@harrylabsj/kiwi 0.6.0 → 0.6.1

package/dist/weixin/channel.js

@@ -0,0 +1,356 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 微信远程控制通道——长轮询收消息 → AgentKernel.handleUserText →
+ * sendMessage 回显（含 context_token）。白名单 fail-closed、去重、
+ * 定时任务（schedulerTick / negotiationAutoTick）转发、优雅关闭。
+ *
+ * 对齐 runChatTui 语义：每条微信文本 = 一次 handleUserText；/slash 命令
+ * 经微信可远程控制（/mode /approve /reject /quit 等）；通知/磋商前缀
+ * 转发给所有已授权用户。
+ */
+import { createHash } from "node:crypto";
+import { loadCredentials, loadSyncState, saveCredentials, saveSyncState } from "./credentials.js";
+import { IlinkClient } from "./ilink-client.js";
+import { loginWithQrcode } from "./login.js";
+import { DEFAULT_WEIXIN_TIMINGS, WeixinError } from "./types.js";
+/** 回复文本上限（微信单条消息长度约束）。 */
+const MAX_REPLY_LENGTH = 2000;
+/** 单条消息日志长度（不落 context_token/凭证）。 */
+const LOG_TEXT_LENGTH = 40;
+/**
+ * 微信通道：open() 登录或加载凭证，run() 阻塞直到 /quit/致命错误/stop()。
+ * kernel 生命周期归 CLI 所有（对齐 cmdChat：CLI finally 里 kernel.close()）。
+ */
+export class WeixinChannel {
+    kernel;
+    credentialsPath;
+    syncBufPath;
+    allowUsers;
+    timings;
+    log;
+    now;
+    client;
+    credentials = null;
+    /** context_token 缓存（key = user_id；协议要求回复回显）。 */
+    contextTokens = new Map();
+    /** 去重指纹（message_id:text MD5；LRU FIFO 裁剪）。 */
+    seen = new Set();
+    stopped = false;
+    runPromise = null;
+    pollAbort = null;
+    timers = [];
+    noticeFn;
+    constructor(options) {
+        this.kernel = options.kernel;
+        this.credentialsPath = options.credentialsPath;
+        this.syncBufPath = options.syncBufPath;
+        this.allowUsers = new Set(options.allowUsers ?? []);
+        this.timings = { ...DEFAULT_WEIXIN_TIMINGS, ...options.timings };
+        this.log = options.log ?? ((line) => process.stderr.write(`${line}\n`));
+        this.now = options.now ?? (() => new Date().toISOString());
+        this.noticeFn = options.notice ?? ((line) => process.stderr.write(`${line}\n`));
+        this.client = new IlinkClient({ baseUrl: options.apiBaseUrl });
+    }
+    static async open(options) {
+        const channel = new WeixinChannel(options);
+        if (options.forceRelogin) {
+            channel.credentials = await channel.loginAndSave(options);
+        }
+        else {
+            try {
+                channel.credentials = loadCredentials(options.credentialsPath);
+                // 凭证 base_url 可能为空（首次 confirmed 前未持久化）——缺省用 apiBaseUrl/默认。
+                if (channel.credentials.base_url !== "") {
+                    channel.client.setBaseUrl(channel.credentials.base_url);
+                }
+                channel.log(`[weixin] 已加载凭证 bot=${channel.credentials.ilink_bot_id}`);
+            }
+            catch (err) {
+                if (err instanceof WeixinError && err.code === "not_configured") {
+                    channel.credentials = await channel.loginAndSave(options);
+                }
+                else {
+                    throw err;
+                }
+            }
+        }
+        return channel;
+    }
+    /** 扫码登录并持久化凭证。 */
+    async loginAndSave(options) {
+        const credentials = await loginWithQrcode(this.client, {
+            render: options.renderQr,
+            notice: options.notice,
+            qrPollMs: this.timings.qrPollMs,
+            qrRefreshCap: this.timings.qrRefreshCap,
+            now: this.now,
+        });
+        saveCredentials(this.credentialsPath, credentials);
+        this.client.setBaseUrl(credentials.base_url);
+        this.log(`[weixin] 登录成功 bot=${credentials.ilink_bot_id} paired=${credentials.ilink_user_id}`);
+        return credentials;
+    }
+    get status() {
+        return {
+            loggedIn: this.credentials !== null,
+            pairedUser: this.credentials?.ilink_user_id || undefined,
+            allowCount: this.allowUsers.size,
