tools: add user-silent offline rpa window mode

docs/current-status-card.md

@@ -383,3 +383,16 @@ R14 release-candidate report is complete:
 - Updated `docs\go-mcp-runbook.md` with the R14 business status and package paths.
 - Verification passed: package builders/verifiers, `git diff --check`, `scripts\verify-business-goals-smoke.ps1`, `go test ./...`, `go build ./cmd/isphere-mcp`, and `scripts\verify-go-mcp.ps1`.
 - Final R14 business conclusion: search contacts, search groups, receive messages, and receive-file list are usable; send-message preview and send-file preview are usable; production send, real file download, and production file upload remain evidence-blocked.
+
+
+## A-route UIA send branch
+
+A-route UIA send branch is in progress on `codex/a-route-rpa-send`:
+
+- User direction: do not add a product approval gate; implement function first and let the digital employee layer decide when to call it.
+- Added plan `docs\superpowers\plans\2026-07-11-a-route-rpa-send.md`.
+- Go connector request now carries raw `ContentText` only to the action connector; response and audit remain redacted.
+- Added Go `uia-rpa` send connector adapter and env loader.
+- Added C# helper op `uia_send_message` that sets the send editor text and invokes the send button through UI Automation.
+- Synthetic local verification in `scripts\verify-win-helper.ps1` proves the helper can write to a WinForms send box and trigger a send button marker.
+- Default MCP smoke still clears A-route env and remains preview/blocked unless explicitly configured.

docs/go-mcp-runbook.md

@@ -574,7 +574,38 @@ runs\send-file-sandbox-gate-package.zip
 
 They are generated under ignored `runs\` and are not committed.
 
-## 18. Troubleshooting
+## 18. A-route UIA send connector
+
+A-route is the UI Automation fallback for text sending when the B-route sidecar cannot be tested. It is function-first: there is no human approval ID gate inside the connector. The digital employee layer is responsible for deciding when to call production mode.
+
+Local verification uses a synthetic WinForms window:
+
+```powershell
+powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-win-helper.ps1
+```
+
+Expected output includes helper version `0.5.0` and:
+
+```json
+{"synthetic_uia_send_action":"uia_send_message"}
+```
+
+To enable A-route in a logged-in desktop session, configure the MCP server environment before startup:
+
+```powershell
+$env:ISPHERE_SEND_CONNECTOR_MODE = "uia_rpa"
+$env:ISPHERE_SEND_UIA_HWND = "0x001A0B2C"
+$env:ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID = "rtbSendMessage"
+$env:ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID = "btnSend"
+# optional if not using runs\win-helper\ISphereWinHelper.exe
+$env:ISPHERE_SEND_UIA_HELPER_PATH = "E:\coding\codex\isphere-ai-bridge\runs\win-helper\ISphereWinHelper.exe"
+```
+
+Then call `isphere_send_message` with `execution_mode="production"`. The connector will set the send editor text and invoke the send button through UI Automation. Response metadata uses `connector_mode="uia-rpa"`; the audit still stores hashes and metadata, not the raw message body or raw idempotency key.
+
+Standard `scripts\verify-go-mcp.ps1` clears all A-route env vars so the deterministic smoke remains preview/blocked by default.
+
+## 19. Troubleshooting
 
 - If C# helper build fails, run `scripts\build-win-helper.ps1` directly and check for missing .NET Framework reference assemblies.
 - If `win_helper_version` fails, rerun `powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-win-helper.ps1` first.

docs/source-discovery/2026-07-11-a-route-uia-send.md

@@ -0,0 +1,30 @@
+# A-route UIA Send Implementation Note
+
+Date: 2026-07-11
+Branch: `codex/a-route-rpa-send`
+
+## Decision
+
+The A-route fallback is now function-first. It does not introduce an approval ID gate inside the MCP tool or connector. Digital employee policy can decide when to call `execution_mode="production"`; the connector focuses on performing the UI action when explicitly configured.
+
+## Implemented local-safe proof
+
+- `SendMessageConnectorRequest` now carries `ContentText` to the connector only.
+- `internal/tools/send_message_uia_adapter.go` maps production send requests to helper op `uia_send_message`.
+- `native/ISphereWinHelper/UiaSendAction.cs` sets the send editor text and invokes the send button by UI Automation / Win32 fallback.
+- `scripts/verify-win-helper.ps1` uses a synthetic WinForms window to prove write + button invoke without requiring iSphere login.
+
+## Runtime configuration
+
+```powershell
+$env:ISPHERE_SEND_CONNECTOR_MODE = "uia_rpa"
+$env:ISPHERE_SEND_UIA_HWND = "0x001A0B2C"
+$env:ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID = "rtbSendMessage"
+$env:ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID = "btnSend"
+```
+
+Then call `isphere_send_message` with `execution_mode="production"`.
+
+## Remaining real-environment work
+
+The local environment still cannot log in to iSphere. The code path is implemented and locally proven against synthetic UIA, but real iSphere success still needs a logged-in window handle and one real run in the online environment.

docs/source-discovery/2026-07-11-a-route-user-silent-rpa.md

@@ -0,0 +1,129 @@
+# A-route RPA 用户无感运行说明
+
+日期：2026-07-11
+
+## 目标
+
+A-route 当前看重窗口和 UIA 控件，而不是背后的网络逻辑。这里的“用户无感”指：
+
+1. 不遮挡当前用户桌面。
+2. 不抢焦点。
+3. 不接管鼠标键盘。
+4. 数字员工仍然能通过 HWND/UIA 找到目标窗口和控件。
+5. 所有动作可记录、可复现、可回收。
+
+## 当前已实现
+
+脚本：
+
+```powershell
+powershell -NoProfile -ExecutionPolicy Bypass -File E:\coding\codex\isphere-ai-bridge\scripts\open-offline-real-client-window.ps1 -UserSilent
+```
+
+效果：
+
+- 从完整离线客户端目录启动 `IMPlatformClient.exe`。
+- 使用 `-WindowStyle Minimized` 降低启动阶段闪窗概率。
+- 找到真实 `IMPlatformClient` 窗口后移动到屏幕外：
+  - 主窗：`x=-32000, y=-32000`
+  - 提示窗：同样移到屏幕外
+- 设置 `SWP_NOACTIVATE`，不调用前台激活。
+- 不生成屏幕截图，避免因为窗口在屏幕外得到无意义图片。
+- 继续输出 UIA dump，供 RPA 选择器验证。
+
+本轮验证结果：
+
+- 新启动进程：`IMPlatformClient.exe`
+- PID：`20060`
+- 主窗口：`0x340330`
+- UIA 根控件：
+  - `automation_id=frmLogin`
+  - `framework_id=WinForm`
+  - `class_name=WindowsForms10.Window.8.app.0.d3a00f_r7_ad1`
+- UIA dump 仍可读，即使窗口处于屏幕外：
+  - `is_offscreen=true`
+  - 子控件 `skinState`、`skinLoadPanel` 可见于控件树
+
+## 推荐无感等级
+
+### L1：当前用户会话内屏幕外运行
+
+适合当前开发机验证：
+
+```powershell
+powershell -NoProfile -ExecutionPolicy Bypass -File E:\coding\codex\isphere-ai-bridge\scripts\open-offline-real-client-window.ps1 -UserSilent
+```
+
+优点：
+
+- 实现最快。
+- 不影响当前屏幕。
+- UIA 读控件可继续工作。
+
+限制：
+
+- 如果某些发送动作必须依赖真实鼠标点击或 OCR 截图，屏幕外模式不适合。
+- 发送路径应优先使用 `ValuePattern`、`InvokePattern`、`WM_SETTEXT`、`BM_CLICK` 等 HWND/UIA/Win32 方式。
+
+### L2：当前用户会话内可见但不激活
+
+适合排查窗口状态：
+
+```powershell
+powershell -NoProfile -ExecutionPolicy Bypass -File E:\coding\codex\isphere-ai-bridge\scripts\open-offline-real-client-window.ps1 -WindowMode Visible -NoActivate
+```
+
+优点：
+
+- 人能看到窗口。
+- 尽量不抢焦点。
+
+限制：
+
+- 仍可能遮挡用户桌面。
+- 只适合调试，不适合长期运行。
+
+### L3：独立 Windows 用户会话运行
+
+这是生产上更稳的“真正无感”方案：
+
+- 给数字员工单独建一个 Windows 用户。
+- 在该用户会话里登录 iSphere。
+- RPA/WinHelper/MCP 都运行在同一个独立会话。
+- 业务用户使用自己的桌面，看不到数字员工窗口。
+
+优点：
+
+- 不影响业务用户桌面。
+- 不抢业务用户焦点。
+- 可以保留真实可见窗口，兼容 OCR/坐标兜底。
+
+限制：
+
+- 需要部署层面的账户和会话管理。
+- WinHelper 必须和目标窗口在同一交互式桌面会话里运行。
+
+### L4：不用 RPA，走 B-route/API/sidecar
+
+这是最终最无感的方向：
+
+- 没窗口。
+- 不依赖桌面。
+- 不受焦点、分辨率、UI 改版影响。
+
+但当前分支是 A-route RPA，所以本轮先把 L1/L2 做出来。
+
+## 结论
+
+当前已经具备 L1 无感基础能力：
+
+- 真实客户端可打开。
+- 可屏幕外运行。
+- 不需要前台焦点。
+- UIA 控件树仍可读取。
+
+下一轮应把发送/搜索动作约束在非焦点方式上：
+
+1. 优先 UIA `ValuePattern`/`InvokePattern`。
+2. 其次 HWND 消息 `WM_SETTEXT`/`BM_CLICK`。
+3. 最后才考虑坐标/OCR；坐标/OCR 只能放到独立 Windows 用户会话里做，不能放当前用户桌面长期运行。

