@zhin.js/adapter-wechat-mp 1.1.0 → 1.1.2

package/CHANGELOG.md

@@ -1,5 +1,89 @@
 # @zhin.js/adapter-wechat-mp
 
+## 1.1.2
+
+### Patch Changes
+
+- a9e4a40: Derive Command user routes only from explicit `commands/**/*/index.ts(x)` entry paths instead of prepending the plugin owner. Child plugins can now publish top-level static or dynamic commands, while duplicate routes across owners fail during generation construction. Adapter endpoint commands move to explicit paths such as `commands/qq/endpoint/list/index.ts` and are invoked as `qq endpoint list`.
+- 8740059: Standardize TypeScript capabilities on named module directories such as `commands/foo/index.ts`, `middlewares/audit/index.ts`, `handlers/message-receive/index.ts`, `pages/workroom/index.tsx`, and `mcps/filesystem/index.ts`. Only the fixed `index` entry is discovered; sibling files remain private helpers.
+
+  Command route segments come from directories, while `[name]`, `[[name]]`, `[...name]`, and `[[...name]]` directories declare dynamic parameters. Plugin owners do not enter the route unless their config explicitly sets `commandNamespace`; Endpoint `commandPrefix` remains platform-owned and defaults to an empty string.
+
+  Migrate the built-in adapters, plugins, examples, generators, migration tooling, hot reload classification, Agent authoring surfaces, documentation, and release artifacts to the explicit entry convention.
+
+  Make Tool ownership and progressive disclosure explicit across all four supported locations: plugin-public `tools/`, Agent-private `agents/<name>/tools/`, Skill-private `skills/<name>/tools/`, and Agent-Skill-private `agents/<name>/skills/<name>/tools/`. Move adapter and group-suite operations that require domain instructions into their owning Skills so `load_skill` is the only path that unlocks their schemas.
+
+  Remove the package-root `agent/` convention. Public capabilities now use named package-root directories, schedules use `schedules/<name>/index.ts` or `plugin.ts` injection, MCP connections use `mcps/<name>/index.ts`, Prompt Sections use `prompt-sections/<name>/index.ts`, Agent definitions use `agents/<name>/`, and permission vocabulary is published as `PERMITS.md`.
+
+- 25a845a: Unify Skills on `skills/<name>/SKILL.md`, support Agent-private Skills and nested Skill-private Tools, publish and mount existing plugin Skills, add governed Skill metadata and Turn access filtering, unlock only already-admitted same-owner Tools, and make `on-risk` and `once` approval behavior precise.
+- 4380cf9: Colocate adapter command definitions and Agent Skill handlers with their owning capabilities, and provide a shared validated platform permission constructor.
+- 224f267: Require one canonical expanded WeChat MP endpoint configuration. The protocol no longer reinterprets nested `endpoints` or reads endpoint identity and credentials from `process.env`.
+- 5c3858e: Make `@zhin.js/im-contract` the explicit zero-dependency owner of transport identities, canonical segments, media guards, conversation facts, stores, and delivery contracts. Platform adapters now read media contracts from that foundation instead of reaching through Core.
+- Updated dependencies [c861789]
+- Updated dependencies [1414ccb]
+- Updated dependencies [743d470]
+- Updated dependencies [62dee52]
+- Updated dependencies [cd54131]
+- Updated dependencies [244e475]
+- Updated dependencies [a9e4a40]
+- Updated dependencies [5855db7]
+- Updated dependencies [ec921d2]
+- Updated dependencies [8740059]
+- Updated dependencies [25a845a]
+- Updated dependencies [103f2c3]
+- Updated dependencies [9110ab8]
+- Updated dependencies [cd2a888]
+- Updated dependencies [eb3227a]
+- Updated dependencies [b853dba]
+- Updated dependencies [e561309]
+- Updated dependencies [d4c6175]
+- Updated dependencies [7a0e1ca]
+- Updated dependencies [103b5d3]
+- Updated dependencies [5a7a7f7]
+- Updated dependencies [b076eae]
+- Updated dependencies [73a24b7]
+- Updated dependencies [2dbbc15]
+- Updated dependencies [1cb1163]
+- Updated dependencies [be3061e]
+- Updated dependencies [75f8332]
+- Updated dependencies [81935e2]
+- Updated dependencies [f9ed01b]
+- Updated dependencies [ac0ab50]
+- Updated dependencies [5140ce1]
+- Updated dependencies [522d75f]
+- Updated dependencies [a7611b3]
+- Updated dependencies [8823044]
+- Updated dependencies [379439b]
+- Updated dependencies [11c9352]
+- Updated dependencies [6b70e46]
+- Updated dependencies [135ac91]
+- Updated dependencies [140cf0f]
+- Updated dependencies [251e4d2]
+- Updated dependencies [203ad34]
+- Updated dependencies [e6c5113]
+- Updated dependencies [e0f6478]
+- Updated dependencies [baef56b]
+- Updated dependencies [da0a8e3]
+- Updated dependencies [2fd8017]
+- Updated dependencies [5c3858e]
+- Updated dependencies [507d602]
+- Updated dependencies [df9f76b]
+  - @zhin.js/core@1.1.37
+  - @zhin.js/host-http@1.1.1
+  - @zhin.js/adapter@1.1.14
+  - @zhin.js/feature-kit@1.1.1
+  - @zhin.js/skill@1.1.1
+  - @zhin.js/logger@1.1.1
+  - @zhin.js/im-contract@1.1.1
+
+## 1.1.1
+
+### Patch Changes
+
+- Updated dependencies [769e67f]
+  - @zhin.js/adapter@1.1.13
+  - @zhin.js/core@1.1.36
+
 ## 1.1.0
 
