@keyflow2/keyflow-kit-wx-reply 0.2.9

package/API.md

@@ -0,0 +1,182 @@
+# WeChat Data Service API（本地离线 / Windows）
+
+## 接入地址
+
+- 默认基址：`http://<HOST:PORT>`，做成可配置项
+- 实际基址：以 `config.json` 或 GUI 中的 `listen_host`、`listen_port` 为准
+- 推荐做法：上层应用启动时先读自己的服务配置，或先请求一次 `GET /api/v1/health` / `GET /api/v1/state` 做探活
+- 不建议写死非本机 IP；本项目的默认部署方式是**本机回环地址 + 本地端口**
+
+说明：
+- 本服务只读微信本地数据库并解密/解析，**不提供 AI**。
+- 适配上层应用：自动回复、个性化对话取数、人物画像/记忆。
+- 所有接口路径均相对于上述基址，例如：`http://<HOST:PORT>/api/v1/health`
+
+鉴权（可选）：
+- `config.json` 设置 `api_token` 后，**所有写接口**需要带 `Authorization: Bearer <token>`（或 `X-Api-Token: <token>`）。
+
+## 基础接口
+
+### `GET /api/v1/health`
+
+返回服务健康状态与当前消息序号。
+
+响应示例：
+```json
+{"ok":true,"time":1710000000,"last_seq":123}
+```
+
+### `GET /api/v1/state`
+
+返回轻量状态（适合上层应用启动时探活/同步游标）。
+
+响应示例：
+```json
+{"time":1710000000,"last_seq":123,"contacts_loaded":true,"self_username":"wxid_xxx","write_auth_enabled":false}
+```
+
+## 联系人与会话
+
+### `GET /api/v1/contacts?query=&limit=50`
+
+联系人检索（昵称/备注/微信号模糊匹配）。
+
+响应示例：
+```json
+{"items":[{"username":"wxid_xxx","nick_name":"张三","remark":"同事","display_name":"同事","is_group":false,"avatar_url":"/avatar/wxid_xxx"}]}
+```
+
+### `GET /api/v1/recent_contacts?limit=20&offset=0`
+
+最近查询过的联系人（服务端只负责保存；前端按需拉取数量/分页）。
+
+记录方式：
+- 调用 `GET /api/v1/chats/{username}/history` 会自动记录
+- 或手动调用 `POST /api/v1/recent_contacts`
+
+响应示例：
+```json
+{"items":[{"username":"wxid_xxx","display_name":"同事","last_access_ts":1710000000,"access_count":3,"avatar_url":"/avatar/wxid_xxx"}],"limit":20,"offset":0}
+```
+
+### `POST /api/v1/recent_contacts`
+
+手动记录一次“最近查询联系人”。
+
+请求示例：
+```json
+{"username":"wxid_xxx"}
+```
+
+### `GET /api/v1/sessions?limit=50`
+
+最近会话列表（来自 `session.db`，含未读数和最新消息摘要）。
+
+响应示例：
+```json
+{"items":[{"username":"wxid_xxx","display_name":"同事","avatar_url":"/avatar/wxid_xxx","unread":0,"last_timestamp":1710000000,"last_msg_type":1,"summary":"晚上吃啥"}]}
+```
+
+### `GET /avatar/{username}`
+
+联系人头像（从 `head_image/head_image.db` 读取）。
+
+## 实时消息（给自动回复程序用）
+
+### `GET /api/v1/messages?after_seq=0&limit=200`
+
+拉取自 `after_seq` 之后的新消息（按 `seq` 递增）。`seq` 为服务内递增编号，适合做游标避免漏消息。
+
+响应示例：
+```json
+{"last_seq":123,"items":[{"seq":123,"timestamp":1710000000,"username":"wxid_xxx","chat":"同事","type":"文本","content":"晚上吃啥"}]}
