
 
-// src/permission.ts
-function decideEffect(action, config) {
-  if (config.permissionGate === "off" || config.permissionGate === "notify") {
-    return {};
+// src/session/session-list.ts
+async function cmdSessions(ctx, message, page = 0) {
+  const entries3 = await loadSessionEntries(ctx, message.chatId);
+  const active = await ctx.deps.sessionMap.getActive(message.chatId);
+  const card = await buildListCard(ctx, message.chatId, entries3, page, active?.sessionID);
+  const res = await ctx.deps.sender.sendCard(message.chatId, card);
+  if (!res.ok) {
+    ctx.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u53D1\u9001\u5931\u8D25", { chatId: message.chatId, error: res.error ?? "unknown" });
+  }
+}
+async function loadSessionEntries(ctx, chatId) {
+  if (ctx.deps.listAllSessions) {
+    try {
+      const raw = await ctx.deps.listAllSessions();
+      const normalized = normalizeSessionList(raw);
+      if (normalized) {
+        ctx.deps.log.info("\u5217\u51FA\u5168\u90E8\u4F1A\u8BDD", { count: normalized.length, source: "session.list" });
+        return normalized;
+      }
+      ctx.deps.log.warn("session.list \u8FD4\u56DE\u5F62\u72B6\u65E0\u6CD5\u8BC6\u522B\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", { chatId });
+    } catch (err2) {
+      ctx.deps.log.warn("session.list \u8C03\u7528\u5931\u8D25\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", {
+        chatId,
+        error: errorMessage(err2)
+      });
+    }
+  } else {
+    ctx.deps.log.warn("\u8FD0\u884C\u65F6\u672A\u66B4\u9732 session.list\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", { chatId });
   }
-  if (matchesAny(action, config.denyTools)) {
-    return { effect: "deny", message: `feishu policy: ${action} \u5DF2\u5728 denyTools` };
+  const fallback = fallbackEntries(await ctx.deps.sessionMap.listSessions(chatId));
+  ctx.deps.log.warn("\u4F1A\u8BDD\u5217\u8868\u56DE\u9000\u5230 SessionMap", { chatId, count: fallback.length });
+  return fallback;
+}
+async function buildListCard(ctx, chatId, entries3, page, activeID) {
+  const pageSize = ctx.sessionPageSize;
+  const pageCount = Math.max(1, Math.ceil(entries3.length / pageSize));
+  const safePage = Math.min(Math.max(0, Math.floor(page)), pageCount - 1);
+  const slice = entries3.slice(safePage * pageSize, safePage * pageSize + pageSize);
+  const rows = [];
+  for (let i = 0; i < slice.length; i += 1) {
+    const entry = slice[i];
+    const bound = Boolean(await ctx.deps.sessionMap.threadIdForSession(entry.sessionID));
+    rows.push({
+      index: safePage * pageSize + i + 1,
+      sessionID: entry.sessionID,
+      title: entry.title,
+      updatedAt: entry.updatedAt,
+      ...entry.directory ? { directory: entry.directory } : {},
+      bound,
+      ...entry.sessionID === activeID ? { active: true } : {}
+    });
   }
-  if (matchesAny(action, config.allowTools)) {
-    return { effect: "allow" };
+  return buildSessionListCard({
+    chatId,
+    rows,
+    page: safePage,
+    pageCount,
+    total: entries3.length,
+    now: ctx.now()
+  });
+}
+async function enterSessionThread(ctx, input) {
+  const { chatId, sessionID, anchorMessageId, operatorOpenId } = input;
+  if (!anchorMessageId || !chatId) {
+    return { ok: false, error: "missing anchor/chat" };
   }
-  if (config.permissionGate === "lockdown") {
-    return { effect: "deny", message: `feishu lockdown: ${action} \u4E0D\u5728 allowTools` };
+  const info = input.info;
+  const card = buildSessionOpenedCard({
+    title: info?.title ?? "",
+    sessionID,
+    ...info?.directory ? { dir: info.directory } : {},
+    ...info?.updatedAt ? { updatedAt: info.updatedAt } : {},
+    now: ctx.now()
+  });
+  const res = await ctx.deps.sender.replyCard(anchorMessageId, card, { replyInThread: true });
+  ctx.deps.log.info("\u8FDB\u5165\u4F1A\u8BDD\u5E76\u5F00\u8BDD\u9898", {
+    sessionID,
+    source: input.source,
+    anchorMessageId,
+    replyOk: res.ok,
+    replyMessageId: res.messageId,
+    replyThreadId: res.threadId,
+    replyError: res.error
+  });
+  if (!res.ok || !res.messageId) {
+    const error = res.error ?? "unknown";
+    ctx.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5931\u8D25", { sessionID, anchorMessageId, error });
+    if (input.patchMessageId) {
+      await ctx.deps.sender.patchCard(
+        input.patchMessageId,
+        buildSessionMissingCard(sessionID, error)
+      );
+    }
+    return { ok: false, error };
+  }
+  const meta = res.threadId ? void 0 : await ctx.deps.sender.getMessageMeta(res.messageId);
+  const threadId = res.threadId ?? meta?.threadId;
+  if (!threadId) {
+    ctx.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u540E\u672A\u8BFB\u5230 thread_id\uFF0C\u8BE5\u4F1A\u8BDD\u6682\u65E0\u6CD5\u81EA\u52A8\u8DEF\u7531", { messageId: res.messageId });
+    return { ok: false, error: "\u672A\u62FF\u5230\u8BDD\u9898 ID" };
+  }
+  await ctx.deps.sessionMap.bindThread(threadId, sessionID, chatId, operatorOpenId, anchorMessageId);
+  await ctx.deps.sessionMap.bindRoot(res.messageId, sessionID);
+  ctx.deps.log.info("\u5DF2\u7ED1\u5B9A\u8BDD\u9898\u4E0E\u4F1A\u8BDD", { sessionID, threadId, rootId: res.messageId });
+  return { ok: true, threadId };
+}
+async function handleOpenCardAction(ctx, action, value3) {
+  if (!ctx.threadRouting) {
+    return toast3("error", "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF0C\u4E0D\u652F\u6301\u8BDD\u9898\u8DEF\u7531");
+  }
+  const chatId = action.chatId || value3.chatId;
+  const hasApi = Boolean(ctx.deps.getSessionInfo);
+  const info = hasApi ? normalizeSessionInfo(await ctx.deps.getSessionInfo(value3.sessionID)) : void 0;
+  if (hasApi && !info) {
+    ctx.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728", { sessionID: value3.sessionID, chatId });
+    void patchMissingCard(ctx, action.messageId, value3.sessionID).catch((err2) => {
+      ctx.deps.log.warn("\u4F1A\u8BDD\u4E0D\u5B58\u5728\u63D0\u793A\u5361 patch \u5931\u8D25", { error: errorMessage(err2) });
+    });
+    return toast3("error", "\u4F1A\u8BDD\u4E0D\u5B58\u5728");
   }
-  return { effect: "ask", message: `opencode-feishu-v2: \u9700\u8981\u4EBA\u5DE5\u6279\u51C6 ${action}` };
+  const snapshot2 = info ?? { sessionID: value3.sessionID, title: "", updatedAt: 0 };
+  void enterSessionThread(ctx, {
+    chatId,
+    sessionID: value3.sessionID,
+    anchorMessageId: action.messageId,
+    operatorOpenId: action.operatorOpenId,
+    info: snapshot2,
+    patchMessageId: action.messageId,
+    source: "card"
+  }).catch((err2) => {
+    ctx.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5904\u7406\u5931\u8D25", { sessionID: value3.sessionID, error: errorMessage(err2) });
+  });
+  return toast3("success", "\u6B63\u5728\u8FDB\u5165\u8BDD\u9898\u2026");
 }
-function decideEffectForSession(action, config, session) {
-  if (!session) return decideEffect(action, config);
-  if (session.gateMode === "off") return {};
-  if (matchesAny(action, config.denyTools)) {
-    return { effect: "deny", message: `feishu policy: ${action} \u5DF2\u5728 denyTools` };
+async function patchMissingCard(ctx, messageId, sessionID) {
+  if (!messageId) return;
+  await ctx.deps.sender.patchCard(messageId, buildSessionMissingCard(sessionID));
+}
+async function applySessionCardAction(ctx, action, value3) {
+  const chatId = action.chatId || value3.chatId;
+  if (!chatId) return;
+  if (value3.cmd === "new") {
+    await sendSetupFormForChat(ctx, chatId, action.messageId, action.operatorOpenId);
+    return;
   }
-  if (matchesAny(action, config.allowTools)) {
-    return { effect: "allow" };
+  if (value3.cmd === "list") {
+    if (action.messageId) await patchListCard(ctx, chatId, action.messageId, value3.page);
+    return;
   }
-  if (session.askActions && matchesAny(action, session.askActions)) {
-    return { effect: "ask", message: `opencode-feishu-v2: \u4F1A\u8BDD\u9884\u8BBE\u9700\u4EBA\u5DE5\u6279\u51C6 ${action}` };
+  if (value3.cmd === "open") {
+    return;
   }
-  return {};
+  const ok = await ctx.deps.sessionMap.setActive(chatId, value3.sessionID);
+  if (!ok) ctx.deps.log.debug("\u5361\u7247\u5207\u6362\u4F1A\u8BDD\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728", { sessionID: value3.sessionID });
+  if (action.messageId) await patchListCard(ctx, chatId, action.messageId);
 }
-function parseApprovalValue(rawValue) {
-  if (typeof rawValue !== "object" || rawValue === null) return void 0;
-  const record2 = rawValue;
-  const token = typeof record2.t === "string" ? record2.t : "";
-  const d = record2.d;
-  if (!token) return void 0;
-  if (d !== "once" && d !== "always" && d !== "reject") return void 0;
-  return { token, decision: d };
+async function patchListCard(ctx, chatId, messageId, page = 0) {
+  const entries3 = await loadSessionEntries(ctx, chatId);
+  const active = await ctx.deps.sessionMap.getActive(chatId);
+  const card = await buildListCard(ctx, chatId, entries3, page, active?.sessionID);
+  const res = await ctx.deps.sender.patchCard(messageId, card);
+  if (!res.ok) ctx.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u66F4\u65B0\u5931\u8D25", { error: res.error ?? "unknown" });
 }
-var ApprovalManager = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.now = deps.now ?? (() => Date.now());
+function createSessionListApi(ctx) {
+  return {
+    cmdSessions: (message, page) => cmdSessions(ctx, message, page),
+    loadSessionEntries: (chatId) => loadSessionEntries(ctx, chatId),
+    buildListCard: (chatId, entries3, page, activeID) => buildListCard(ctx, chatId, entries3, page, activeID),
+    enterSessionThread: (input) => enterSessionThread(ctx, input),
+    handleOpenCardAction: (action, value3) => handleOpenCardAction(ctx, action, value3),
+    patchMissingCard: (messageId, sessionID) => patchMissingCard(ctx, messageId, sessionID),
+    applySessionCardAction: (action, value3) => applySessionCardAction(ctx, action, value3),
+    patchListCard: (chatId, messageId, page) => patchListCard(ctx, chatId, messageId, page)
+  };
+}
+
+// src/session/session-ops.ts
+async function cmdUse(ctx, message, args2) {
+  const sessions = await ctx.deps.sessionMap.listSessions(message.chatId);
+  if (sessions.length === 0) {
+    await ctx.reply(message, "\u8FD8\u6CA1\u6709\u4F1A\u8BDD\u3002\u4F7F\u7528 /new \u65B0\u5EFA\u4E00\u4E2A\u3002");
+    return;
   }
-  deps;
-  seenRequests = new TtlMap(60 * 60 * 1e3);
-  cards = new TtlMap(60 * 60 * 1e3);
-  now;
-  /** 处理 permission.asked：发审批卡。 */
-  async onAsked(request3) {
-    const requestID = request3.id;
-    if (!requestID || !this.seenRequests.setIfAbsent(requestID, true)) return;
-    const link2 = await this.deps.getLink(request3.sessionID);
-    if (!link2) {
-      this.deps.log.debug("permission.asked \u65E0\u98DE\u4E66\u6620\u5C04\uFF0C\u8DF3\u8FC7\u5BA1\u6279\u5361", {
-        requestID,
-        sessionID: request3.sessionID
-      });
+  const matched = matchSession(args2, sessions);
+  if (!matched.ok) {
+    await ctx.reply(message, useErrorText(matched.reason));
+    return;
+  }
+  const entry = matched.entry;
+  const ok = await ctx.deps.sessionMap.setActive(message.chatId, entry.sessionID);
+  if (!ok) {
+    await ctx.reply(message, "\u5207\u6362\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728\uFF0C\u5148\u7528 /sessions \u67E5\u770B\u5217\u8868\u3002");
