@zhin.js/adapter-weixin-ilink 1.1.18 → 1.1.19

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @zhin.js/adapter-weixin-ilink
 
+## 1.1.19
+
+### Patch Changes
+
+- 2c3610a: Move account lifecycle ownership into the generic Adapter base and let native Endpoints retain their SDK Client inheritance. Infer platform-specific operation Sessions from a single adapter registry while preserving command parameter, option, configuration and factory inference.
+
+  Bind message replies, management ports, login challenges and Agent cancellation to the captured account incarnation. Persist runtime account intent with encrypted, revision-checked Host storage; keep account management independent of Root process restarts. Require explicit operator confirmation before importing existing accounts, and give replacement accounts a new identity without inheriting previous Sessions.
+
+  Expose account save, start, stop, update and replacement through the existing adapter Console, with exact account ownership, truthful pending/unknown outcomes and no startup configuration or environment-file rewrites.
+
+  Complete the target migration across every adapter, the public authoring API, generators, examples and Console. This intentionally removes the old create factory, inheritable Endpoint/ClientEndpoint classes, Client descriptors and file-rewrite account management; plugin authors must use createAdapter, native Client inheritance and the single AdapterRegistry. Satori and OneBot12 require explicit platform/userId selection, and WeCom requires a separate agentId.
+
+  Verify opaque credential changes before the same configuration snapshot is committed. Drain admitted native callbacks across close/rollback, cancel target work on stop, and keep raw transport parsing, platform ACK timing and SDK native methods under their existing owners. Account metadata conceals credentials carried in URLs.
+
+- a9f4e48: PATCH COMPATIBILITY CUTOVER: this batch intentionally changes plugin APIs. The maintainer explicitly chose patch releases with declared version boundaries. Upgrade the complete tested dependency set; patch numbering does not promise compatibility with the removed interfaces.
+
+  The first planned floors are zhin.js 1.1.19, Core 1.1.54, Adapter 1.1.26, FeatureKit 1.1.10, Plugin Runtime 1.1.18, Runtime/Isolate 1.1.16 and Agent 1.1.45. Keep old-interface plugins with the earlier locked stack until they are migrated. Adapter's independent Feature API changes from 1.0.0 to 2.0.0; official consumers declare ^2.0.0. Existing Feature API admission rejects explicitly incompatible ranges; omitted API metadata keeps its existing behavior and does not certify compatibility. Runtime engine and patch-only release gates remain unchanged.
+
+  Use the native-Client Adapter target contract, canonical FeatureKit AdapterRegistry augmentation and named Endpoint control/management requests. Route message controls from canonical message/conversation refs; retain exact source authority and propagate caller/account/explicit-Root-stop cancellation. Replace removed Agent activity feedback exports with source-bound feedback. HMR pause/resume belongs to concrete plugin instances; plugins choose accepted-work policy without changing Controller commit/rollback authority. Cooperative worker/process control cancellation does not kill an isolate or reopen retired business admission.
+
+  Provide authenticated historical-data preview, exact selected binding, transactional application, authoritative inspection and explicit resumption, including active games. Preserve before-images and journals; never replay an unconfirmed effect, infer an account from an alias, or reuse historical permission grants. Owner V2 approvals remain inactive legacy data, while new writes use V3. Rollback requires matching software, lockfile and verified data; installing old code alone cannot read a new V3 approval file. Conflicting after-images are never overwritten.
+
+  See docs/plans/adapter-operation-version-boundaries.md and the Chinese/English upgrade guide for the complete version inventory, custom-plugin changes, acceptance and recovery sequence. These code and metadata changes do not authorize merging, publication, deployment, login, production migration or removal of installed workspace patches.
+
+- Updated dependencies [2c3610a]
+- Updated dependencies [a9f4e48]
+- Updated dependencies [f8505b0]
+  - @zhin.js/adapter@1.1.26
+  - @zhin.js/feature-kit@1.1.10
+  - @zhin.js/core@1.1.54
+  - @zhin.js/client@1.1.22
+  - @zhin.js/page@1.1.11
+
 ## 1.1.18
 