 ### Minor Changes

package/README.md

@@ -18,7 +18,7 @@ pnpm add @zhin.js/adapter-wechat-mp
 
 ## Plugin Runtime
 
-- `@zhin.js/adapter` — 约定式 `adapters/wechat-mp.ts`（`defineAdapter`）
+- `@zhin.js/adapter` — 约定式 `adapters/wechat-mp/index.ts`（`defineAdapter`）
 - `@zhin.js/core` — `Endpoint.emit(...)` 入站、`outboundMessageToken` 出站
 - `@zhin.js/host-http` — `httpHostToken` 注册 Webhook 路由（**非** legacy host-router/Koa）
 - `zhin.js` — `plugin.ts`（`definePlugin`）
@@ -38,7 +38,8 @@ pnpm add @zhin.js/adapter-wechat-mp
 | **回复模式** | 默认 `replyMode: passive`（订阅号被动回复）；服务号可设 `customer_service` |
 | **消息加密** | 可选；`encrypt: true` + `encodingAESKey`；`encryptMode: compatible`（默认）或 `secure` |
 
-必填字段（`endpoints[i]`）：`name`、`appId`、`appSecret`、`token`。
+必填字段（`endpoints[i]`）：`id`、`appId`、`appSecret`、`token`。运行时由 AdapterIndex
+把实例级默认值与每个 endpoint 合并；协议实现只接收一份展开后的 endpoint 配置。
 
 ## 最小配置
 
@@ -48,7 +49,7 @@ plugins:
   wechat-mp:
     path: /wechat/webhook
     endpoints:
-      - name: my-wechat-bot
+      - id: my-wechat-bot
         appId: "${WECHAT_APP_ID}"
         appSecret: "${WECHAT_APP_SECRET}"
         token: "${WECHAT_TOKEN}"
@@ -84,7 +85,7 @@ Runtime Host（`http`）须已 listen，Webhook 才可达。
 