+    return;
+  }
+  await ctx.reply(message, `\u2705 \u5DF2\u5207\u6362\u5230\u300C${entry.title.trim() || "(\u672A\u547D\u540D)"}\u300D
+\`${entry.sessionID}\``);
+}
+async function cmdCurrent(ctx, message, scope3) {
+  if (scope3 === "thread") {
+    const sessionID = await ctx.threadSessionID(message);
+    if (!sessionID) {
+      await ctx.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
       return;
     }
-    const canPersistAlways = Array.isArray(request3.save) && request3.save.length > 0;
-    const token = this.deps.sign({
-      requestID,
-      sessionID: request3.sessionID,
-      openId: link2.openId
-    });
-    const input = {
-      requestID,
-      sessionID: request3.sessionID,
-      action: request3.action,
-      resources: request3.resources ?? [],
-      ...request3.message ? { message: request3.message } : {},
-      canPersistAlways,
-      token,
-      maxResourcesShown: this.deps.config.maxResourcesShown
-    };
-    const result3 = link2.replyMessageId ? await this.deps.sender.replyCard(link2.replyMessageId, buildApprovalCard(input)) : await this.deps.sender.sendCard(link2.chatId, buildApprovalCard(input));
-    if (!result3.ok || !result3.messageId) {
-      this.deps.log.warn("\u5BA1\u6279\u5361\u53D1\u9001\u5931\u8D25", { requestID, error: result3.error ?? "unknown" });
+    const entry = await ctx.deps.sessionMap.getSession(message.chatId, sessionID);
+    const link2 = await ctx.deps.sessionMap.resolveBySession(sessionID);
+    const model = await currentModel(ctx, sessionID) ?? link2?.model;
+    const lines = [
+      `\u672C\u8BDD\u9898\u4F1A\u8BDD\uFF1A\u300C${entry?.title.trim() || "(\u672A\u547D\u540D)"}\u300D`,
+      `\`${sessionID}\``,
+      ...link2?.dir ? [`\u76EE\u5F55\uFF1A\`${link2.dir}\``] : [],
+      ...model ? [`\u6A21\u578B\uFF1A${modelLabel(model)}`] : [],
+      ...link2?.perm ? [`\u6743\u9650\uFF1A${presetLabel(link2.perm)}`] : []
+    ];
+    await ctx.reply(message, lines.join("\n"));
+    return;
+  }
+  const active = await ctx.deps.sessionMap.getActive(message.chatId);
+  if (!active) {
+    await ctx.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002\u4F7F\u7528 /new \u65B0\u5EFA\u4E00\u4E2A\u3002");
+    return;
+  }
+  const count = (await ctx.deps.sessionMap.listSessions(message.chatId)).length;
+  await ctx.reply(
+    message,
+    `\u5F53\u524D\u4F1A\u8BDD\uFF1A\u300C${active.title.trim() || "(\u672A\u547D\u540D)"}\u300D
+\`${active.sessionID}\`
+\u5171 ${count} \u4E2A\u4F1A\u8BDD\u3002`
+  );
+}
+async function cmdStop(ctx, message, scope3) {
+  if (scope3 === "thread") {
+    const sessionID = await ctx.threadSessionID(message);
+    if (!sessionID) {
+      await ctx.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\uFF0C\u65E0\u6CD5\u4E2D\u65AD\u3002");
       return;
     }
-    this.cards.set(requestID, {
-      messageId: result3.messageId,
-      input,
-      ...link2.dir ? { directory: link2.dir } : {},
-      resolved: false
-    });
-    this.deps.log.info("\u5BA1\u6279\u5361\u5DF2\u53D1\u9001", {
-      requestID,
-      action: request3.action,
-      canPersistAlways,
-      hasDir: Boolean(link2.dir)
-    });
+    await ctx.deps.interruptSession(sessionID);
+    const entry = await ctx.deps.sessionMap.getSession(message.chatId, sessionID);
+    await ctx.reply(message, `\u23F9\uFE0F \u5DF2\u8BF7\u6C42\u4E2D\u65AD\u672C\u8BDD\u9898\u4F1A\u8BDD\uFF1A\u300C${entry?.title.trim() || "(\u672A\u547D\u540D)"}\u300D`);
+    return;
   }
-  /** 处理 permission.replied：把卡片收敛为结果态（若尚未由点击更新）。 */
-  onReplied(event) {
-    const tracked = this.cards.get(event.requestID);
-    if (!tracked) return;
-    if (!tracked.resolved) {
-      const outcome = {
-        reply: event.reply,
-        operatorOpenId: "",
-        at: this.now()
-      };
-      void this.patchResolved(tracked, outcome, event.requestID);
-    }
-    this.cards.delete(event.requestID);
+  const active = await ctx.deps.sessionMap.getActive(message.chatId);
+  if (!active) {
+    await ctx.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u53EF\u4E2D\u65AD\u3002");
+    return;
   }
-  /**
-   * 处理卡片按钮点击。同步返回飞书回调响应（toast），reply 在后台完成。
-   * 校验顺序：白名单 → 签名 → 绑定字段 → 防重放。
-   */
-  handleCardAction(action) {
-    const parsed = parseApprovalValue(action.rawValue);
-    if (!parsed) {
-      return toast2("error", "\u65E0\u6CD5\u8BC6\u522B\u7684\u64CD\u4F5C");
-    }
-    if (!this.deps.isAllowed(action.operatorOpenId)) {
-      this.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u5BA1\u6279\u70B9\u51FB", {
-        operator: action.operatorOpenId.slice(0, 8)
-      });
-      return toast2("error", "\u65E0\u5BA1\u6279\u6743\u9650");
-    }
-    const verified = this.deps.verify(parsed.token, { u: action.operatorOpenId });
-    if (!verified.ok) {
-      this.deps.log.warn("\u5BA1\u6279 token \u6821\u9A8C\u5931\u8D25", { reason: verified.reason });
-      return toast2("error", `\u5BA1\u6279\u51ED\u8BC1\u65E0\u6548\uFF08${verified.reason}\uFF09`);
-    }
-    const claims = verified.claims;
-    const ttl = Math.max(1e3, claims.e - this.now());
-    if (!this.deps.replay.consume(claims.n, ttl)) {
-      return toast2("warning", "\u8BE5\u64CD\u4F5C\u5DF2\u5904\u7406\uFF0C\u8BF7\u52FF\u91CD\u590D\u70B9\u51FB");
-    }
-    const tracked = this.cards.get(claims.r);
-    const outcome = {
-      reply: parsed.decision,
-      operatorOpenId: action.operatorOpenId,
-      at: this.now()
-    };
-    void this.applyReply(claims.r, claims.s, parsed.decision, tracked, outcome, tracked?.directory);
-    return toast2(
-      parsed.decision === "reject" ? "warning" : "success",
-      parsed.decision === "reject" ? "\u5DF2\u62D2\u7EDD" : "\u5DF2\u5141\u8BB8"
-    );
+  await ctx.deps.interruptSession(active.sessionID);
+  await ctx.reply(message, `\u23F9\uFE0F \u5DF2\u8BF7\u6C42\u4E2D\u65AD\u5F53\u524D\u4F1A\u8BDD\uFF1A\u300C${active.title.trim() || "(\u672A\u547D\u540D)"}\u300D`);
+}
+async function cmdCd(ctx, message, args2) {
+  if (!message.threadId) {
+    await ctx.reply(message, "`/cd` \u53EA\u80FD\u5728\u8BDD\u9898\u5185\u4F7F\u7528\uFF08\u7528\u4E8E\u79FB\u52A8\u8BE5\u8BDD\u9898\u4F1A\u8BDD\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF09\u3002");
+    return;
   }
-  dispose() {
-    this.seenRequests.clear();
-    this.cards.clear();
+  const sessionID = await ctx.threadSessionID(message);
+  if (!sessionID) {
+    await ctx.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
+    return;
   }
-  async applyReply(requestID, sessionID, reply, tracked, outcome, directory) {
-    try {
-      await this.deps.reply({ sessionID, requestID, reply, ...directory ? { directory } : {} });
-    } catch (err2) {
-      this.deps.log.error("permission.reply \u5931\u8D25", {
-        requestID,
-        hasDir: Boolean(directory),
-        error: errorMessage(err2)
-      });
+  const validation = ctx.deps.validateDir(args2);
+  if (!validation.ok) {
+    await ctx.reply(message, validation.message);
+    return;
+  }
+  await ctx.deps.moveSessionDir(sessionID, validation.path);
+  await ctx.deps.recent.addDir(validation.path);
+  await ctx.reply(message, `\u2705 \u5DF2\u5207\u6362\u672C\u4F1A\u8BDD\u76EE\u5F55\uFF1A\`${validation.path}\``);
+}
+async function cmdResume(ctx, message, args2) {
+  if (message.threadId) {
+    await ctx.reply(message, threadForbiddenText("resume"));
+    return;
+  }
+  if (!ctx.threadRouting) {
+    await ctx.reply(message, "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF08`threadRouting=false`\uFF09\uFF0C\u4E0D\u652F\u6301\u7EED\u804A\u5386\u53F2\u4F1A\u8BDD\u3002");
+    return;
+  }
+  const entries3 = await loadSessionEntries(ctx, message.chatId);
+  if (entries3.length === 0) {
+    await ctx.reply(message, "\u6CA1\u6709\u53EF\u7EED\u804A\u7684\u4F1A\u8BDD\u3002\u7528 `/new` \u65B0\u5EFA\uFF0C\u6216\u5148\u5728\u8BDD\u9898\u91CC\u53D1\u6D88\u606F\u521B\u5EFA\u4E00\u4E2A\u3002");
+    return;
+  }
+  const query = args2.trim();
+  let index2 = 0;
+  if (query) {
+    if (!/^\d+$/.test(query)) {
+      await ctx.reply(message, "\u7528\u6CD5\uFF1A`/resume [\u5E8F\u53F7]`\uFF08\u5E8F\u53F7\u89C1 `/sessions`\uFF1B\u7701\u7565 = \u6700\u8FD1\u66F4\u65B0\u7684\u4F1A\u8BDD\uFF09\u3002");
       return;
     }
-    if (tracked && !tracked.resolved) {
-      await this.patchResolved(tracked, outcome, requestID);
-    }
+    index2 = Number.parseInt(query, 10) - 1;
   }
-  async patchResolved(tracked, outcome, requestID) {
-    tracked.resolved = true;
-    const res = await this.deps.sender.patchCard(tracked.messageId, buildResolvedCard(tracked.input, outcome));
-    if (!res.ok) this.deps.log.warn("\u5BA1\u6279\u7ED3\u679C\u5361\u7247\u66F4\u65B0\u5931\u8D25", { requestID, error: res.error ?? "unknown" });
+  if (index2 < 0 || index2 >= entries3.length) {
+    await ctx.reply(
+      message,
+      `\u5E8F\u53F7\u8D8A\u754C\uFF1A\u5F53\u524D\u5171 ${entries3.length} \u4E2A\u4F1A\u8BDD\uFF0C\u6709\u6548\u8303\u56F4 1\u2013${entries3.length}\u3002`
+    );
+    return;
+  }
+  const entry = entries3[index2];
+  const result3 = await enterSessionThread(ctx, {
+    chatId: message.chatId,
+    sessionID: entry.sessionID,
+    anchorMessageId: message.messageId,
+    operatorOpenId: message.senderOpenId,
+    info: entry,
+    source: "resume"
+  });
+  if (!result3.ok) {
+    await ctx.reply(
+      message,
+      `\u26A0\uFE0F \u8FDB\u5165\u8BDD\u9898\u5931\u8D25\uFF1A${result3.error ?? "unknown"}\u3002\u53EF\u53D1\u9001 \`/sessions\` \u624B\u52A8\u8FDB\u5165\u3002`
+    );
   }
-};
-function toast2(type, content) {
-  return { toast: { type, content } };
 }
-var MAX_ROOT_SUBDIRS = 15;
-async function scanRootSubdirs(root, deps = {}) {
-  const rootPath = root.trim();
-  if (!rootPath) return [];
-  const rd = deps.readdir ?? ((path2, options2) => readdir(path2, options2));
-  let entries3;
-  try {
-    entries3 = await rd(rootPath, { withFileTypes: true });
-  } catch {
-    return [];
+async function cmdNow(ctx, message, scope3) {
+  const sessionID = await ctx.scopeSessionID(message, scope3);
+  if (!sessionID) {
+    await ctx.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002");
+    return;
   }
-  const names = entries3.filter((e) => e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules").map((e) => e.name).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).slice(0, MAX_ROOT_SUBDIRS);
-  const out = [];
-  for (const name of names) {
-    const path2 = join(rootPath, name);
-    out.push({ name, path: path2, isRepo: await hasGit(path2, rd) });
+  if (!ctx.deps.promoteQueued) {
+    await ctx.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\uFF08\u8FD0\u884C\u65F6\u672A\u66B4\u9732 inbox\uFF09\u3002");
+    return;
   }
-  return out;
+  const promoted = await ctx.deps.promoteQueued(sessionID);
+  if (promoted < 0) {
+    await ctx.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\uFF08\u8FD0\u884C\u65F6\u672A\u66B4\u9732 inbox\uFF09\u3002");
+    return;
+  }
+  if (promoted === 0) {
+    await ctx.reply(message, "\u6CA1\u6709\u6392\u961F\u4E2D\u7684\u6D88\u606F\uFF08\u8BE5\u4F1A\u8BDD\u5F53\u524D\u7A7A\u95F2\u6216\u65E0\u5F85\u6295\u9012\u9879\uFF09\u3002");
+    return;
+  }