+```
+
+### `GET /stream`
+
+SSE 实时推送（浏览器 EventSource 兼容）。普通消息走默认 `message` 事件；解析补全会通过自定义事件推送（如 `rich_update` / `image_update` / `message_detail`）。
+
+## 历史消息（给个性化/画像取数用）
+
+### `GET /api/v1/chats/{username}/history?limit=50&offset=0&start_ts=&end_ts=`
+
+获取指定联系人/群的历史消息（从 `message_*.db` 查询）。
+
+额外参数：
+- `after_local_id`：断点续拉（仅返回 `local_id > after_local_id` 的消息）
+
+响应示例：
+```json
+{"username":"wxid_xxx","display_name":"同事","items":[{"local_id":1,"timestamp":1710000000,"base_type":1,"text":"晚上吃啥","raw":"晚上吃啥"}]}
+```
+
+说明：
+- 返回的 `items[]` 会包含 `sender_username`/`is_send`/`direction`（可用来避免对自己消息触发自动回复）。
+- 返回 `last_local_id` 便于上层保存游标。
+
+## 消息处理状态（ACK / 幂等）
+
+### `GET /api/v1/chats/{username}/message_status?app_id=xxx&local_id=123`
+
+查询某条消息对某个上层应用的处理状态。
+
+### `GET /api/v1/chats/{username}/message_status?app_id=xxx&status=&limit=50&offset=0`
+
+列出该联系人下的处理状态记录（按 `updated_at` 倒序）。
+
+### `POST /api/v1/chats/{username}/message_status`
+
+写入/更新一条处理状态（Upsert）。
+
+请求示例：
+```json
+{"app_id":"auto-reply","local_id":123,"status":"replied","info":{"reply_id":"..."}}
+```
+
+## 人物画像与记忆（不含 AI，仅存取）
+
+存储文件：`persona_db`（默认 `persona.db`）。
+
+### `GET /api/v1/people/{username}/profile`
+
+获取画像（并返回联系人基础信息 `contact`）。
+
+### `PATCH /api/v1/people/{username}/profile`
+
+更新画像字段：`tags` / `notes` / `auto_reply_policy`。
+
+### `GET /api/v1/people/{username}/memories?kind=&status=active&q=&limit=50&offset=0`
+
+列出记忆条目（支持按 kind/status 搜索与分页）。
+
+### `POST /api/v1/people/{username}/memories`
+
+新增记忆条目（示例字段：`kind`/`key`/`value`/`importance`/`confidence`/`status`/`source`/`evidence`/`expires_at`）。
+
+### `PATCH /api/v1/memories/{id}`
+
+更新记忆条目（同上字段，按需传递）。
+
+### `DELETE /api/v1/memories/{id}`
+
+软删除：将条目标记为 `invalidated`。
+
+## AI 运行记录（仅元数据存储，不执行 AI）
+
+### `GET /api/v1/people/{username}/runs?kind=&status=&limit=20&offset=0`
+
+列出画像/记忆/总结等 AI 运行记录（由上层应用写入）。
+
+### `POST /api/v1/people/{username}/runs`
+
+创建一条运行记录。
+
+请求示例：
+```json
+{"app_id":"persona-ui","kind":"profile_refresh","status":"running","model":"gpt-4.1-mini","input_range":{"start_ts":1710000000,"end_ts":1710003600}}
+```
+
+### `PATCH /api/v1/runs/{run_id}`
+
+更新运行记录（例如结束时写入 `status/finished_at/error/tokens`）。
+