+        };
+    }
+    /** 阻塞直到 /quit、致命错误或 stop()；返回进程退出码。 */
+    async run() {
+        if (this.credentials === null) {
+            throw new WeixinError("not_configured", "微信通道未登录");
+        }
+        this.runPromise = this.runLoop();
+        return this.runPromise;
+    }
+    /** 优雅关闭：置 stopped → abort 在飞长轮询 → 写穿 sync state → 清定时器。 */
+    async stop() {
+        if (this.stopped)
+            return;
+        this.stopped = true;
+        this.pollAbort?.abort();
+        for (const t of this.timers.splice(0))
+            clearInterval(t);
+        if (this.runPromise !== null) {
+            try {
+                await this.runPromise;
+            }
+            catch {
+                // stop 后的轮询异常被 stopped 分支吞掉
+            }
+        }
+    }
+    // ── 主循环 ──────────────────────────────────────────────────────────
+    async runLoop() {
+        const creds = this.credentials;
+        // 定时任务（对齐 runChatTui：首 tick 立即跑，后续 interval unref）
+        await this.schedulerTickOnce();
+        this.startTimer(this.timings.schedulerTickMs, () => void this.schedulerTickOnce());
+        await this.negotiateOnce();
+        this.startTimer(this.timings.negotiateTickMs, () => void this.negotiateOnce());
+        // 恢复游标 + 去重指纹
+        let syncBuf = "";
+        try {
+            const state = loadSyncState(this.syncBufPath);
+            syncBuf = state.get_updates_buf;
+            for (const fp of state.seen)
+                this.seen.add(fp);
+        }
+        catch (err) {
+            this.log(`[weixin] 同步状态损坏，从头轮询：${err instanceof Error ? err.message : String(err)}`);
+            syncBuf = "";
+        }
+        let consecutiveProtocolErrors = 0;
+        let fatalCount = 0;
+        while (!this.stopped) {
+            try {
+                const result = await this.client.getUpdates(syncBuf, creds);
+                consecutiveProtocolErrors = 0;
+                fatalCount = 0;
+                syncBuf = result.next_sync_buf;
+                for (const msg of result.messages) {
+                    await this.processMessage(msg);
+                    if (this.stopped)
+                        return 0;
+                }
+                // 每轮写穿游标 + 去重（重启零丢失）
+                saveSyncState(this.syncBufPath, { get_updates_buf: syncBuf, seen: [...this.seen] });
+            }
+            catch (err) {
+                if (this.stopped)
+                    return 0;
+                if (err instanceof WeixinError) {
+                    switch (err.code) {
+                        case "session_stale":
+                            this.log(`[weixin] 会话过期：${err.message}。${this.timings.sessionStaleCooldownMs / 1000}s 后重试（可 kill 后 kiwi weixin --relogin 重扫）`);
+                            await this.sleep(this.timings.sessionStaleCooldownMs);
+                            consecutiveProtocolErrors = 0;
+                            continue;
+                        case "protocol":
+                            consecutiveProtocolErrors++;
+                            if (consecutiveProtocolErrors >= 3) {
+                                this.log(`[weixin] 连续协议错误 ${consecutiveProtocolErrors} 次，退避 ${this.timings.protocolBackoffMs / 1000}s`);
+                                await this.sleep(this.timings.protocolBackoffMs);
+                                consecutiveProtocolErrors = 0;
+                            }
+                            continue;
+                        case "timeout":
+                        case "network":
+                        case "http":
+                        case "redirect":
+                        case "response_too_large":
+                        case "invalid_json": {
+                            // 指数退避（2s/5s/15s/60s 封顶）
+                            const backoff = this.timings.httpBackoffMs[Math.min(fatalCount, this.timings.httpBackoffMs.length - 1)];
