@agent-wechat/cli 1.0.0-beta.8 → 1.0.0-beta.9

package/README.md

@@ -1,6 +1,6 @@
 # @agent-wechat/cli
 
-`wx` is the native Rust client and foreground daemon. The npm package installs a matching release executable; it does not implement the native protocol in JavaScript. The supported distribution targets are Linux x64 and ARM64 with glibc 2.36+. macOS, Windows and musl do not have a native release. Clients on other systems can use the HTTP API of a supported Linux daemon. `wx --json version` and `/v1/status` expose the runtime and account capabilities; unsupported official schemas fail explicitly.
+`wx` is the native Rust client and foreground daemon. The npm package installs a matching release executable; it does not implement the native protocol in JavaScript. Linux x64/ARM64 with glibc 2.36+ is validated. The release matrix also builds macOS ARM64 and native Windows x64/ARM64 candidates; native-machine account acceptance is pending. musl remains unsupported. Official-app profile takeover is Linux-only. Clients on other systems can use the HTTP API of a supported Linux daemon. `wx --json version` and `/v1/status` expose the runtime and account capabilities; unsupported official schemas fail explicitly.
 
 ## Installation
 
@@ -51,6 +51,21 @@ wx auth login --official=/absolute/official-profile
 
 The daemon binds the stored identity, attempts saved-device login and derives verified database keys after authentication. The official app stays closed while this daemon owns the files.
 