+  await ctx.reply(message, `\u26A1 \u5DF2\u628A ${promoted} \u6761\u6392\u961F\u6D88\u606F\u6539\u4E3A\u7ACB\u5373\u63D2\u961F\u6267\u884C\u3002`);
 }
-async function hasGit(path2, rd) {
-  try {
-    const entries3 = await rd(path2, { withFileTypes: true });
-    return entries3.some((e) => e.name === ".git");
-  } catch {
-    return false;
+async function cmdSteer(ctx, message, args2, scope3) {
+  const sessionID = await ctx.scopeSessionID(message, scope3);
+  if (!sessionID) {
+    await ctx.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002");
+    return;
+  }
+  const text = args2.trim();
+  if (!text) {
+    await ctx.reply(message, "\u7528\u6CD5\uFF1A`/steer <\u6587\u672C>`\uFF08\u7ACB\u5373\u63D2\u961F\u53D1\u9001\uFF09\uFF1B\u628A\u5DF2\u6392\u961F\u6D88\u606F\u63D2\u961F\u8BF7\u7528 `/now`\u3002");
+    return;
+  }
+  if (!ctx.deps.steerPrompt) {
+    await ctx.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\u3002");
+    return;
   }
+  await ctx.deps.steerPrompt(message, sessionID, text);
+}
+function createSessionOpsApi(ctx) {
+  return {
+    cmdUse: (message, args2) => cmdUse(ctx, message, args2),
+    cmdCurrent: (message, scope3) => cmdCurrent(ctx, message, scope3),
+    cmdStop: (message, scope3) => cmdStop(ctx, message, scope3),
+    cmdCd: (message, args2) => cmdCd(ctx, message, args2),
+    cmdResume: (message, args2) => cmdResume(ctx, message, args2),
+    cmdNow: (message, scope3) => cmdNow(ctx, message, scope3),
+    cmdSteer: (message, args2, scope3) => cmdSteer(ctx, message, args2, scope3)
+  };
 }
 
 // src/session-commands.ts
 var SessionCommands = class {
+  ctx;
   constructor(deps) {
-    this.deps = deps;
-    this.now = deps.now ?? (() => Date.now());
-    this.threadRouting = deps.threadRouting ?? true;
-    this.modelPageSize = deps.modelPageSize ?? 8;
-    this.sessionPageSize = clampPageSize(deps.sessionPageSize);
+    const ctx = createSessionContext(deps);
+    Object.assign(
+      ctx,
+      createSessionListApi(ctx),
+      createSetupWizardApi(ctx),
+      createSessionOpsApi(ctx),
+      createModelPermApi(ctx)
+    );
+    this.ctx = ctx;
   }
-  deps;
-  now;
-  threadRouting;
-  modelPageSize;
-  sessionPageSize;
   /**
    * 文本命令拦截。返回 true 表示已作为命令处理（调用方**不得**再发 prompt）。
    * 非命令返回 false。
@@ -148007,13 +148996,13 @@ var SessionCommands = class {
     const scope3 = message.threadId ? "thread" : "main";
     try {
       if (scope3 === "thread" && !isCommandAllowedInThread(parsed.name)) {
-        await this.reply(message, threadForbiddenText(parsed.raw));
+        await this.ctx.reply(message, threadForbiddenText(parsed.raw));
         return true;
       }
       await this.dispatch(parsed, message, scope3);
     } catch (err2) {
-      this.deps.log.warn("\u4F1A\u8BDD\u547D\u4EE4\u5904\u7406\u5931\u8D25", { command: parsed.raw, error: errorMessage(err2) });
-      await this.reply(message, `\u26A0\uFE0F \u547D\u4EE4\u6267\u884C\u5931\u8D25\uFF1A${errorMessage(err2)}`);
+      this.ctx.deps.log.warn("\u4F1A\u8BDD\u547D\u4EE4\u5904\u7406\u5931\u8D25", { command: parsed.raw, error: errorMessage(err2) });
+      await this.ctx.reply(message, `\u26A0\uFE0F \u547D\u4EE4\u6267\u884C\u5931\u8D25\uFF1A${errorMessage(err2)}`);
     }
     return true;
   }
@@ -148025,1105 +149014,272 @@ var SessionCommands = class {
    * gateway 的 SDK 会 await 该 Promise 作为回调响应，仍应在 3s 内完成。
    */
   handleCardAction(action) {
+    const ctx = this.ctx;
     if (isSetupFormAction(action.rawValue) || parseSetupFormValues(action.formValue)) {
-      if (!this.deps.isAllowed(action.operatorOpenId)) {
-        this.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u8868\u5355\u63D0\u4EA4", { operator: action.operatorOpenId.slice(0, 8) });
+      if (!ctx.deps.isAllowed(action.operatorOpenId)) {
+        ctx.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u8868\u5355\u63D0\u4EA4", { operator: action.operatorOpenId.slice(0, 8) });
         return toast3("error", "\u65E0\u64CD\u4F5C\u6743\u9650");
       }
-      void this.applySetupFormSubmit(action).catch((err2) => {
-        this.deps.log.warn("\u8868\u5355\u63D0\u4EA4\u5904\u7406\u5931\u8D25", { error: errorMessage(err2) });
+      void ctx.applySetupFormSubmit(action).catch((err2) => {
+        ctx.deps.log.warn("\u8868\u5355\u63D0\u4EA4\u5904\u7406\u5931\u8D25", { error: errorMessage(err2) });
       });
       return toast3("success", "\u6B63\u5728\u521B\u5EFA\u4F1A\u8BDD\u2026");
     }
     const sessionValue = parseSessionCardValue(action.rawValue);
     const setupValue = sessionValue ? void 0 : parseSetupCardValue(action.rawValue);
     if (!sessionValue && !setupValue) return toast3("error", "\u65E0\u6CD5\u8BC6\u522B\u7684\u64CD\u4F5C");
-    if (!this.deps.isAllowed(action.operatorOpenId)) {
-      this.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u5361\u7247\u70B9\u51FB", { operator: action.operatorOpenId.slice(0, 8) });
+    if (!ctx.deps.isAllowed(action.operatorOpenId)) {
+      ctx.deps.log.warn("\u62D2\u7EDD\u975E\u767D\u540D\u5355\u7528\u6237\u7684\u5361\u7247\u70B9\u51FB", { operator: action.operatorOpenId.slice(0, 8) });
       return toast3("error", "\u65E0\u64CD\u4F5C\u6743\u9650");
     }
     if (sessionValue) {
       if (sessionValue.cmd === "open") {
-        return this.handleOpenCardAction(action, sessionValue);
+        return ctx.handleOpenCardAction(action, sessionValue);
       }
-      void this.applySessionCardAction(action, sessionValue).catch((err2) => {
-        this.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u64CD\u4F5C\u5931\u8D25", { cmd: sessionValue.cmd, error: errorMessage(err2) });
+      void ctx.applySessionCardAction(action, sessionValue).catch((err2) => {
+        ctx.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u64CD\u4F5C\u5931\u8D25", { cmd: sessionValue.cmd, error: errorMessage(err2) });
       });
       if (sessionValue.cmd === "new") return toast3("success", "\u6B63\u5728\u6253\u5F00\u8868\u5355\u2026");
       if (sessionValue.cmd === "list") return toast3("info", "\u5DF2\u7FFB\u9875");
       return toast3("success", "\u5DF2\u5207\u6362");
     }
     const value3 = setupValue;
-    void this.applySetupCardAction(action, value3).catch((err2) => {
-      this.deps.log.warn("\u5411\u5BFC\u5361\u7247\u64CD\u4F5C\u5931\u8D25", { wizard: value3.kind, error: errorMessage(err2) });
+    void ctx.applySetupCardAction(action, value3).catch((err2) => {
+      ctx.deps.log.warn("\u5411\u5BFC\u5361\u7247\u64CD\u4F5C\u5931\u8D25", { wizard: value3.kind, error: errorMessage(err2) });
     });
     return setupToast(value3);
   }
-  /**
-   * `{cmd:"open"}`：白名单（上层已校验）→ `ctx.session.get` 校验存在 →
-   * 不存在 toast「会话不存在」并 patch 提示；存在则后台开话题并绑定。
-   */
-  async handleOpenCardAction(action, value3) {
-    if (!this.threadRouting) {
-      return toast3("error", "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF0C\u4E0D\u652F\u6301\u8BDD\u9898\u8DEF\u7531");
-    }
-    const chatId = action.chatId || value3.chatId;
-    const hasApi = Boolean(this.deps.getSessionInfo);
-    const info = hasApi ? normalizeSessionInfo(await this.deps.getSessionInfo(value3.sessionID)) : void 0;
-    if (hasApi && !info) {
-      this.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728", { sessionID: value3.sessionID, chatId });
-      void this.patchMissingCard(action.messageId, value3.sessionID).catch((err2) => {
-        this.deps.log.warn("\u4F1A\u8BDD\u4E0D\u5B58\u5728\u63D0\u793A\u5361 patch \u5931\u8D25", { error: errorMessage(err2) });
-      });
-      return toast3("error", "\u4F1A\u8BDD\u4E0D\u5B58\u5728");
-    }
-    const snapshot2 = info ?? { sessionID: value3.sessionID, title: "", updatedAt: 0 };
-    void this.enterSessionThread({
-      chatId,
-      sessionID: value3.sessionID,
-      anchorMessageId: action.messageId,
-      operatorOpenId: action.operatorOpenId,
-      info: snapshot2,
-      patchMessageId: action.messageId,
-      source: "card"
-    }).catch((err2) => {
-      this.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5904\u7406\u5931\u8D25", { sessionID: value3.sessionID, error: errorMessage(err2) });
-    });
-    return toast3("success", "\u6B63\u5728\u8FDB\u5165\u8BDD\u9898\u2026");
-  }
-  /** 会话不存在：把原列表卡 patch 成提示卡。 */
-  async patchMissingCard(messageId, sessionID) {
-    if (!messageId) return;
-    await this.deps.sender.patchCard(messageId, buildSessionMissingCard(sessionID));
-  }
-  /**
-   * 「进入话题」核心流程（卡片动作 / `/resume` 共用）：
-   * `reply_in_thread` 对触发消息开新话题 → 发「✅ 已进入会话」卡 → 拿 thread_id 绑定
-   * thread + root 映射。成功后该话题内消息即续上历史会话（opencode 上下文天然持久）。
-   */
-  async enterSessionThread(input) {
-    const { chatId, sessionID, anchorMessageId, operatorOpenId } = input;
-    if (!anchorMessageId || !chatId) {
-      return { ok: false, error: "missing anchor/chat" };
-    }
-    const info = input.info;
-    const card = buildSessionOpenedCard({
-      title: info?.title ?? "",
-      sessionID,
-      ...info?.directory ? { dir: info.directory } : {},
-      ...info?.updatedAt ? { updatedAt: info.updatedAt } : {},
-      now: this.now()
-    });
-    const res = await this.deps.sender.replyCard(anchorMessageId, card, { replyInThread: true });
-    this.deps.log.info("\u8FDB\u5165\u4F1A\u8BDD\u5E76\u5F00\u8BDD\u9898", {
-      sessionID,
-      source: input.source,
-      anchorMessageId,
-      replyOk: res.ok,
-      replyMessageId: res.messageId,
-      replyThreadId: res.threadId,
-      replyError: res.error
-    });
-    if (!res.ok || !res.messageId) {
-      const error = res.error ?? "unknown";
-      this.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u5931\u8D25", { sessionID, anchorMessageId, error });
-      if (input.patchMessageId) {
-        await this.deps.sender.patchCard(
-          input.patchMessageId,
-          buildSessionMissingCard(sessionID, error)
-        );
-      }
-      return { ok: false, error };
-    }
-    const meta = res.threadId ? void 0 : await this.deps.sender.getMessageMeta(res.messageId);
-    const threadId = res.threadId ?? meta?.threadId;
-    if (!threadId) {
-      this.deps.log.warn("\u8FDB\u5165\u8BDD\u9898\u540E\u672A\u8BFB\u5230 thread_id\uFF0C\u8BE5\u4F1A\u8BDD\u6682\u65E0\u6CD5\u81EA\u52A8\u8DEF\u7531", { messageId: res.messageId });
-      return { ok: false, error: "\u672A\u62FF\u5230\u8BDD\u9898 ID" };
-    }
-    await this.deps.sessionMap.bindThread(threadId, sessionID, chatId, operatorOpenId, anchorMessageId);
-    await this.deps.sessionMap.bindRoot(res.messageId, sessionID);
-    this.deps.log.info("\u5DF2\u7ED1\u5B9A\u8BDD\u9898\u4E0E\u4F1A\u8BDD", { sessionID, threadId, rootId: res.messageId });
-    return { ok: true, threadId };
-  }
   async dispatch(parsed, message, scope3) {
     switch (parsed.name) {
       case "new":
-        return this.cmdNew(message, parsed.args);
+        return this.ctx.cmdNew(message, parsed.args);
       case "sessions":
-        return this.cmdSessions(message);
+        return this.ctx.cmdSessions(message);
       case "use":
-        return this.cmdUse(message, parsed.args);
+        return this.ctx.cmdUse(message, parsed.args);
       case "resume":
-        return this.cmdResume(message, parsed.args);
+        return this.ctx.cmdResume(message, parsed.args);
       case "current":
-        return this.cmdCurrent(message, scope3);
+        return this.ctx.cmdCurrent(message, scope3);