 ### Patch Changes

package/README.md

@@ -9,7 +9,7 @@
 | 项 | weixin-ilink | wechat-mp |
 |---|---|---|
 | 账号类型 | 个人微信（ClawBot） | 微信公众号 |
-| 入站 | 长轮询 `getupdates` → `Endpoint.emit(...)` | Webhook（`httpHostToken`） |
+| 入站 | 长轮询 `getupdates` → `endpointSpec.events` | Webhook（`httpHostToken`） |
 | 登录 | 扫码 / 侧车凭证 / `botToken` | AppId/Secret/Token |
 | 群聊 | 不支持（仅私聊） | 支持 |
 
@@ -59,7 +59,7 @@ data/weixin-ilink/<id>/credentials.json
 
 回复必须携带入站时缓存的 `context_token`（按 `endpointId + peerUserId`）。若用户久未发消息导致 token 缺失，出站会拒绝并打 warn。
 
-出站经 Runtime：`OutboundMessageService` → `endpoint.send({ conversation, payload })`（`conversation` 为入站归一化出的 `ConversationRef`，kind 恒为 `private`，`id` 即对端 user_id）。
+出站经 Runtime：`OutboundMessageService` → `createEndpointSpecification` 注册的 send 钩子（`conversation` 为入站归一化出的 `ConversationRef`，kind 恒为 `private`，`id` 即对端 user_id）。
 
 **图文限制**：微信单条消息不支持图文混排。适配器会自动：
 
@@ -68,13 +68,13 @@ data/weixin-ilink/<id>/credentials.json
 
 ## Console 页面
 
-启动后打开 Console 的「微信 iLink」页（地址 `/weixin-ilink`），可以：
+在所属插件的 Console 页面管理账号：查看配置与运行状态，添加、编辑、启动、停止、替换或删除账号。首次修改启动账号前，管理员需确认迁移清单；保留原身份与历史。此后保存到 Host 运行时存储，不改启动配置或 `.env`，无需重启进程。
 
-- 查看运行中的连接、点「测试连接」做连通性诊断；
-- 增删 `plugins.weixin-ilink.endpoints`（凭据写入 `.env`，配置里只保留 `${ENV}` 引用）；
-- 如果适配器要求登录，页面会显示 LoginAssist 的扫码 / 滑块 / 设备确认待办；
+新增仅保存，需手动启动；运行账号的普通配置更新只重连该账号。身份变化走明确替换，新账号不会继承旧 Session 或登录状态。账号凭据变化先按平台实际只读接口核验；平台无法核验时需明确替换。空白或遮蔽的密码不会覆盖既有密码。
 
-读取需要 `weixin-ilink:read`，写操作需要 `weixin-ilink:write`；管理员 full token 不受限。页面里的「添加 endpoint」等价于原来的 `weixin-ilink endpoint add`。
+读取需要 `weixin-ilink:read`，写入需要 `weixin-ilink:write`；首次迁移还需管理员身份。无持久化存储时管理操作不可用，提交结果未知时先刷新核实，不重复提交。
+
+未提供 `botToken` 时，启动沿既有凭据文件或日志二维码登录流程；本平台当前没有 Console 二维码待办。新账号的状态目录按内部实例身份隔离。
 
 ## 故障排查
 

package/adapters/weixin-ilink/index.js

@@ -1,11 +1,10 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { WeixinIlinkAdapter } from "../../lib/adapter.js";
 /**
  * Convention entry: discover `adapters/weixin-ilink/index.ts` → defineAdapter.
  */
 import { defineAdapter } from 'zhin.js/adapter';
-import { WeixinIlinkEndpoint } from "../../lib/endpoint.js";
-import { resolveWeixinIlinkConfig, } from "../../lib/protocol.js";
-import { weixinIlinkRuntimeStateToken } from "../../lib/weixin-ilink-runtime-state.js";
+import {} from "../../lib/protocol.js";
 export { WeixinIlinkEndpoint } from "../../lib/endpoint.js";
 export default defineAdapter({
     capabilities: ['inbound', 'outbound'],
@@ -16,17 +15,5 @@ export default defineAdapter({
         outboundMedia: ['upload'],
         interactive: 'text',
     },
-    create(context) {
-        const config = resolveWeixinIlinkConfig(context.config);
-        // 注册到插件运行时状态（weixin-ilink endpoint list 的"运行中"数据源）
-        context.use(weixinIlinkRuntimeStateToken).endpoints.set(config.id, {
-            id: config.id,
-            // iLink 仅长轮询一种接入方式，无 config.connection 字段
-            mode: 'long-poll',
-        });
-        return new WeixinIlinkEndpoint({
-            id: context.id,
-            config,
-        });
-    },
+    createAdapter: () => new WeixinIlinkAdapter(),
 });