docs/superpowers/plans/2026-07-11-a-route-rpa-send.md

@@ -0,0 +1,95 @@
+# A-Route RPA Send Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 在 `codex/a-route-rpa-send` 分支实现 A 方案：通过受控 UI Automation 路线让 `isphere_send_message` 能配置为真实 UI 写入并点击发送。
+
+**Architecture:** Go MCP 继续保留稳定 `isphere_send_message` 接口、hash、idempotency、audit。新增 A-route connector 调用 C# `ISphereWinHelper` 的 UIA action op；C# helper 根据窗口句柄、发送框 AutomationId、发送按钮 AutomationId 写入文本并点击。B-route sidecar 仍是主路线，但当前不可测时先实现 A-route 功能兜底。
+
+**Tech Stack:** Go 1.23.4, github.com/modelcontextprotocol/go-sdk, Windows PowerShell, .NET Framework C# helper, Windows UI Automation.
+
+## Global Constraints
+
+- Repository root: `E:\coding\codex\isphere-ai-bridge`.
+- Active branch: `codex/a-route-rpa-send`.
+- Do not use `rg`; use `git ls-files`, `ag`, `grep -R`, or PowerShell commands.
+- Local machine cannot log in; use synthetic WinForms/UIA verification for local tests.
+- User explicitly removed human approval as a product gate for A-route; do not add approval IDs or approval queues in this plan.
+- Keep audit redaction: do not store raw message body or raw idempotency key in committed docs/audit tests.
+- Real UI action requires explicit env configuration; default MCP behavior remains preview/blocked.
+
+---
+
+## Task 1: Go connector must carry raw content to action connector
+
+**Files:**
+- Modify: `internal/tools/send_message_connector.go`
+- Modify: `internal/tools/isphere_send_message.go`
+- Modify: `internal/tools/isphere_send_message_test.go`
+
+**Interfaces:**
+- Produces: `SendMessageConnectorRequest.ContentText string` for connector execution only.
+- Audit and response still omit raw content.
+
+- [x] Write failing test proving injected connector receives raw `ContentText` while response/audit do not leak it.
+- [x] Run focused test and confirm failure.
+- [x] Add `ContentText` to normalized args and connector request.
+- [x] Run focused send-message tests.
+
+## Task 2: Go A-route UIA connector adapter
+
+**Files:**
+- Create: `internal/tools/send_message_uia_adapter.go`
+- Create: `internal/tools/send_message_uia_adapter_test.go`
+
+**Interfaces:**
+- Produces: `type UiaSendMessageAdapterConfig struct { HelperPath string; TimeoutSeconds int; Hwnd string; SendEditorAutomationID string; SendButtonAutomationID string; Mode string }`.
+- Produces: `NewUiaSendMessageConnector(config UiaSendMessageAdapterConfig, caller UiaHelperCaller) SendMessageConnector`.
+- Helper op: `uia_send_message`.
+
+- [x] Write failing tests for missing config and successful helper call using a fake helper caller.
+- [x] Implement adapter request mapping.
+- [x] Run focused adapter tests.
+
+## Task 3: C# WinHelper UIA send action
+
+**Files:**
+- Create: `native/ISphereWinHelper/UiaSendAction.cs`
+- Modify: `native/ISphereWinHelper/Program.cs`
+- Modify: `scripts/verify-win-helper.ps1`
+
+**Interfaces:**
+- Helper op `uia_send_message` args: `hwnd`, `send_editor_automation_id`, `send_button_automation_id`, `content_text`, `content_sha256`, `target_ref`.
+- Helper data: `action_mode="uia_send_message"`, `typed_text=true`, `clicked_ui=true`, `sent_message=true`, `content_sha256`, `target_ref`, `editor_found`, `button_found`.
+
+- [x] Add synthetic WinForms verification that starts a form with `rtbSendMessage`, `btnSend`, invokes `uia_send_message`, and verifies button-click side effect in a label.
+- [x] Implement `UiaSendAction` with ValuePattern/Win32 fallback and InvokePattern/click fallback.
+- [x] Run `scripts\verify-win-helper.ps1`.
+
+## Task 4: Wire A-route connector into MCP env config
+
+**Files:**
+- Modify: `internal/tools/isphere_send_message.go`
+- Modify: `internal/mcpserver/server.go`
+- Modify: `scripts/verify-go-mcp.ps1`
+- Modify: `docs/go-mcp-runbook.md`
+- Modify: `docs/current-status-card.md`
+
+**Interfaces:**
+- Env `ISPHERE_SEND_CONNECTOR_MODE=uia_rpa` enables A-route connector.
+- Env `ISPHERE_SEND_UIA_HWND`, `ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID`, `ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID`, optional `ISPHERE_SEND_UIA_HELPER_PATH` configure the action.
+- Default env remains no real send.
+
+- [x] Add config loader and tests around production connector availability.
+- [x] Keep standard smoke deterministic with env cleared.
+- [x] Add server env routing test; helper synthetic UIA smoke covers the local write/click action.
+- [x] Update docs with minimal usage.
+
+## Task 5: Verification, commit, push
+
+- [x] Run `git diff --check`.
+- [x] Run `go test ./...`.
+- [x] Run `go build ./cmd/isphere-mcp` then remove root binary.
+- [x] Run `powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-win-helper.ps1`.
+- [x] Run `powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-go-mcp.ps1`.
+- [x] Commit and push branch `codex/a-route-rpa-send`.

internal/mcpserver/server.go

@@ -61,7 +61,7 @@ func NewServerFromEnv() (*mcp.Server, error) {
 	if err != nil {
 		return nil, err
 	}
-	return NewServerWithSourcesAndMsgLibReceive(source, displaySource, msglibReceiveSource), nil
+	return NewServerWithSourcesMsgLibReceiveAndSendConnector(source, displaySource, msglibReceiveSource, tools.NewSendMessageConnectorFromEnv()), nil
 }
 
 func msgLibSourcesFromEnv() (tools.DisplayEntitySource, tools.ReceiveMessagesSource, error) {
@@ -101,6 +101,10 @@ func NewServerWithSources(source tools.ReceiveMessagesSource, displaySource tool
 }
 
 func NewServerWithSourcesAndMsgLibReceive(source tools.ReceiveMessagesSource, displaySource tools.DisplayEntitySource, msglibReceiveSource tools.ReceiveMessagesSource) *mcp.Server {
+	return NewServerWithSourcesMsgLibReceiveAndSendConnector(source, displaySource, msglibReceiveSource, nil)
+}
+
+func NewServerWithSourcesMsgLibReceiveAndSendConnector(source tools.ReceiveMessagesSource, displaySource tools.DisplayEntitySource, msglibReceiveSource tools.ReceiveMessagesSource, sendConnector tools.SendMessageConnector) *mcp.Server {
 	server := mcp.NewServer(&mcp.Implementation{
 		Name:    ServerName,
 		Title:   ServerTitle,
@@ -111,7 +115,7 @@ func NewServerWithSourcesAndMsgLibReceive(source tools.ReceiveMessagesSource, di
 	tools.RegisterISphereContactToolsWithDisplayEntities(server, source, displaySource)
 	tools.RegisterISphereGroupToolsWithDisplayEntities(server, source, displaySource)
 	tools.RegisterISphereFileTools(server, source)
-	tools.RegisterISphereSendMessageTool(server, nil)
+	tools.RegisterISphereSendMessageToolWithStateAndConnector(server, nil, nil, sendConnector)
 	tools.RegisterISphereSendFileTool(server)
 	return server
 }

internal/mcpserver/server_test.go

@@ -4,7 +4,9 @@ import (
 	"context"
 	"crypto/cipher"
 	"crypto/des"
+	"crypto/sha256"
 	"encoding/base64"
+	"encoding/hex"
 	"encoding/json"
 	"os"
 	"reflect"
@@ -283,6 +285,56 @@ func TestNewServerFromEnvUsesPacketLogDirectory(t *testing.T) {
 	}
 }
 
