@zhin.js/adapter-wechat-mp 1.1.26 → 1.1.27

package/CHANGELOG.md

@@ -1,5 +1,114 @@
 # @zhin.js/adapter-wechat-mp
 
+## 1.1.27
+
+### Patch Changes
+
+- 57c6cdc: fix: 全仓审计修复
+
+  - kernel: 模板求值沙箱不再泄漏宿主对象——宿主函数的返回值与抛出的错误会重新包裹代理（`segments.map(x=>x).constructor.constructor(...)` 之前可拿到宿主 `Function`），并禁止通过代理写入/删除宿主属性。
+  - agent: exec 白名单正则按整体锚定（`git|npm` 不再匹配 `gitevil`）；SSRF 主机名黑名单识别尾点形式（`localhost.`）；Docker 沙箱 `always` 模式的 fail-closed 分支可被触达；声明缺失的 `chalk` 依赖。
+  - ai: 摘要按最新优先加载（超过 500 条时不再使用过期锚点）；修复 `test` 脚本指向不存在的配置。
+  - cli: `ZHIN_LOG_LEVEL` 生效（修复运算符优先级）；移除旧守护进程遗留的无引用进程辅助函数。
+  - logger: `formatCompact` 不再把 `config: 'yaml'`、`direction: 'in'` 这类非路径值改写成 `./yaml`。
+  - host-http: 未配置数据库时 `db:tables` 与有数据库时一致返回 `{ tables }`。
+  - a2a: 405 响应把 `Allow` 放进响应头。
+  - pagemanager: 内联进 `<script>` 的页面元数据转义 `<`。
+  - client: 事件历史请求失败时携带 HTTP 状态，token 失效可触发重新登录。
+  - scaffold-wizard / create-zhin-app: 修正适配器文档 URL 与模板里的 `@zhin.js/tool` 导入。
+  - adapter-wechat-mp: 签名比较改为常量时间。
+  - adapter-kook: 声明运行时依赖 `ws`。
+  - plugin-lottery: 遗漏值按最近一次出现计算；推送目标 schema 字段与实现一致（`endpointKey`）。
+  - plugin-code-runner: 语言校验改用自有属性判断。
+  - plugin-link-poster: 抓取前校验主机名白名单（修复 SSRF），超时覆盖响应体读取。
+  - 其余包：从 `files` 中移除不存在的目录。
+  - feature-kit / middleware: 修正 README 中层级错误的文档链接。
+
+- e1fda87: fix: 按审计待审清单处理（安全、功能、清理）
+
+  **行为变更（升级前请阅读）**
+
+  - kernel / core / zhin.js：出站文本中的 `${…}` 不再用 `vm` 求值，只替换 `TemplateContext` 上能解析到值的属性路径（如 `${sender.name}`）；表达式、函数调用、未知名字原样保留。整套 vm 沙箱（`evaluate` / `execute` / `compiler` / `getValueWithRuntime`）已移除。
+  - kernel / core / zhin.js：移除零引用的遗留导出——`Scheduler`、错误管理器与 `ZhinError` 子类、`compose`、`segment.from/toString`、AI 触发/准入函数、`@zhin.js/core/queue-im-field-contract`、`zhin.js/contexts`。
+  - agent：readonly 执行预设不再放行重定向、后台 `&`、进程替换、`find -delete/-exec`、`sed -i`、`sort -o`、`tee`、`xargs`、awk；curl/wget 校验每个 URL 与裸主机并识别更多上传参数；自定义 `execAllowlist` 中的只读命令带写入风险时改走审批。沙箱超时/取消会杀掉进程组或具名容器，默认镜像改为 `node:22-bookworm-slim` + `bash`。移除无生产调用的 `AuditLogger`、`AnomalyDetector`、旧 vision 回合等导出。
+  - ai：移除 `storage`、`FileStateCache`、`CostTracker`、`model-name-utils`、`./agent-step-checkpoint` 子路径、`ContextManager` 及旧压缩管线；延迟工具快照改为有界 LRU。
+  - cli：`zhin send` / `watch` / `schedule` 改为与运行中的 Host 通信（新增 `POST /message/send` 与 `/assistant/jobs` 写接口），`schedule` 不再支持离线改文件；移除 `zhin uninstall service`（用 `zhin service uninstall`）、`build --analyze`、`install -S`；`zhin stop` 杀不掉进程时保留 pid 文件并以非零退出；`runtime migrate` 新增 `verify`；未设置 `TZ` 时调度默认时区改为系统时区；不带 `ZHIN_SUPERVISOR_PID` 的进程被 init 接管后不再自行退出。
+  - schedule：后台 reconcile 出错不再产生未处理 rejection（新增 `onStoreError`）；启动途中 `stop()` 不再遗留定时器。
+  - schema：元组校验与 `safeParse`、JSON Schema 一致（空数组不通过，缺省的可选元组为 `undefined`）。
+  - client / contract：删除无后端路由的 agent-stream API、未使用的 `definePage` 与旧 PageManager 类型；`@zhin.js/contract` 不再依赖 `@zhin.js/ai`；客户端收到 401 会清除已保存的凭据；安装/更新/卸载 RPC 默认超时 120 秒。
+  - a2a：流式响应中途出错写入 SSE error 并结束；未配置 token 的非生产环境只接受本机请求；任务存储有上限与过期；Mailbox 凭据回退与生产环境缺密钥检查修复。
+  - speech：`provider: openai` 不再套用 Ollama 的默认 host/model；识别语言改为可配置，不再写死 `zh`。