+                            fatalCount++;
+                            this.log(`[weixin] ${err.code}：${err.message}。${backoff / 1000}s 后重试`);
+                            await this.sleep(backoff);
+                            continue;
+                        }
+                        case "auth":
+                            this.log(`[weixin] 凭证被拒：${err.message}。请 kill 后 kiwi weixin --relogin 重扫`);
+                            return 3; // EXIT.AUTH
+                        default:
+                            fatalCount++;
+                            if (fatalCount >= 5) {
+                                this.log(`[weixin] 连续致命错误 ${fatalCount} 次，退出`);
+                                return 10; // EXIT.TRANSIENT
+                            }
+                            this.log(`[weixin] ${err.message}`);
+                            await this.sleep(2_000);
+                            continue;
+                    }
+                }
+                fatalCount++;
+                if (fatalCount >= 5) {
+                    this.log(`[weixin] 连续致命错误 ${fatalCount} 次，退出`);
+                    return 10;
+                }
+                this.log(`[weixin] ${err instanceof Error ? err.message : String(err)}`);
+                await this.sleep(2_000);
+            }
+        }
+        return 0;
+    }
+    // ── 消息处理 ────────────────────────────────────────────────────────
+    async processMessage(msg) {
+        if (msg.text === "") {
+            this.log(`[weixin] 跳过非文本消息 from=${shortId(msg.from_user_id)}`);
+            return;
+        }
+        // 去重（message_id + 内容指纹）
+        const fingerprint = createHash("md5").update(`${msg.message_id}:${msg.text}`).digest("hex");
+        if (this.seen.has(fingerprint)) {
+            this.log(`[weixin] 去重跳过 from=${shortId(msg.from_user_id)}`);
+            return;
+        }
+        this.seen.add(fingerprint);
+        this.trimSeen();
+        // 白名单：配对扫描者自动授权 + 配置 allowUsers；未授权不回复（不确认 bot 存在）
+        const paired = this.credentials?.ilink_user_id ?? "";
+        const authorized = msg.from_user_id === paired || this.allowUsers.has(msg.from_user_id);
+        if (!authorized) {
+            this.log(`[weixin] 拒绝未授权用户 ${shortId(msg.from_user_id)}（不回复）`);
+            return;
+        }
+        // 缓存 context_token（回复必须回显）
+        if (msg.context_token !== "") {
+            this.contextTokens.set(msg.from_user_id, msg.context_token);
+            this.trimContextTokens();
+        }
+        const contextToken = this.contextTokens.get(msg.from_user_id);
+        this.log(`[weixin] ${shortId(msg.from_user_id)} → ${truncate(msg.text, LOG_TEXT_LENGTH)}`);
+        const reply = await this.kernel.handleUserText(msg.text);
+        if (reply.text !== "") {
+            await this.trySend(msg.from_user_id, reply.text, contextToken);
+        }
+        if (reply.quit) {
+            this.log("[weixin] 收到 /quit，通道退出");
+            this.stopped = true;
+        }
+    }
+    /** 发送消息（失败仅日志，不重试——模型回合昂贵，重试只覆盖轮询层）。 */
+    async trySend(toUserId, text, contextToken) {
+        if (this.credentials === null)
+            return;
+        const clipped = text.length > MAX_REPLY_LENGTH ? `${text.slice(0, MAX_REPLY_LENGTH)}…（已截断）` : text;
+        try {
+            await this.client.sendMessage({ to_user_id: toUserId, text: clipped, context_token: contextToken }, this.credentials);
+        }
+        catch (err) {
+            this.log(`[weixin] 回复发送失败：${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // ── 定时任务（对齐 runChatTui）──────────────────────────────────────
+    async schedulerTickOnce() {
+        if (this.timings.schedulerTickMs === 0)
+            return;
+        try {
+            const result = await this.kernel.schedulerTick();
+            for (const n of result.notifications) {