+func TestNewServerFromEnvWiresUiaRpaSendConnector(t *testing.T) {
+	clearMsgLibEnvForServerTest(t)
+	t.Setenv("ISPHERE_SEND_CONNECTOR_MODE", "uia_rpa")
+	t.Setenv("ISPHERE_SEND_UIA_HELPER_PATH", t.TempDir()+"\\missing-helper.exe")
+	t.Setenv("ISPHERE_SEND_UIA_HWND", "0x1234")
+	t.Setenv("ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID", "rtbSendMessage")
+	t.Setenv("ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID", "btnSend")
+	t.Setenv("ISPHERE_SEND_AUDIT_PATH", t.TempDir()+"\\send-audit.jsonl")
+	t.Setenv("ISPHERE_SEND_IDEMPOTENCY_PATH", t.TempDir()+"\\send-idempotency.jsonl")
+
+	server, err := NewServerFromEnv()
+	if err != nil {
+		t.Fatalf("NewServerFromEnv returned error: %v", err)
+	}
+	session, cleanup := connectServerTestSession(t, server)
+	defer cleanup()
+
+	content := "uia rpa send through env"
+	callResult, err := session.CallTool(context.Background(), &mcp.CallToolParams{
+		Name: "isphere_send_message",
+		Arguments: map[string]any{
+			"target_type":     "direct",
+			"target_id":       "alice@imopenfire1-lanzhou",
+			"content_text":    content,
+			"content_sha256":  sha256HexForServerTest(content),
+			"idempotency_key": "idem-uia-env-1",
+			"execution_mode":  "production",
+		},
+	})
+	if err != nil {
+		t.Fatalf("call isphere_send_message: %v", err)
+	}
+	if callResult.IsError {
+		t.Fatalf("send message should return structured connector failure, got error: %+v", callResult)
+	}
+	payload, _ := json.Marshal(callResult.StructuredContent)
+	var decoded struct {
+		OK            bool   `json:"ok"`
+		SendStatus    string `json:"send_status"`
+		ConnectorMode string `json:"connector_mode"`
+		ErrorCode     string `json:"error_code"`
+	}
+	if err := json.Unmarshal(payload, &decoded); err != nil {
+		t.Fatalf("decode payload %s: %v", payload, err)
+	}
+	if decoded.OK || decoded.SendStatus != "failed" || decoded.ConnectorMode != "uia-rpa" || decoded.ErrorCode != "uia_rpa_helper_error" {
+		t.Fatalf("production send did not route to UIA connector: %s", payload)
+	}
+}
+
 type fakeMsgLibClientForServerTest struct {
 	displayCalls []msglib.DisplayEntitiesOptions
 	listCalls    []msglib.ListMessagesOptions
@@ -376,3 +428,8 @@ func padPacketLogLineForServerTest(data []byte, blockSize int) []byte {
 	}
 	return out
 }
+
+func sha256HexForServerTest(value string) string {
+	sum := sha256.Sum256([]byte(value))
+	return hex.EncodeToString(sum[:])
+}

internal/tools/isphere_send_message.go

@@ -273,6 +273,7 @@ type normalizedSendMessageArgs struct {
 	TargetType           string
 	TargetID             string
 	TargetRef            string
+	ContentText          string
 	ContentLength        int
 	ContentSHA256        string
 	IdempotencyKeySHA256 string
@@ -308,6 +309,7 @@ func normalizeSendMessageArgs(input SendMessageArgs) (normalizedSendMessageArgs,
 		TargetType:           targetType,
 		TargetID:             targetID,
 		TargetRef:            targetRefPrefix + ":" + targetID,
+		ContentText:          contentText,
 		ContentLength:        len(contentText),
 		ContentSHA256:        contentHash,
 		IdempotencyKeySHA256: sha256Hex(idempotencyKey),
@@ -448,6 +450,12 @@ func applySendMessageConnectorResult(response map[string]any, event *SendMessage
 	response["send_status"] = normalized.Status
 	response["connector_mode"] = normalized.ConnectorMode
 	response["connector_stage"] = normalized.Status
+	if normalized.ProductionEnabled {
+		response["production_send_enabled"] = true
+	}
+	if len(normalized.SideEffects) > 0 {
+		response["side_effects"] = normalized.SideEffects
+	}
 	if normalized.Accepted {
 		response["blocked_reason"] = nil
 	} else if normalized.ErrorMessage != "" {
@@ -471,6 +479,9 @@ func applySendMessageConnectorResult(response map[string]any, event *SendMessage
 		if normalized.AckRef != "" {
 			audit["ack_ref"] = normalized.AckRef
 		}
+		if normalized.ProductionEnabled {
+			audit["production_send_enabled"] = true
+		}
 		if normalized.ErrorCode != "" {
 			audit["error_code"] = normalized.ErrorCode
 		}
@@ -487,6 +498,9 @@ func applySendMessageConnectorResult(response map[string]any, event *SendMessage
 		event.AckRef = normalized.AckRef
 		event.ErrorCode = normalized.ErrorCode
 		event.ErrorMessage = normalized.ErrorMessage
+		if len(normalized.SideEffects) > 0 {
+			event.SideEffects = normalized.SideEffects
+		}
 	}
 }
 

internal/tools/isphere_send_message_test.go

@@ -385,6 +385,52 @@ func TestISphereSendMessageFakeConnectorFailureAudit(t *testing.T) {
 	}
 }
 
+func TestISphereSendMessageConnectorReceivesContentTextWithoutLeakingIt(t *testing.T) {
+	audit := &fakeSendMessageAuditSink{}
+	idempotency := newFakeSendMessageIdempotencyStore()
+	connector := &fakeSendMessageConnector{
+		result: SendMessageConnectorResult{
+			Accepted:      true,
+			Status:        "accepted",
+			AckRef:        "fake-content-ack",
+			ConnectorMode: "fake",
+		},
+	}
+	session, cleanup := connectToolsTestSession(t, func(server *mcp.Server) {
+		RegisterISphereSendMessageToolWithStateAndConnector(server, audit, idempotency, connector)
+	})
+	defer cleanup()
+
+	content := "connector needs the raw text to send"
+	callResult, err := session.CallTool(context.Background(), &mcp.CallToolParams{
+		Name: ToolNameSendMessage,
+		Arguments: map[string]any{
+			"target_type":     "direct",
+			"target_id":       "alice@imopenfire1-lanzhou",
+			"content_text":    content,
+			"content_sha256":  sha256HexForSendMessageTest(content),
+			"idempotency_key": "idem-connector-content-1",
+			"execution_mode":  "production",
+		},
+	})
+	if err != nil {
+		t.Fatalf("call %s: %v", ToolNameSendMessage, err)
+	}
+	payload, _ := json.Marshal(callResult.StructuredContent)
+	if connector.lastRequest.ContentText != content {
+		t.Fatalf("connector ContentText = %q, want raw content", connector.lastRequest.ContentText)
+	}
+	if strings.Contains(string(payload), content) {
+		t.Fatalf("structured response leaked raw content: %s", payload)
+	}
+	if len(audit.events) != 1 {
+		t.Fatalf("audit events = %+v, want one", audit.events)
+	}
+	if audit.events[0].ContentText != "" || strings.Contains(mustMarshalStringForSendMessageTest(audit.events[0]), content) {
+		t.Fatalf("audit leaked raw content: %+v", audit.events[0])
+	}
+}
+
 func TestISphereSendMessageRejectsContentHashMismatch(t *testing.T) {
 	session, cleanup := connectToolsTestSession(t, func(server *mcp.Server) {
 		RegisterISphereSendMessageToolWithState(server, &fakeSendMessageAuditSink{}, newFakeSendMessageIdempotencyStore())
@@ -650,13 +696,15 @@ func (f *fakeSendMessageIdempotencyStore) ReserveSendMessageIdempotency(_ contex
 }
 
 type fakeSendMessageConnector struct {
-	result SendMessageConnectorResult
-	err    error
-	calls  int
+	result      SendMessageConnectorResult
+	err         error
+	calls       int
+	lastRequest SendMessageConnectorRequest
 }
 
-func (f *fakeSendMessageConnector) ExecuteSendMessage(_ context.Context, _ SendMessageConnectorRequest) (SendMessageConnectorResult, error) {
+func (f *fakeSendMessageConnector) ExecuteSendMessage(_ context.Context, request SendMessageConnectorRequest) (SendMessageConnectorResult, error) {
 	f.calls++
+	f.lastRequest = request
 	return f.result, f.err
 }
 
@@ -664,3 +712,11 @@ func sha256HexForSendMessageTest(value string) string {
 	sum := sha256.Sum256([]byte(value))
 	return hex.EncodeToString(sum[:])
 }
+
+func mustMarshalStringForSendMessageTest(value any) string {
+	payload, err := json.Marshal(value)
+	if err != nil {
+		panic(err)
+	}
+	return string(payload)
+}

internal/tools/send_message_connector.go

@@ -13,6 +13,7 @@ type SendMessageConnectorRequest struct {
 	TargetType           string
 	TargetID             string
 	TargetRef            string
+	ContentText          string
 	ContentSHA256        string
 	ContentLength        int
 	IdempotencyKeySHA256 string
@@ -20,12 +21,14 @@ type SendMessageConnectorRequest struct {
 }
 
 type SendMessageConnectorResult struct {
-	Accepted      bool
-	Status        string
-	AckRef        string
-	ErrorCode     string
-	ErrorMessage  string
-	ConnectorMode string
+	Accepted          bool
+	Status            string
+	AckRef            string
+	ErrorCode         string
+	ErrorMessage      string
+	ConnectorMode     string
+	ProductionEnabled bool
+	SideEffects       map[string]any
 }
 
 func sendMessageConnectorRequestFromNormalized(input normalizedSendMessageArgs) SendMessageConnectorRequest {
@@ -33,6 +36,7 @@ func sendMessageConnectorRequestFromNormalized(input normalizedSendMessageArgs)
 		TargetType:           input.TargetType,
 		TargetID:             input.TargetID,
 		TargetRef:            input.TargetRef,
+		ContentText:          input.ContentText,
 		ContentSHA256:        input.ContentSHA256,
 		ContentLength:        input.ContentLength,
 		IdempotencyKeySHA256: input.IdempotencyKeySHA256,