       case "stop":
-        return this.cmdStop(message, scope3);
+        return this.ctx.cmdStop(message, scope3);
       case "steer":
-        return this.cmdSteer(message, parsed.args, scope3);
+        return this.ctx.cmdSteer(message, parsed.args, scope3);
       case "now":
-        return this.cmdNow(message, scope3);
+        return this.ctx.cmdNow(message, scope3);
       case "dir":
-        return this.cmdDir(message, parsed.args);
+        return this.ctx.cmdDir(message, parsed.args);
       case "model":
-        return this.cmdModel(message, parsed.args, scope3);
+        return this.ctx.cmdModel(message, parsed.args, scope3);
       case "perm":
-        return this.cmdPerm(message, parsed.args, scope3);
+        return this.ctx.cmdPerm(message, parsed.args, scope3);
       case "cd":
-        return this.cmdCd(message, parsed.args);
+        return this.ctx.cmdCd(message, parsed.args);
       case "cancel":
-        return this.cmdCancel(message);
+        return this.ctx.cmdCancel(message);
       case "form":
-        return this.cmdForm(message, parsed.args);
+        return this.ctx.cmdForm(message, parsed.args);
       case "unknown":
-        return this.reply(message, `\u672A\u77E5\u547D\u4EE4 \`/${parsed.raw}\`
+        return this.ctx.reply(message, `\u672A\u77E5\u547D\u4EE4 \`/${parsed.raw}\`
 
 ${helpText(scope3)}`);
       case "help":
       default:
-        return this.reply(message, helpText(scope3));
-    }
-  }
-  // ── 建会话（主聊天流） ────────────────────────────────────────────────
-  /**
-   * `/new`：与 `/form` **完全等价**，直接发建会话表单卡（不再走目录→模型→权限→确认分步卡）。
-   * 带标题时写入向导状态，表单提交后作为会话标题。
-   */
-  async cmdNew(message, args2) {
-    const title = args2.trim() || void 0;
-    if (!this.threadRouting) {
-      const finalTitle = title ?? defaultSessionTitle(this.now());
-      const created = await this.deps.createSession({
-        title: finalTitle,
-        chatId: message.chatId,
-        openId: message.senderOpenId
-      });
-      await this.reply(message, `\u2705 \u5DF2\u65B0\u5EFA\u5E76\u5207\u6362\u5230\u4F1A\u8BDD\u300C${finalTitle}\u300D
-\`${created.id}\``);
-      return;
-    }
-    await this.openSetupForm(message, title);
-  }
-  /**
-   * `/form [标题]`：直接打开发建会话表单卡。
-   * 与 `/new [标题]` 走同一入口，二者完全等价。
-   */
-  async cmdForm(message, args2) {
-    await this.openSetupForm(message, args2.trim() || void 0);
-  }
-  /**
-   * `/new` / `/form` 共同入口：发（或复用）建会话表单卡。
-   * 已有向导状态时保留 `/dir` `/model` `/perm` 预填的字段；带标题则更新标题。
-   */
-  async openSetupForm(message, title) {
-    if (message.threadId) {
-      await this.reply(message, threadForbiddenText("form"));
-      return;
-    }
-    if (!this.threadRouting) {
-      await this.reply(message, "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF08`threadRouting=false`\uFF09\uFF0C\u4E0D\u652F\u6301\u8868\u5355\u5EFA\u4F1A\u8BDD\uFF0C\u8BF7\u7528 `/new`\u3002");
-      return;
-    }
-    let state = await this.deps.wizard.get(message.chatId);
-    if (!state) {
-      state = await this.deps.wizard.start(message.chatId, title, message.messageId);
-    } else if (title !== void 0) {
-      state = { ...state, title };
-      await this.deps.wizard.set(message.chatId, state);
-    }
-    const card = await this.renderFormCard(state);
-    const res = await this.deps.sender.sendCard(message.chatId, card);
-    if (!res.ok) this.deps.log.warn("\u8868\u5355\u5361\u53D1\u9001\u5931\u8D25", { chatId: message.chatId, error: res.error ?? "unknown" });
-  }
-  /**
-   * `/dir <path>`：目录只作表单**预填**（不再是必经步骤）。
-   * 目录容错：留空 = 允许根目录；不存在则自动创建（仍在 allowedRoots 之下）。
-   */
-  async cmdDir(message, args2) {
-    if (message.threadId) {
-      await this.reply(message, threadForbiddenText("dir"));
-      return;
-    }
-    const validation = this.deps.validateDir(args2);
-    if (!validation.ok) {
-      await this.reply(message, validation.message);
-      return;
-    }
-    if (!await this.deps.wizard.get(message.chatId)) {
-      await this.deps.wizard.start(message.chatId, void 0, message.messageId);
-    }
-    const state = await this.deps.wizard.apply(message.chatId, { type: "setDir", dir: validation.path });
-    await this.deps.recent.addDir(validation.path);
-    if (!state) {
-      await this.reply(message, "\u5411\u5BFC\u72B6\u6001\u5DF2\u4E22\u5931\uFF0C\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002");
-      return;
-    }
-    await this.deps.sender.sendCard(message.chatId, await this.renderFormCard(state));
-  }
-  /** `/model [关键词]`：向导内选模型（仅预填表单）；话题内切换当前会话模型。 */
-  async cmdModel(message, args2, scope3) {
-    if (scope3 === "thread") {
-      const sessionID = await this.threadSessionID(message);
-      if (!sessionID) {
-        await this.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
-        return;
-      }
-      if (!args2.trim()) {
-        await this.sendModelCardToThread(message, sessionID, 0);
-        return;
-      }
-      const models2 = await this.loadModels();
-      const matched2 = matchModel(args2, models2);
-      if (!matched2.ok) {
-        await this.reply(message, modelMatchErrorText(matched2.reason, matched2.candidates));
-        return;
-      }
-      try {
-        const outcome = await this.deps.switchSessionModel(sessionID, matched2.model);
-        await this.deps.recent.addModel(matched2.model);
-        await this.reply(message, modelSwitchReply(outcome, matched2.model));
-      } catch (err2) {
-        this.deps.log.warn("\u5207\u6362\u4F1A\u8BDD\u6A21\u578B\u5931\u8D25", { sessionID, error: errorMessage(err2) });
-        await this.reply(message, `\u26A0\uFE0F \u5207\u6362\u6A21\u578B\u5931\u8D25\uFF1A${errorMessage(err2)}`);
-      }
-      return;
-    }
-    if (!await this.deps.wizard.get(message.chatId)) {
-      await this.deps.wizard.start(message.chatId, void 0, message.messageId);
-    }
-    if (!args2.trim()) {
-      const state = await this.deps.wizard.get(message.chatId);
-      await this.deps.sender.sendCard(message.chatId, await this.renderFormCard(state));
-      return;
-    }
-    const models = await this.loadModels();
-    const matched = matchModel(args2, models);
-    if (!matched.ok) {
-      await this.reply(message, modelMatchErrorText(matched.reason, matched.candidates));
-      return;
-    }
-    const next = await this.deps.wizard.apply(message.chatId, { type: "setModel", model: matched.model });
-    await this.deps.recent.addModel(matched.model);
-    if (!next) return;
-    await this.deps.sender.sendCard(message.chatId, await this.renderFormCard(next));
-  }
-  /** `/perm [档位]`：向导内选权限（仅预填表单）；话题内修改当前会话权限。 */
-  async cmdPerm(message, args2, scope3) {
-    const arg = args2.trim();
-    if (scope3 === "thread") {
-      const sessionID = await this.threadSessionID(message);
-      if (!sessionID) {
-        await this.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
-        return;
-      }
-      if (!arg) {
-        await this.sendPermCardToThread(message, sessionID);
-        return;
-      }
-      if (!isPermissionPreset(arg)) {
-        await this.reply(message, permUsageText());
-        return;
-      }
-      await this.deps.applyPermissionPreset(sessionID, arg);
-      await this.reply(message, `\u2705 \u5DF2\u66F4\u65B0\u672C\u4F1A\u8BDD\u6743\u9650\uFF1A${presetLabel(arg)}`);
-      return;
-    }
-    if (!await this.deps.wizard.get(message.chatId)) {
-      await this.deps.wizard.start(message.chatId, void 0, message.messageId);
-    }
-    if (!arg) {
-      const state = await this.deps.wizard.get(message.chatId);
-      await this.deps.sender.sendCard(message.chatId, await this.renderFormCard(state));
-      return;
-    }
-    if (!isPermissionPreset(arg)) {
-      await this.reply(message, permUsageText());
-      return;
-    }
-    const next = await this.deps.wizard.apply(message.chatId, { type: "setPerm", perm: arg });
-    if (!next) return;
-    await this.deps.sender.sendCard(message.chatId, await this.renderFormCard(next));
-  }
-  /**
-   * `/cd <path>`：话题内移动当前会话目录。
-   * 目录容错：留空 = 回到允许根目录；不存在则自动创建（仍在 allowedRoots 之下）。
-   */
-  async cmdCd(message, args2) {
-    if (!message.threadId) {
-      await this.reply(message, "`/cd` \u53EA\u80FD\u5728\u8BDD\u9898\u5185\u4F7F\u7528\uFF08\u7528\u4E8E\u79FB\u52A8\u8BE5\u8BDD\u9898\u4F1A\u8BDD\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF09\u3002");
-      return;
-    }
-    const sessionID = await this.threadSessionID(message);
-    if (!sessionID) {
-      await this.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
-      return;
-    }
-    const validation = this.deps.validateDir(args2);
-    if (!validation.ok) {
-      await this.reply(message, validation.message);
-      return;
-    }
-    await this.deps.moveSessionDir(sessionID, validation.path);
-    await this.deps.recent.addDir(validation.path);
-    await this.reply(message, `\u2705 \u5DF2\u5207\u6362\u672C\u4F1A\u8BDD\u76EE\u5F55\uFF1A\`${validation.path}\``);
-  }
-  /** `/cancel`：放弃向导。 */
-  async cmdCancel(message) {
-    if (message.threadId) {
-      await this.reply(message, threadForbiddenText("cancel"));
-      return;
-    }
-    await this.deps.wizard.cancel(message.chatId);
-    await this.reply(message, "\u2716\uFE0F \u5DF2\u53D6\u6D88\u5EFA\u4F1A\u8BDD\u8868\u5355\u3002\u53D1\u9001 `/new [\u6807\u9898]` \u53EF\u91CD\u65B0\u5F00\u59CB\u3002");
-  }
-  // ── 既有会话管理 ──────────────────────────────────────────────────────
-  /**
-   * `/sessions`（别名 `/ls`）：列出 opencode **全部**会话（按最近更新倒序、分页 8 条）。
-   * 数据源优先 `ctx.session.list()`；拿不到时回退 SessionMap 映射表。
-   */
-  async cmdSessions(message, page = 0) {
-    const entries3 = await this.loadSessionEntries(message.chatId);
-    const active = await this.deps.sessionMap.getActive(message.chatId);
-    const card = await this.buildListCard(message.chatId, entries3, page, active?.sessionID);
-    const res = await this.deps.sender.sendCard(message.chatId, card);
-    if (!res.ok) {
-      this.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u53D1\u9001\u5931\u8D25", { chatId: message.chatId, error: res.error ?? "unknown" });
+        return this.ctx.reply(message, helpText(scope3));
     }
   }
-  /**
-   * `/resume [序号]`：对「最近更新」的会话（或列表第 N 个）直接执行「进入话题」流程，
-   * 跳过列表卡。序号越界/无会话时提示。序号与 `/sessions` 列表一致（最近更新倒序）。
-   */
-  async cmdResume(message, args2) {
-    if (message.threadId) {
-      await this.reply(message, threadForbiddenText("resume"));
-      return;
-    }
-    if (!this.threadRouting) {
-      await this.reply(message, "\u5F53\u524D\u4E3A\u56DE\u9000\u6A21\u5F0F\uFF08`threadRouting=false`\uFF09\uFF0C\u4E0D\u652F\u6301\u7EED\u804A\u5386\u53F2\u4F1A\u8BDD\u3002");
-      return;
-    }
-    const entries3 = await this.loadSessionEntries(message.chatId);
-    if (entries3.length === 0) {
-      await this.reply(message, "\u6CA1\u6709\u53EF\u7EED\u804A\u7684\u4F1A\u8BDD\u3002\u7528 `/new` \u65B0\u5EFA\uFF0C\u6216\u5148\u5728\u8BDD\u9898\u91CC\u53D1\u6D88\u606F\u521B\u5EFA\u4E00\u4E2A\u3002");
-      return;
-    }
-    const query = args2.trim();
-    let index2 = 0;
-    if (query) {
-      if (!/^\d+$/.test(query)) {
-        await this.reply(message, "\u7528\u6CD5\uFF1A`/resume [\u5E8F\u53F7]`\uFF08\u5E8F\u53F7\u89C1 `/sessions`\uFF1B\u7701\u7565 = \u6700\u8FD1\u66F4\u65B0\u7684\u4F1A\u8BDD\uFF09\u3002");
-        return;
-      }