+                await this.broadcast(`[通知] ${n.summary}（任务 ${n.task_id}）`);
+            }
+            for (const e of result.errors) {
+                await this.broadcast(`[任务] ${e}`);
+            }
+        }
+        catch (err) {
+            this.log(`[weixin] schedulerTick 失败：${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    async negotiateOnce() {
+        if (this.timings.negotiateTickMs === 0)
+            return;
+        try {
+            const text = await this.kernel.negotiationAutoTick();
+            if (text !== undefined && text !== "") {
+                await this.broadcast(`[磋商] ${text}`);
+            }
+        }
+        catch (err) {
+            this.log(`[weixin] negotiationAutoTick 失败：${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /** 转发给所有已授权用户（有 context_token 的优先；无 token 的首次可能不可达）。 */
+    async broadcast(text) {
+        const targets = new Set();
+        if (this.credentials !== null && this.credentials.ilink_user_id !== "") {
+            targets.add(this.credentials.ilink_user_id);
+        }
+        for (const u of this.allowUsers)
+            targets.add(u);
+        for (const to of targets) {
+            await this.trySend(to, text, this.contextTokens.get(to));
+        }
+    }
+    // ── 工具 ────────────────────────────────────────────────────────────
+    startTimer(ms, fn) {
+        if (ms === 0)
+            return;
+        const t = setInterval(fn, ms);
+        t.unref();
+        this.timers.push(t);
+    }
+    trimSeen() {
+        while (this.seen.size > this.timings.dedupCap) {
+            const first = this.seen.values().next().value;
+            if (first === undefined)
+                break;
+            this.seen.delete(first);
+        }
+    }
+    trimContextTokens() {
+        while (this.contextTokens.size > this.timings.dedupCap) {
+            const first = this.contextTokens.keys().next().value;
+            if (first === undefined)
+                break;
+            this.contextTokens.delete(first);
+        }
+    }
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+function shortId(id) {
+    return id.length > 12 ? `${id.slice(0, 6)}…${id.slice(-4)}` : id;
+}
+function truncate(text, max) {
+    return text.length > max ? `${text.slice(0, max)}…` : text;
+}
+//# sourceMappingURL=channel.js.map

package/dist/weixin/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../src/weixin/channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEjE,0BAA0B;AAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,qCAAqC;AACrC,MAAM,eAAe,GAAG,EAAE,CAAC;AA6B3B;;;GAGG;AACH,MAAM,OAAO,aAAa;IACP,MAAM,CAAc;IACpB,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,UAAU,CAAsB;IAChC,OAAO,CAAgB;IACvB,GAAG,CAAyB;IAC5B,GAAG,CAAe;IAE3B,MAAM,CAAc;IACpB,WAAW,GAA0B,IAAI,CAAC;IAClD,gDAAgD;IAC/B,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3D,6CAA6C;IAC5B,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,GAA2B,IAAI,CAAC;IAC1C,SAAS,GAA2B,IAAI,CAAC;IACzC,MAAM,GAAqC,EAAE,CAAC;IAC9C,QAAQ,CAAyB;IAEzC,YAAY,OAA6B;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAA6B;QAC7C,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,OAAO,CAAC,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC/D,2DAA2D;gBAC3D,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBACxC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAChE,OAAO,CAAC,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC5D,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kBAAkB;IACV,KAAK,CAAC,YAAY,CAAC,OAA6B;QACtD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE;YACrD,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,YAAY,WAAW,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC;QAC9F,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,MAAM;QACR,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;YACnC,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