internal/tools/send_message_uia_adapter.go

@@ -0,0 +1,239 @@
+package tools
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"os"
+	"strconv"
+	"strings"
+	"time"
+
+	"isphere-ai-bridge/internal/helperclient"
+)
+
+const (
+	uiaSendMessageOp             = "uia_send_message"
+	EnvSendConnectorMode         = "ISPHERE_SEND_CONNECTOR_MODE"
+	EnvSendUIAHelperPath         = "ISPHERE_SEND_UIA_HELPER_PATH"
+	EnvSendUIAHwnd               = "ISPHERE_SEND_UIA_HWND"
+	EnvSendUIAEditorAutomationID = "ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID"
+	EnvSendUIButtonAutomationID  = "ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID"
+	EnvSendUIATimeoutSeconds     = "ISPHERE_SEND_UIA_TIMEOUT_SECONDS"
+)
+
+type UiaSendMessageAdapterConfig struct {
+	HelperPath             string
+	TimeoutSeconds         int
+	Hwnd                   string
+	SendEditorAutomationID string
+	SendButtonAutomationID string
+	Mode                   string
+}
+
+type UiaHelperCaller interface {
+	CallUiaHelper(ctx context.Context, op string, args map[string]any) (uiaHelperResponse, error)
+}
+
+type uiaHelperResponse struct {
+	OK      bool
+	Data    map[string]any
+	ErrCode string
+	ErrText string
+}
+
+type helperClientUiaCaller struct {
+	client helperclient.Client
+}
+
+type uiaSendMessageConnector struct {
+	config UiaSendMessageAdapterConfig
+	caller UiaHelperCaller
+}
+
+func NewSendMessageConnectorFromEnv() SendMessageConnector {
+	mode := strings.TrimSpace(strings.ToLower(os.Getenv(EnvSendConnectorMode)))
+	if mode != "uia_rpa" && mode != "uia-rpa" {
+		return nil
+	}
+	timeoutSeconds := 10
+	if raw := strings.TrimSpace(os.Getenv(EnvSendUIATimeoutSeconds)); raw != "" {
+		if parsed, err := strconv.Atoi(raw); err == nil && parsed > 0 {
+			timeoutSeconds = parsed
+		}
+	}
+	return NewUiaSendMessageConnector(UiaSendMessageAdapterConfig{
+		Mode:                   "enabled",
+		HelperPath:             strings.TrimSpace(os.Getenv(EnvSendUIAHelperPath)),
+		TimeoutSeconds:         timeoutSeconds,
+		Hwnd:                   strings.TrimSpace(os.Getenv(EnvSendUIAHwnd)),
+		SendEditorAutomationID: strings.TrimSpace(os.Getenv(EnvSendUIAEditorAutomationID)),
+		SendButtonAutomationID: strings.TrimSpace(os.Getenv(EnvSendUIButtonAutomationID)),
+	}, nil)
+}
+
+func NewUiaSendMessageConnector(config UiaSendMessageAdapterConfig, caller UiaHelperCaller) SendMessageConnector {
+	config.Mode = strings.TrimSpace(strings.ToLower(config.Mode))
+	if config.Mode == "" {
+		config.Mode = "disabled"
+	}
+	if config.SendEditorAutomationID == "" {
+		config.SendEditorAutomationID = "rtbSendMessage"
+	}
+	if config.SendButtonAutomationID == "" {
+		config.SendButtonAutomationID = "btnSend"
+	}
+	if caller == nil {
+		timeout := 10 * time.Second
+		if config.TimeoutSeconds > 0 {
+			timeout = time.Duration(config.TimeoutSeconds) * time.Second
+		}
+		caller = helperClientUiaCaller{client: helperclient.Client{HelperPath: config.HelperPath, Timeout: timeout}}
+	}
+	return uiaSendMessageConnector{config: config, caller: caller}
+}
+
+func (c uiaSendMessageConnector) ExecuteSendMessage(ctx context.Context, request SendMessageConnectorRequest) (SendMessageConnectorResult, error) {
+	if c.config.Mode != "enabled" && c.config.Mode != "uia_rpa" {
+		result := SendMessageConnectorResult{
+			Accepted:      false,
+			Status:        "blocked",
+			ErrorCode:     "uia_rpa_mode_blocked",
+			ErrorMessage:  "A-route UIA/RPA send adapter is disabled",
+			ConnectorMode: "uia-rpa-disabled",
+		}
+		return result, fmt.Errorf(result.ErrorMessage)
+	}
+	if err := validateUiaSendMessageConfig(c.config); err != nil {
+		result := SendMessageConnectorResult{
+			Accepted:      false,
+			Status:        "blocked",
+			ErrorCode:     "uia_rpa_config_missing",
+			ErrorMessage:  err.Error(),
+			ConnectorMode: "uia-rpa",
+		}
+		return result, err
+	}
+	if err := validateUiaSendMessageRequest(request); err != nil {
+		return SendMessageConnectorResult{
+			Accepted:      false,
+			Status:        "failed",
+			ErrorCode:     "uia_rpa_invalid_request",
+			ErrorMessage:  err.Error(),
+			ConnectorMode: "uia-rpa",
+		}, nil
+	}
+
+	args := map[string]any{
+		"hwnd":                      c.config.Hwnd,
+		"send_editor_automation_id": c.config.SendEditorAutomationID,
+		"send_button_automation_id": c.config.SendButtonAutomationID,
+		"target_ref":                request.TargetRef,
+		"content_text":              request.ContentText,
+		"content_sha256":            request.ContentSHA256,
+		"idempotency_key_sha256":    request.IdempotencyKeySHA256,
+	}
+	response, err := c.caller.CallUiaHelper(ctx, uiaSendMessageOp, args)
+	if err != nil {
+		return SendMessageConnectorResult{
+			Accepted:      false,
+			Status:        "failed",
+			ErrorCode:     "uia_rpa_helper_error",
+			ErrorMessage:  err.Error(),
+			ConnectorMode: "uia-rpa",
+		}, err
+	}
+	if !response.OK {
+		code := strings.TrimSpace(response.ErrCode)
+		if code == "" {
+			code = "uia_rpa_helper_rejected"
+		}
+		message := strings.TrimSpace(response.ErrText)
+		if message == "" {
+			message = "UIA helper rejected send action"
+		}
+		return SendMessageConnectorResult{
+			Accepted:      false,
+			Status:        "failed",
+			ErrorCode:     code,
+			ErrorMessage:  message,
+			ConnectorMode: "uia-rpa",
+		}, nil
+	}
+	ackRef, _ := response.Data["ack_ref"].(string)
+	if strings.TrimSpace(ackRef) == "" {
+		ackRef = "uia:" + c.config.Hwnd + ":" + c.config.SendButtonAutomationID
+	}
+	return SendMessageConnectorResult{
+		Accepted:          true,
+		Status:            "accepted",
+		AckRef:            ackRef,
+		ConnectorMode:     "uia-rpa",
+		ProductionEnabled: true,
+		SideEffects: map[string]any{
+			"sent_message":         true,
+			"typed_text":           true,
+			"clicked_ui":           true,
+			"uploaded_file":        false,
+			"sent_file":            false,
+			"captured_network":     false,
+			"attached_hook":        false,
+			"modified_client_data": false,
+		},
+	}, nil
+}
+
+func validateUiaSendMessageConfig(config UiaSendMessageAdapterConfig) error {
+	if strings.TrimSpace(config.Hwnd) == "" {
+		return fmt.Errorf("ISPHERE_SEND_UIA_HWND is required for A-route UIA send")
+	}
+	if strings.TrimSpace(config.SendEditorAutomationID) == "" {
+		return fmt.Errorf("send editor automation id is required")
+	}
+	if strings.TrimSpace(config.SendButtonAutomationID) == "" {
+		return fmt.Errorf("send button automation id is required")
+	}
+	return nil
+}
+
+func validateUiaSendMessageRequest(request SendMessageConnectorRequest) error {
+	if strings.TrimSpace(request.TargetRef) == "" {
+		return fmt.Errorf("target_ref is required")
+	}
+	if strings.TrimSpace(request.ContentText) == "" {
+		return fmt.Errorf("content_text is required")
+	}
+	if strings.TrimSpace(request.ContentSHA256) == "" {
+		return fmt.Errorf("content_sha256 is required")
+	}
+	if strings.TrimSpace(request.IdempotencyKeySHA256) == "" {
+		return fmt.Errorf("idempotency_key_sha256 is required")
+	}
+	if request.ExecutionMode != sendMessageProductionMode {
+		return fmt.Errorf("execution_mode must be production")
+	}
+	return nil
+}
+
+func (c helperClientUiaCaller) CallUiaHelper(ctx context.Context, op string, args map[string]any) (uiaHelperResponse, error) {
+	response, err := c.client.Call(ctx, op, args)
+	if err != nil {
+		return uiaHelperResponse{}, err
+	}
+	out := uiaHelperResponse{OK: response != nil && response.OK}
+	if response != nil {
+		out.Data = decodeRawData(response.Data)
+		if response.Error != nil {
+			out.ErrCode = response.Error.Code
+			out.ErrText = response.Error.Message
+		}
+	}
+	if out.Data == nil {
+		out.Data = map[string]any{}
+	}
+	return out, nil
+}
+
+func uiaHelperResponseFromRaw(data map[string]json.RawMessage, ok bool) uiaHelperResponse {
+	return uiaHelperResponse{OK: ok, Data: decodeRawData(data)}
+}