-      index2 = Number.parseInt(query, 10) - 1;
-    }
-    if (index2 < 0 || index2 >= entries3.length) {
-      await this.reply(
-        message,
-        `\u5E8F\u53F7\u8D8A\u754C\uFF1A\u5F53\u524D\u5171 ${entries3.length} \u4E2A\u4F1A\u8BDD\uFF0C\u6709\u6548\u8303\u56F4 1\u2013${entries3.length}\u3002`
-      );
-      return;
-    }
-    const entry = entries3[index2];
-    const result3 = await this.enterSessionThread({
-      chatId: message.chatId,
-      sessionID: entry.sessionID,
-      anchorMessageId: message.messageId,
-      operatorOpenId: message.senderOpenId,
-      info: entry,
-      source: "resume"
-    });
-    if (!result3.ok) {
-      await this.reply(
-        message,
-        `\u26A0\uFE0F \u8FDB\u5165\u8BDD\u9898\u5931\u8D25\uFF1A${result3.error ?? "unknown"}\u3002\u53EF\u53D1\u9001 \`/sessions\` \u624B\u52A8\u8FDB\u5165\u3002`
-      );
-    }
+};
+function setupToast(value3) {
+  switch (value3.kind) {
+    case "dir":
+      return toast3("success", "\u5DF2\u9009\u62E9\u76EE\u5F55");
+    case "model":
+      return toast3("success", "\u5DF2\u9009\u62E9\u6A21\u578B");
+    case "perm":
+      return toast3("success", "\u5DF2\u9009\u62E9\u6743\u9650");
+    case "more":
+      return toast3("info", "\u5DF2\u7FFB\u9875");
+    case "confirm":
+      return toast3("success", "\u6B63\u5728\u521B\u5EFA\u4F1A\u8BDD\u2026");
+    case "form":
+      return toast3("info", "\u5DF2\u6253\u5F00\u8868\u5355");
+    case "cancel":
+    default:
+      return toast3("info", "\u5DF2\u53D6\u6D88");
   }
-  /**
-   * 加载全量会话列表：优先 `ctx.session.list()`（归一化），失败/形状不识别回退 SessionMap。
-   * 关键诊断日志：`列出全部会话` / `会话列表回退到 SessionMap`。
-   */
-  async loadSessionEntries(chatId) {
-    if (this.deps.listAllSessions) {
-      try {
-        const raw = await this.deps.listAllSessions();
-        const normalized = normalizeSessionList(raw);
-        if (normalized) {
-          this.deps.log.info("\u5217\u51FA\u5168\u90E8\u4F1A\u8BDD", { count: normalized.length, source: "session.list" });
-          return normalized;
-        }
-        this.deps.log.warn("session.list \u8FD4\u56DE\u5F62\u72B6\u65E0\u6CD5\u8BC6\u522B\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", { chatId });
-      } catch (err2) {
-        this.deps.log.warn("session.list \u8C03\u7528\u5931\u8D25\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", {
-          chatId,
-          error: errorMessage(err2)
-        });
-      }
-    } else {
-      this.deps.log.warn("\u8FD0\u884C\u65F6\u672A\u66B4\u9732 session.list\uFF0C\u56DE\u9000 SessionMap \u5217\u8868", { chatId });
-    }
-    const fallback = fallbackEntries(await this.deps.sessionMap.listSessions(chatId));
-    this.deps.log.warn("\u4F1A\u8BDD\u5217\u8868\u56DE\u9000\u5230 SessionMap", { chatId, count: fallback.length });
-    return fallback;
-  }
-  /** 把全量列表切成当前页并构建列表卡（含「已绑话题」标记）。 */
-  async buildListCard(chatId, entries3, page, activeID) {
-    const pageSize = this.sessionPageSize;
-    const pageCount = Math.max(1, Math.ceil(entries3.length / pageSize));
-    const safePage = Math.min(Math.max(0, Math.floor(page)), pageCount - 1);
-    const slice = entries3.slice(safePage * pageSize, safePage * pageSize + pageSize);
-    const rows = [];
-    for (let i = 0; i < slice.length; i += 1) {
-      const entry = slice[i];
-      const bound = Boolean(await this.deps.sessionMap.threadIdForSession(entry.sessionID));
-      rows.push({
-        index: safePage * pageSize + i + 1,
-        sessionID: entry.sessionID,
-        title: entry.title,
-        updatedAt: entry.updatedAt,
-        ...entry.directory ? { directory: entry.directory } : {},
-        bound,
-        ...entry.sessionID === activeID ? { active: true } : {}
+}
+
+// src/runtime/event-router.ts
+async function routeEvent(event, deps) {
+  const touched = event.data?.sessionID;
+  if (typeof touched === "string") deps.touch(touched);
+  switch (event.type) {
+    case "permission.asked":
+      void deps.onPermissionAsked(event.data).catch((err2) => deps.log.warn("\u5904\u7406 permission.asked \u5931\u8D25", { error: errorMessage(err2) }));
+      break;
+    case "permission.replied":
+      deps.onPermissionReplied(event.data);
+      break;
+    case "form.created":
+      void deps.onFormCreated(event.data).catch((err2) => deps.log.warn("\u5904\u7406 form.created \u5931\u8D25", { error: errorMessage(err2) }));
+      break;
+    case "form.replied":
+      deps.onFormReplied(event.data);
+      break;
+    case "form.cancelled":
+      deps.onFormCancelled(event.data);
+      break;
+    case "session.text.started": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "text.started",
+        ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
       });
+      break;
     }
-    return buildSessionListCard({
-      chatId,
-      rows,
-      page: safePage,
-      pageCount,
-      total: entries3.length,
-      now: this.now()
-    });
-  }
-  async cmdUse(message, args2) {
-    const sessions = await this.deps.sessionMap.listSessions(message.chatId);
-    if (sessions.length === 0) {
-      await this.reply(message, "\u8FD8\u6CA1\u6709\u4F1A\u8BDD\u3002\u4F7F\u7528 /new \u65B0\u5EFA\u4E00\u4E2A\u3002");
-      return;
-    }
-    const matched = matchSession(args2, sessions);
-    if (!matched.ok) {
-      await this.reply(message, useErrorText(matched.reason));
-      return;
-    }
-    const entry = matched.entry;
-    const ok = await this.deps.sessionMap.setActive(message.chatId, entry.sessionID);
-    if (!ok) {
-      await this.reply(message, "\u5207\u6362\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728\uFF0C\u5148\u7528 /sessions \u67E5\u770B\u5217\u8868\u3002");
-      return;
-    }
-    await this.reply(message, `\u2705 \u5DF2\u5207\u6362\u5230\u300C${entry.title.trim() || "(\u672A\u547D\u540D)"}\u300D
-\`${entry.sessionID}\``);
-  }
-  async cmdCurrent(message, scope3) {
-    if (scope3 === "thread") {
-      const sessionID = await this.threadSessionID(message);
-      if (!sessionID) {
-        await this.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\u3002\u8BF7\u56DE\u5230\u4E3B\u804A\u5929\u6D41\u7528 `/new` \u65B0\u5EFA\u3002");
-        return;
-      }
-      const entry = await this.deps.sessionMap.getSession(message.chatId, sessionID);
-      const link2 = await this.deps.sessionMap.resolveBySession(sessionID);
-      const model = await this.currentModel(sessionID) ?? link2?.model;
-      const lines = [
-        `\u672C\u8BDD\u9898\u4F1A\u8BDD\uFF1A\u300C${entry?.title.trim() || "(\u672A\u547D\u540D)"}\u300D`,
-        `\`${sessionID}\``,
-        ...link2?.dir ? [`\u76EE\u5F55\uFF1A\`${link2.dir}\``] : [],
-        ...model ? [`\u6A21\u578B\uFF1A${modelLabel(model)}`] : [],
-        ...link2?.perm ? [`\u6743\u9650\uFF1A${presetLabel(link2.perm)}`] : []
-      ];
-      await this.reply(message, lines.join("\n"));
-      return;
-    }
-    const active = await this.deps.sessionMap.getActive(message.chatId);
-    if (!active) {
-      await this.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002\u4F7F\u7528 /new \u65B0\u5EFA\u4E00\u4E2A\u3002");
-      return;
-    }
-    const count = (await this.deps.sessionMap.listSessions(message.chatId)).length;
-    await this.reply(
-      message,
-      `\u5F53\u524D\u4F1A\u8BDD\uFF1A\u300C${active.title.trim() || "(\u672A\u547D\u540D)"}\u300D
-\`${active.sessionID}\`
-\u5171 ${count} \u4E2A\u4F1A\u8BDD\u3002`
-    );
-  }
-  async cmdStop(message, scope3) {
-    if (scope3 === "thread") {
-      const sessionID = await this.threadSessionID(message);
-      if (!sessionID) {
-        await this.reply(message, "\u672C\u8BDD\u9898\u5C1A\u672A\u5173\u8054\u4F1A\u8BDD\uFF0C\u65E0\u6CD5\u4E2D\u65AD\u3002");
-        return;
-      }
-      await this.deps.interruptSession(sessionID);
-      const entry = await this.deps.sessionMap.getSession(message.chatId, sessionID);
-      await this.reply(message, `\u23F9\uFE0F \u5DF2\u8BF7\u6C42\u4E2D\u65AD\u672C\u8BDD\u9898\u4F1A\u8BDD\uFF1A\u300C${entry?.title.trim() || "(\u672A\u547D\u540D)"}\u300D`);
-      return;
-    }
-    const active = await this.deps.sessionMap.getActive(message.chatId);
-    if (!active) {
-      await this.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u53EF\u4E2D\u65AD\u3002");
-      return;
-    }
-    await this.deps.interruptSession(active.sessionID);
-    await this.reply(message, `\u23F9\uFE0F \u5DF2\u8BF7\u6C42\u4E2D\u65AD\u5F53\u524D\u4F1A\u8BDD\uFF1A\u300C${active.title.trim() || "(\u672A\u547D\u540D)"}\u300D`);
-  }
-  /** 解析命令作用域内的目标会话：话题内用 thread 映射，主聊天流用当前会话。 */
-  async scopeSessionID(message, scope3) {
-    if (scope3 === "thread") return this.threadSessionID(message);
-    const active = await this.deps.sessionMap.getActive(message.chatId);
-    return active?.sessionID;
-  }
-  /** `/now`：把已排队（未投递）的消息提升为 steer，立即插队执行。 */
-  async cmdNow(message, scope3) {
-    const sessionID = await this.scopeSessionID(message, scope3);
-    if (!sessionID) {
-      await this.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002");
-      return;
-    }
-    if (!this.deps.promoteQueued) {
-      await this.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\uFF08\u8FD0\u884C\u65F6\u672A\u66B4\u9732 inbox\uFF09\u3002");
-      return;
-    }
-    const promoted = await this.deps.promoteQueued(sessionID);
-    if (promoted < 0) {
-      await this.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\uFF08\u8FD0\u884C\u65F6\u672A\u66B4\u9732 inbox\uFF09\u3002");
-      return;
-    }
-    if (promoted === 0) {
-      await this.reply(message, "\u6CA1\u6709\u6392\u961F\u4E2D\u7684\u6D88\u606F\uFF08\u8BE5\u4F1A\u8BDD\u5F53\u524D\u7A7A\u95F2\u6216\u65E0\u5F85\u6295\u9012\u9879\uFF09\u3002");
-      return;
-    }
-    await this.reply(message, `\u26A1 \u5DF2\u628A ${promoted} \u6761\u6392\u961F\u6D88\u606F\u6539\u4E3A\u7ACB\u5373\u63D2\u961F\u6267\u884C\u3002`);
-  }
-  /** `/steer <文本>`：立即插队发送一条消息（打断当前步骤插入执行）。 */
-  async cmdSteer(message, args2, scope3) {
-    const sessionID = await this.scopeSessionID(message, scope3);
-    if (!sessionID) {
-      await this.reply(message, "\u5F53\u524D\u6CA1\u6709\u4F1A\u8BDD\u3002");
-      return;
-    }
-    const text = args2.trim();
-    if (!text) {
-      await this.reply(message, "\u7528\u6CD5\uFF1A`/steer <\u6587\u672C>`\uFF08\u7ACB\u5373\u63D2\u961F\u53D1\u9001\uFF09\uFF1B\u628A\u5DF2\u6392\u961F\u6D88\u606F\u63D2\u961F\u8BF7\u7528 `/now`\u3002");
-      return;
-    }
-    if (!this.deps.steerPrompt) {
-      await this.reply(message, "\u5F53\u524D\u7248\u672C\u4E0D\u652F\u6301\u63D2\u961F\u3002");
-      return;
-    }
-    await this.deps.steerPrompt(message, sessionID, text);
-  }
-  // ── 会话列表卡片 ──────────────────────────────────────────────────────
-  /**
-   * 会话卡按钮（`use` / `new` / `list`；`open` 由 `handleOpenCardAction` 处理）。
-   * - `new`：发送 `/form` 建会话表单卡（不再直接建会话）；
-   * - `list`：按页码 patch 当前列表卡；
-   * - `use`：旧卡片兼容，切换当前会话并刷新列表（含翻页位置）。
-   */
-  async applySessionCardAction(action, value3) {
-    const chatId = action.chatId || value3.chatId;
-    if (!chatId) return;
-    if (value3.cmd === "new") {
-      await this.sendSetupFormForChat(chatId, action.messageId, action.operatorOpenId);
-      return;
-    }
-    if (value3.cmd === "list") {