,IAAI,SAAS;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;SACjC,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,GAAG;QACP,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IAE5D,KAAK,CAAC,OAAO;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAY,CAAC;QAChC,mDAAmD;QACnD,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAE/E,cAAc;QACd,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC9C,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC;YAChC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAClC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5D,yBAAyB,GAAG,CAAC,CAAC;gBAC9B,UAAU,GAAG,CAAC,CAAC;gBACf,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;gBAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,IAAI,CAAC,OAAO;wBAAE,OAAO,CAAC,CAAC;gBAC7B,CAAC;gBACD,qBAAqB;gBACrB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,CAAC;gBAC3B,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;oBAC/B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;wBACjB,KAAK,eAAe;4BAClB,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,GAAG,IAAI,0CAA0C,CAAC,CAAC;4BAC/H,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;4BACtD,yBAAyB,GAAG,CAAC,CAAC;4BAC9B,SAAS;wBACX,KAAK,UAAU;4BACb,yBAAyB,EAAE,CAAC;4BAC5B,IAAI,yBAAyB,IAAI,CAAC,EAAE,CAAC;gCACnC,IAAI,CAAC,GAAG,CAAC,mBAAmB,yBAAyB,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC;gCACxG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gCACjD,yBAAyB,GAAG,CAAC,CAAC;4BAChC,CAAC;4BACD,SAAS;wBACX,KAAK,SAAS,CAAC;wBACf,KAAK,SAAS,CAAC;wBACf,KAAK,MAAM,CAAC;wBACZ,KAAK,UAAU,CAAC;wBAChB,KAAK,oBAAoB,CAAC;wBAC1B,KAAK,cAAc,CAAC,CAAC,CAAC;4BACpB,yBAAyB;4BACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;4BACzG,UAAU,EAAE,CAAC;4BACb,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC;4BACvE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;4BAC1B,SAAS;wBACX,CAAC;wBACD,KAAK,MAAM;4BACT,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC;4BAC3E,OAAO,CAAC,CAAC,CAAC,YAAY;wBACxB;4BACE,UAAU,EAAE,CAAC;4BACb,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gCACpB,IAAI,CAAC,GAAG,CAAC,mBAAmB,UAAU,OAAO,CAAC,CAAC;gCAC/C,OAAO,EAAE,CAAC,CAAC,iBAAiB;4BAC9B,CAAC;4BACD,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;4BACpC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACxB,SAAS;oBACb,CAAC;gBACH,CAAC;gBACD,UAAU,EAAE,CAAC;gBACb,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;oBACpB,IAAI,CAAC,GAAG,CAAC,mBAAmB,UAAU,OAAO,CAAC,CAAC;oBAC/C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,mEAAmE;IAE3D,KAAK,CAAC,cAAc,CAAC,GAAmB;QAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,yBAAyB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,wBAAwB;QACxB,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEhB,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,IAAI,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,IAAI,GAAG,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YAC5D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE9D,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;QAE3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,wCAAwC;IAChC,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAAY,EAAE,YAAqB;QACzE,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACnG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACxH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,+DAA+D;IAEvD,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACrD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,wDAAwD;IAChD,KAAK,CAAC,SAAS,CAAC,IAAY;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,qEAAqE;IAE7D,UAAU,CAAC,EAAU,EAAE,EAAc;QAC3C,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO;QACrB,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACpE,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YAC3E,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}