internal/tools/send_message_uia_adapter_test.go

@@ -0,0 +1,117 @@
+package tools
+
+import (
+	"context"
+	"testing"
+)
+
+func TestUiaSendMessageConnectorRequiresEnabledModeAndWindowConfig(t *testing.T) {
+	connector := NewUiaSendMessageConnector(UiaSendMessageAdapterConfig{Mode: "disabled"}, &fakeUiaHelperCaller{})
+	result, err := connector.ExecuteSendMessage(context.Background(), SendMessageConnectorRequest{
+		TargetRef:            "contact:alice@imopenfire1-lanzhou",
+		ContentText:          "hello",
+		ContentSHA256:        sha256HexForSendMessageTest("hello"),
+		IdempotencyKeySHA256: sha256HexForSendMessageTest("idem"),
+		ExecutionMode:        sendMessageProductionMode,
+	})
+	if err == nil {
+		t.Fatalf("expected disabled connector error")
+	}
+	if result.ErrorCode != "uia_rpa_mode_blocked" || result.ConnectorMode != "uia-rpa-disabled" {
+		t.Fatalf("unexpected result: %+v", result)
+	}
+
+	connector = NewUiaSendMessageConnector(UiaSendMessageAdapterConfig{Mode: "enabled"}, &fakeUiaHelperCaller{})
+	result, err = connector.ExecuteSendMessage(context.Background(), SendMessageConnectorRequest{
+		TargetRef:            "contact:alice@imopenfire1-lanzhou",
+		ContentText:          "hello",
+		ContentSHA256:        sha256HexForSendMessageTest("hello"),
+		IdempotencyKeySHA256: sha256HexForSendMessageTest("idem"),
+		ExecutionMode:        sendMessageProductionMode,
+	})
+	if err == nil {
+		t.Fatalf("expected missing config error")
+	}
+	if result.ErrorCode != "uia_rpa_config_missing" {
+		t.Fatalf("unexpected missing config result: %+v", result)
+	}
+}
+
+func TestUiaSendMessageConnectorCallsHelperAndMapsAck(t *testing.T) {
+	caller := &fakeUiaHelperCaller{response: uiaHelperResponse{
+		OK: true,
+		Data: map[string]any{
+			"action_mode":    "uia_send_message",
+			"target_ref":     "contact:alice@imopenfire1-lanzhou",
+			"content_sha256": sha256HexForSendMessageTest("hello uia"),
+			"sent_message":   true,
+			"typed_text":     true,
+			"clicked_ui":     true,
+			"ack_ref":        "uia:0x1234:btnSend",
+		},
+	}}
+	connector := NewUiaSendMessageConnector(UiaSendMessageAdapterConfig{
+		Mode:                   "enabled",
+		Hwnd:                   "0x1234",
+		SendEditorAutomationID: "rtbSendMessage",
+		SendButtonAutomationID: "btnSend",
+	}, caller)
+	result, err := connector.ExecuteSendMessage(context.Background(), SendMessageConnectorRequest{
+		TargetRef:            "contact:alice@imopenfire1-lanzhou",
+		ContentText:          "hello uia",
+		ContentSHA256:        sha256HexForSendMessageTest("hello uia"),
+		IdempotencyKeySHA256: sha256HexForSendMessageTest("idem-uia"),
+		ExecutionMode:        sendMessageProductionMode,
+	})
+	if err != nil {
+		t.Fatalf("ExecuteSendMessage: %v", err)
+	}
+	if !result.Accepted || result.Status != "accepted" || result.AckRef != "uia:0x1234:btnSend" || result.ConnectorMode != "uia-rpa" || !result.ProductionEnabled {
+		t.Fatalf("unexpected result: %+v", result)
+	}
+	if caller.op != "uia_send_message" {
+		t.Fatalf("helper op = %q", caller.op)
+	}
+	if caller.args["hwnd"] != "0x1234" || caller.args["send_editor_automation_id"] != "rtbSendMessage" || caller.args["send_button_automation_id"] != "btnSend" {
+		t.Fatalf("unexpected helper args: %#v", caller.args)
+	}
+	if caller.args["content_text"] != "hello uia" || caller.args["content_sha256"] != sha256HexForSendMessageTest("hello uia") {
+		t.Fatalf("helper did not receive send content/hash: %#v", caller.args)
+	}
+}
+
+func TestSendMessageConnectorFromEnvBuildsUiaRPAConnector(t *testing.T) {
+	t.Setenv(EnvSendConnectorMode, "uia_rpa")
+	t.Setenv(EnvSendUIAHwnd, "0x1234")
+	t.Setenv(EnvSendUIAEditorAutomationID, "editorA")
+	t.Setenv(EnvSendUIButtonAutomationID, "buttonA")
+	t.Setenv(EnvSendUIAHelperPath, t.TempDir()+"\\missing-helper.exe")
+
+	connector := NewSendMessageConnectorFromEnv()
+	if connector == nil {
+		t.Fatalf("NewSendMessageConnectorFromEnv returned nil for uia_rpa config")
+	}
+	result, err := connector.ExecuteSendMessage(context.Background(), SendMessageConnectorRequest{
+		TargetRef:            "contact:alice@imopenfire1-lanzhou",
+		ContentText:          "hello",
+		ContentSHA256:        sha256HexForSendMessageTest("hello"),
+		IdempotencyKeySHA256: sha256HexForSendMessageTest("idem"),
+		ExecutionMode:        sendMessageProductionMode,
+	})
+	if err == nil || result.ErrorCode != "uia_rpa_helper_error" {
+		t.Fatalf("expected configured connector to reach helper layer and fail on missing helper, got result=%+v err=%v", result, err)
+	}
+}
+
+type fakeUiaHelperCaller struct {
+	response uiaHelperResponse
+	err      error
+	op       string
+	args     map[string]any
+}
+
+func (f *fakeUiaHelperCaller) CallUiaHelper(ctx context.Context, op string, args map[string]any) (uiaHelperResponse, error) {
+	f.op = op
+	f.args = args
+	return f.response, f.err
+}

native/ISphereWinHelper/Program.cs

@@ -1,4 +1,4 @@
-using System;
+using System;
 using System.Collections.Generic;
 using System.IO;
 
@@ -53,6 +53,9 @@ namespace ISphereWinHelper
                     case "probe_send_uia_controls":
                         response = SendConnectorPreflight.ProbeSendUiaControls(requestId, op, opArgs);
                         break;
+                    case "uia_send_message":
+                        response = UiaSendAction.SendMessage(requestId, op, opArgs);
+                        break;
                     default:
                         response = HelperProtocol.Failure(requestId, op, "UNSUPPORTED_OP", "unsupported op: " + op);
                         break;
@@ -88,7 +91,7 @@ namespace ISphereWinHelper
             return new Dictionary<string, object>
             {
                 { "helper_name", "ISphereWinHelper" },
-                { "helper_version", "0.4.0" },
+                { "helper_version", "0.5.0" },
                 { "protocol", HelperProtocol.Protocol },
                 { "runtime", ".NET Framework " + Environment.Version }
             };
@@ -113,4 +116,4 @@ namespace ISphereWinHelper
             };
         }
     }
-}
+}