-      if (action.messageId) await this.patchListCard(chatId, action.messageId, value3.page);
-      return;
-    }
-    if (value3.cmd === "open") {
-      return;
-    }
-    const ok = await this.deps.sessionMap.setActive(chatId, value3.sessionID);
-    if (!ok) this.deps.log.debug("\u5361\u7247\u5207\u6362\u4F1A\u8BDD\u5931\u8D25\uFF1A\u4F1A\u8BDD\u4E0D\u5B58\u5728", { sessionID: value3.sessionID });
-    if (action.messageId) await this.patchListCard(chatId, action.messageId);
-  }
-  /** 列表卡「➕ 新建会话」→ 打开 `/form` 建会话表单卡（复用向导状态/标题）。 */
-  async sendSetupFormForChat(chatId, anchorMessageId, openId) {
-    if (!this.threadRouting) {
-      const title = defaultSessionTitle(this.now());
-      await this.deps.createSession({ title, chatId, openId });
-      await this.replyChat(chatId, `\u2705 \u5DF2\u65B0\u5EFA\u4F1A\u8BDD\u300C${title}\u300D`);
-      return;
-    }
-    let state = await this.deps.wizard.get(chatId);
-    if (!state) state = await this.deps.wizard.start(chatId, void 0, anchorMessageId);
-    const card = await this.renderFormCard(state);
-    const res = await this.deps.sender.sendCard(chatId, card);
-    if (!res.ok) this.deps.log.warn("\u8868\u5355\u5361\u53D1\u9001\u5931\u8D25", { chatId, error: res.error ?? "unknown" });
-  }
-  async patchListCard(chatId, messageId, page = 0) {
-    const entries3 = await this.loadSessionEntries(chatId);
-    const active = await this.deps.sessionMap.getActive(chatId);
-    const card = await this.buildListCard(chatId, entries3, page, active?.sessionID);
-    const res = await this.deps.sender.patchCard(messageId, card);
-    if (!res.ok) this.deps.log.warn("\u4F1A\u8BDD\u5361\u7247\u66F4\u65B0\u5931\u8D25", { error: res.error ?? "unknown" });
-  }
-  /** 主聊天流文本回执（不引用任何消息）。 */
-  async replyChat(chatId, text) {
-    await this.deps.sender.sendText(chatId, text);
-  }
-  // ── 向导 / 会话操作卡片 ───────────────────────────────────────────────
-  async applySetupCardAction(action, value3) {
-    const chatId = action.chatId;
-    if (value3.kind === "confirm") {
-      await this.confirmSetup(chatId, action);
-      return;
-    }
-    if (value3.kind === "cancel") {
-      await this.deps.wizard.cancel(chatId);
-      await this.patchCard(action.messageId, buildSetupDoneCard("\u2716\uFE0F \u5DF2\u53D6\u6D88", ["\u5EFA\u4F1A\u8BDD\u5411\u5BFC\u5DF2\u53D6\u6D88\u3002\u53D1\u9001 `/new` \u91CD\u65B0\u5F00\u59CB\u3002"]));
-      return;
-    }
-    if (value3.kind === "form") {
-      const state2 = await this.deps.wizard.get(chatId) ?? await this.deps.wizard.start(chatId, void 0, action.messageId);
-      await this.patchCard(action.messageId, await this.renderFormCard(state2));
-      return;
-    }
-    if (value3.kind !== "dir" && value3.sid) {
-      if (value3.kind === "model") {
-        try {
-          const outcome = await this.deps.switchSessionModel(value3.sid, value3.model);
-          await this.deps.recent.addModel(value3.model);
-          await this.patchCard(action.messageId, modelSwitchDoneCard(outcome, value3.model));
-        } catch (err2) {
-          this.deps.log.warn("\u5361\u7247\u5207\u6362\u6A21\u578B\u5931\u8D25", { sessionID: value3.sid, error: errorMessage(err2) });
-          await this.patchCard(
-            action.messageId,
-            buildSetupDoneCard("\u26A0\uFE0F \u5207\u6362\u6A21\u578B\u5931\u8D25", [errorMessage(err2)])
-          );
-        }
-        return;
-      }
-      if (value3.kind === "perm") {
-        await this.deps.applyPermissionPreset(value3.sid, value3.preset);
-        await this.patchCard(
-          action.messageId,
-          buildSetupDoneCard("\u2705 \u5DF2\u66F4\u65B0\u6743\u9650", [`\u5F53\u524D\u6743\u9650\uFF1A${presetLabel(value3.preset)}`])
-        );
-        return;
-      }
-      if (value3.kind === "more") {
-        const current = await this.currentModel(value3.sid);
-        const models = await this.loadModels();
-        const recent = await this.deps.recent.listModels();
-        const card = buildModelCard({
-          models,
-          recent,
-          ...current ? { current } : {},
-          page: value3.page,
-          pageSize: this.modelPageSize,
-          recentLimit: this.recentModelsLimit(),
-          sid: value3.sid
-        });
-        await this.patchCard(action.messageId, card);
-        return;
-      }
-      return;
-    }
-    const state = await this.deps.wizard.get(chatId);
-    if (!state) {
-      await this.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u5411\u5BFC\u5DF2\u5931\u6548", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002"]));
-      return;
-    }
-    if (value3.kind === "dir") {
-      const next = await this.deps.wizard.apply(chatId, { type: "setDir", dir: value3.dir });
-      await this.deps.recent.addDir(value3.dir);
-      if (!next) return;
-      await this.patchCard(action.messageId, await this.renderModelCard(next));
-      return;
-    }
-    if (value3.kind === "model") {
-      const next = await this.deps.wizard.apply(chatId, { type: "setModel", model: value3.model });
-      await this.deps.recent.addModel(value3.model);
-      if (!next) return;
-      await this.patchCard(action.messageId, buildPermCard({ ...next.perm ? { current: next.perm } : {} }));
-      return;
+    case "session.text.delta": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "text.delta",
+        delta: data.delta,
+        ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
+      });
+      break;
     }
-    if (value3.kind === "perm") {
-      const next = await this.deps.wizard.apply(chatId, { type: "setPerm", perm: value3.preset });
-      if (!next) return;
-      await this.patchCard(action.messageId, buildConfirmCard(confirmInput(next)));
-      return;
+    case "session.text.ended": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "text.ended",
+        ...data.text ? { text: data.text } : {},
+        ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
+      });
+      break;
     }
-    if (value3.kind === "more") {
-      const next = await this.deps.wizard.apply(chatId, { type: "setPage", page: value3.page });
-      if (!next) return;
-      await this.patchCard(action.messageId, await this.renderModelCard(next, value3.page));
+    case "session.tool.input.started": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "tool.input.started",
+        id: data.id,
+        name: data.name,
+        ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
+      });
+      break;
     }
-  }
-  /**
-   * 确认卡「✅ 创建」：读向导 → 走统一创建路径。
-   *
-   * @deprecated `/new` 已不再发确认卡；仅当用户点击**历史遗留**的确认卡时才会走到这里。
-   * 新流程见 `applySetupFormSubmit`（表单提交）。
-   */
-  async confirmSetup(chatId, action) {
-    const state = await this.deps.wizard.get(chatId);
-    if (!state || state.step !== "confirm" || !state.dir || !state.perm) {
-      await this.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u5411\u5BFC\u72B6\u6001\u4E0D\u5B8C\u6574", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/new` \u5F00\u59CB\u3002"]));
-      return;
+    case "session.tool.input.ended": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, { type: "tool.input.ended", id: data.id, input: data.input });
+      break;
     }
-    await this.deps.wizard.cancel(chatId);
-    const title = state.title?.trim() || defaultSessionTitle(this.now());
-    await this.createSessionFromSetup(chatId, action, {
-      title,
-      dir: state.dir,
-      perm: state.perm,
-      ...state.model ? { model: state.model } : {},
-      ...state.anchorMessageId ? { anchorMessageId: state.anchorMessageId } : {}
-    });
-  }
-  /**
-   * 表单提交（P6.1）：与按钮向导**共用创建路径**。
-   * 目录先用 `validateDir` 校验（失败 → 回带错误说明的表单卡并保留已填项，不建会话）。
-   */
-  async applySetupFormSubmit(action) {
-    const fv = action.formValue;
-    const fvKeys = fv && typeof fv === "object" ? Object.keys(fv) : [];
-    this.deps.log.info("\u8868\u5355\u63D0\u4EA4\u8FDB\u5165\u5904\u7406", {
-      chatId: action.chatId,
-      messageId: action.messageId,
-      formValueKeys: fvKeys,
-      formValueType: Array.isArray(fv) ? "array" : typeof fv
-    });
-    const values2 = parseSetupFormValues(action.formValue);
-    if (!values2) {
-      this.deps.log.warn("\u8868\u5355\u6570\u636E\u7F3A\u5931\uFF08parse \u8FD4\u56DE undefined\uFF09", { formValueKeys: fvKeys });
-      await this.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u8868\u5355\u6570\u636E\u7F3A\u5931", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/form` \u586B\u5199\u3002"]));
-      return;
+    case "session.tool.success": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "tool.success",
+        id: data.id,
+        output: contentToText(data.content)
+      });
+      break;
     }
-    const state = await this.deps.wizard.get(action.chatId);
-    if (!state) {
-      this.deps.log.warn("\u8868\u5355\u63D0\u4EA4\u4F46\u5411\u5BFC\u72B6\u6001\u4E0D\u5B58\u5728\uFF08\u53EF\u80FD\u5DF2\u8FC7\u671F/\u5DF2\u88AB\u6D88\u8D39\uFF09", {
-        chatId: action.chatId,
-        dirLen: values2.dir.length,
-        hasModel: Boolean(values2.model),
-        hasPerm: Boolean(values2.perm)
+    case "session.tool.error": {
+      const data = event.data;
+      deps.applyRun(data.sessionID, {
+        type: "tool.error",
+        id: data.id,
+        output: extractErrorText(data.error ?? data.content)
       });
-      await this.patchCard(action.messageId, buildSetupDoneCard("\u26A0\uFE0F \u8868\u5355\u5DF2\u5931\u6548", ["\u8BF7\u91CD\u65B0\u53D1\u9001 `/form` \u6216 `/new` \u6253\u5F00\u8868\u5355\u3002"]));
-      return;
+      break;
     }
-    const title = state.title?.trim() || defaultSessionTitle(this.now());
-    const requestedDir = resolveSetupFormDir(values2, this.deps.allowedRoots ?? []);
-    let preserved = {
-      dir: requestedDir,
-      ...values2.model ? { model: values2.model } : {},
-      ...values2.perm ? { perm: values2.perm } : {}
-    };
-    this.deps.log.info("\u8868\u5355\u5B57\u6BB5\u89E3\u6790", {
-      dirInput: values2.dir,
-      dirSelect: values2.dirSelect,
-      dir: requestedDir,
-      model: values2.model ? `${values2.model.providerID}/${values2.model.id}` : void 0,
-      perm: values2.perm,
-      hasState: true
-    });
-    const validation = this.deps.validateDir(requestedDir);
-    if (!validation.ok) {
-      this.deps.log.warn("\u76EE\u5F55\u6821\u9A8C\u5931\u8D25", { dir: requestedDir, reason: validation.message });
-      await this.patchCard(
-        action.messageId,
-        await this.renderFormCard(state, { error: validation.message, values: preserved })
-      );
-      return;
+    case "session.execution.started": {
+      const data = event.data;
+      deps.markStarted(data.sessionID);
+      deps.applyRun(data.sessionID, { type: "execution.started" });
+      break;
     }
-    preserved = { ...preserved, dir: validation.path };
-    if (!values2.perm) {
-      this.deps.log.warn("\u6743\u9650\u6863\u4F4D\u7F3A\u5931", { dir: validation.path });
-      await this.patchCard(
-        action.messageId,
-        await this.renderFormCard(state, { error: "\u8BF7\u9009\u62E9\u6743\u9650\u6863\u4F4D\u3002", values: { ...preserved, dir: validation.path } })
-      );
-      return;
+    case "session.execution.succeeded": {
+      const data = event.data;
+      deps.markEnded(data.sessionID);