+  - adapter-lark：支持 `encryptKey` 加密事件解密。adapter-github：Device Flow 可取消、带超时并回复失败原因。adapter-wecom / dingtalk：请求加超时并校验 HTTP 状态。adapter-weixin-ilink：输入关闭期间暂停轮询。adapter-milky：SSE 支持 CRLF、缓冲上限与空闲重连。adapter-onebot-events：好友删除通知改为 `notice.friend.decrease`。
+  - plugin-group-suite：`teachAllowRegex` 默认关闭，正则安全检查更严格。plugin-qrcode：改为本地生成，回复 data URL 图片。plugin-rss / short-url / link-poster：拒绝解析到内网的地址；rss 修复条目每周重复推送；short-url 的 Console 创建改为真实调用 is.gd。plugin-lottery：按 `historyLimit` 同步。
+
+  **其余**
+
+  - host-http：插件市场详情加缓存与包名校验，SSE 回放容忍背压。host-http-contract：新增 `readTextBody()`，九个适配器改用它。
+  - pagemanager：页面外壳 importmap 升级到 React 19.2.8 / react-router 7.12.0。console-contract：`definePage` 接受 `description` / `group` / `parent` / `fullWidth`。
+  - command：进度提示本地化，匹配不再重复拷贝消息段。runtime：源码监听降级后退避重试原生监听。
+  - html-renderer：删除未接线的 `aiTextAsImage`。create-zhin-app / scaffold-wizard：移除不起作用的"全局安装 CLI"与运行时选择提示。
+  - 依赖声明清理、发布清单不再携带解析不到的 `src` 目录、移除未使用的 Skill 挂载、README 与示例配置按当前实现更正。
+
+- 120e225: 聊天角色（ADR 0056，2026-11-12 修订）：zhin 角色 owner / admin / trusted 分四级、只来自授予；发言者的平台身份与机器人自身的平台身份是独立维度，命令、Agent 工具 / 技能、中间件与按钮按三条维度共用一个评估器过滤。升级说明见 docs/migrations/chat-roles.md。
+
+  - zhin.js：实例首次启动把适配器 `master` / `trusted`、`endpoints[i].master|trusted` 与 `ai.trigger.masters|trusted` 迁入项目数据库 `chat_roles`（先记入 `.zhin/chat-roles-migration.json`，再从配置移除并记日志）；之后配置再出现这些字段时启动报错并指向升级指南。平台身份不再映射为 zhin 角色：删除 `roles.mappings`（适配器块与 `endpoints[i].roles` 出现即启动报错）、`chat_role_mappings` 表与 Console `chat-roles.mappings` / `chat-roles.set-mappings`；`features.selfService.platformAdmins|roles|allowUsers` 删除；群内「功能」「角色」命令只认 zhin 角色，平台群主不再自动具备；聊天改配置、聊天重启、Agent 主人审批按 zhin `owner` 判断。
+  - @zhin.js/core（minor，破坏性）：角色模型与解析移入 core（`ChatRoleService`、`createChatRoleSenderEnricher`），入站消息带 `sender.chatRole` 与归一的 `sender.platform`；删除 `SenderRole`、`senderRolesFromMessage`、`roleSatisfies` 等，`master` 改名 `owner`；删除映射规则 API（`createMappingChatRoleSource`、`DEFAULT_CHAT_ROLE_MAPPINGS` 等）与 `ChatRoleSource`；`createSenderEnricher` / `createConfigurationChatAuthorizer` 改为基于聊天角色。IM Runtime 为 PermissionHost 提供机器人自身身份（经 Adapter 索引缓存），机器人的角色变化事件使缓存失效；命令拒绝回复说明缺少的平台 / 机器人条件；`<Button permit>` 按点击者鉴权；场景治理工具工厂同时要求 `platform:*` 与 `bot:*`；`ai.trigger.masters|trusted` 删除。
+  - @zhin.js/permission（minor，破坏性）：permit 语法 `owner` / `admin` / `trusted` / `role(...)`（zhin 角色）、`platform:owner|admin`、`platform-role:<id>`、`platform-permission:<name>`（发言者平台身份），新增 `bot:owner|admin`、`bot-role:<id>`、`bot-permission:<name>`（机器人自身平台身份，`PermissionSubject.bot`）；`PermissionHost` 新增 `setBotStandingResolver`、`withBotStanding`、`firstDenied`，`checkAll` 可带 `source` 解析机器人身份；新增 `describeDeniedPermit`、`permitsNeedBotStanding`。删除 `role(master)`、`scene_admin`、`scene_owner`、`platform(adapter,perm)` 及 `registerPlatform`、`createSceneRolePlatformChecker`、`platformPermission`、`definePlatformPermission`，定义时报错并给出替代写法。
+  - @zhin.js/command（minor，破坏性）：命令会话的发送者改为 `chatRole` / `platform`，不再从 metadata 读角色；`CONVERSATION_MANAGER_PERMIT` 改为 `admin`（平台群主不再自动满足）；分发结果 `denied` 带 `denial`（第一条不满足的规则与原因）；指令菜单只列出当前发送者在本会话可用的命令。
