@nanhara/hara 0.130.1 → 0.130.2

package/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to `@nanhara/hara`.
 > Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
 > **patch** (last) number bumps for **optimizations/fixes of existing features**.
 
+## 0.130.2 — 2026-07-21 — Weixin delivery identity
+
+- Personal WeChat iLink messages now pass valid `message_id` and `create_time_ms` metadata into Hara's
+  cross-restart stale-event, deduplication, and no-rerun boundary.
+- Missing or invalid metadata remains genuinely optional: the adapter omits `messageId` and `createdAtMs`
+  instead of adding own properties whose value is `undefined`.
+- The Feishu SDK's transitive `protobufjs` parser is pinned to the patched 7.6.5 release.
+- Upgrade with `npm i -g @nanhara/hara@0.130.2`.
+
 ## 0.130.1 — 2026-07-21 — Windows private-state portability
 
 - `hara serve` no longer calls the inapplicable POSIX `fchmod` operation on Windows discovery

package/dist/gateway/weixin.js

@@ -45,6 +45,19 @@ const WEIXIN_CDN_ALLOWLIST = new Set([
 const IMAGE_EXTS = new Set(["jpg", "jpeg", "png", "gif", "webp", "bmp"]);
 const num = (v) => (typeof v === "number" ? v : 0);
 const str = (v) => (v == null ? "" : String(v));
+function stableWeixinMessageId(value) {
+    if (typeof value === "string")
+        return value.trim() || undefined;
+    if (Number.isSafeInteger(value))
+        return String(value);
+    return undefined;
+}
+function weixinCreatedAtMs(value) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return undefined;
+    return Math.trunc(parsed);
+}
 // ── pure protocol helpers (unit-tested) ──────────────────────────────────────
 /** X-WECHAT-UIN: base64 of the decimal string of a random uint32 (regenerated per request). */
 export function randomWechatUin() {
@@ -145,7 +158,19 @@ export function parseWeixinMessage(msg, accountId) {
     // This tells it the text is already transcribed so it just answers.
     const isVoice = !items.some((i) => i?.type === ITEM_TEXT) && items.some((i) => i?.type === 3);
     const tagged = isVoice ? `(The user sent this as a voice message; it is already transcribed to text below — just reply to it normally, you don't have or need the audio.)\n\n${text}` : text;
-    return { inbound: { chatId: from, userId: from, userName: from, text: tagged }, contextToken: str(msg?.context_token).trim() };
+    const messageId = stableWeixinMessageId(msg?.message_id);
+    const createdAtMs = weixinCreatedAtMs(msg?.create_time_ms);
+    return {
+        inbound: {
+            chatId: from,
+            userId: from,
+            userName: from,
+            text: tagged,
+            ...(messageId ? { messageId } : {}),
+            ...(createdAtMs === undefined ? {} : { createdAtMs }),
+        },
+        contextToken: str(msg?.context_token).trim(),
+    };
 }
 /** iLink signals expiry via -14, or -2 + errmsg "unknown error" (a stale-session masquerading as rate-limit). */
 export function isSessionExpired(ret, errcode, errmsg) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.130.1",
+  "version": "0.130.2",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"
@@ -75,7 +75,8 @@
   },
   "overrides": {
     "@larksuiteoapi/node-sdk": {
-      "axios": "1.18.1"
+      "axios": "1.18.1",
+      "protobufjs": "7.6.5"
     }
   }
 }