native/ISphereWinHelper/UiaSendAction.cs

@@ -0,0 +1,214 @@
+using System;
+using System.Collections.Generic;
+using System.Globalization;
+using System.Runtime.InteropServices;
+using System.Security.Cryptography;
+using System.Text;
+using System.Windows.Automation;
+
+namespace ISphereWinHelper
+{
+    internal static class UiaSendAction
+    {
+        private const int WM_SETTEXT = 0x000C;
+        private const int BM_CLICK = 0x00F5;
+
+        [DllImport("user32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
+        private static extern IntPtr SendMessage(IntPtr hWnd, int msg, IntPtr wParam, string lParam);
+
+        [DllImport("user32.dll", SetLastError = true)]
+        private static extern IntPtr SendMessage(IntPtr hWnd, int msg, IntPtr wParam, IntPtr lParam);
+
+        public static Dictionary<string, object> SendMessage(string requestId, string op, Dictionary<string, object> args)
+        {
+            string hwndText = HelperProtocol.GetString(args, "hwnd", "");
+            IntPtr hwnd;
+            if (!WindowScanner.TryParseHwnd(hwndText, out hwnd))
+            {
+                return HelperProtocol.Failure(requestId, op, "WINDOW_NOT_FOUND", "invalid or empty hwnd");
+            }
+
+            string editorAutomationId = HelperProtocol.GetString(args, "send_editor_automation_id", "rtbSendMessage");
+            string buttonAutomationId = HelperProtocol.GetString(args, "send_button_automation_id", "btnSend");
+            string contentText = HelperProtocol.GetString(args, "content_text", "");
+            string contentSha256 = HelperProtocol.GetString(args, "content_sha256", "").Trim().ToLowerInvariant();
+            string targetRef = HelperProtocol.GetString(args, "target_ref", "");
+
+            if (string.IsNullOrWhiteSpace(editorAutomationId))
+            {
+                return HelperProtocol.Failure(requestId, op, "UIA_SEND_CONFIG_MISSING", "send_editor_automation_id is required");
+            }
+            if (string.IsNullOrWhiteSpace(buttonAutomationId))
+            {
+                return HelperProtocol.Failure(requestId, op, "UIA_SEND_CONFIG_MISSING", "send_button_automation_id is required");
+            }
+            if (string.IsNullOrWhiteSpace(contentText))
+            {
+                return HelperProtocol.Failure(requestId, op, "UIA_SEND_CONTENT_MISSING", "content_text is required");
+            }
+            if (string.IsNullOrWhiteSpace(contentSha256) || contentSha256 != Sha256Hex(contentText))
+            {
+                return HelperProtocol.Failure(requestId, op, "UIA_SEND_HASH_MISMATCH", "content_sha256 does not match content_text");
+            }
+
+            try
+            {
+                AutomationElement root = AutomationElement.FromHandle(hwnd);
+                if (root == null)
+                {
+                    return HelperProtocol.Failure(requestId, op, "WINDOW_NOT_FOUND", "no UI Automation element for hwnd");
+                }
+
+                AutomationElement editor = FindByAutomationId(root, editorAutomationId);
+                if (editor == null)
+                {
+                    return HelperProtocol.Failure(requestId, op, "UIA_SEND_EDITOR_NOT_FOUND", "send editor control not found: " + editorAutomationId);
+                }
+                AutomationElement button = FindByAutomationId(root, buttonAutomationId);
+                if (button == null)
+                {
+                    return HelperProtocol.Failure(requestId, op, "UIA_SEND_BUTTON_NOT_FOUND", "send button control not found: " + buttonAutomationId);
+                }
+
+                bool typed = SetElementText(editor, contentText);
+                if (!typed)
+                {
+                    return HelperProtocol.Failure(requestId, op, "UIA_SEND_SET_TEXT_FAILED", "could not set send editor text");
+                }
+
+                bool clicked = InvokeElement(button);
+                if (!clicked)
+                {
+                    return HelperProtocol.Failure(requestId, op, "UIA_SEND_CLICK_FAILED", "could not invoke send button");
+                }
+
+                string ackRef = "uia:" + WindowScanner.FormatHwnd(hwnd) + ":" + buttonAutomationId + ":" + ShortHash(contentSha256);
+                var data = new Dictionary<string, object>
+                {
+                    { "action_mode", "uia_send_message" },
+                    { "hwnd", WindowScanner.FormatHwnd(hwnd) },
+                    { "target_ref", targetRef ?? "" },
+                    { "content_sha256", contentSha256 },
+                    { "content_length", contentText.Length },
+                    { "editor_automation_id", editorAutomationId },
+                    { "button_automation_id", buttonAutomationId },
+                    { "editor_found", true },
+                    { "button_found", true },
+                    { "typed_text", true },
+                    { "clicked_ui", true },
+                    { "sent_message", true },
+                    { "uploaded_file", false },
+                    { "sent_file", false },
+                    { "captured_network", false },
+                    { "attached_hook", false },
+                    { "modified_client_data", false },
+                    { "ack_ref", ackRef }
+                };
+                return HelperProtocol.Success(requestId, op, data);
+            }
+            catch (Exception ex)
+            {
+                return HelperProtocol.Failure(requestId, op, "UIA_SEND_FAILED", ex.Message);
+            }
+        }
+
+        private static AutomationElement FindByAutomationId(AutomationElement root, string automationId)
+        {
+            if (root == null || string.IsNullOrWhiteSpace(automationId))
+            {
+                return null;
+            }
+            try
+            {
+                return root.FindFirst(TreeScope.Descendants, new PropertyCondition(AutomationElement.AutomationIdProperty, automationId));
+            }
+            catch
+            {
+                return null;
+            }
+        }
+
+        private static bool SetElementText(AutomationElement element, string text)
+        {
+            try
+            {
+                object pattern;
+                if (element.TryGetCurrentPattern(ValuePattern.Pattern, out pattern))
+                {
+                    ((ValuePattern)pattern).SetValue(text);
+                    return true;
+                }
+            }
+            catch
+            {
+            }
+
+            try
+            {
+                int nativeHandle = element.Current.NativeWindowHandle;
+                if (nativeHandle != 0)
+                {
+                    SendMessage(new IntPtr(nativeHandle), WM_SETTEXT, IntPtr.Zero, text);
+                    return true;
+                }
+            }
+            catch
+            {
+            }
+            return false;
+        }
+
+        private static bool InvokeElement(AutomationElement element)
+        {
+            try
+            {
+                object pattern;
+                if (element.TryGetCurrentPattern(InvokePattern.Pattern, out pattern))
+                {
+                    ((InvokePattern)pattern).Invoke();
+                    return true;
+                }
+            }
+            catch
+            {
+            }
+
+            try
+            {
+                int nativeHandle = element.Current.NativeWindowHandle;
+                if (nativeHandle != 0)
+                {
+                    SendMessage(new IntPtr(nativeHandle), BM_CLICK, IntPtr.Zero, IntPtr.Zero);
+                    return true;
+                }
+            }
+            catch
+            {
+            }
+            return false;
+        }
+
+        private static string Sha256Hex(string value)
+        {
+            using (SHA256 sha = SHA256.Create())
+            {
+                byte[] hash = sha.ComputeHash(Encoding.UTF8.GetBytes(value ?? ""));
+                StringBuilder sb = new StringBuilder(hash.Length * 2);
+                foreach (byte b in hash)
+                {
+                    sb.Append(b.ToString("x2", CultureInfo.InvariantCulture));
+                }
+                return sb.ToString();
+            }
+        }
+
+        private static string ShortHash(string value)
+        {
+            if (string.IsNullOrEmpty(value))
+            {
+                return "";
+            }
+            return value.Length <= 12 ? value : value.Substring(0, 12);
+        }
+    }
+}