+  - @zhin.js/agent（minor，破坏性）：危险工具、文件 / exec 策略、主人审批、Agent 回合主体只读 zhin 角色（`principal.roles` 只含展开的聊天角色，平台地位在 `principal.platform`）；`SenderRole` → `PrincipalRole`，`SELF_CHANGE_MASTER_ROLE` → `SELF_CHANGE_OWNER_ROLE`；回合开始时读取机器人自身身份（`contextState.bot.platform`），按三条维度过滤 tool / skill / Agent 包后才披露，执行工具时再校验一次；群规「群主和管理员豁免」改为平台群主 / 管理员与 zhin `owner`。
+  - @zhin.js/feature-kit：`OperationSession.sender` 改为 `chatRole` / `platform`。
+  - @zhin.js/im-contract：新增 `PlatformStanding`、`SelfStandingRequest`、`standingFromMemberRole`。
+  - @zhin.js/adapter：入站 sender 可带 `platform`；账号管理命令需要聊天角色 `owner`；`EndpointManagement` 新增可选 `inspectSelfStanding`，能力画像新增 `scene.selfStanding`（声明即须实现），`AdapterIndex.selfStanding` / `invalidateSelfStanding` 按会话缓存机器人自身身份。
+  - @zhin.js/middleware：入站中间件可声明 `permit`，不满足时跳过该中间件（机器人身份只读缓存）。
+  - @zhin.js/tool：定义工具时拒绝已移除的 permit 写法。
+  - @zhin.js/ai：注释更新。
+  - @zhin.js/console-protocol：`chat-roles.list|grant|revoke`（`iam.manage`）；`ConsoleChatRoleSource` 只有 `grant`。
+  - @zhin.js/runtime：Host 配置 Schema 删除 `features.selfService.platformAdmins|roles|allowUsers`。
+  - @zhin.js/testing：伪造消息与 `PluginTestKit` 用 `sender.chatRole` 声明测试身份。
+  - @zhin.js/scaffold-wizard：ICQQ 向导不再写 `master`，完成后提示在 Console 账号「角色」页签或聊天 `角色 授予` 设置 owner。
+  - 适配器：配置 Schema 删除 `master` / `trusted`（以及预览版的 `roles`）；群管理类工具同时声明发言者条件与机器人条件（如 `platform:admin` + `bot:admin`、`bot-permission:manage_roles`），NapCat / OneBot11 工具不再使用已移除的 `platform(adapter,…)` 写法。
+  - 插件：内容审核以 `inbound.bypass`（permit 列表，默认 `owner` 或 `platform:admin`）取代 `masters` / `inbound.bypassMasters`；群管、音乐、日历、地震、B 站、轮盘赌的权限改用 zhin 角色，订阅类命令只认 zhin `admin` / `owner`。
+
+- 5cd9d3d: HTTP 路由契约改为 Web 标准 `Request` / `Response`（ADR 0054 §2，B1.0）
+
+  - host-http-contract：路由处理函数签名改为 `(request, context) => Response`，`context` 提供 `url`、`params`、`principal`、`remoteAddress`；新增 `readBodyBytes` / `readTextBody` / `readJsonBody`（带大小上限，超限先读完再报 413）、`jsonResponse` / `emptyResponse`、带背压的 `createResponseStream`（SSE、大文件下载）与 `WsConnection`。契约不再引用 `node:http` / `ws`。
+  - host-http：Node 服务器移到 `@zhin.js/host-http/node`（`createHttpHost`），负责 Node 请求与 `Request` / `Response` 的互转；认证结果经 `context.principal` 传给路由，删除旧的按请求取主体的辅助函数；未预期的异常只返回通用错误信息，细节写日志。
+  - runtime、mcp、a2a、gateway、zhin.js、calendar 插件与各适配器的 Webhook / 反向 WebSocket 路由迁移到新契约，行为不变。
+
+- Updated dependencies [53932e5]
+- Updated dependencies [57c6cdc]
+- Updated dependencies [e1fda87]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [a9c7a13]
+- Updated dependencies [120e225]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [63595fc]
+- Updated dependencies [fd055d2]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [cc7a5f9]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [f8bf684]
+- Updated dependencies [e0bc008]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [f8bf684]
+- Updated dependencies [663473b]
+- Updated dependencies [c606d51]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [d655ef0]
+- Updated dependencies [1e54b1e]
+  - @zhin.js/adapter@1.1.33
+  - @zhin.js/core@1.2.0
+  - @zhin.js/logger@1.1.3
+  - @zhin.js/host-http@1.2.0
+  - @zhin.js/feature-kit@1.1.16
+  - @zhin.js/console-contract@1.1.6
+  - @zhin.js/host-http-contract@1.2.0
+  - @zhin.js/im-contract@1.1.14
+  - @zhin.js/page@1.1.18
+
 ## 1.1.26
 