+Recall an own message using its opaque message ID and exact decimal-string
+server ID from history or a verified send receipt:
+
+```bash
+wx --account example messages recall MESSAGE_ID --server-id SERVER_ID
+wx --account example operations get OPERATION_ID
+```
+
+Use `--detach` to return the durable operation immediately. A private receipt is
+written before submission; the same target uses a stable default idempotency
+key. An uncertain result exits8 and must be inspected rather than automatically
+resubmitted. WeChat decides eligibility, and stopping the watcher does not cancel
+the recall. Recalled messages remain as placeholders; their media is unavailable
+through the daemon. Raw journals, cached files and backups are retained.
+
 Lower-level registration and experimental profile copies are also available:
 
 ```bash
@@ -88,3 +103,5 @@ Deployment examples and the deliberate release preparation sequence are in [depl
 `native-install.mjs` runs during npm installation, or through `wx-native-install` for offline/disabled-script installs. It selects the host architecture, checks the npm-bundled hash and verifies executable identity before atomic installation. `native-launcher.mjs` only runs an already installed executable.
 
 `native-check-package.mjs` is the prepack/prepublish gate. It checks version/source/target/checksum metadata; before publication it additionally requires both architecture assets to exist and match the package's manifest. A local pack smoke can use one architecture fragment; publication requires the complete matrix. These helpers belong to the existing CLI package, not additional npm packages.
+
+Candidate platform validation and remaining profile boundaries are tracked in [the acceptance checklist](../../dev-notes/native-platform-acceptance.md). Windows executables are named `wx.exe`; the npm launcher chooses the OS/CPU-specific asset. A native ARM64 Node installation selects the native Windows ARM64 executable.

package/native-release.json

@@ -1,29 +1,53 @@
 {
   "schemaVersion": 1,
-  "version": "1.0.0-beta.8",
+  "version": "1.0.0-beta.9",
   "repository": "thisnick/agent-wechat",
-  "sourceCommit": "79280a734fae9fab54bc045b56fdffd508d5f3eb",
+  "sourceCommit": "6b2034a16697731d08b70d6051382469f630cc79",
   "sourceTreeDirty": false,
   "assets": [
     {
-      "name": "wx-v1.0.0-beta.8-linux-arm64-gnu",
+      "name": "wx-v1.0.0-beta.9-darwin-arm64",
+      "platform": "darwin",
+      "arch": "arm64",
+      "rustTarget": "aarch64-apple-darwin",
+      "bytes": 23752464,
+      "sha256": "9e0ceb7aad4d00ab027630f4457e2d2f4b696226987242643e0e9c14801a2abb"
+    },
+    {
+      "name": "wx-v1.0.0-beta.9-linux-arm64-gnu",
       "platform": "linux",
       "arch": "arm64",
       "libc": "gnu",
       "minimumGlibc": "2.36",
       "rustTarget": "aarch64-unknown-linux-gnu",
-      "bytes": 27093520,
-      "sha256": "4c78ba866d3ae8c74d4404f417fff89943f7658b3c2a3d8c165cbad2279d9a14"
+      "bytes": 27797968,
+      "sha256": "0e21f34c74a5dd6ebe8375f3ffb1c66fd5cdde48b67ac2e4033af8e74acc5e0f"
     },
     {
-      "name": "wx-v1.0.0-beta.8-linux-x64-gnu",
+      "name": "wx-v1.0.0-beta.9-linux-x64-gnu",
       "platform": "linux",
       "arch": "x64",
       "libc": "gnu",
       "minimumGlibc": "2.36",
       "rustTarget": "x86_64-unknown-linux-gnu",
-      "bytes": 28757872,
-      "sha256": "fde2920e71e0e20b926498b8c306a5064527afa5abd2b558eff9cefa0cce478e"
+      "bytes": 29494920,
+      "sha256": "dad1fd67b3f9581455c01e2d932193864e9f7c9640fdf7bea5a3bd7cd69f5147"
+    },
+    {
+      "name": "wx-v1.0.0-beta.9-win32-arm64.exe",
+      "platform": "win32",
+      "arch": "arm64",
+      "rustTarget": "aarch64-pc-windows-msvc",
+      "bytes": 21413888,
+      "sha256": "c23179ceb347e258ccf6229cbd2b92ab3eaffba6761f4a0532eafce9f1049be7"
+    },
+    {
+      "name": "wx-v1.0.0-beta.9-win32-x64.exe",
+      "platform": "win32",
+      "arch": "x64",
+      "rustTarget": "x86_64-pc-windows-msvc",
+      "bytes": 25868800,
+      "sha256": "ffd236eff7e496c82b5009e3993d33a5ed04726a5aa37407f19b38870c4c8d96"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-wechat/cli",
-  "version": "1.0.0-beta.8",
+  "version": "1.0.0-beta.9",
   "type": "module",
   "bin": {
     "wx": "./scripts/native-launcher.mjs",

package/scripts/native-check-package.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // prepack checks bundled metadata; prepublishOnly additionally verifies the
 // complete, already published executable matrix before npm can be published.
-import { fetchBytes, manifestName, readManifest, releaseUrl, validateManifest, verifyBytes } from './native-runtime.mjs';
+import { fetchBytes, targetKey, manifestName, readManifest, releaseUrl, validateManifest, verifyBytes } from './native-runtime.mjs';
 const { manifest, asset } = await readManifest();
 if (process.env.GITHUB_SHA && manifest.sourceCommit !== process.env.GITHUB_SHA) throw new Error('Native manifest source commit differs from publication commit');
 if (process.argv.includes('--publication')) {
@@ -13,7 +13,7 @@ if (process.argv.includes('--publication')) {
   validateManifest(remote, manifest.version, { requireAllTargets: true });
   if (remote.sourceCommit !== manifest.sourceCommit || remote.sourceTreeDirty === true) throw new Error('Prepared release differs from this npm package');
   for (const item of manifest.assets) {
-    const published = remote.assets.find(candidate => candidate.arch === item.arch);
+    const published = remote.assets.find(candidate => targetKey(candidate) === targetKey(item));
     if (published.sha256 !== item.sha256 || published.bytes !== item.bytes) throw new Error('Prepared release differs from this npm package');
     verifyBytes(await fetchBytes(releaseUrl(manifest.version, item.name), item.bytes), item);
   }

package/scripts/native-runtime.mjs

@@ -12,20 +12,28 @@ export const releaseRepository = 'thisnick/agent-wechat';
 export const supportedTargets = Object.freeze([