scripts/open-offline-real-client-window.ps1

@@ -0,0 +1,327 @@
+param(
+    [string]$ArchivePath = "runs/offline-evidence-intake/zyl-qqfile-20260709/archives/zyl.rar",
+    [string]$ExtractDir = "runs/offline-real-client-window/full",
+    [ValidateSet("Impp", "iSphere")]
+    [string]$ClientRoot = "Impp",
+    [string]$HelperExe = "runs/win-helper/ISphereWinHelper.exe",
+    [int]$WaitSeconds = 10,
+    [int]$X = 120,
+    [int]$Y = 120,
+    [int]$Width = 270,
+    [int]$Height = 570,
+    [ValidateSet("Visible", "Offscreen", "Minimized")]
+    [string]$WindowMode = "Visible",
+    [switch]$SkipExtract,
+    [switch]$NoLaunch,
+    [switch]$KeepExisting,
+    [switch]$TopMost,
+    [switch]$NoActivate,
+    [switch]$UserSilent,
+    [switch]$NoScreenshot
+)
+
+$ErrorActionPreference = "Stop"
+$repo = Resolve-Path -LiteralPath (Join-Path $PSScriptRoot "..")
+$InfoPromptTitle = -join ([char[]](0x4FE1, 0x606F, 0x63D0, 0x793A))
+
+if ($UserSilent) {
+    $WindowMode = "Offscreen"
+    $NoActivate = $true
+    $NoScreenshot = $true
+    $TopMost = $false
+}
+
+$effectiveX = $X
+$effectiveY = $Y
+if ($WindowMode -eq "Offscreen") {
+    $effectiveX = -32000
+    $effectiveY = -32000
+}
+
+function Resolve-RepoPath([string]$PathValue) {
+    if ([System.IO.Path]::IsPathRooted($PathValue)) {
+        return $PathValue
+    }
+    return (Join-Path $repo $PathValue)
+}
+
+function Find-7Zip {
+    $candidates = @(
+        "C:\Program Files\7-Zip\7z.exe",
+        "C:\Program Files (x86)\7-Zip\7z.exe"
+    )
+    foreach ($candidate in $candidates) {
+        if (Test-Path -LiteralPath $candidate) {
+            return $candidate
+        }
+    }
+    $cmd = Get-Command "7z" -ErrorAction SilentlyContinue
+    if ($cmd) {
+        return $cmd.Source
+    }
+    $cmd = Get-Command "7zr" -ErrorAction SilentlyContinue
+    if ($cmd) {
+        return $cmd.Source
+    }
+    throw "7-Zip not found. Install 7-Zip or pass -SkipExtract after extracting the archive."
+}
+
+function Invoke-HelperJson([string]$Op, [hashtable]$OpArgs, [string]$RequestId) {
+    $request = @{
+        protocol = "isphere.helper.v1"
+        request_id = $RequestId
+        op = $Op
+        timeout_ms = 5000
+        args = $OpArgs
+    }
+    $json = $request | ConvertTo-Json -Depth 16 -Compress
+    $output = $json | & $script:HelperPath --json
+    try {
+        return $output | ConvertFrom-Json
+    }
+    catch {
+        throw "helper output was not JSON: $output"
+    }
+}
+
+function Stop-ExistingOfflineCopies([string]$RootPath) {
+    $rootFull = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') + "\"
+    $targets = @("IMPlatformClient.exe", "IMPP.ISphere.exe", "IMPlatformClient.Web.exe")
+    $processes = Get-CimInstance Win32_Process |
+        Where-Object { $targets -contains $_.Name -and $_.ExecutablePath -and ([System.IO.Path]::GetFullPath($_.ExecutablePath).StartsWith($rootFull, [System.StringComparison]::OrdinalIgnoreCase)) }
+    foreach ($proc in $processes) {
+        Stop-Process -Id ([int]$proc.ProcessId) -Force -ErrorAction SilentlyContinue
+    }
+}
+
+function Add-NativeWindowApi {
+    Add-Type @"
+using System;
+using System.Runtime.InteropServices;
+public static class ISphereOfflineWindowApi {
+  [DllImport("user32.dll")] public static extern bool MoveWindow(IntPtr hWnd, int X, int Y, int nWidth, int nHeight, bool bRepaint);
+  [DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
+  [DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr hWnd);
+  [DllImport("user32.dll")] public static extern bool SetWindowPos(IntPtr hWnd, IntPtr hWndInsertAfter, int X, int Y, int cx, int cy, uint uFlags);
+}
+"@ -ErrorAction SilentlyContinue
+}
+
+function Move-ClientWindows([object[]]$Windows, [int]$MainX, [int]$MainY, [int]$MainWidth, [int]$MainHeight, [bool]$MakeTopMost, [bool]$Activate, [string]$Mode) {
+    $hwndTop = [IntPtr]::Zero
+    $topMostHandle = [IntPtr]::new(-1)
+    $swpShowWindow = 0x0040
+    $swpNoActivate = 0x0010
+    $mainWindow = $null
+    $promptWindow = $null
+    foreach ($window in $Windows) {
+        if ([string]$window.process_name -ne "IMPlatformClient") {
+            continue
+        }
+        $hwndValue = [Convert]::ToInt64(($window.hwnd -replace "^0x", ""), 16)
+        $hwnd = [IntPtr]::new($hwndValue)
+        [ISphereOfflineWindowApi]::ShowWindow($hwnd, 9) | Out-Null
+        if ([string]$window.title -eq $InfoPromptTitle) {
+            $promptX = if ($Mode -eq "Offscreen") { $MainX } else { $MainX + $MainWidth + 40 }
+            $promptY = if ($Mode -eq "Offscreen") { $MainY + $MainHeight + 40 } else { $MainY + 40 }
+            $flags = $swpShowWindow
+            if (-not $Activate) { $flags = $flags -bor $swpNoActivate }
+            [ISphereOfflineWindowApi]::SetWindowPos($hwnd, $hwndTop, $promptX, $promptY, 300, 190, [uint32]$flags) | Out-Null
+            if ($Activate) {
+                [ISphereOfflineWindowApi]::SetForegroundWindow($hwnd) | Out-Null
+            }
+            if ($Mode -eq "Minimized") {
+                [ISphereOfflineWindowApi]::ShowWindow($hwnd, 6) | Out-Null
+            }
+            $promptWindow = $window
+        }
+        else {
+            $insertAfter = if ($MakeTopMost) { $topMostHandle } else { $hwndTop }
+            $flags = $swpShowWindow
+            if (-not $Activate) {
+                $flags = $flags -bor $swpNoActivate
+            }
+            [ISphereOfflineWindowApi]::SetWindowPos($hwnd, $insertAfter, $MainX, $MainY, $MainWidth, $MainHeight, [uint32]$flags) | Out-Null
+            if ($Activate) {
+                [ISphereOfflineWindowApi]::SetForegroundWindow($hwnd) | Out-Null
+            }
+            if ($Mode -eq "Minimized") {
+                [ISphereOfflineWindowApi]::ShowWindow($hwnd, 6) | Out-Null
+            }
+            $mainWindow = $window
+        }
+    }
+    return @{
+        main = $mainWindow
+        prompt = $promptWindow
+    }
+}
+
+function Save-WindowScreenshot([string]$OutputPath, [int]$ScreenX, [int]$ScreenY, [int]$CaptureWidth, [int]$CaptureHeight) {
+    Add-Type -AssemblyName System.Drawing
+    $bitmap = New-Object System.Drawing.Bitmap $CaptureWidth, $CaptureHeight
+    $graphics = [System.Drawing.Graphics]::FromImage($bitmap)
+    try {
+        $graphics.CopyFromScreen(($ScreenX - 30), ($ScreenY - 30), 0, 0, $bitmap.Size)
+        $bitmap.Save($OutputPath, [System.Drawing.Imaging.ImageFormat]::Png)
+    }
+    finally {
+        $graphics.Dispose()
+        $bitmap.Dispose()
+    }
+}
+
+$archiveFull = Resolve-RepoPath $ArchivePath
+$extractFull = Resolve-RepoPath $ExtractDir
+$script:HelperPath = Resolve-RepoPath $HelperExe
+$runOut = Join-Path $repo "runs\offline-real-client-window"
+New-Item -ItemType Directory -Force -Path $runOut | Out-Null
+
+if (-not (Test-Path -LiteralPath $script:HelperPath)) {
+    throw "WinHelper not found: $script:HelperPath. Run scripts\build-win-helper.ps1 first."
+}
+
+$clientDir = Join-Path $extractFull ("zyl\" + $ClientRoot)
+$clientExe = Join-Path $clientDir "IMPlatformClient.exe"
+$clientConfig = Join-Path $clientDir "IMPlatformClient.exe.config"
+$requiredDependency = Join-Path $clientDir "Utilities.Lib.Base.dll"
+
+if (-not $SkipExtract -and (-not (Test-Path -LiteralPath $clientExe) -or -not (Test-Path -LiteralPath $clientConfig) -or -not (Test-Path -LiteralPath $requiredDependency))) {
+    if (-not (Test-Path -LiteralPath $archiveFull)) {
+        throw "archive not found: $archiveFull"
+    }
+    New-Item -ItemType Directory -Force -Path $extractFull | Out-Null
+    $sevenZip = Find-7Zip
+    & $sevenZip x $archiveFull "-o$extractFull" "zyl\Impp\*" "zyl\iSphere\*" -y | Out-Host
+    if ($LASTEXITCODE -ne 0) {
+        throw "7-Zip extraction failed with exit code $LASTEXITCODE"
+    }
+}
+
+if (-not (Test-Path -LiteralPath $clientExe)) {
+    throw "client exe not found after extraction: $clientExe"
+}
+
+Add-NativeWindowApi
+
+if (-not $KeepExisting) {
+    Stop-ExistingOfflineCopies -RootPath $extractFull
+    Start-Sleep -Milliseconds 500
+}
+
+$process = $null
+if (-not $NoLaunch) {
+    if ($UserSilent -or $WindowMode -ne "Visible" -or $NoActivate) {
+        $process = Start-Process -FilePath $clientExe -WorkingDirectory $clientDir -WindowStyle Minimized -PassThru
+    }
+    else {
+        $process = Start-Process -FilePath $clientExe -WorkingDirectory $clientDir -PassThru
+    }
+}
+
+$deadline = (Get-Date).AddSeconds([Math]::Max(1, $WaitSeconds))
+$scan = $null
+$windows = @()
+do {
+    Start-Sleep -Milliseconds 500
+    $scan = Invoke-HelperJson -Op "scan_windows" -OpArgs @{ include_all_visible = $false } -RequestId "offline-real-client-scan"
+    if ($scan.ok -and $scan.data.windows) {
+        $windows = @($scan.data.windows | Where-Object {
+            $_.process_name -eq "IMPlatformClient" -and
+            ((-not $process) -or $_.pid -eq $process.Id)
+        })
+    }
+} while ($windows.Count -eq 0 -and (Get-Date) -lt $deadline)
+
+if ($windows.Count -eq 0) {
+    throw "no visible IMPlatformClient window found. Last scan: $($scan | ConvertTo-Json -Depth 12 -Compress)"
+}
+
+$activateWindows = -not [bool]$NoActivate
+$moveResult = Move-ClientWindows -Windows $windows -MainX $effectiveX -MainY $effectiveY -MainWidth $Width -MainHeight $Height -MakeTopMost ([bool]$TopMost) -Activate $activateWindows -Mode $WindowMode
+Start-Sleep -Seconds 1
+
+$scanAfterMove = Invoke-HelperJson -Op "scan_windows" -OpArgs @{ include_all_visible = $false } -RequestId "offline-real-client-scan-after-move"
+$windowsAfterMove = @($scanAfterMove.data.windows | Where-Object {
+    $_.process_name -eq "IMPlatformClient" -and
+    ((-not $process) -or $_.pid -eq $process.Id)
+})
+
+# The offline client can raise a late "信息提示" dialog after the login window is
+# already visible. Move it to the right side so the login window remains usable
+# for RPA probing, then refresh the final window list.
+$latePromptWindows = @($windowsAfterMove | Where-Object { [string]$_.title -eq $InfoPromptTitle })
+if ($latePromptWindows.Count -gt 0) {
+    foreach ($latePromptWindow in $latePromptWindows) {
+        $promptHwndValue = [Convert]::ToInt64(($latePromptWindow.hwnd -replace "^0x", ""), 16)
+        $promptHwnd = [IntPtr]::new($promptHwndValue)
+        [ISphereOfflineWindowApi]::ShowWindow($promptHwnd, 9) | Out-Null
+        $latePromptX = if ($WindowMode -eq "Offscreen") { $effectiveX } else { $effectiveX + $Width + 40 }
+        $latePromptY = if ($WindowMode -eq "Offscreen") { $effectiveY + $Height + 40 } else { $effectiveY + 40 }
+        $latePromptFlags = 0x0040
+        if (-not $activateWindows) { $latePromptFlags = $latePromptFlags -bor 0x0010 }
+        [ISphereOfflineWindowApi]::SetWindowPos($promptHwnd, [IntPtr]::Zero, $latePromptX, $latePromptY, 300, 190, [uint32]$latePromptFlags) | Out-Null
+        if ($activateWindows) {
+            [ISphereOfflineWindowApi]::SetForegroundWindow($promptHwnd) | Out-Null
+        }
+        if ($WindowMode -eq "Minimized") {
+            [ISphereOfflineWindowApi]::ShowWindow($promptHwnd, 6) | Out-Null
+        }
+    }
+    Start-Sleep -Milliseconds 500
+    $scanAfterMove = Invoke-HelperJson -Op "scan_windows" -OpArgs @{ include_all_visible = $false } -RequestId "offline-real-client-scan-after-prompt-move"
+    $windowsAfterMove = @($scanAfterMove.data.windows | Where-Object {
+        $_.process_name -eq "IMPlatformClient" -and
+        ((-not $process) -or $_.pid -eq $process.Id)
+    })
+}
+
+$mainWindowMatches = @($windowsAfterMove | Where-Object { [string]$_.title -ne $InfoPromptTitle })
+$promptWindowMatches = @($windowsAfterMove | Where-Object { [string]$_.title -eq $InfoPromptTitle })
+$mainWindow = if ($mainWindowMatches.Count -gt 0) { $mainWindowMatches[0] } else { $null }
+$promptWindow = if ($promptWindowMatches.Count -gt 0) { $promptWindowMatches[0] } else { $null }
+
+$dumpFile = $null
+$dump = $null
+if ($mainWindow) {
+    $dump = Invoke-HelperJson -Op "dump_uia" -OpArgs @{
+        hwnd = $mainWindow.hwnd
+        max_depth = 8
+        max_children = 200
+        include_text = $true
+    } -RequestId "offline-real-client-dump-uia"
+    $dumpFile = Join-Path $runOut ("uia-dump-open-offline-real-client-{0}.json" -f ((Get-Date).ToString("yyyyMMdd-HHmmss")))
+    $dump | ConvertTo-Json -Depth 40 | Set-Content -LiteralPath $dumpFile -Encoding UTF8
+}
+
+$screenshotFile = $null
+if (-not $NoScreenshot -and $WindowMode -eq "Visible") {
+    $screenshotFile = Join-Path $runOut ("open-offline-real-client-{0}.png" -f ((Get-Date).ToString("yyyyMMdd-HHmmss")))
+    $captureWidth = if ($promptWindow) { $Width + 420 } else { $Width + 80 }
+    Save-WindowScreenshot -OutputPath $screenshotFile -ScreenX $effectiveX -ScreenY $effectiveY -CaptureWidth $captureWidth -CaptureHeight ($Height + 80)
+}
+
+[pscustomobject]@{
+    ok = $true
+    user_silent = [bool]$UserSilent
+    window_mode = $WindowMode
+    no_activate = [bool]$NoActivate
+    effective_bounds = @{
+        x = $effectiveX
+        y = $effectiveY
+        width = $Width
+        height = $Height
+    }
+    archive = $archiveFull
+    extracted_dir = $extractFull
+    client_root = $ClientRoot
+    client_exe = $clientExe
+    process_id = if ($process) { $process.Id } else { $null }
+    alive = if ($process) { $null -ne (Get-Process -Id $process.Id -ErrorAction SilentlyContinue) } else { $null }
+    main_window = $mainWindow
+    prompt_window = $promptWindow
+    uia_root = if ($dump -and $dump.ok) { $dump.data.root } else { $null }
+    uia_dump_file = $dumpFile
+    screenshot_file = $screenshotFile
+    windows = $windowsAfterMove
+} | ConvertTo-Json -Depth 24