 ### Patch Changes

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 凉菜
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -84,7 +84,7 @@ Runtime Host（`http`）须已 listen，Webhook 才可达。
 
 新增仅保存，需手动启动；运行账号的普通配置更新只重连该账号。身份变化走明确替换，新账号不会继承旧 Session 或登录状态。账号凭据变化先按平台实际只读接口核验；平台无法核验时需明确替换。空白或遮蔽的密码不会覆盖既有密码。
 
-读取需要 `wechat-mp:read`，写入需要 `wechat-mp:write`；首次迁移还需管理员身份。无持久化存储时管理操作不可用，提交结果未知时先刷新核实，不重复提交。
+读取需要 `wechat-mp:read`（`read` 级别，内置角色 `viewer` 及以上都有），写入需要 `wechat-mp:write`（`operate` 级别，`operator` 及以上都有，绑定到本适配器的角色也算）；首次迁移还需管理员身份，见[插件权限的级别](https://zhin.js.org/console/#插件权限的级别)。无持久化存储时管理操作不可用，提交结果未知时先刷新核实，不重复提交。
 
 ## 故障排查
 
@@ -96,14 +96,10 @@ Runtime Host（`http`）须已 listen，Webhook 才可达。
 | `48001 api unauthorized` | 未认证订阅号无客服 API；保持默认 `replyMode: passive` |
 | 加密模式报错 | `encodingAESKey`、`encrypt` 与公众平台「安全模式」设置一致 |
 
-## AI 工具
-
-技能说明见 `skills/wechat-mp/SKILL.md`。
-
 ## 文档链接
 
 - [微信公众号适配器文档](https://zhin.js.org/adapters/wechat-mp)
-- [适配器概览](https://zhin.js.org/essentials/adapters)
+- [适配器概览](https://zhin.js.org/adapters/)
 - [微信公众平台](https://mp.weixin.qq.com/)
 
 ## 许可证

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, readTextBody, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, type ResolvedWeChatMpConfig, type TokenResponse, type WeChatAPIResponse, type WeChatMessage, type WeChatMpEndpointConfig, type WeChatWireSegment, } from './protocol.js';
+export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, type ResolvedWeChatMpConfig, type TokenResponse, type WeChatAPIResponse, type WeChatMessage, type WeChatMpEndpointConfig, type WeChatWireSegment, } from './protocol.js';
 export { getPassiveReplyCapture, recordPassiveReplyText, runWithPassiveReplyCapture, type PassiveReplyCapture, } from './passive-reply.js';
 export { WeChatMpClient, type WeChatMpClientEventMap, type WeChatMpFetch, } from './client.js';
 export { WeChatMpEndpoint, type WeChatMpEndpointOptions, } from './endpoint.js';

package/lib/index.js

@@ -1,4 +1,4 @@
-export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, readTextBody, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, } from './protocol.js';
+export { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, extractOutboundText, formatCustomerServiceBody, formatInboundContent, formatInboundId, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, resolveEventPassiveReply, resolveWeChatMpConfig, verifySignature, } from './protocol.js';
 export { getPassiveReplyCapture, recordPassiveReplyText, runWithPassiveReplyCapture, } from './passive-reply.js';
 export { WeChatMpClient, } from './client.js';
 export { WeChatMpEndpoint, } from './endpoint.js';

package/lib/protocol.d.ts

@@ -1,6 +1,5 @@
 import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
 import { type Locale } from 'zhin.js/i18n';
-import type { IncomingMessage } from 'node:http';
 import type { ConversationRef } from '@zhin.js/im-contract';
 /** One endpoint config after AdapterIndex expands `plugins.<instanceKey>.endpoints`. */
 export interface WeChatMpEndpointConfig extends EndpointProfileConfiguration {
@@ -116,6 +115,3 @@ export declare function resolveEventPassiveReply(msg: WeChatMessage, locale?: Lo
 export declare function formatCustomerServiceBody(target: string, payload: unknown): Record<string, unknown>;
 /** Extract plain text from a rendered outbound payload (for passive XML). */
 export declare function extractOutboundText(payload: unknown): string;
-export declare function readTextBody(request: IncomingMessage, options?: {
-    readonly limit?: number;
-}): Promise<string>;