 ## AI 工具
 
-技能说明见 `agent/skills/wechat-mp.md`。
+技能说明见 `skills/wechat-mp/SKILL.md`。
 
 ## 文档链接
 

package/adapters/{wechat-mp.js → wechat-mp/index.js}

@@ -1,13 +1,13 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 /**
- * Convention entry: discover `adapters/wechat-mp.ts` → defineAdapter.
+ * Convention entry: discover `adapters/wechat-mp/index.ts` → defineAdapter.
  */
 import { defineAdapter } from 'zhin.js/adapter';
 import { httpHostToken } from '@zhin.js/host-http';
-import { WeChatMpEndpoint } from "../lib/endpoint.js";
-import { resolveWeChatMpConfig, } from "../lib/protocol.js";
-import { wechatMpRuntimeStateToken } from "../lib/wechat-mp-runtime-state.js";
-export { WeChatMpEndpoint } from "../lib/endpoint.js";
+import { WeChatMpEndpoint } from "../../lib/endpoint.js";
+import { resolveWeChatMpConfig, } from "../../lib/protocol.js";
+import { wechatMpRuntimeStateToken } from "../../lib/wechat-mp-runtime-state.js";
+export { WeChatMpEndpoint } from "../../lib/endpoint.js";
 export default defineAdapter({
     capabilities: ['inbound', 'outbound'],
     // 客服消息媒体统一经 /cgi-bin/media/upload 物化为 media_id（url 下载后上传，
@@ -18,7 +18,7 @@ export default defineAdapter({
     },
     create(context) {
         const config = resolveWeChatMpConfig(context.config);
-        // 注册到插件运行时状态（wechat-mp.endpoint list 的"运行中"数据源）
+        // 注册到插件运行时状态（wechat-mp endpoint list 的"运行中"数据源）
         context.use(wechatMpRuntimeStateToken).endpoints.set(config.id, {
             id: config.id,
             mode: 'webhook',

package/adapters/{wechat-mp.ts → wechat-mp/index.ts}

@@ -1,20 +1,20 @@
 /**
- * Convention entry: discover `adapters/wechat-mp.ts` → defineAdapter.
+ * Convention entry: discover `adapters/wechat-mp/index.ts` → defineAdapter.
  */
 import { defineAdapter } from 'zhin.js/adapter';
 import { httpHostToken } from '@zhin.js/host-http';
-import { WeChatMpEndpoint } from '../src/endpoint.js';
+import { WeChatMpEndpoint } from '../../src/endpoint.js';
 import {
   resolveWeChatMpConfig,
-  type WeChatMpAdapterConfig,
-} from '../src/protocol.js';
-import { wechatMpRuntimeStateToken } from '../src/wechat-mp-runtime-state.js';
+  type WeChatMpEndpointConfig,
+} from '../../src/protocol.js';
+import { wechatMpRuntimeStateToken } from '../../src/wechat-mp-runtime-state.js';
 
-export { WeChatMpEndpoint } from '../src/endpoint.js';
-export type { WeChatMpEndpointOptions } from '../src/endpoint.js';
-export type { WeChatMpFetch } from '../src/client.js';
+export { WeChatMpEndpoint } from '../../src/endpoint.js';
+export type { WeChatMpEndpointOptions } from '../../src/endpoint.js';
+export type { WeChatMpFetch } from '../../src/client.js';
 
-export default defineAdapter<WeChatMpAdapterConfig>({
+export default defineAdapter<WeChatMpEndpointConfig>({
   capabilities: ['inbound', 'outbound'],
   // 客服消息媒体统一经 /cgi-bin/media/upload 物化为 media_id（url 下载后上传，
   // kind=file 的 MediaRef 视为既有 media_id 直传）；公众号无卡片交互面，交互段降级纯文本。
@@ -24,7 +24,7 @@ export default defineAdapter<WeChatMpAdapterConfig>({
   },
   create(context) {
     const config = resolveWeChatMpConfig(context.config);
-    // 注册到插件运行时状态（wechat-mp.endpoint list 的"运行中"数据源）
+    // 注册到插件运行时状态（wechat-mp endpoint list 的"运行中"数据源）
     context.use(wechatMpRuntimeStateToken).endpoints.set(config.id, {
       id: config.id,
       mode: 'webhook',

package/commands/{endpoint/add/[id].js → wechat-mp/endpoint/add/[id]/index.js}

@@ -1,3 +1,3 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
-import { wechatMpEndpointCommands } from "../../../lib/wechat-mp-endpoint-commands.js";
+import { wechatMpEndpointCommands } from '../../definition.js';
 export default wechatMpEndpointCommands.add;

package/commands/wechat-mp/endpoint/add/[id]/index.ts

@@ -0,0 +1,3 @@
+import { wechatMpEndpointCommands } from '../../definition.js';
+
+export default wechatMpEndpointCommands.add;

package/{lib/wechat-mp-endpoint-commands.js → commands/wechat-mp/endpoint/definition.js}