package/dist/weixin/cli-weixin.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare function weixinUsage(): string;
+export interface WeixinCliArgs {
+    profile?: string;
+    dataDir?: string;
+    allow?: string;
+    relogin: boolean;
+    a2a: boolean;
+    port?: number;
+    qrScale: number;
+    noQr: boolean;
+    catalog?: string;
+}
+/** `kiwi weixin` 主入口。返回进程退出码（0 OK / 2 CONFIG / 3 AUTH / 10 TRANSIENT）。 */
+export declare function cmdWeixin(args: WeixinCliArgs): Promise<number>;

package/dist/weixin/cli-weixin.js

@@ -0,0 +1,128 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `kiwi weixin` 命令——微信远程控制通道入口。
+ *
+ * 接线对齐 cmdChat：profile 加载 → buildChatKernel → （可选 --a2a 节点）→
+ * WeixinChannel.open（登录或加载凭证）→ run()；SIGINT/SIGTERM 优雅关闭。
+ * A2A 节点默认关（headless 控制面收窄攻击面），--a2a 开启。
+ */
+import { buildChatKernel, defaultChatProfile } from "../agent/kernel-builder.js";
+import { startA2aNode } from "../a2a/node.js";
+import { loadProfile } from "../config/profile.js";
+import { EXIT } from "../exit-codes.js";
+import { DEFAULT_CATALOG_URL } from "../product-cli.js";
+import { agentDataDir, ensurePathsForDir } from "../agent/agent-db.js";
+import { WeixinChannel } from "./channel.js";
+import { credentialsPathFor, syncStatePathFor } from "./credentials.js";
+import { ILINK_DEFAULT_BASE_URL } from "./types.js";
+export function weixinUsage() {
+    return `kiwi weixin — 微信远程控制通道（iLink Bot）
+
+Usage:
+  kiwi weixin [--profile FILE] [--data-dir DIR] [--allow id1,id2] [--relogin]
+              [--a2a] [--port N] [--qr-scale 1|2] [--no-qr]
+
+  --profile FILE     profile（缺省 defaultChatProfile，同裸 kiwi）
+  --data-dir DIR     kernel 数据目录 + 微信凭证/游标（缺省 agentDataDir）
+  --allow id,…       额外授权微信用户（配对扫描者始终自动授权）
+  --relogin          丢弃已存凭证重新扫码（会话过期/换设备时）
+  --a2a              同时启动 A2A 节点（默认关；port 复用 --port）
+  --qr-scale N       终端二维码每模块列数（1 或 2；默认 1）
+  --no-qr            仅打印 URL + 提示（兜底；默认渲染二维码）
+
+扫码登录后微信发消息即远程控制 kiwi（对话 + /slash 命令：
+/mode /approve /reject /status /quit 等）。首次请先发一句任意消息唤醒通道。
+`;
+}
+/** `kiwi weixin` 主入口。返回进程退出码（0 OK / 2 CONFIG / 3 AUTH / 10 TRANSIENT）。 */
+export async function cmdWeixin(args) {
+    const profile = args.profile !== undefined ? loadProfile(args.profile) : defaultChatProfile();
+    const catalog = args.catalog ?? process.env.KIWI_CATALOG_URL ?? DEFAULT_CATALOG_URL;
+    const dataDir = args.dataDir ?? agentDataDir(profile.agent_id);
+    ensurePathsForDir(dataDir);
+    const kernel = await buildChatKernel(profile, dataDir, catalog);
+    let node = null;
+    if (args.a2a) {
+        try {
+            node = await startA2aNode({
+                profile,
+                catalog,
+                preferredPort: args.port,
+                ownerTokenSecret: process.env.KIWI_CATALOG_OWNER_TOKEN_SECRET,
+            });
+            process.stderr.write(`[a2a] ${node.role}@${node.url}${node.catalogAgentId !== undefined ? ` registered ${node.catalogAgentId}` : ""}\n`);
+        }
+        catch (err) {
+            process.stderr.write(`[a2a] 节点启动失败（微信通道继续）：${err instanceof Error ? err.message : String(err)}\n`);
+        }
+    }
+    // 白名单：--allow > KIWI_WEIXIN_ALLOW_USERS > profile weixin.allow_users
+    const allowUsers = resolveAllowUsers(args.allow, profile.weixin?.allow_users);
+    // base URL：KIWI_WEIXIN_BASE_URL > profile weixin.base_url > 默认
+    const apiBaseUrl = process.env.KIWI_WEIXIN_BASE_URL ?? profile.weixin?.base_url ?? ILINK_DEFAULT_BASE_URL;
+    let channel = null;
+    const shutdown = async (code) => {
+        await channel?.stop().catch(() => undefined);
+        await node?.stop().catch(() => undefined);
+        await kernel.close().catch(() => undefined);
+        process.exit(code);
+    };
+    process.on("SIGINT", () => void shutdown(0));
+    process.on("SIGTERM", () => void shutdown(0));
+    try {
+        channel = await WeixinChannel.open({