package/lib/protocol.js

@@ -3,7 +3,7 @@ import { createMessages } from 'zhin.js/i18n';
  * WeChat Official Account (MP) protocol helpers — no legacy Adapter/Endpoint.
  * Canonicalization is owned by gateway/core before endpoint.send.
  */
-import { createHash, createDecipheriv, createCipheriv, randomBytes } from 'node:crypto';
+import { createHash, createDecipheriv, createCipheriv, randomBytes, timingSafeEqual } from 'node:crypto';
 import * as xml2js from 'xml2js';
 export function resolveWeChatMpConfig(config) {
     const id = requiredEndpointField(config.id, 'id');
@@ -59,7 +59,13 @@ export function verifySignature(token, params) {
     const { signature, timestamp, nonce, echostr } = params;
     if (!signature || !timestamp || !nonce)
         return false;
-    return computeSignatureHash(token, { timestamp, nonce, echostr }) === signature;
+    return safeEqualHex(computeSignatureHash(token, { timestamp, nonce, echostr }), signature);
+}
+/** Constant-time comparison for hex signatures (same approach as the other webhook adapters). */
+function safeEqualHex(expected, actual) {
+    const a = Buffer.from(expected);
+    const b = Buffer.from(actual);
+    return a.length === b.length && timingSafeEqual(a, b);
 }
 export function getAESKey(encodingAESKey) {
     return Buffer.from(`${encodingAESKey}=`, 'base64');
@@ -107,7 +113,7 @@ export async function decryptMessage(encryptedXml, msgSignature, timestamp, nonc
     const expected = createHash('sha1')
         .update([token, timestamp, nonce, encrypt].sort().join(''))
         .digest('hex');
-    if (expected !== msgSignature) {
+    if (!safeEqualHex(expected, msgSignature)) {
         throw new Error('msg_signature verification failed');
     }
     const aesKey = getAESKey(encodingAESKey);
@@ -337,18 +343,3 @@ export function extractOutboundText(payload) {
     }
     return parts.join('\n');
 }
-export async function readTextBody(request, options = {}) {
-    const limit = options.limit ?? 1_048_576;
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of request) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += buffer.length;
-        if (size > limit) {
-            request.destroy();
-            throw new Error(`Request body exceeds ${limit} bytes`);
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks).toString('utf8');
-}

package/lib/webhook.d.ts

@@ -1,7 +1,6 @@
 /**
  * WeChat MP webhook HTTP: URL verification + inbound message handling.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { Locale } from 'zhin.js/i18n';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
 import type { CapabilityId } from 'zhin.js';
@@ -17,6 +16,6 @@ export interface WeChatMpWebhookHandler {
     cacheReply?(msgId: string, replyXML: string): void;
 }
 export declare function registerWeChatMpWebhookRoutes(http: HttpHost, handler: WeChatMpWebhookHandler): HttpRouteRegistration[];
-export declare function handleWeChatMpVerification(_request: IncomingMessage, response: ServerResponse, url: URL, config: ResolvedWeChatMpConfig): void;
-export declare function handleWeChatMpMessage(request: IncomingMessage, response: ServerResponse, url: URL, handler: WeChatMpWebhookHandler): Promise<void>;
+export declare function handleWeChatMpVerification(_request: Request, url: URL, config: ResolvedWeChatMpConfig): Response;
+export declare function handleWeChatMpMessage(request: Request, url: URL, handler: WeChatMpWebhookHandler): Promise<Response>;
 export declare function collectPassiveReply(handler: WeChatMpWebhookHandler, wechatMsg: WeChatMessage, nativeEvent?: unknown): Promise<string>;