@@ -1,10 +1,11 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
 /**
- * `wechat-mp.endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
- * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ * `wechat-mp endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/wechat-mp/endpoint/ 下的 list / add / remove 直接默认导出这三项。
  */
 import { createEndpointCommands } from 'zhin.js/adapter';
 import { defineCommand } from 'zhin.js/command';
-import { wechatMpRuntimeStateToken } from './wechat-mp-runtime-state.js';
+import { wechatMpRuntimeStateToken } from "../../../lib/wechat-mp-runtime-state.js";
 export const wechatMpEndpointCommands = createEndpointCommands({
     adapterKey: 'wechat-mp',
     adapterDisplayName: 'WeChat MP',

package/{src/wechat-mp-endpoint-commands.ts → commands/wechat-mp/endpoint/definition.ts}

@@ -1,10 +1,10 @@
 /**
- * `wechat-mp.endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
- * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ * `wechat-mp endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/wechat-mp/endpoint/ 下的 list / add / remove 直接默认导出这三项。
  */
 import { createEndpointCommands } from 'zhin.js/adapter';
 import { defineCommand } from 'zhin.js/command';
-import { wechatMpRuntimeStateToken } from './wechat-mp-runtime-state.js';
+import { wechatMpRuntimeStateToken } from '../../../src/wechat-mp-runtime-state.js';
 
 export const wechatMpEndpointCommands = createEndpointCommands({
   adapterKey: 'wechat-mp',

package/commands/{endpoint/list.js → wechat-mp/endpoint/list/index.js}

@@ -1,3 +1,3 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
-import { wechatMpEndpointCommands } from "../../lib/wechat-mp-endpoint-commands.js";
+import { wechatMpEndpointCommands } from '../definition.js';
 export default wechatMpEndpointCommands.list;

package/commands/wechat-mp/endpoint/list/index.ts

@@ -0,0 +1,3 @@
+import { wechatMpEndpointCommands } from '../definition.js';
+
+export default wechatMpEndpointCommands.list;

package/commands/{endpoint/remove/[id].js → wechat-mp/endpoint/remove/[id]/index.js}

@@ -1,3 +1,3 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
-import { wechatMpEndpointCommands } from "../../../lib/wechat-mp-endpoint-commands.js";
+import { wechatMpEndpointCommands } from '../../definition.js';
 export default wechatMpEndpointCommands.remove;

package/commands/wechat-mp/endpoint/remove/[id]/index.ts

@@ -0,0 +1,3 @@
+import { wechatMpEndpointCommands } from '../../definition.js';
+
+export default wechatMpEndpointCommands.remove;

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, readTextBody, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, type ResolvedWeChatMpConfig, type TokenResponse, type WeChatAPIResponse, type WeChatMessage, type WeChatMpAdapterConfig, type WeChatWireSegment, } from './protocol.js';
+export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, readTextBody, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, type ResolvedWeChatMpConfig, type TokenResponse, type WeChatAPIResponse, type WeChatMessage, type WeChatMpEndpointConfig, type WeChatWireSegment, } from './protocol.js';
 export { getPassiveReplyCapture, recordPassiveReplyText, runWithPassiveReplyCapture, type PassiveReplyCapture, } from './passive-reply.js';
 export { WeChatMpClient, wechatMpClient, type WeChatMpClientEventMap, type WeChatMpFetch, } from './client.js';
 export { WeChatMpEndpoint, type WeChatMpEndpointOptions, } from './endpoint.js';

package/lib/media-upload.d.ts

@@ -1,4 +1,4 @@
-import { type MediaRef } from '@zhin.js/core';
+import { type MediaRef } from '@zhin.js/im-contract';
 export interface MediaBinary {
     readonly data: Buffer;
     readonly mimeType: string;

package/lib/media-upload.js

@@ -6,7 +6,7 @@
  */
 import { readFile } from 'node:fs/promises';
 import { basename } from 'node:path';
-import { isMediaRef } from '@zhin.js/core';
+import { isMediaRef } from '@zhin.js/im-contract';
 const MIME_EXT = {
     'image/jpeg': 'jpg',
     'image/png': 'png',