+            kernel,
+            apiBaseUrl,
+            credentialsPath: credentialsPathFor(dataDir),
+            syncBufPath: syncStatePathFor(dataDir),
+            allowUsers,
+            forceRelogin: args.relogin,
+            renderQr: args.noQr
+                ? undefined
+                : (qr) => {
+                    for (const line of qr)
+                        process.stdout.write(`${line}\n`);
+                },
+            notice: (line) => process.stderr.write(`${line}\n`),
+        });
+        const exitCode = await channel.run();
+        return exitCode;
+    }
+    catch (err) {
+        process.stderr.write(`[weixin] ${err instanceof Error ? err.message : String(err)}\n`);
+        return EXIT.CONFIG;
+    }
+    finally {
+        process.removeListener("SIGINT", shutdown);
+        process.removeListener("SIGTERM", shutdown);
+        await channel?.stop().catch(() => undefined);
+        await node?.stop().catch(() => undefined);
+        await kernel.close().catch(() => undefined);
+    }
+}
+/** 白名单合并：--allow（逗号分隔）> env > profile。 */
+function resolveAllowUsers(cliAllow, profileAllow) {
+    const env = process.env.KIWI_WEIXIN_ALLOW_USERS;
+    const source = cliAllow ?? env ?? (profileAllow !== undefined ? profileAllow.join(",") : undefined);
+    if (source === undefined || source === "")
+        return [];
+    return source
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s !== "");
+}
+//# sourceMappingURL=cli-weixin.js.map

package/dist/weixin/cli-weixin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-weixin.js","sourceRoot":"","sources":["../../src/weixin/cli-weixin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;;;;;;;;;;;CAgBR,CAAC;AACF,CAAC;AAcD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC;gBACxB,OAAO;gBACP,OAAO;gBACP,aAAa,EAAE,IAAI,CAAC,IAAI;gBACxB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B;aAC9D,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CACnH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE9E,+DAA+D;IAC/D,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,sBAAsB,CAAC;IAEzF,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAkB,EAAE;QACtD,MAAM,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;YACjC,MAAM;YACN,UAAU;YACV,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC;YAC5C,WAAW,EAAE,gBAAgB,CAAC,OAAO,CAAC;YACtC,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACjB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE;oBACL,KAAK,MAAM,IAAI,IAAI,EAAE;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;gBAC3D,CAAC;YACL,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACjE,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,iBAAiB,CAAC,QAA4B,EAAE,YAAkC;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,IAAI,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,MAAM;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/weixin/credentials.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { BotCredentials } from "./types.js";
+/** 同步游标 + 去重指纹（seen = MD5 指纹 LRU，cap 由调用方裁剪）。 */
+export interface StoredSyncState {
+    get_updates_buf: string;
+    seen: string[];
+}
+/** 保存凭证（0600 + 原子写）。 */
+export declare function saveCredentials(pathName: string, creds: BotCredentials): void;
+/** 加载凭证；缺失 → not_configured；损坏/缺字段 → validation（fail-closed）。 */
+export declare function loadCredentials(pathName: string): BotCredentials;
+/** 保存同步游标 + 去重指纹（0600 + 原子写）。 */
+export declare function saveSyncState(pathName: string, state: StoredSyncState): void;
+/** 加载同步游标；缺失 → 默认（空游标）；损坏 → validation（fail-closed）。 */
+export declare function loadSyncState(pathName: string): StoredSyncState;
+/** 便捷：凭证文件路径（dataDir 下）。 */
+export declare function credentialsPathFor(dataDir: string): string;
+/** 便捷：同步状态文件路径（dataDir 下）。 */
+export declare function syncStatePathFor(dataDir: string): string;