package/adapters/weixin-ilink/index.ts

@@ -1,13 +1,11 @@
+import { WeixinIlinkAdapter } from '../../src/adapter.js';
 /**
  * Convention entry: discover `adapters/weixin-ilink/index.ts` → defineAdapter.
  */
 import { defineAdapter } from 'zhin.js/adapter';
-import { WeixinIlinkEndpoint } from '../../src/endpoint.js';
 import {
-  resolveWeixinIlinkConfig,
   type WeixinIlinkEndpointConfig,
 } from '../../src/protocol.js';
-import { weixinIlinkRuntimeStateToken } from '../../src/weixin-ilink-runtime-state.js';
 
 export { WeixinIlinkEndpoint } from '../../src/endpoint.js';
 export type {
@@ -27,17 +25,5 @@ export default defineAdapter<WeixinIlinkEndpointConfig>({
     outboundMedia: ['upload'],
     interactive: 'text',
   },
-  create(context) {
-    const config = resolveWeixinIlinkConfig(context.config);
-    // 注册到插件运行时状态（weixin-ilink endpoint list 的"运行中"数据源）
-    context.use(weixinIlinkRuntimeStateToken).endpoints.set(config.id, {
-      id: config.id,
-      // iLink 仅长轮询一种接入方式，无 config.connection 字段
-      mode: 'long-poll',
-    });
-    return new WeixinIlinkEndpoint({
-      id: context.id,
-      config,
-    });
-  },
+  createAdapter: () => new WeixinIlinkAdapter(),
 });

package/commands/weixin-ilink/endpoint/definition.js

@@ -5,13 +5,11 @@
  */
 import { createEndpointCommands } from 'zhin.js/adapter';
 import { defineCommand } from 'zhin.js/command';
-import { weixinIlinkRuntimeStateToken } from "../../../lib/weixin-ilink-runtime-state.js";
 export const weixinIlinkEndpointCommands = createEndpointCommands({
     adapterKey: 'weixin-ilink',
     adapterDisplayName: 'Weixin iLink',
     fields: [
-        { key: 'botToken', required: true, env: true, description: 'iLink bot token' },
+        { key: 'botToken', env: true, description: 'iLink bot token' },
     ],
-    running: (use) => use(weixinIlinkRuntimeStateToken).endpoints.values(),
     describeEntry: (entry) => `botToken: ${String(entry.botToken)}`,
 }, defineCommand);

package/commands/weixin-ilink/endpoint/definition.ts

@@ -4,14 +4,12 @@
  */
 import { createEndpointCommands } from 'zhin.js/adapter';
 import { defineCommand } from 'zhin.js/command';
-import { weixinIlinkRuntimeStateToken } from '../../../src/weixin-ilink-runtime-state.js';
 
 export const weixinIlinkEndpointCommands = createEndpointCommands({
   adapterKey: 'weixin-ilink',
   adapterDisplayName: 'Weixin iLink',
   fields: [
-    { key: 'botToken', required: true, env: true, description: 'iLink bot token' },
+    { key: 'botToken', env: true, description: 'iLink bot token' },
   ],
-  running: (use) => use(weixinIlinkRuntimeStateToken).endpoints.values(),
   describeEntry: (entry) => `botToken: ${String(entry.botToken)}`,
 }, defineCommand);

package/lib/adapter.d.ts

@@ -0,0 +1,19 @@
+import { Adapter, type EndpointCreationContext } from 'zhin.js/adapter';
+import { WeixinIlinkEndpoint } from './endpoint.js';
+import { type WeixinIlinkEndpointConfig } from './protocol.js';
+import type { WeixinIlinkClientEventMap } from './client.js';
+export declare class WeixinIlinkAdapter extends Adapter<WeixinIlinkEndpoint, WeixinIlinkEndpointConfig, WeixinIlinkClientEventMap> {
+    get configurationIdentityFields(): readonly string[];
+    get configurationUpdateFields(): readonly string[];
+    get configurationIdentityProbeFields(): readonly string[];
+    protected prepareConfiguration(input: WeixinIlinkEndpointConfig, identity: Readonly<{
+        instanceId: string;
+    }>): WeixinIlinkEndpointConfig;
+    protected validateConfiguration(config: WeixinIlinkEndpointConfig): void;
+    protected createEndpoint(input: WeixinIlinkEndpointConfig, execution: EndpointCreationContext): WeixinIlinkEndpoint;
+}
+declare module '@zhin.js/feature-kit' {
+    interface AdapterRegistry {
+        readonly 'weixin-ilink': WeixinIlinkAdapter;
+    }
+}