package/lib/protocol.d.ts

@@ -4,11 +4,12 @@
  */
 import type { IncomingMessage } from 'node:http';
 import type { ConversationRef } from '@zhin.js/im-contract';
-export interface WeChatMpAdapterConfig {
-    readonly id?: string;
-    readonly appId?: string;
-    readonly appSecret?: string;
-    readonly token?: string;
+/** One endpoint config after AdapterIndex expands `plugins.<instanceKey>.endpoints`. */
+export interface WeChatMpEndpointConfig {
+    readonly id: string;
+    readonly appId: string;
+    readonly appSecret: string;
+    readonly token: string;
     readonly encodingAESKey?: string;
     readonly path?: string;
     readonly encrypt?: boolean;
@@ -25,10 +26,6 @@ export interface WeChatMpAdapterConfig {
     readonly replyMode?: 'passive' | 'customer_service';
     /** 被动回复等待入站处理的最长时间（毫秒），默认 4500 */
     readonly passiveReplyTimeoutMs?: number;
-    /** Transitional: legacy root `endpoints[]` with `context: wechat-mp`. */
-    readonly endpoints?: ReadonlyArray<Partial<ResolvedWeChatMpConfig> & {
-        readonly context?: string;
-    }>;
 }
 export interface ResolvedWeChatMpConfig {
     readonly context: 'wechat-mp';
@@ -79,7 +76,7 @@ export interface WeChatWireSegment {
     readonly type: string;
     readonly data?: Record<string, unknown>;
 }
-export declare function resolveWeChatMpConfig(config?: WeChatMpAdapterConfig): ResolvedWeChatMpConfig;
+export declare function resolveWeChatMpConfig(config: WeChatMpEndpointConfig): ResolvedWeChatMpConfig;
 export declare function queryParam(value: string | null | undefined): string;
 /** URL 查询里的 Base64 可能把 `+` 解码成空格 */
 export declare function normalizeEchostrParam(echostr: string): string;

package/lib/protocol.js

@@ -4,26 +4,17 @@
  */
 import { createHash, createDecipheriv, createCipheriv, randomBytes } from 'node:crypto';
 import * as xml2js from 'xml2js';
-export function resolveWeChatMpConfig(config = {}) {
-    const entry = config.endpoints?.find((item) => item.context === 'wechat-mp');
-    const appId = config.appId ?? entry?.appId ?? process.env.WECHAT_APP_ID;
-    const appSecret = config.appSecret ?? entry?.appSecret ?? process.env.WECHAT_APP_SECRET;
-    const token = config.token ?? entry?.token ?? process.env.WECHAT_TOKEN;
-    if (!appId || !appSecret || !token) {
-        throw new TypeError('WeChat MP adapter requires appId + appSecret + token (plugins.<key> or endpoints with context: wechat-mp)');
-    }
-    const id = (typeof config.id === 'string' && config.id)
-        || (typeof entry?.id === 'string' && entry.id)
-        || process.env.WECHAT_BOT_NAME
-        || 'wechat-mp-bot';
-    const path = config.path ?? entry?.path ?? '/wechat/webhook';
-    const encodingAESKey = config.encodingAESKey ?? entry?.encodingAESKey;
-    const encrypt = config.encrypt ?? entry?.encrypt ?? false;
-    const encryptMode = config.encryptMode ?? entry?.encryptMode ?? (encrypt ? 'compatible' : 'plain');
-    const replyMode = config.replyMode ?? entry?.replyMode ?? 'passive';
-    const passiveReplyTimeoutMs = config.passiveReplyTimeoutMs
-        ?? entry?.passiveReplyTimeoutMs
-        ?? 4500;
+export function resolveWeChatMpConfig(config) {
+    const id = requiredEndpointField(config.id, 'id');
+    const appId = requiredEndpointField(config.appId, 'appId');
+    const appSecret = requiredEndpointField(config.appSecret, 'appSecret');
+    const token = requiredEndpointField(config.token, 'token');
+    const path = optionalEndpointField(config.path) ?? '/wechat/webhook';
+    const encodingAESKey = optionalEndpointField(config.encodingAESKey);
+    const encrypt = config.encrypt ?? false;
+    const encryptMode = config.encryptMode ?? (encrypt ? 'compatible' : 'plain');
+    const replyMode = config.replyMode ?? 'passive';
+    const passiveReplyTimeoutMs = config.passiveReplyTimeoutMs ?? 4500;
     return {
         context: 'wechat-mp',
         id,
@@ -38,6 +29,16 @@ export function resolveWeChatMpConfig(config = {}) {
         passiveReplyTimeoutMs,
     };
 }
+function requiredEndpointField(value, field) {
+    const resolved = optionalEndpointField(value);
+    if (!resolved) {
+        throw new TypeError(`WeChat MP endpoint requires a non-empty ${field}`);
+    }
+    return resolved;
+}
+function optionalEndpointField(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
 export function queryParam(value) {
     return value ?? '';
 }