package/lib/webhook.js

@@ -1,19 +1,16 @@
+import { readTextBody } from '@zhin.js/host-http-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import { getPassiveReplyCapture, runWithPassiveReplyCapture, } from './passive-reply.js';
-import { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, readTextBody, resolveEventPassiveReply, verifySignature, wechatMpInboundConversation, } from './protocol.js';
+import { buildTextReply, computeSignatureHash, decryptEchostr, decryptMessage, encryptMessage, isEncryptedEchostr, normalizeEchostrParam, parseXMLMessage, queryParam, resolveEventPassiveReply, verifySignature, wechatMpInboundConversation, } from './protocol.js';
 const logger = getLogger('wechat-mp');
 export function registerWeChatMpWebhookRoutes(http, handler) {
     const path = handler.config.path;
     return [
-        http.route('GET', path, (request, response, url) => {
-            handleWeChatMpVerification(request, response, url, handler.config);
-        }, { summary: 'WeChat MP URL verification', tags: ['wechat-mp'] }),
-        http.route('POST', path, async (request, response, url) => {
-            await handleWeChatMpMessage(request, response, url, handler);
-        }, { summary: 'WeChat MP inbound webhook', tags: ['wechat-mp'] }),
+        http.route('GET', path, (request, { url }) => handleWeChatMpVerification(request, url, handler.config), { summary: 'WeChat MP URL verification', tags: ['wechat-mp'] }),
+        http.route('POST', path, (request, { url }) => handleWeChatMpMessage(request, url, handler), { summary: 'WeChat MP inbound webhook', tags: ['wechat-mp'] }),
     ];
 }
-export function handleWeChatMpVerification(_request, response, url, config) {
+export function handleWeChatMpVerification(_request, url, config) {
     const signature = queryParam(url.searchParams.get('signature'));
     const msgSignature = queryParam(url.searchParams.get('msg_signature'));
     const timestamp = queryParam(url.searchParams.get('timestamp'));
@@ -25,9 +22,7 @@ export function handleWeChatMpVerification(_request, response, url, config) {
         ? { signature: msgSignature, timestamp, nonce, echostr }
         : { signature, timestamp, nonce };
     if (!signToCheck || !timestamp || !nonce) {
-        response.writeHead(403, { 'Content-Type': 'text/plain' });
-        response.end('Forbidden');
-        return;
+        return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
     }
     if (!verifySignature(config.token, signPayload)) {
         const expected = computeSignatureHash(config.token, {
@@ -42,9 +37,7 @@ export function handleWeChatMpVerification(_request, response, url, config) {
             expectedPrefix: expected.slice(0, 8),
             gotPrefix: signToCheck.slice(0, 8),
         }));
-        response.writeHead(403, { 'Content-Type': 'text/plain' });
-        response.end('Forbidden');
-        return;
+        return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
     }
     let body = echostr;
     if (secureMode && echostr && isEncryptedEchostr(echostr) && config.encodingAESKey) {
@@ -58,15 +51,12 @@ export function handleWeChatMpVerification(_request, response, url, config) {
                 ok: false,
                 error: error instanceof Error ? error.message : String(error),
             }));
-            response.writeHead(403, { 'Content-Type': 'text/plain' });
-            response.end('Forbidden');
-            return;
+            return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
         }
     }
-    response.writeHead(200, { 'Content-Type': 'text/plain' });
-    response.end(body);
+    return new Response(body, { status: 200, headers: { 'Content-Type': 'text/plain' } });
 }
-export async function handleWeChatMpMessage(request, response, url, handler) {
+export async function handleWeChatMpMessage(request, url, handler) {
     try {
         const config = handler.config;
         const signature = queryParam(url.searchParams.get('signature'));
@@ -76,9 +66,7 @@ export async function handleWeChatMpMessage(request, response, url, handler) {
         const encryptType = queryParam(url.searchParams.get('encrypt_type'));
         if (!verifySignature(config.token, { signature, timestamp, nonce })) {
             logger.error('Invalid signature');
-            response.writeHead(403, { 'Content-Type': 'text/plain' });
-            response.end('Forbidden');
-            return;
+            return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
         }
         let xmlString = await readTextBody(request);
         if (config.encrypt && encryptType === 'aes' && config.encodingAESKey) {
@@ -86,9 +74,7 @@ export async function handleWeChatMpMessage(request, response, url, handler) {
         }
         const wechatMessage = await parseXMLMessage(xmlString);
         if (!wechatMessage) {
-            response.writeHead(200, { 'Content-Type': 'text/plain' });
-            response.end('success');
-            return;
+            return new Response('success', { status: 200, headers: { 'Content-Type': 'text/plain' } });
         }
         // 微信 5s 重推去重：同一 MsgId 直接回放首次回复，避免二次 admit。
         const msgId = wechatMessage.MsgId;
@@ -96,9 +82,7 @@ export async function handleWeChatMpMessage(request, response, url, handler) {
             const cached = handler.getCachedReply(msgId);
             if (cached !== undefined) {
                 logger.debug(formatCompact({ op: 'wechat_mp_dedup_replay', msgId }));
-                response.writeHead(200, { 'Content-Type': cached ? 'text/xml' : 'text/plain' });
-                response.end(cached || 'success');
-                return;
+                return new Response(cached || 'success', { status: 200, headers: { 'Content-Type': cached ? 'text/xml' : 'text/plain' } });
             }
         }
         const locale = wechatMessage.MsgType === 'event' && wechatMessage.Event === 'subscribe'
@@ -123,13 +107,11 @@ export async function handleWeChatMpMessage(request, response, url, handler) {
         if (msgId && handler.cacheReply) {
             handler.cacheReply(msgId, replyXML || '');
         }
-        response.writeHead(200, { 'Content-Type': 'text/xml' });
-        response.end(replyXML || 'success');
+        return new Response(replyXML || 'success', { status: 200, headers: { 'Content-Type': 'text/xml' } });
     }
     catch (error) {
         logger.error('Error handling WeChat message:', error);
-        response.writeHead(200, { 'Content-Type': 'text/plain' });
-        response.end('success');
+        return new Response('success', { status: 200, headers: { 'Content-Type': 'text/plain' } });
     }
 }
 export async function collectPassiveReply(handler, wechatMsg, nativeEvent) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-wechat-mp",
-  "version": "1.1.26",
+  "version": "1.1.27",
   "type": "module",
   "description": "Zhin.js WeChat Official Account adapter for Plugin Runtime (HTTP webhook)",
   "main": "./lib/index.js",
@@ -8,22 +8,22 @@
   "dependencies": {
     "axios": "^1.20.0",
     "xml2js": "^0.6.2",
-    "@zhin.js/adapter": "1.1.32",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.60",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/host-http": "1.1.17",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17",
-    "@zhin.js/skill": "1.1.16"
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/host-http": "1.2.0",
+    "@zhin.js/host-http-contract": "1.2.0",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18"
   },
   "peerDependencies": {
-    "@zhin.js/adapter": "^1.1.32",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.60",
-    "@zhin.js/host-http": "^1.1.17",
-    "zhin.js": "^1.1.25"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "@zhin.js/host-http": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -38,7 +38,7 @@
     "@types/xml2js": "^0.4.14",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zhin.js": "1.1.25"
+    "zhin.js": "1.1.26"
   },
   "keywords": [
     "zhin",
@@ -71,7 +71,6 @@
     "schema.json",
     "src",
     "lib",
-    "skills",
     "README.md",
     "CHANGELOG.md"
   ],
@@ -103,10 +102,6 @@
         "package": "@zhin.js/command",
         "api": "^1.0.0"
       },
-      {
-        "package": "@zhin.js/skill",
-        "api": "^1.0.0"
-      },
       {
         "package": "@zhin.js/page",
         "api": "^1.0.0"
@@ -117,6 +112,6 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/wechat-mp/tests"
+    "test": "vitest run --root ../../.. plugins/adapters/wechat-mp/tests"
   }
 }