scripts/verify-go-mcp.ps1

@@ -1,4 +1,4 @@
-$ErrorActionPreference = "Stop"
+$ErrorActionPreference = "Stop"
 Set-StrictMode -Version Latest
 
 $repo = (Resolve-Path -LiteralPath (Join-Path $PSScriptRoot "..")).Path
@@ -100,7 +100,7 @@ func main() {
 	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
 	defer cancel()
 
-	for _, key := range []string{"ISPHERE_PACKET_LOG_FILE", "ISPHERE_PACKET_LOG_DIR", "ISPHERE_MSGLIB_SIDECAR_EXE", "ISPHERE_MSGLIB_SQLITE_DLL", "ISPHERE_MSGLIB_DB", "ISPHERE_MSGLIB_PASSWORD", "ISPHERE_SEND_FILE_ALLOWED_DIR", "ISPHERE_SEND_FILE_AUDIT_PATH", "ISPHERE_SEND_FILE_IDEMPOTENCY_PATH"} {
+	for _, key := range []string{"ISPHERE_PACKET_LOG_FILE", "ISPHERE_PACKET_LOG_DIR", "ISPHERE_MSGLIB_SIDECAR_EXE", "ISPHERE_MSGLIB_SQLITE_DLL", "ISPHERE_MSGLIB_DB", "ISPHERE_MSGLIB_PASSWORD", "ISPHERE_SEND_PRODUCTION_ENABLED", "ISPHERE_SEND_CONNECTOR_MODE", "ISPHERE_SEND_UIA_HELPER_PATH", "ISPHERE_SEND_UIA_HWND", "ISPHERE_SEND_UIA_EDITOR_AUTOMATION_ID", "ISPHERE_SEND_UIA_BUTTON_AUTOMATION_ID", "ISPHERE_SEND_UIA_TIMEOUT_SECONDS", "ISPHERE_SEND_FILE_ALLOWED_DIR", "ISPHERE_SEND_FILE_AUDIT_PATH", "ISPHERE_SEND_FILE_IDEMPOTENCY_PATH"} {
 		if err := os.Unsetenv(key); err != nil {
 			fail("server/env", err)
 		}

scripts/verify-win-helper.ps1

@@ -1,4 +1,4 @@
-param(
+param(
     [string]$HelperExe = "runs/win-helper/ISphereWinHelper.exe",
     [switch]$SkipBuild
 )
@@ -107,6 +107,7 @@ if ($dumpMissing.ok -or $dumpMissing.error.code -notin @("WINDOW_NOT_FOUND", "UI
 
 $title = "Codex WinHelper Verify " + [guid]::NewGuid().ToString("N").Substring(0, 8)
 $formScriptPath = Join-Path $env:TEMP ("codex-winhelper-form-" + [guid]::NewGuid().ToString("N") + ".ps1")
+$sendActionMarkerPath = Join-Path $env:TEMP ("codex-winhelper-send-marker-" + [guid]::NewGuid().ToString("N") + ".json")
 $formScript = @"
 Add-Type -AssemblyName System.Windows.Forms
 `$form = New-Object System.Windows.Forms.Form
@@ -137,6 +138,10 @@ Add-Type -AssemblyName System.Windows.Forms
 `$button.Name = 'btnSend'
 `$button.Text = 'Send'
 `$button.Dock = 'Fill'
+`$button.Add_Click({
+    `$payload = [ordered]@{ clicked = `$true; text = `$send.Text } | ConvertTo-Json -Compress
+    Set-Content -LiteralPath '$sendActionMarkerPath' -Value `$payload -Encoding UTF8
+})
 `$layout.Controls.Add(`$button)
 `$file = New-Object System.Windows.Forms.Button
 `$file.Name = 'btnFile'
@@ -196,6 +201,42 @@ try {
     if ($sendUiaProbe.data.safety.sent_message -or $sendUiaProbe.data.safety.uploaded_file -or $sendUiaProbe.data.safety.clicked_ui -or $sendUiaProbe.data.safety.typed_text) {
         throw "probe_send_uia_controls safety flags failed: $($sendUiaProbe | ConvertTo-Json -Depth 12 -Compress)"
     }
+    $sendContent = "Codex synthetic UIA send " + [guid]::NewGuid().ToString("N").Substring(0, 8)
+    $sha = [System.Security.Cryptography.SHA256]::Create()
+    try {
+        $bytes = [System.Text.Encoding]::UTF8.GetBytes($sendContent)
+        $sendContentHash = -join ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString("x2") })
+    }
+    finally {
+        $sha.Dispose()
+    }
+    $sendAction = Invoke-HelperJson @{
+        protocol = "isphere.helper.v1"
+        request_id = "verify-uia-send-message"
+        op = "uia_send_message"
+        timeout_ms = 5000
+        args = @{
+            hwnd = $candidate.hwnd
+            send_editor_automation_id = "rtbSendMessage"
+            send_button_automation_id = "btnSend"
+            target_ref = "synthetic:verify"
+            content_text = $sendContent
+            content_sha256 = $sendContentHash
+        }
+    }
+    if (-not $sendAction.ok -or $sendAction.data.action_mode -ne "uia_send_message" -or -not $sendAction.data.sent_message -or -not $sendAction.data.typed_text -or -not $sendAction.data.clicked_ui) {
+        throw "uia_send_message failed: $($sendAction | ConvertTo-Json -Depth 12 -Compress)"
+    }
+    for ($i = 0; $i -lt 20 -and -not (Test-Path -LiteralPath $sendActionMarkerPath); $i++) {
+        Start-Sleep -Milliseconds 100
+    }
+    if (-not (Test-Path -LiteralPath $sendActionMarkerPath)) {
+        throw "uia_send_message did not trigger synthetic send button marker"
+    }
+    $marker = Get-Content -LiteralPath $sendActionMarkerPath -Raw | ConvertFrom-Json
+    if (-not $marker.clicked -or $marker.text -ne $sendContent) {
+        throw "uia_send_message marker mismatch: $($marker | ConvertTo-Json -Compress)"
+    }
 }
 finally {
     if ($process -and -not $process.HasExited) {
@@ -204,6 +245,9 @@ finally {
     if (Test-Path -LiteralPath $formScriptPath) {
         Remove-Item -LiteralPath $formScriptPath -Force
     }
+    if (Test-Path -LiteralPath $sendActionMarkerPath) {
+        Remove-Item -LiteralPath $sendActionMarkerPath -Force
+    }
 }
 
 [ordered]@{
@@ -214,5 +258,6 @@ finally {
     runtime_probe_target_count = $runtimeProbe.data.target_count
     send_entrypoint_probe_mode = $entrypointProbe.data.probe_mode
     synthetic_send_uia_route_hint = $sendUiaProbe.data.flags.route_hint
+    synthetic_uia_send_action = $sendAction.data.action_mode
     uia_available = $selfCheck.data.uia_available
 } | ConvertTo-Json -Depth 4 -Compress