package/lib/wechat-mp-runtime-state.js

@@ -1,6 +1,6 @@
 /**
  * WeChat MP 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
- * 由 plugin.ts setup() provide，adapter create 与 `wechat-mp.endpoint` 命令共享（同一 owner generation）。
+ * 由 plugin.ts setup() provide，adapter create 与 `wechat-mp endpoint` 命令共享（同一 owner generation）。
  */
 import { defineEndpointRuntimeStateToken } from 'zhin.js/adapter';
 export const wechatMpRuntimeStateToken = defineEndpointRuntimeStateToken('wechat-mp');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-wechat-mp",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "type": "module",
   "description": "Zhin.js WeChat Official Account adapter for Plugin Runtime (HTTP webhook)",
   "main": "./lib/index.js",
@@ -8,19 +8,20 @@
   "dependencies": {
     "axios": "^1.19.0",
     "xml2js": "^0.6.2",
-    "@zhin.js/adapter": "1.1.12",
-    "@zhin.js/core": "1.1.35",
-    "@zhin.js/feature-kit": "1.1.0",
-    "@zhin.js/host-http": "1.1.0",
-    "@zhin.js/im-contract": "1.1.0",
-    "@zhin.js/logger": "1.1.0"
+    "@zhin.js/adapter": "1.1.14",
+    "@zhin.js/core": "1.1.37",
+    "@zhin.js/feature-kit": "1.1.1",
+    "@zhin.js/host-http": "1.1.1",
+    "@zhin.js/im-contract": "1.1.1",
+    "@zhin.js/logger": "1.1.1",
+    "@zhin.js/skill": "1.1.1"
   },
   "peerDependencies": {
-    "@zhin.js/adapter": "^1.1.12",
-    "@zhin.js/command": "^1.1.0",
-    "@zhin.js/core": "^1.1.35",
-    "@zhin.js/host-http": "^1.1.0",
-    "zhin.js": "^1.1.0"
+    "@zhin.js/adapter": "^1.1.14",
+    "@zhin.js/command": "^1.1.1",
+    "@zhin.js/core": "^1.1.37",
+    "@zhin.js/host-http": "^1.1.1",
+    "zhin.js": "^1.1.2"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -35,7 +36,7 @@
     "@types/xml2js": "^0.4.14",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zhin.js": "1.1.0"
+    "zhin.js": "1.1.2"
   },
   "keywords": [
     "zhin",
@@ -67,7 +68,7 @@
     "schema.json",
     "src",
     "lib",
-    "agent",
+    "skills",
     "README.md",
     "CHANGELOG.md"
   ],
@@ -99,6 +100,10 @@
       {
         "package": "@zhin.js/command",
         "api": "^1.0.0"
+      },
+      {
+        "package": "@zhin.js/skill",
+        "api": "^1.0.0"
       }
     ],
     "plugins": []

package/plugin.js

@@ -8,7 +8,7 @@ export default definePlugin({
         displayName: 'WeChat Official Account Adapter',
     },
     setup(context) {
-        // 运行中 endpoint 注册表（wechat-mp.endpoint list 的"运行中"数据源）
+        // 运行中 endpoint 注册表（wechat-mp endpoint list 的"运行中"数据源）
         context.resources.provide(wechatMpRuntimeStateToken, createEndpointRuntimeState());
     },
 });