+      deps.applyRun(data.sessionID, { type: "execution.succeeded" });
+      break;
     }
-    const model = values2.model ? await this.resolveFormModel(values2.model) : state?.model;
-    this.deps.log.info("\u8868\u5355\u6821\u9A8C\u901A\u8FC7\uFF0C\u5F00\u59CB\u5EFA\u4F1A\u8BDD", {
-      dir: validation.path,
-      perm: values2.perm,
-      model: model ? `${model.providerID}/${model.id}` : void 0
-    });
-    await this.deps.wizard.cancel(action.chatId);
-    await this.createSessionFromSetup(action.chatId, action, {
-      title,
-      dir: validation.path,
-      perm: values2.perm,
-      ...model ? { model } : {}
-    });
-  }
-  /** 表单模型引用 → 尽量补全 name（列表不可用时保留原引用）。 */
-  async resolveFormModel(ref) {
-    const models = await this.loadModels();
-    const matched = matchModel(`${ref.providerID}/${ref.id}`, models);
-    return matched.ok ? matched.model : ref;
-  }
-  /** 建会话统一创建路径（按钮确认 / 表单提交共用）。 */
-  async createSessionFromSetup(chatId, action, opts) {
-    const { title, dir, perm, model } = opts;
-    const permissions = presetToRuleset(perm);
-    const gateMode = presetGateMode(perm);
-    const created = await this.deps.createSession({
-      title,
-      chatId,
-      openId: action.operatorOpenId,
-      setActive: true,
-      directory: dir,
-      permissions,
-      perm,
-      gateMode,
-      ...model ? { model } : {}
-    });
-    await this.deps.recent.addDir(dir);
-    if (model) await this.deps.recent.addModel(model);
-    const readyCard = buildSessionReadyCard({
-      title,
-      sessionID: created.id,
-      dir,
-      ...model ? { model: modelLabel(model) } : {},
-      perm: presetLabel(perm)
-    });
-    const anchorId = action.messageId || opts.anchorMessageId || "";
-    const res = await this.deps.sender.replyCard(anchorId, readyCard, { replyInThread: true });
-    this.deps.log.info("\u521B\u5EFA\u4F1A\u8BDD\u5E76\u5F00\u8BDD\u9898", {
-      sessionID: created.id,
-      anchorMessageId: anchorId,
-      anchorFromFormCard: Boolean(action.messageId),
-      replyOk: res.ok,
-      replyMessageId: res.messageId,
-      replyThreadId: res.threadId,
-      replyError: res.error
-    });
-    if (!res.ok || !res.messageId) {
-      this.deps.log.warn("\u4E00\u952E\u5F00\u8BDD\u9898\u5931\u8D25", { error: res.error ?? "unknown" });
-      await this.patchCard(
-        action.messageId,
-        buildSessionCreatedCard({
-          title,
-          sessionID: created.id,
-          dir,
-          ...model ? { model: modelLabel(model) } : {},
-          perm: presetLabel(perm),
-          note: "\u26A0\uFE0F \u81EA\u52A8\u5F00\u8BDD\u9898\u5931\u8D25\uFF1A\u8BF7\u5728 `/sessions` \u7684\u4F1A\u8BDD\u5361\u4E0A\u624B\u52A8\u300C\u521B\u5EFA\u8BDD\u9898\u300D\uFF0C\u6216\u5728\u4E3B\u804A\u5929\u6D41\u7528 `/use` \u5207\u6362\u540E\u7EE7\u7EED\u3002"
-        })
-      );
-      return;
+    case "session.execution.failed": {
+      const data = event.data;
+      deps.markEnded(data.sessionID);
+      deps.applyRun(data.sessionID, { type: "execution.failed", error: extractErrorText(data.error) });
+      void deps.notifyFailure(data.sessionID, data.error);
+      break;
     }
-    await this.deps.sessionMap.bindRoot(anchorId, created.id);
-    const meta = res.threadId ? void 0 : await this.deps.sender.getMessageMeta(res.messageId);
-    const threadId = res.threadId ?? meta?.threadId;
-    if (threadId) {
-      await this.deps.sessionMap.bindThread(threadId, created.id, chatId, action.operatorOpenId, anchorId);
-    } else {
-      this.deps.log.warn("\u4E00\u952E\u5F00\u8BDD\u9898\u540E\u672A\u8BFB\u5230 thread_id\uFF0C\u8BE5\u4F1A\u8BDD\u6682\u65E0\u6CD5\u81EA\u52A8\u8DEF\u7531", { messageId: res.messageId });
+    case "session.execution.interrupted": {
+      const data = event.data;
+      deps.markEnded(data.sessionID);
+      deps.applyRun(data.sessionID, { type: "execution.failed", error: `\u5DF2\u4E2D\u65AD\uFF08${data.reason ?? "unknown"}\uFF09` });
+      break;
     }
-    await this.patchCard(
-      action.messageId,
-      buildSessionCreatedCard({
-        title,
-        sessionID: created.id,
-        dir,
-        ...model ? { model: modelLabel(model) } : {},
-        perm: presetLabel(perm),
-        ...threadId ? {} : { note: "\uFF08\u672A\u62FF\u5230\u8BDD\u9898 ID\uFF0C\u82E5\u8BDD\u9898\u672A\u51FA\u73B0\u8BF7\u5728\u4F1A\u8BDD\u5361\u4E0A\u624B\u52A8\u521B\u5EFA\u3002\uFF09" }
-      })
-    );
-  }
-  // ── 卡片渲染辅助 ──────────────────────────────────────────────────────
-  // 说明：`/new` 已改为直接发建会话表单卡，以下分步卡的发送方法已不再使用（已移除）。
-  // 分步卡的**构建函数**（buildDirCard/buildModelCard/buildPermCard/buildConfirmCard）与
-  // 对应卡片回调分支仍保留，用于兼容旧卡片与单测（标注 @deprecated）。
-  async renderModelCard(state, pageOverride) {
-    const models = await this.loadModels();
-    const recent = await this.deps.recent.listModels();
-    return buildModelCard({
-      models,
-      recent,
-      ...state.model ? { current: state.model } : {},
-      page: pageOverride ?? state.page ?? 0,
-      pageSize: this.modelPageSize,
-      recentLimit: this.recentModelsLimit()
-    });
-  }
-  /**
-   * 渲染建会话表单卡（P6.1）：最近模型 + 常用模型 + 默认预选。
-   * P6.2：目录/权限也从向导状态预填（`/dir` `/perm` 的能力，不再是必经步骤）。
-   */
-  async renderFormCard(state, over) {
-    const models = await this.loadModels();
-    const recent = await this.deps.recent.listModels();
-    const rootSubdirs = await this.scanRoot(this.deps.allowedRoots?.[0]);
-    const values2 = over?.values ?? {
-      ...state?.dir ? { dir: state.dir } : {},
-      ...state?.perm ? { perm: state.perm } : {}
-    };
-    return buildSetupFormCard({
-      models,
-      recent,
-      ...state?.model ? { defaultModel: state.model } : {},
-      ...rootSubdirs.length > 0 ? { rootSubdirs } : {},
-      ...this.deps.allowedRoots ? { allowedRoots: this.deps.allowedRoots } : {},
-      ...over?.error ? { error: over.error } : {},
-      values: values2
-    });
-  }
-  async sendModelCardToThread(message, sessionID, page) {
-    const current = await this.currentModel(sessionID);
-    const models = await this.loadModels();
-    const recent = await this.deps.recent.listModels();
-    const card = buildModelCard({
-      models,
-      recent,
-      ...current ? { current } : {},
-      page,
-      pageSize: this.modelPageSize,
-      recentLimit: this.recentModelsLimit(),
-      sid: sessionID
-    });
-    await this.deps.sender.replyCard(message.messageId, card);
-  }
-  /**
-   * 读回会话**真实**当前模型（优先 `ctx.session.get`），失败则降级到插件记录值。
-   * 展示（运行卡页脚 / `/current` / 模型卡）一律以读回值为准，避免只显示我们记录的那份。
-   */
-  async currentModel(sessionID) {
-    const link2 = await this.deps.sessionMap.resolveBySession(sessionID);
-    if (this.deps.getSessionModel) {
-      try {
-        const model = await this.deps.getSessionModel(sessionID, link2?.dir);
-        if (model) return model;
-      } catch (err2) {
-        this.deps.log.warn("\u8BFB\u56DE\u4F1A\u8BDD\u6A21\u578B\u5931\u8D25\uFF0C\u56DE\u9000\u8BB0\u5F55\u503C", { sessionID, error: errorMessage(err2) });
+    case "session.status": {
+      const data = event.data;
+      const statusType = data.status?.type;
+      if (statusType === "idle") {
+        deps.markEnded(data.sessionID);
+        deps.applyRun(data.sessionID, { type: "execution.succeeded" });
+      } else if (statusType === "busy" || statusType === "retry") {
+        deps.markStarted(data.sessionID);
       }
+      break;
     }
-    return link2?.model;
-  }
-  async sendPermCardToThread(message, sessionID) {
-    const link2 = await this.deps.sessionMap.resolveBySession(sessionID);
-    const card = buildPermCard({ ...link2?.perm ? { current: link2.perm } : {}, sid: sessionID });
-    await this.deps.sender.replyCard(message.messageId, card);
-  }
-  async patchCard(messageId, card) {
-    if (!messageId) return;
-    const res = await this.deps.sender.patchCard(messageId, card);
-    if (!res.ok) this.deps.log.warn("\u5411\u5BFC\u5361\u7247\u66F4\u65B0\u5931\u8D25", { error: res.error ?? "unknown" });
-  }
-  async loadModels() {
-    try {
-      return [...await this.deps.listModels()];
-    } catch (err2) {
-      this.deps.log.warn("\u6A21\u578B\u5217\u8868\u83B7\u53D6\u5931\u8D25", { error: errorMessage(err2) });
-      return [];
-    }
-  }
-  recentModelsLimit() {
-    return this.deps.recentModelsLimit ?? 5;
-  }
-  /**
-   * 扫描允许根目录的一级子目录（表单目录下拉选项来源）。
-   * 任何失败静默降级为空列表（只保留「手动输入」与根目录两项），绝不抛异常。
-   */
-  async scanRoot(root) {
-    if (!root) return [];
-    const scan = this.deps.scanRootSubdirs ?? scanRootSubdirs;
-    try {
-      return [...await scan(root)];
-    } catch (err2) {
-      this.deps.log.warn("\u6839\u76EE\u5F55\u5B50\u76EE\u5F55\u626B\u63CF\u5931\u8D25", { error: errorMessage(err2) });
-      return [];
-    }
-  }
-  async threadSessionID(message) {
-    if (!message.threadId) return void 0;
-    const link2 = await this.deps.sessionMap.resolveByThread(message.threadId);
-    return link2?.sessionID;
-  }
-  /** 文本回执：话题内引用触发消息（留在话题），主聊天流直接发送。 */
-  async reply(message, text) {
-    if (message.threadId) {
-      await this.deps.sender.replyText(message.messageId, text);
-      return;
+    case "session.idle": {
+      const data = event.data;
+      deps.markEnded(data.sessionID);
+      deps.applyRun(data.sessionID, { type: "execution.succeeded" });
+      break;
     }
-    await this.deps.sender.sendText(message.chatId, text);
   }
-};
-function confirmInput(state) {
-  return {
-    ...state.title ? { title: state.title } : {},
-    ...state.dir ? { dir: state.dir } : {},
-    ...state.model ? { model: state.model } : {},
-    ...state.perm ? { perm: state.perm } : {}
-  };
-}
-function permUsageText() {
-  const list = PERMISSION_PRESETS.map((p) => `\`${p.id}\`\uFF08${presetInfo(p.id).icon}${p.label}\uFF09`).join("\u3001");
-  return `\u672A\u77E5\u6743\u9650\u6863\u4F4D\u3002\u53EF\u7528\uFF1A${list}\u3002
-\u4F8B\u5982\uFF1A\`/perm edit\`\u3002`;
 }
-function modelSwitchReply(outcome, requested) {
-  const effective = outcome?.effective ?? requested;
-  const ref = `**${modelLabel(effective)}**
-\`${effective.providerID}/${effective.id}\``;
-  if (outcome?.mismatch) {
-    return [
-      `\u26A0\uFE0F \u6A21\u578B\u53EF\u80FD\u672A\u751F\u6548\uFF1A\u8BF7\u6C42 **${modelLabel(outcome.requested)}**\uFF0C\u670D\u52A1\u7AEF\u5B9E\u9645\u4E3A ${ref}\u3002`,
-      "\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002"
-    ].join("\n");
-  }
-  if (outcome && !outcome.verified) {
-    return `\u2705 \u5DF2\u8BF7\u6C42\u5207\u6362\u6A21\u578B\uFF1A${ref}
-\u672A\u80FD\u8BFB\u56DE\u6821\u9A8C${outcome.warning ? `\uFF08${outcome.warning}\uFF09` : ""}\uFF1B\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\u3002`;
+function extractErrorText(error) {
+  if (!error) return "unknown";
+  if (typeof error === "string") return error.slice(0, 300);
+  if (Array.isArray(error)) return contentToText(error).slice(0, 300) || "unknown";
+  if (typeof error === "object") {
+    const record2 = error;
+    if (typeof record2.message === "string") return record2.message.slice(0, 300);
+    if (typeof record2.type === "string") return record2.type;
   }
-  return `\u2705 \u5DF2\u5207\u6362\u6A21\u578B\uFF1A${ref}
-\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u8BE5\u4F1A\u8BDD\u6B64\u524D\u7684\u5386\u53F2\u6D88\u606F\u4ECD\u663E\u793A\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002`;
