@zhin.js/adapter-weixin-ilink 1.1.25 → 1.1.27

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # @zhin.js/adapter-weixin-ilink
 
+## 1.1.27
+
+### Patch Changes
+
+- e1fda87: fix: 按审计待审清单处理（安全、功能、清理）
+
+  **行为变更（升级前请阅读）**
+
+  - kernel / core / zhin.js：出站文本中的 `${…}` 不再用 `vm` 求值，只替换 `TemplateContext` 上能解析到值的属性路径（如 `${sender.name}`）；表达式、函数调用、未知名字原样保留。整套 vm 沙箱（`evaluate` / `execute` / `compiler` / `getValueWithRuntime`）已移除。
+  - kernel / core / zhin.js：移除零引用的遗留导出——`Scheduler`、错误管理器与 `ZhinError` 子类、`compose`、`segment.from/toString`、AI 触发/准入函数、`@zhin.js/core/queue-im-field-contract`、`zhin.js/contexts`。
+  - agent：readonly 执行预设不再放行重定向、后台 `&`、进程替换、`find -delete/-exec`、`sed -i`、`sort -o`、`tee`、`xargs`、awk；curl/wget 校验每个 URL 与裸主机并识别更多上传参数；自定义 `execAllowlist` 中的只读命令带写入风险时改走审批。沙箱超时/取消会杀掉进程组或具名容器，默认镜像改为 `node:22-bookworm-slim` + `bash`。移除无生产调用的 `AuditLogger`、`AnomalyDetector`、旧 vision 回合等导出。
+  - ai：移除 `storage`、`FileStateCache`、`CostTracker`、`model-name-utils`、`./agent-step-checkpoint` 子路径、`ContextManager` 及旧压缩管线；延迟工具快照改为有界 LRU。
+  - cli：`zhin send` / `watch` / `schedule` 改为与运行中的 Host 通信（新增 `POST /message/send` 与 `/assistant/jobs` 写接口），`schedule` 不再支持离线改文件；移除 `zhin uninstall service`（用 `zhin service uninstall`）、`build --analyze`、`install -S`；`zhin stop` 杀不掉进程时保留 pid 文件并以非零退出；`runtime migrate` 新增 `verify`；未设置 `TZ` 时调度默认时区改为系统时区；不带 `ZHIN_SUPERVISOR_PID` 的进程被 init 接管后不再自行退出。
+  - schedule：后台 reconcile 出错不再产生未处理 rejection（新增 `onStoreError`）；启动途中 `stop()` 不再遗留定时器。
+  - schema：元组校验与 `safeParse`、JSON Schema 一致（空数组不通过，缺省的可选元组为 `undefined`）。
+  - client / contract：删除无后端路由的 agent-stream API、未使用的 `definePage` 与旧 PageManager 类型；`@zhin.js/contract` 不再依赖 `@zhin.js/ai`；客户端收到 401 会清除已保存的凭据；安装/更新/卸载 RPC 默认超时 120 秒。
+  - a2a：流式响应中途出错写入 SSE error 并结束；未配置 token 的非生产环境只接受本机请求；任务存储有上限与过期；Mailbox 凭据回退与生产环境缺密钥检查修复。
+  - speech：`provider: openai` 不再套用 Ollama 的默认 host/model；识别语言改为可配置，不再写死 `zh`。
+  - adapter-lark：支持 `encryptKey` 加密事件解密。adapter-github：Device Flow 可取消、带超时并回复失败原因。adapter-wecom / dingtalk：请求加超时并校验 HTTP 状态。adapter-weixin-ilink：输入关闭期间暂停轮询。adapter-milky：SSE 支持 CRLF、缓冲上限与空闲重连。adapter-onebot-events：好友删除通知改为 `notice.friend.decrease`。
+  - plugin-group-suite：`teachAllowRegex` 默认关闭，正则安全检查更严格。plugin-qrcode：改为本地生成，回复 data URL 图片。plugin-rss / short-url / link-poster：拒绝解析到内网的地址；rss 修复条目每周重复推送；short-url 的 Console 创建改为真实调用 is.gd。plugin-lottery：按 `historyLimit` 同步。
+
+  **其余**
+
+  - host-http：插件市场详情加缓存与包名校验，SSE 回放容忍背压。host-http-contract：新增 `readTextBody()`，九个适配器改用它。