   Object.freeze({ platform: 'linux', arch: 'x64', libc: 'gnu', minimumGlibc: '2.36', rustTarget: 'x86_64-unknown-linux-gnu' }),
   Object.freeze({ platform: 'linux', arch: 'arm64', libc: 'gnu', minimumGlibc: '2.36', rustTarget: 'aarch64-unknown-linux-gnu' }),
+  Object.freeze({ platform: 'darwin', arch: 'arm64', rustTarget: 'aarch64-apple-darwin' }),
+  Object.freeze({ platform: 'win32', arch: 'x64', rustTarget: 'x86_64-pc-windows-msvc' }),
+  Object.freeze({ platform: 'win32', arch: 'arm64', rustTarget: 'aarch64-pc-windows-msvc' }),
 ]);
 export const supportedTarget = supportedTargets[0];
 const maxBinaryBytes = 256 * 1024 * 1024;
 const allowedDownloadHosts = new Set(['github.com', 'release-assets.githubusercontent.com', 'objects.githubusercontent.com']);
 
+export function targetKey(target) { return [target.platform, target.arch, target.libc].filter(Boolean).join('-'); }
+export function executableName(target = targetFor()) { return target.platform === 'win32' ? 'wx.exe' : 'wx'; }
 export function targetFor({ platform = process.platform, arch = process.arch, glibc = process.report?.getReport().header.glibcVersionRuntime } = {}) {
-  const [major, minor] = String(glibc ?? '').split('.').map(Number);
   const target = supportedTargets.find(item => item.platform === platform && item.arch === arch);
-  if (!target || !glibc || !Number.isFinite(major) || !Number.isFinite(minor) || major < 2 || (major === 2 && minor < 36)) {
-    throw new Error('Native wx requires Linux x64 or ARM64 with glibc 2.36 or newer. Install a supported native runtime or connect remotely to its API.');
+  if (!target) throw new Error(`Unsupported native wx platform: ${platform}-${arch}`);
+  if (platform === 'linux') {
+    const [major, minor] = String(glibc ?? '').split('.').map(Number);
+    if (!glibc || !Number.isFinite(major) || !Number.isFinite(minor) || major < 2 || (major === 2 && minor < 36)) {
+      throw new Error('Native wx on Linux requires glibc 2.36 or newer; musl is unsupported.');
+    }
   }
   return target;
 }
-export function assetName(version, target = targetFor()) { return `wx-v${version}-${target.platform}-${target.arch}-${target.libc}`; }
+export function assetName(version, target = targetFor()) { return `wx-v${version}-${targetKey(target)}${target.platform === 'win32' ? '.exe' : ''}`; }
 export function manifestName(version) { return `wx-v${version}-checksums.json`; }
 export function releaseUrl(version, name) {
   return `https://github.com/${releaseRepository}/releases/download/v${version}/${name}`;
@@ -38,17 +46,17 @@ export function validateManifest(manifest, version, { target = targetFor(), requ
   }
   const seen = new Set();
   for (const asset of manifest.assets) {
-    const expected = supportedTargets.find(item => item.arch === asset.arch);
-    if (!expected || seen.has(asset.arch) || Object.entries(expected).some(([key, value]) => asset[key] !== value)
+    const expected = supportedTargets.find(item => targetKey(item) === targetKey(asset));
+    if (!expected || seen.has(targetKey(asset)) || Object.entries(expected).some(([key, value]) => asset[key] !== value)
       || asset.name !== assetName(version, expected) || !/^[a-f0-9]{64}$/.test(asset.sha256 ?? '')
       || !Number.isSafeInteger(asset.bytes) || asset.bytes < 1 || asset.bytes > maxBinaryBytes) {
       throw new Error('Invalid native release asset, duplicate or unsupported target');
     }
-    seen.add(asset.arch);
+    seen.add(targetKey(asset));
   }
   if (requireAllTargets && seen.size !== supportedTargets.length) throw new Error('Native publication requires every supported target');
-  const asset = manifest.assets.find(item => item.arch === target.arch);
-  if (!asset) throw new Error(`Native manifest has no asset for ${target.arch}`);
+  const asset = manifest.assets.find(item => targetKey(item) === targetKey(target));
+  if (!asset) throw new Error(`Native manifest has no asset for ${targetKey(target)}`);
   return asset;
 }
 export async function readManifest(root = packageRoot) {
@@ -112,7 +120,7 @@ export async function inspectBinary(path, version) {
   }
   return value;
 }
-export function installPath(root, version, target = targetFor()) { return join(root, 'native', version, `${target.platform}-${target.arch}-${target.libc}`, 'wx'); }
+export function installPath(root, version, target = targetFor()) { return join(root, 'native', version, targetKey(target), executableName(target)); }
 export async function installNative({ root = packageRoot, artifactDir, fetchOptions, downloadUrl, inspect = inspectBinary } = {}) {
   targetFor();
   const { version, asset } = await readManifest(root);
@@ -135,7 +143,7 @@ export async function installNative({ root = packageRoot, artifactDir, fetchOpti
   verifyBytes(bytes, asset);
   const destination = installPath(root, version);
   await mkdir(dirname(destination), { recursive: true, mode: 0o755 });
-  const temporary = `${destination}.${process.pid}.${createHash('sha256').update(randomUUID()).digest('hex').slice(0, 16)}.tmp`;
+  const temporary = `${destination}.${process.pid}.${createHash('sha256').update(randomUUID()).digest('hex').slice(0, 16)}.tmp${process.platform === 'win32' ? '.exe' : ''}`;
   try {
     await writeFile(temporary, bytes, { flag: 'wx', mode: 0o755 });
     await chmod(temporary, 0o755);
@@ -166,7 +174,11 @@ export function runNative(path, args, { spawnImpl = spawn, processObject = proce
   const child = spawnImpl(path, args, { stdio: 'inherit', shell: false, windowsHide: true });
   const handlers = new Map();
   for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
-    const handler = () => { if (!child.killed) child.kill(signal); };
+    const handler = () => {
+      // Windows broadcasts console Ctrl+C to both processes; Node's kill(SIGINT)
+      // would terminate the child before Rust can finish graceful shutdown.
+      if (!child.killed && !(process.platform === 'win32' && signal === 'SIGINT')) child.kill(signal);
+    };
     handlers.set(signal, handler);
     processObject.on(signal, handler);
   }