+  return "unknown";
 }
-function modelSwitchDoneCard(outcome, requested) {
-  const effective = outcome?.effective ?? requested;
-  if (outcome?.mismatch) {
-    return buildSetupDoneCard("\u26A0\uFE0F \u6A21\u578B\u53EF\u80FD\u672A\u751F\u6548", [
-      `\u8BF7\u6C42\uFF1A**${modelLabel(outcome.requested)}**`,
-      `\u5B9E\u9645\uFF1A**${modelLabel(effective)}**`,
-      "\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002"
-    ]);
+function contentToText(content) {
+  if (typeof content === "string") return content;
+  if (Array.isArray(content)) {
+    return content.map((item) => {
+      if (typeof item === "string") return item;
+      if (item && typeof item === "object" && typeof item.text === "string") {
+        return item.text;
+      }
+      return "";
+    }).filter(Boolean).join("\n");
   }
-  if (outcome && !outcome.verified) {
-    return buildSetupDoneCard("\u2705 \u5DF2\u5207\u6362\u6A21\u578B", [
-      `\u5F53\u524D\u6A21\u578B\uFF1A**${modelLabel(effective)}**`,
-      "\uFF08\u672A\u80FD\u8BFB\u56DE\u6821\u9A8C\uFF1B\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\u3002\uFF09"
-    ]);
+  if (content && typeof content === "object" && typeof content.text === "string") {
+    return content.text;
   }
-  return buildSetupDoneCard("\u2705 \u5DF2\u5207\u6362\u6A21\u578B", [
-    `\u5F53\u524D\u6A21\u578B\uFF1A**${modelLabel(effective)}**`,
-    "\uFF08\u5207\u6362\u53EA\u5F71\u54CD**\u540E\u7EED**\u56DE\u590D\uFF1B\u5386\u53F2\u6D88\u606F\u4ECD\u662F\u65E7\u6A21\u578B\uFF0C\u5C5E\u6B63\u5E38\u3002\uFF09"
-  ]);
+  return "";
 }
-function setupToast(value3) {
-  switch (value3.kind) {
-    case "dir":
-      return toast3("success", "\u5DF2\u9009\u62E9\u76EE\u5F55");
-    case "model":
-      return toast3("success", "\u5DF2\u9009\u62E9\u6A21\u578B");
-    case "perm":
-      return toast3("success", "\u5DF2\u9009\u62E9\u6743\u9650");
-    case "more":
-      return toast3("info", "\u5DF2\u7FFB\u9875");
-    case "confirm":
-      return toast3("success", "\u6B63\u5728\u521B\u5EFA\u4F1A\u8BDD\u2026");
-    case "form":
-      return toast3("info", "\u5DF2\u6253\u5F00\u8868\u5355");
-    case "cancel":
-    default:
-      return toast3("info", "\u5DF2\u53D6\u6D88");
+
+// src/runtime/card-action-router.ts
+function routeCardAction(action, deps) {
+  const formResponse = deps.handleForm(action);
+  if (formResponse) return formResponse;
+  const value3 = action.rawValue;
+  if (parseStopActionValue(value3)) {
+    return deps.handleStop(action);
+  }
+  const hasForm = action.formValue !== void 0;
+  const routed = hasForm || isSetupFormAction(value3) || Boolean(parseSessionCardValue(value3)) || Boolean(parseSetupCardValue(value3));
+  deps.log.debug("\u5361\u7247\u56DE\u8C03\u8DEF\u7531", {
+    hasForm,
+    hasValue: value3 !== void 0,
+    valueKeys: value3 && typeof value3 === "object" ? Object.keys(value3) : [],
+    routedTo: routed ? "commands" : "approvals"
+  });
+  if (routed) {
+    return deps.handleCommands(action);
   }
-}
-function toast3(type, content) {
-  return { toast: { type, content } };
-}
-function clampPageSize(value3) {
-  const base2 = typeof value3 === "number" && Number.isFinite(value3) ? Math.floor(value3) : 8;
-  return Math.min(20, Math.max(5, base2));
+  return deps.handleApprovals(action);
 }
 
 // src/index.ts
@@ -149528,26 +149684,13 @@ async function start(ctx, config, log2, logSink) {
     log: log2,
     logLevel: config.logLevel,
     onMessage: (message) => handleMessage(message),
-    onCardAction: async (action) => {
-      const formResponse = formRelay.handleCardAction(action);
-      if (formResponse) return formResponse;
-      const value3 = action.rawValue;
-      if (parseStopActionValue(value3)) {
-        return stop.handleCardAction(action);
-      }
-      const hasForm = action.formValue !== void 0;
-      const routed = hasForm || isSetupFormAction(value3) || Boolean(parseSessionCardValue(value3)) || Boolean(parseSetupCardValue(value3));
-      log2.debug("\u5361\u7247\u56DE\u8C03\u8DEF\u7531", {
-        hasForm,
-        hasValue: value3 !== void 0,
-        valueKeys: value3 && typeof value3 === "object" ? Object.keys(value3) : [],
-        routedTo: routed ? "commands" : "approvals"
-      });
-      if (routed) {
-        return commands.handleCardAction(action);
-      }
-      return approvals.handleCardAction(action);
-    }
+    onCardAction: (action) => routeCardAction(action, {
+      log: log2,
+      handleForm: (a) => formRelay.handleCardAction(a),
+      handleStop: (a) => stop.handleCardAction(a),
+      handleCommands: (a) => commands.handleCardAction(a),
+      handleApprovals: (a) => approvals.handleCardAction(a)
+    })
   });
   const abort = new AbortController();
   const subscription = (async () => {
@@ -149559,127 +149702,21 @@ async function start(ctx, config, log2, logSink) {
       if (!abort.signal.aborted) log2.error("\u4E8B\u4EF6\u8BA2\u9605\u5F02\u5E38\u9000\u51FA", { error: errorMessage(err2) });
     }
   })();
+  const eventDeps = {
+    log: log2,
+    touch: (sessionID) => executions.touch(sessionID),
+    markStarted: (sessionID) => executions.markStarted(sessionID),
+    markEnded: (sessionID) => executions.markEnded(sessionID),
+    applyRun: (sessionID, event) => runs.apply(sessionID, event),
+    onPermissionAsked: (data) => approvals.onAsked(data),
+    onPermissionReplied: (data) => approvals.onReplied(data),
+    onFormCreated: (data) => formRelay.onCreated(data),
+    onFormReplied: (data) => formRelay.onReplied(data),
+    onFormCancelled: (data) => formRelay.onCancelled(data),
+    notifyFailure: (sessionID, error) => notifyFailure(sessionID, error)
+  };
   async function handleEvent(event) {
-    const touched = event.data?.sessionID;
-    if (typeof touched === "string") executions.touch(touched);
-    switch (event.type) {
-      case "permission.asked":
-        void approvals.onAsked(event.data).catch((err2) => log2.warn("\u5904\u7406 permission.asked \u5931\u8D25", { error: errorMessage(err2) }));
-        break;
-      case "permission.replied":
-        approvals.onReplied(event.data);
-        break;
-      case "form.created":
-        void formRelay.onCreated(event.data).catch((err2) => log2.warn("\u5904\u7406 form.created \u5931\u8D25", { error: errorMessage(err2) }));
-        break;
-      case "form.replied":
-        formRelay.onReplied(event.data);
-        break;
-      case "form.cancelled":
-        formRelay.onCancelled(event.data);
-        break;
-      case "session.text.started": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "text.started",
-          ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
-        });
-        break;
-      }
-      case "session.text.delta": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "text.delta",
-          delta: data.delta,
-          ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
-        });
-        break;
-      }
-      case "session.text.ended": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "text.ended",
-          ...data.text ? { text: data.text } : {},
-          ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
-        });
-        break;
-      }
-      case "session.tool.input.started": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "tool.input.started",
-          id: data.id,
-          name: data.name,
-          ...data.assistantMessageID ? { assistantMessageID: data.assistantMessageID } : {}
-        });
-        break;
-      }
-      case "session.tool.input.ended": {
-        const data = event.data;
-        runs.apply(data.sessionID, { type: "tool.input.ended", id: data.id, input: data.input });
-        break;
-      }
-      case "session.tool.success": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "tool.success",
-          id: data.id,
-          output: contentToText(data.content)
-        });
-        break;
-      }
-      case "session.tool.error": {
-        const data = event.data;
-        runs.apply(data.sessionID, {
-          type: "tool.error",
-          id: data.id,
-          output: extractErrorText(data.error ?? data.content)
-        });
-        break;
-      }
-      case "session.execution.started": {
-        const data = event.data;
-        executions.markStarted(data.sessionID);
-        runs.apply(data.sessionID, { type: "execution.started" });
-        break;
-      }
-      case "session.execution.succeeded": {
-        const data = event.data;
-        executions.markEnded(data.sessionID);
-        runs.apply(data.sessionID, { type: "execution.succeeded" });
-        break;
-      }
-      case "session.execution.failed": {
-        const data = event.data;
-        executions.markEnded(data.sessionID);
-        runs.apply(data.sessionID, { type: "execution.failed", error: extractErrorText(data.error) });
-        void notifyFailure(data.sessionID, data.error);
-        break;
-      }
-      case "session.execution.interrupted": {
-        const data = event.data;
-        executions.markEnded(data.sessionID);
-        runs.apply(data.sessionID, { type: "execution.failed", error: `\u5DF2\u4E2D\u65AD\uFF08${data.reason ?? "unknown"}\uFF09` });
-        break;
-      }
-      case "session.status": {
-        const data = event.data;
-        const statusType = data.status?.type;
-        if (statusType === "idle") {
-          executions.markEnded(data.sessionID);
-          runs.apply(data.sessionID, { type: "execution.succeeded" });
-        } else if (statusType === "busy" || statusType === "retry") {
-          executions.markStarted(data.sessionID);
-        }
-        break;
-      }
-      case "session.idle": {
-        const data = event.data;
-        executions.markEnded(data.sessionID);
-        runs.apply(data.sessionID, { type: "execution.succeeded" });
-        break;
-      }
-    }
+    await routeEvent(event, eventDeps);
   }
   async function notifyFailure(sessionID, error) {
     const link2 = await sessionMap.resolveBySession(sessionID);
@@ -149828,33 +149865,6 @@ async function replyPermission(ctx, input) {
     throw err2;
   }
 }
-function extractErrorText(error) {
-  if (!error) return "unknown";
-  if (typeof error === "string") return error.slice(0, 300);
-  if (Array.isArray(error)) return contentToText(error).slice(0, 300) || "unknown";
-  if (typeof error === "object") {
-    const record2 = error;
-    if (typeof record2.message === "string") return record2.message.slice(0, 300);
-    if (typeof record2.type === "string") return record2.type;
-  }
-  return "unknown";
-}
-function contentToText(content) {
-  if (typeof content === "string") return content;
-  if (Array.isArray(content)) {
-    return content.map((item) => {
-      if (typeof item === "string") return item;
-      if (item && typeof item === "object" && typeof item.text === "string") {
-        return item.text;
-      }
-      return "";
-    }).filter(Boolean).join("\n");
-  }
-  if (content && typeof content === "object" && typeof content.text === "string") {
-    return content.text;
-  }
-  return "";
-}
 async function promptSession(ctx, sessionID, text, delivery) {
   const api = ctx.session.prompt;
   await api({ sessionID, text, delivery });