package/LICENSE

@@ -0,0 +1,202 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+

package/UPPER_LAYER_APPS.md

@@ -0,0 +1,158 @@
+# 上层应用规划（基于 WeChat Data Service）
+
+本仓库的定位是**本地离线的数据底座**：读取/解密微信本地数据库，并通过本机 HTTP API 提供联系人、会话、消息、头像，以及“画像/记忆/AI 运行元数据”的**存取**能力。  
+注意：**本服务不做 AI**、也不负责“发送微信消息”（自动回复属于上层应用的能力）。
+
+本文档用于把你接下来要做的“上层应用”一次性列清楚：它们是什么、各自要做哪些功能、以及它们依赖底层服务的哪些接口。
+
+相关参考：
+- API：`docs/API.md`
+- 集成缺口/易踩坑：`docs/INTEGRATION_GAPS.md`
+- 画像/记忆模型建议：`docs/PERSONA_MEMORY_MODEL.md`
+
+---
+
+## 硬约束（别做反）
+
+- **首发 Windows、本地离线跑**：上层应用默认只连本机数据服务，默认地址是 `http://127.0.0.1:5678`。
+- **端口可配置，但默认不要改**：实际以 `config.json` / GUI 中的 `listen_host`、`listen_port` 为准；若未改动，就按 `127.0.0.1:5678` 接入。
+- **用户是普通人**：上层 UI 必须“少文字、强引导、少概念”，用流程化/卡片化/按钮化表达。
+- **隐私优先**：默认不出网；若要调用 AI/云服务，只能由上层应用明确开关，并把“输入范围/上次运行时间/失败原因”写回（runs 记录）。
+- **联系人主键只能用 `username`**：昵称/备注会变，只用于展示与搜索。
+
+服务接入基址：
+- 默认：`http://127.0.0.1:5678`
+- 健康检查：`GET /api/v1/health`
+- 轻量状态：`GET /api/v1/state`
+- 详细接口定义：见 `docs/API.md`
+
+---
+
+## 上层应用清单（建议最少先做 3 个）
+
+### 0) 服务管理器（已在本仓库内）
+
+用途：给普通用户配置并后台启动“数据服务”，提供开机自启、日志与诊断入口。  
+这是所有上层应用的“运行前置条件”（确保服务可用）。
+
+---
+
+### 1) 微信消息自动回复（Auto Reply Agent）
+
+**定位**：一个独立进程/应用，负责“读消息 → 决策 → 发消息”。（AI 可在此应用内集成，但不在数据底座做）
+
+**P0 必做功能（能稳定跑且不乱回）**
+- **服务连接与自检**：启动时探活；获取 `self_username`；提示用户“服务未启动/端口被占用/目录无效”的可操作原因。
+- **联系人选择与歧义处理**：按昵称/备注/微信号搜索；多匹配时让用户确认；展示头像。
+- **收消息（可靠）**
+  - 新消息拉取/订阅（SSE 或轮询）。
+  - 断点续跑：保存游标；重启后继续，不漏不重。
+  - 去重：优先用 `(username, local_id)`；拿不到时退化规则见 `docs/INTEGRATION_GAPS.md`。
+  - 方向判断：永远不对“自己发的消息”触发回复（依赖 `self_username`/`direction`）。
+- **处理确认（ACK/幂等）**：每条消息对每个 app 只进入一次处理链路；处理结果写入 `message_status`。
+- **安全阀**：限速/熔断（例如连续失败暂停）；黑白名单；群聊默认不回或仅 @我 才回（策略可配置）。
+- **可排障**：日志落盘；一键复制诊断信息（包含游标、最近错误、当前策略）。
+
+**P1 功能（决定体验上限）**
+- **规则系统**：按联系人/群、时间段、关键字、是否 @我、是否包含图片/语音等组合条件触发。
+- **“人设/策略”接入点**：从画像/记忆读取“偏好/禁忌/称呼/语气”等，作为回复策略输入。
+- **人工接管**：当用户正在手动聊天时自动暂停；或提供“一键暂停/恢复”。
+- **群聊增强**：识别发送者；@谁；引用回复；“免打扰时段”。
+
+**依赖底层服务的接口（现有）**
+- 探活/状态：`GET /api/v1/health`、`GET /api/v1/state`
+- 联系人：`GET /api/v1/contacts`、`GET /api/v1/sessions`、`GET /api/v1/recent_contacts`、`POST /api/v1/recent_contacts`
+- 消息：`GET /api/v1/messages`、`GET /stream`、`GET /api/v1/chats/{username}/history`
+- 幂等/ACK：`GET/POST /api/v1/chats/{username}/message_status`
+- 画像/记忆读取（可选）：`GET /api/v1/people/{username}/profile`、`GET /api/v1/people/{username}/memories`
+- 头像：`GET /avatar/{username}`
+
+**注意（上层必须自己解决）**