package/schema.json

@@ -52,10 +52,11 @@
     },
     "endpoints": {
       "type": "array",
+      "minItems": 1,
       "description": "多账号：一个插件实例挂多个 endpoint。每项与顶层字段同构（id 必填，其余覆盖顶层）",
       "items": {
         "type": "object",
-        "additionalProperties": true,
+        "additionalProperties": false,
         "properties": {
           "master": {
             "type": [
@@ -91,6 +92,33 @@
             "type": "string",
             "description": "WeChat MP encoding AES key"
           },
+          "path": {
+            "type": "string"
+          },
+          "encrypt": {
+            "type": "boolean"
+          },
+          "encryptMode": {
+            "type": "string",
+            "enum": [
+              "plain",
+              "compatible",
+              "secure"
+            ]
+          },
+          "replyMode": {
+            "type": "string",
+            "enum": [
+              "passive",
+              "customer_service"
+            ]
+          },
+          "passiveReplyTimeoutMs": {
+            "type": "number"
+          },
+          "commandPrefix": {
+            "type": "string"
+          },
           "id": {
             "type": "string",
             "description": "WeChat MP bot name"

package/src/index.ts

@@ -20,7 +20,7 @@ export {
   type TokenResponse,
   type WeChatAPIResponse,
   type WeChatMessage,
-  type WeChatMpAdapterConfig,
+  type WeChatMpEndpointConfig,
   type WeChatWireSegment,
 } from './protocol.js';
 

package/src/media-upload.ts

@@ -6,7 +6,7 @@
  */
 import { readFile } from 'node:fs/promises';
 import { basename } from 'node:path';
-import { isMediaRef, type MediaRef } from '@zhin.js/core';
+import { isMediaRef, type MediaRef } from '@zhin.js/im-contract';
 
 export interface MediaBinary {
   readonly data: Buffer;

package/src/protocol.ts

@@ -8,11 +8,12 @@ import type { IncomingMessage } from 'node:http';
 import * as xml2js from 'xml2js';
 import type { ConversationRef } from '@zhin.js/im-contract';
 
-export interface WeChatMpAdapterConfig {
-  readonly id?: string;
-  readonly appId?: string;
-  readonly appSecret?: string;
-  readonly token?: string;
+/** One endpoint config after AdapterIndex expands `plugins.<instanceKey>.endpoints`. */
+export interface WeChatMpEndpointConfig {
+  readonly id: string;
+  readonly appId: string;
+  readonly appSecret: string;
+  readonly token: string;
   readonly encodingAESKey?: string;
   readonly path?: string;
   readonly encrypt?: boolean;
@@ -29,10 +30,6 @@ export interface WeChatMpAdapterConfig {
   readonly replyMode?: 'passive' | 'customer_service';
   /** 被动回复等待入站处理的最长时间（毫秒），默认 4500 */
   readonly passiveReplyTimeoutMs?: number;
-  /** Transitional: legacy root `endpoints[]` with `context: wechat-mp`. */
-  readonly endpoints?: ReadonlyArray<Partial<ResolvedWeChatMpConfig> & {
-    readonly context?: string;
-  }>;
 }
 
 export interface ResolvedWeChatMpConfig {
@@ -89,28 +86,17 @@ export interface WeChatWireSegment {
   readonly data?: Record<string, unknown>;
 }
 
-export function resolveWeChatMpConfig(config: WeChatMpAdapterConfig = {}): ResolvedWeChatMpConfig {
-  const entry = config.endpoints?.find((item) => item.context === 'wechat-mp');
-  const appId = config.appId ?? entry?.appId ?? process.env.WECHAT_APP_ID;
-  const appSecret = config.appSecret ?? entry?.appSecret ?? process.env.WECHAT_APP_SECRET;
-  const token = config.token ?? entry?.token ?? process.env.WECHAT_TOKEN;
-  if (!appId || !appSecret || !token) {
-    throw new TypeError(
-      'WeChat MP adapter requires appId + appSecret + token (plugins.<key> or endpoints with context: wechat-mp)',
-    );
-  }
-  const id = (typeof config.id === 'string' && config.id)
-    || (typeof entry?.id === 'string' && entry.id)
-    || process.env.WECHAT_BOT_NAME
-    || 'wechat-mp-bot';
-  const path = config.path ?? entry?.path ?? '/wechat/webhook';
-  const encodingAESKey = config.encodingAESKey ?? entry?.encodingAESKey;
-  const encrypt = config.encrypt ?? entry?.encrypt ?? false;
-  const encryptMode = config.encryptMode ?? entry?.encryptMode ?? (encrypt ? 'compatible' : 'plain');
-  const replyMode = config.replyMode ?? entry?.replyMode ?? 'passive';
-  const passiveReplyTimeoutMs = config.passiveReplyTimeoutMs
-    ?? entry?.passiveReplyTimeoutMs
-    ?? 4500;
+export function resolveWeChatMpConfig(config: WeChatMpEndpointConfig): ResolvedWeChatMpConfig {
+  const id = requiredEndpointField(config.id, 'id');
+  const appId = requiredEndpointField(config.appId, 'appId');
+  const appSecret = requiredEndpointField(config.appSecret, 'appSecret');
+  const token = requiredEndpointField(config.token, 'token');
+  const path = optionalEndpointField(config.path) ?? '/wechat/webhook';
+  const encodingAESKey = optionalEndpointField(config.encodingAESKey);
+  const encrypt = config.encrypt ?? false;
+  const encryptMode = config.encryptMode ?? (encrypt ? 'compatible' : 'plain');
+  const replyMode = config.replyMode ?? 'passive';
+  const passiveReplyTimeoutMs = config.passiveReplyTimeoutMs ?? 4500;
   return {
     context: 'wechat-mp',
     id,
@@ -126,6 +112,21 @@ export function resolveWeChatMpConfig(config: WeChatMpAdapterConfig = {}): Resol
   };
 }
 