package/schema.json

@@ -32,34 +32,6 @@
       "type": "number",
       "default": 4500
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（WeChat OpenID；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (WeChat OpenID; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted WeChat OpenID"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -68,34 +40,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（WeChat OpenID）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (WeChat OpenID), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted WeChat OpenID"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "appId": {
             "type": "string",
             "description": "WeChat MP app ID"

package/src/index.ts

@@ -12,7 +12,6 @@ export {
   normalizeEchostrParam,
   parseXMLMessage,
   queryParam,
-  readTextBody,
   resolveEventPassiveReply,
   resolveWeChatMpConfig,
   verifySignature,

package/src/protocol.ts

@@ -5,8 +5,7 @@ import { createMessages, type Locale } from 'zhin.js/i18n';
  * Canonicalization is owned by gateway/core before endpoint.send.
  */
 
-import { createHash, createDecipheriv, createCipheriv, randomBytes } from 'node:crypto';
-import type { IncomingMessage } from 'node:http';
+import { createHash, createDecipheriv, createCipheriv, randomBytes, timingSafeEqual } from 'node:crypto';
 import * as xml2js from 'xml2js';
 import type { ConversationRef } from '@zhin.js/im-contract';
 
@@ -161,7 +160,14 @@ export function verifySignature(
 ): boolean {
   const { signature, timestamp, nonce, echostr } = params;
   if (!signature || !timestamp || !nonce) return false;
-  return computeSignatureHash(token, { timestamp, nonce, echostr }) === signature;
+  return safeEqualHex(computeSignatureHash(token, { timestamp, nonce, echostr }), signature);
+}
+
+/** Constant-time comparison for hex signatures (same approach as the other webhook adapters). */
+function safeEqualHex(expected: string, actual: string): boolean {
+  const a = Buffer.from(expected);
+  const b = Buffer.from(actual);
+  return a.length === b.length && timingSafeEqual(a, b);
 }
 
 export function getAESKey(encodingAESKey: string): Buffer {
@@ -228,7 +234,7 @@ export async function decryptMessage(
   const expected = createHash('sha1')
     .update([token, timestamp, nonce, encrypt].sort().join(''))
     .digest('hex');
-  if (expected !== msgSignature) {
+  if (!safeEqualHex(expected, msgSignature)) {
     throw new Error('msg_signature verification failed');
   }
 
@@ -494,21 +500,3 @@ export function extractOutboundText(payload: unknown): string {
   return parts.join('\n');
 }
 
-export async function readTextBody(
-  request: IncomingMessage,
-  options: { readonly limit?: number } = {},
-): Promise<string> {
-  const limit = options.limit ?? 1_048_576;
-  const chunks: Buffer[] = [];
-  let size = 0;
-  for await (const chunk of request) {
-    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    size += buffer.length;
-    if (size > limit) {
-      request.destroy();
-      throw new Error(`Request body exceeds ${limit} bytes`);
-    }
-    chunks.push(buffer);
-  }
-  return Buffer.concat(chunks).toString('utf8');
-}