+- **“发消息”**：需要 Windows 微信的自动化/注入/辅助功能等方案（不在本服务范围）。
+
+---
+
+### 2) 人物画像与记忆管理器（Persona / Memory Studio）
+
+**定位**：一个面向普通用户的“联系人信息中心”，用来查看/编辑画像与记忆；也作为上层 AI 生成画像/记忆的“人工校正入口”。
+
+**前端你描述的核心界面能力（对应后端职责）**
+- 联系人基础信息（头像、备注/昵称、会话摘要）
+- “上一次聊天聊了什么”（来自 sessions 最新摘要 + 可跳转历史）
+- 与此人相关的“记忆”（偏好、禁忌、重要信息、性格特点等）
+
+**P0 必做功能**
+- **联系人检索 + 最近访问**：支持取最近 N 条；返回头像；最近访问自动记录。
+- **画像展示/编辑（非 AI）**：标签、备注、自动回复策略（例如：是否允许自动回复/是否仅工作时间/称呼）。
+- **记忆 CRUD（结构化）**
+  - 新增/编辑/作废（软删除）记忆条目。
+  - 记忆状态：`active` / `pending(待确认)` / `invalidated`（AI 推断默认 pending，避免“当事实写死”）。
+  - evidence：每条记忆可挂 1–3 条证据（可跳转到原对话）。
+- **AI 运行记录时间线（只存元数据）**
+  - 展示“上次刷新时间/用的模型/输入范围/成功失败原因”。
+  - 允许“重新刷新”（实际调用 AI 在上层做，底层只存结果与 run 记录）。
+- **备份/迁移**：导出/导入 `persona.db`（对普通用户非常关键）。
+
+**P1 功能**
+- 记忆搜索/筛选（按 kind/status/关键词/重要度/时间）
+- 冲突提示与合并（同一 key 多条候选记忆）
+- 审计/撤销（谁在什么时候改了哪条记忆，按 app_id/source）
+
+**依赖底层服务的接口（现有）**
+- 联系人/会话/头像：`GET /api/v1/contacts`、`GET /api/v1/sessions`、`GET/POST /api/v1/recent_contacts`、`GET /avatar/{username}`
+- 历史对话：`GET /api/v1/chats/{username}/history`
+- 画像/记忆：`GET/PATCH /api/v1/people/{username}/profile`、`GET/POST /api/v1/people/{username}/memories`、`PATCH/DELETE /api/v1/memories/{id}`
+- AI runs：`GET/POST /api/v1/people/{username}/runs`、`PATCH /api/v1/runs/{run_id}`
+
+---
+
+### 3) 个性化策略引擎（Personalization / Policy Engine）
+
+**定位**：一个“面向上层应用的内部组件/服务”，负责把聊天历史转成可用的“策略/约束/风格”，写回画像/记忆库；供自动回复或其它应用复用。
+
+它可以是：
+- 纯规则/模板（不需要 AI）
+- 或者调用 AI（但 AI 仍在此上层组件内完成）
+
+**P0 必做功能（先把工程问题解决）**
+- 增量刷新：明确本次输入范围（start/end_ts 或 local_id 范围），并写入 run 记录
+- 写回可追溯：写入 memories 时带 `source/app_id`、`evidence`、`confidence`
+- 待确认：低置信度/推断类结论默认 `pending`
+- 冲突策略：同一 key 的记忆如何“替换/追加/作废”
+
+**依赖底层服务的接口（现有）**
+- 取数：`GET /api/v1/chats/{username}/history`、`GET /api/v1/sessions`
+- 写回：profile/memories/runs 系列接口（同上）
+
+---
+
+## 可选上层应用（按需再做）
+
+### 4) 对话检索与导出（Search / Export）
+
+用途：让用户把“某人/某段时间”的对话导出为 JSON/Markdown/CSV，用于备份、迁移、或喂给外部工具。  
+建议：先做“单联系人导出”，不要一上来做全库索引（复杂且很吃资源）。
+
+### 5) 本地事件桥（Automation Bridge）
+
+用途：把新消息事件转成“本机 webhook/脚本触发/系统通知”，给其它桌面自动化工具使用。  
+关键：去重 + ACK + 限速，避免风暴。
+
+### 6) SDK/封装库（给你自己用）
+
+用途：给上层应用提供一个统一的 API Client（Python/Node 任选），把：
+- SSE 连接、断线重连
+- 游标保存
+- `api_token` 注入
+- `(username, local_id)` 去重与 ACK
+都封装掉，避免每个应用各写一遍然后各踩一遍坑。
+
+---
+
+## 最小推进建议（Occam：先做最少但可用）
+
+如果你要最快做出“能卖给普通用户”的组合，建议顺序：
+1) **服务管理器（已做）**：确保安装/自启/日志可用
+2) **自动回复（P0）**：可靠收消息 + 幂等 + 安全阀（发消息方案另做）
+3) **画像/记忆管理器（P0）**：让用户能看见/能改/能确认 pending（建立信任）
+4) 再上个性化策略引擎（把 AI/规则的复杂度封装在内部）