package/lib/adapter.js

@@ -0,0 +1,18 @@
+import { join } from 'node:path';
+import { Adapter } from 'zhin.js/adapter';
+import { WeixinIlinkEndpoint } from './endpoint.js';
+import { resolveWeixinIlinkConfig } from './protocol.js';
+export class WeixinIlinkAdapter extends Adapter {
+    get configurationIdentityFields() { return ['id']; }
+    get configurationUpdateFields() { return ['botToken', 'botAgent', 'baseUrl', 'cdnBaseUrl', 'longPollTimeoutMs', 'dataDir']; }
+    get configurationIdentityProbeFields() { return ['botToken', 'baseUrl', 'dataDir']; }
+    prepareConfiguration(input, identity) {
+        const config = resolveWeixinIlinkConfig(input);
+        return { ...input, dataDir: join(config.dataDir, 'accounts', identity.instanceId) };
+    }
+    validateConfiguration(config) { resolveWeixinIlinkConfig(config); }
+    createEndpoint(input, execution) {
+        const config = resolveWeixinIlinkConfig(input);
+        return new WeixinIlinkEndpoint({ id: execution.canonicalId, config });
+    }
+}

package/lib/cdn-upload.d.ts

@@ -12,6 +12,7 @@ export declare function uploadBufferToCdn(params: {
     cdnBaseUrl: string;
     label: string;
     aeskey: Buffer;
+    abortSignal?: AbortSignal;
 }): Promise<{
     downloadParam: string;
 }>;

package/lib/cdn-upload.js

@@ -11,6 +11,7 @@ const UPLOAD_MAX_RETRIES = 3;
  */
 export async function uploadBufferToCdn(params) {
     const { buf, uploadFullUrl, uploadParam, filekey, cdnBaseUrl, label, aeskey } = params;
+    params.abortSignal?.throwIfAborted();
     const ciphertext = encryptAesEcb(buf, aeskey);
     const trimmedFull = uploadFullUrl?.trim();
     let cdnUrl;
@@ -27,9 +28,11 @@ export async function uploadBufferToCdn(params) {
     let downloadParam;
     let lastError;
     for (let attempt = 1; attempt <= UPLOAD_MAX_RETRIES; attempt++) {
+        params.abortSignal?.throwIfAborted();
         try {
             const res = await fetch(cdnUrl, {
                 method: "POST",
+                signal: params.abortSignal,
                 headers: { "Content-Type": "application/octet-stream" },
                 body: new Uint8Array(ciphertext),
             });
@@ -52,6 +55,7 @@ export async function uploadBufferToCdn(params) {
             break;
         }
         catch (err) {
+            params.abortSignal?.throwIfAborted();
             lastError = err;
             if (err instanceof Error && err.message.includes("client error"))
                 throw err;