+function requiredEndpointField(
+  value: unknown,
+  field: 'id' | 'appId' | 'appSecret' | 'token',
+): string {
+  const resolved = optionalEndpointField(value);
+  if (!resolved) {
+    throw new TypeError(`WeChat MP endpoint requires a non-empty ${field}`);
+  }
+  return resolved;
+}
+
+function optionalEndpointField(value: unknown): string | undefined {
+  return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+
 export function queryParam(value: string | null | undefined): string {
   return value ?? '';
 }

package/src/wechat-mp-runtime-state.ts

@@ -1,6 +1,6 @@
 /**
  * WeChat MP 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
- * 由 plugin.ts setup() provide，adapter create 与 `wechat-mp.endpoint` 命令共享（同一 owner generation）。
+ * 由 plugin.ts setup() provide，adapter create 与 `wechat-mp endpoint` 命令共享（同一 owner generation）。
  */
 import { defineEndpointRuntimeStateToken } from 'zhin.js/adapter';
 

package/agent/skills/wechat-mp.md

@@ -1,33 +0,0 @@
----
-name: wechat-mp
-platforms:
-  - wechat-mp
-description: >-
-  微信公众号适配器：通过 Webhook 接收用户消息、自动管理 Access Token、
-  支持 XML 消息解析和 AES 消息加解密。纯消息通道，无额外 AI 工具。
-  当上下文涉及微信公众号消息交互时可参考此技能了解能力边界。
-keywords:
-  - wechat
-  - weixin
-  - adapter:wechat-mp
-  - 微信
-  - 公众号
-  - official-account
-  - mp
-tags:
-  - wechat
-  - adapter
-  - social
-tools: []
----
-
-# 微信公众号适配器
-
-纯消息通道，收发微信公众号用户消息。无 AI 工具可调用。
-
-## 能力
-
-- 通过 HTTP 回调接收微信推送的用户消息事件
-- 自动刷新 Access Token，无需手动维护
-- 支持签名验证和 AES 消息加解密
-- 回复通过常规 `$reply` 发送

package/commands/endpoint/add/[id].ts

@@ -1,3 +0,0 @@
-import { wechatMpEndpointCommands } from '../../../src/wechat-mp-endpoint-commands.js';
-
-export default wechatMpEndpointCommands.add;

package/commands/endpoint/list.ts

@@ -1,3 +0,0 @@
-import { wechatMpEndpointCommands } from '../../src/wechat-mp-endpoint-commands.js';
-
-export default wechatMpEndpointCommands.list;

package/commands/endpoint/remove/[id].ts

@@ -1,3 +0,0 @@
-import { wechatMpEndpointCommands } from '../../../src/wechat-mp-endpoint-commands.js';
-
-export default wechatMpEndpointCommands.remove;

package/lib/wechat-mp-endpoint-commands.d.ts

@@ -1 +0,0 @@
-export declare const wechatMpEndpointCommands: import("@zhin.js/adapter").EndpointCommands<Readonly<import("@zhin.js/command").CommandDefinition<unknown, unknown, import("@zhin.js/command").CommandMessage, string | undefined>>>;