package/manifest.json

@@ -0,0 +1,60 @@
+{
+  "id": "wx-reply",
+  "name": "WX 回复",
+  "version": "0.2.9",
+  "description": "微信聊天回复助手：依赖电脑端 wechat-decrypt 本地解密服务（https://github.com/hc-tec/wechat-decrypt）读取会话，再结合宿主共享 AI 生成候选回复；不是下载后即可直接使用，需先在电脑运行该服务并让手机可访问。",
+  "icons": {
+    "48": "icons/icon-48.png",
+    "96": "icons/icon-96.png",
+    "128": "icons/icon-128.png"
+  },
+  "entry": {
+    "bundle": { "html": "ui/app/index.html" }
+  },
+  "runtimePermissions": [
+    "input.insert",
+    "storage.read",
+    "storage.write",
+    "network.fetch",
+    "ai.request",
+    "panel.state.write"
+  ],
+  "network": {
+    "mode": "host-proxy",
+    "allowAbsoluteUrls": true
+  },
+  "bindings": [
+    {
+      "id": "wx.reply",
+      "title": "微信回复",
+      "triggers": ["manual"],
+      "categories": ["chat", "wechat", "reply"],
+      "preferredPresentation": "panel.compose",
+      "entry": { "view": "picker", "defaultAction": "insert" }
+    }
+  ],
+  "discovery": {
+    "launchMode": "panel-first",
+    "slash": {
+      "enabled": true,
+      "commands": ["wx"],
+      "aliases": ["w"],
+      "tags": ["wechat", "reply", "chat"]
+    }
+  },
+  "ai": {
+    "executionMode": "direct-model",
+    "backendHints": {
+      "preferredBackendClass": "direct-model",
+      "latencyTier": "interactive",
+      "latencyBudgetMs": 2200,
+      "requireStructuredJson": true,
+      "requiredCapabilities": [],
+      "notes": [
+        "Generate two concise WeChat replies.",
+        "Prefer strict JSON output.",
+        "Use selected contact context when available."
+      ]
+    }
+  }
+}

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@keyflow2/keyflow-kit-wx-reply",
+  "version": "0.2.9",
+  "description": "微信聊天回复助手：依赖电脑端 wechat-decrypt 本地解密服务（https://github.com/hc-tec/wechat-decrypt）读取会话，再结合宿主共享 AI 生成候选回复；不是下载后即可直接使用，需先在电脑运行该服务并让手机可访问。",
+  "keywords": [
+    "keyflow",
+    "function-kit",
+    "ime",
+    "webview"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hc-tec/keyflow.git"
+  },
+  "bugs": {
+    "url": "https://github.com/hc-tec/keyflow/issues"
+  },
+  "homepage": "https://github.com/hc-tec/keyflow#readme",
+  "keyflow": {
+    "kind": "function-kit",
+    "kitId": "wx-reply",
+    "manifest": "manifest.json"
+  }
+}