package/lib/client.d.ts

@@ -1,35 +1,64 @@
-import type { WeixinContextTokenStore } from './context-store.js';
-import type { WeixinIlinkCredentials } from './credentials.js';
-import type { WeixinConfigManager } from './ilink-config-cache.js';
-import type { IlinkClientMetadata } from './ilink-meta.js';
-import type { ResolvedWeixinIlinkConfig } from './protocol.js';
+import { EventEmitter } from 'node:events';
+import { type EndpointControl, type EndpointManagement, type EndpointSendRequest, type EndpointOperationOptions } from 'zhin.js/adapter';
+import type { CapabilityId } from 'zhin.js';
+import { getUpdates, notifyStart, notifyStop } from './ilink-api.js';
+import { IlinkClientMetadata } from './ilink-meta.js';
+import { type WeixinIlinkCredentials, WeixinIlinkStateStore } from './credentials.js';
+import { WeixinContextTokenStore } from './context-store.js';
+import { IlinkSessionGuard } from './ilink-session-guard.js';
 import { sendMessageWeixin } from './weixin-send.js';
-/** Direct iLink API client backed by the Endpoint's live authenticated session. */
-export declare class WeixinIlinkClient {
-    #private;
+import { type ResolvedWeixinIlinkConfig, type WeixinMessageWithMedia } from './protocol.js';
+export type WeixinIlinkSendText = typeof sendMessageWeixin;
+export type WeixinIlinkNotifyStart = typeof notifyStart;
+export type WeixinIlinkNotifyStop = typeof notifyStop;
+export type WeixinIlinkGetUpdates = typeof getUpdates;
+export interface WeixinIlinkEndpointOptions {
+    readonly id: CapabilityId;
     readonly config: ResolvedWeixinIlinkConfig;
-    constructor(config: ResolvedWeixinIlinkConfig, metadata: IlinkClientMetadata, resolveCredentials: () => WeixinIlinkCredentials | null, resolveConfigManager: () => WeixinConfigManager | undefined, sendTextImpl: typeof sendMessageWeixin, contextTokens: WeixinContextTokenStore);
+    readonly resolveCredentials?: (config: ResolvedWeixinIlinkConfig, metadata: IlinkClientMetadata, state: WeixinIlinkStateStore, signal?: AbortSignal) => Promise<WeixinIlinkCredentials>;
+    /** Test / internal: override network side effects. */
+    readonly notifyStart?: WeixinIlinkNotifyStart;
+    readonly notifyStop?: WeixinIlinkNotifyStop;
+    readonly getUpdates?: WeixinIlinkGetUpdates;
+    readonly sendText?: WeixinIlinkSendText;
+    readonly state?: WeixinIlinkStateStore;
+    readonly contextTokens?: WeixinContextTokenStore;
+    readonly sessionGuard?: IlinkSessionGuard;
+}
+export declare class WeixinIlinkClient extends EventEmitter {
+    #private;
+    protected readonly endpointManagement: EndpointManagement;
+    protected readonly endpointControl: EndpointControl;
+    protected configName(): string;
+    get transportState(): import('zhin.js/adapter').EndpointTransportState | undefined;
+    protected executionSignal?: AbortSignal;
+    protected setExecutionSignal(signal: AbortSignal): void;
+    /** Native protocol work runs here; Endpoint attaches the framework receipt without replacing SDK APIs. */
+    protected receiveInboundCallback<T>(receive: () => T | Promise<T>): Promise<T>;
+    protected publishEvent(name: string, payload: unknown): Promise<unknown>;
+    protected publishAccepted(name: string, payload: unknown): Promise<void>;
+    protected publishPlatform(name: string, event: unknown): Promise<unknown>;
+    constructor(options: WeixinIlinkEndpointOptions);
     get credentials(): WeixinIlinkCredentials;
     get authenticated(): boolean;
     get apiBaseUrl(): string;
     get cdnBaseUrl(): string;
     contextToken(userId: string): string | undefined;
     reachableUserIds(): string[];
-    sendText(to: string, text: string): Promise<{
+    sendText(to: string, text: string, options?: EndpointOperationOptions): Promise<{
         messageId: string;
     }>;
     sendMedia(to: string, filePath: string, text?: string): Promise<{
         messageId: string;
     }>;
-    sendTyping(userId: string, status: number): Promise<boolean>;
+    sendTyping(userId: string, status: number, options?: EndpointOperationOptions): Promise<boolean>;
+    get hasCredentials(): boolean;
+    protected connectTransport(signal?: AbortSignal): Promise<void>;
+    protected openInput(): void;
+    protected closeInput(): void;
+    protected disconnectTransport(): Promise<void>;
+    protected sendPayload({ conversation, payload, signal }: EndpointSendRequest): Promise<string>;
+    /** Test / internal: admit a parsed message when the endpoint is open. */
+    admit(msg: WeixinMessageWithMedia, nativeEvent?: unknown): Promise<boolean>;
 }
 export type WeixinIlinkClientEventMap = Record<string, unknown>;
-declare module '@zhin.js/feature-kit' {
-    interface AdapterClientRegistry {
-        readonly 'weixin-ilink': {
-            readonly client: WeixinIlinkClient;
-            readonly events: WeixinIlinkClientEventMap;
-        };
-    }
-}
-export declare const weixinIlinkClient: import("@zhin.js/adapter").EndpointClientToken<WeixinIlinkClient, WeixinIlinkClientEventMap>;