package/src/webhook.ts

@@ -1,9 +1,9 @@
 /**
  * WeChat MP webhook HTTP: URL verification + inbound message handling.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { Locale } from 'zhin.js/i18n';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
+import { readTextBody } from '@zhin.js/host-http-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import type { CapabilityId } from 'zhin.js';
 import {
@@ -22,7 +22,6 @@ import {
   normalizeEchostrParam,
   parseXMLMessage,
   queryParam,
-  readTextBody,
   resolveEventPassiveReply,
   verifySignature,
   wechatMpInboundConversation,
@@ -49,21 +48,16 @@ export function registerWeChatMpWebhookRoutes(
 ): HttpRouteRegistration[] {
   const path = handler.config.path;
   return [
-    http.route('GET', path, (request, response, url) => {
-      handleWeChatMpVerification(request, response, url, handler.config);
-    }, { summary: 'WeChat MP URL verification', tags: ['wechat-mp'] }),
-    http.route('POST', path, async (request, response, url) => {
-      await handleWeChatMpMessage(request, response, url, handler);
-    }, { summary: 'WeChat MP inbound webhook', tags: ['wechat-mp'] }),
+    http.route('GET', path, (request, { url }) => handleWeChatMpVerification(request, url, handler.config), { summary: 'WeChat MP URL verification', tags: ['wechat-mp'] }),
+    http.route('POST', path, (request, { url }) => handleWeChatMpMessage(request, url, handler), { summary: 'WeChat MP inbound webhook', tags: ['wechat-mp'] }),
   ];
 }
 
 export function handleWeChatMpVerification(
-  _request: IncomingMessage,
-  response: ServerResponse,
+  _request: Request,
   url: URL,
   config: ResolvedWeChatMpConfig,
-): void {
+): Response {
   const signature = queryParam(url.searchParams.get('signature'));
   const msgSignature = queryParam(url.searchParams.get('msg_signature'));
   const timestamp = queryParam(url.searchParams.get('timestamp'));
@@ -76,9 +70,7 @@ export function handleWeChatMpVerification(
     : { signature, timestamp, nonce };
 
   if (!signToCheck || !timestamp || !nonce) {
-    response.writeHead(403, { 'Content-Type': 'text/plain' });
-    response.end('Forbidden');
-    return;
+    return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
   }
 
   if (!verifySignature(config.token, signPayload)) {
@@ -94,9 +86,7 @@ export function handleWeChatMpVerification(
       expectedPrefix: expected.slice(0, 8),
       gotPrefix: signToCheck.slice(0, 8),
     }));
-    response.writeHead(403, { 'Content-Type': 'text/plain' });
-    response.end('Forbidden');
-    return;
+    return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
   }
 
   let body = echostr;
@@ -110,22 +100,18 @@ export function handleWeChatMpVerification(
         ok: false,
         error: error instanceof Error ? error.message : String(error),
       }));
-      response.writeHead(403, { 'Content-Type': 'text/plain' });
-      response.end('Forbidden');
-      return;
+      return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
     }
   }
 
-  response.writeHead(200, { 'Content-Type': 'text/plain' });
-  response.end(body);
+  return new Response(body, { status: 200, headers: { 'Content-Type': 'text/plain' } });
 }
 
 export async function handleWeChatMpMessage(
-  request: IncomingMessage,
-  response: ServerResponse,
+  request: Request,
   url: URL,
   handler: WeChatMpWebhookHandler,
-): Promise<void> {
+): Promise<Response> {
   try {
     const config = handler.config;
     const signature = queryParam(url.searchParams.get('signature'));
@@ -136,9 +122,7 @@ export async function handleWeChatMpMessage(
 
     if (!verifySignature(config.token, { signature, timestamp, nonce })) {
       logger.error('Invalid signature');
-      response.writeHead(403, { 'Content-Type': 'text/plain' });
-      response.end('Forbidden');
-      return;
+      return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
     }
 
     let xmlString = await readTextBody(request);
@@ -157,9 +141,7 @@ export async function handleWeChatMpMessage(
 
     const wechatMessage = await parseXMLMessage(xmlString);
     if (!wechatMessage) {
-      response.writeHead(200, { 'Content-Type': 'text/plain' });
-      response.end('success');
-      return;
+      return new Response('success', { status: 200, headers: { 'Content-Type': 'text/plain' } });
     }
 
     // 微信 5s 重推去重：同一 MsgId 直接回放首次回复，避免二次 admit。
@@ -168,9 +150,7 @@ export async function handleWeChatMpMessage(
       const cached = handler.getCachedReply(msgId);
       if (cached !== undefined) {
         logger.debug(formatCompact({ op: 'wechat_mp_dedup_replay', msgId }));
-        response.writeHead(200, { 'Content-Type': cached ? 'text/xml' : 'text/plain' });
-        response.end(cached || 'success');
-        return;
+        return new Response(cached || 'success', { status: 200, headers: { 'Content-Type': cached ? 'text/xml' : 'text/plain' } });
       }
     }
 
@@ -207,12 +187,10 @@ export async function handleWeChatMpMessage(
       handler.cacheReply(msgId, replyXML || '');
     }
 
-    response.writeHead(200, { 'Content-Type': 'text/xml' });
-    response.end(replyXML || 'success');
+    return new Response(replyXML || 'success', { status: 200, headers: { 'Content-Type': 'text/xml' } });
   } catch (error) {
     logger.error('Error handling WeChat message:', error);
-    response.writeHead(200, { 'Content-Type': 'text/plain' });
-    response.end('success');
+    return new Response('success', { status: 200, headers: { 'Content-Type': 'text/plain' } });
   }
 }