+  - pagemanager：页面外壳 importmap 升级到 React 19.2.8 / react-router 7.12.0。console-contract：`definePage` 接受 `description` / `group` / `parent` / `fullWidth`。
+  - command：进度提示本地化，匹配不再重复拷贝消息段。runtime：源码监听降级后退避重试原生监听。
+  - html-renderer：删除未接线的 `aiTextAsImage`。create-zhin-app / scaffold-wizard：移除不起作用的"全局安装 CLI"与运行时选择提示。
+  - 依赖声明清理、发布清单不再携带解析不到的 `src` 目录、移除未使用的 Skill 挂载、README 与示例配置按当前实现更正。
+
+- 120e225: 聊天角色（ADR 0056，2026-11-12 修订）：zhin 角色 owner / admin / trusted 分四级、只来自授予；发言者的平台身份与机器人自身的平台身份是独立维度，命令、Agent 工具 / 技能、中间件与按钮按三条维度共用一个评估器过滤。升级说明见 docs/migrations/chat-roles.md。
+
+  - zhin.js：实例首次启动把适配器 `master` / `trusted`、`endpoints[i].master|trusted` 与 `ai.trigger.masters|trusted` 迁入项目数据库 `chat_roles`（先记入 `.zhin/chat-roles-migration.json`，再从配置移除并记日志）；之后配置再出现这些字段时启动报错并指向升级指南。平台身份不再映射为 zhin 角色：删除 `roles.mappings`（适配器块与 `endpoints[i].roles` 出现即启动报错）、`chat_role_mappings` 表与 Console `chat-roles.mappings` / `chat-roles.set-mappings`；`features.selfService.platformAdmins|roles|allowUsers` 删除；群内「功能」「角色」命令只认 zhin 角色，平台群主不再自动具备；聊天改配置、聊天重启、Agent 主人审批按 zhin `owner` 判断。
+  - @zhin.js/core（minor，破坏性）：角色模型与解析移入 core（`ChatRoleService`、`createChatRoleSenderEnricher`），入站消息带 `sender.chatRole` 与归一的 `sender.platform`；删除 `SenderRole`、`senderRolesFromMessage`、`roleSatisfies` 等，`master` 改名 `owner`；删除映射规则 API（`createMappingChatRoleSource`、`DEFAULT_CHAT_ROLE_MAPPINGS` 等）与 `ChatRoleSource`；`createSenderEnricher` / `createConfigurationChatAuthorizer` 改为基于聊天角色。IM Runtime 为 PermissionHost 提供机器人自身身份（经 Adapter 索引缓存），机器人的角色变化事件使缓存失效；命令拒绝回复说明缺少的平台 / 机器人条件；`<Button permit>` 按点击者鉴权；场景治理工具工厂同时要求 `platform:*` 与 `bot:*`；`ai.trigger.masters|trusted` 删除。
+  - @zhin.js/permission（minor，破坏性）：permit 语法 `owner` / `admin` / `trusted` / `role(...)`（zhin 角色）、`platform:owner|admin`、`platform-role:<id>`、`platform-permission:<name>`（发言者平台身份），新增 `bot:owner|admin`、`bot-role:<id>`、`bot-permission:<name>`（机器人自身平台身份，`PermissionSubject.bot`）；`PermissionHost` 新增 `setBotStandingResolver`、`withBotStanding`、`firstDenied`，`checkAll` 可带 `source` 解析机器人身份；新增 `describeDeniedPermit`、`permitsNeedBotStanding`。删除 `role(master)`、`scene_admin`、`scene_owner`、`platform(adapter,perm)` 及 `registerPlatform`、`createSceneRolePlatformChecker`、`platformPermission`、`definePlatformPermission`，定义时报错并给出替代写法。
+  - @zhin.js/command（minor，破坏性）：命令会话的发送者改为 `chatRole` / `platform`，不再从 metadata 读角色；`CONVERSATION_MANAGER_PERMIT` 改为 `admin`（平台群主不再自动满足）；分发结果 `denied` 带 `denial`（第一条不满足的规则与原因）；指令菜单只列出当前发送者在本会话可用的命令。
+  - @zhin.js/agent（minor，破坏性）：危险工具、文件 / exec 策略、主人审批、Agent 回合主体只读 zhin 角色（`principal.roles` 只含展开的聊天角色，平台地位在 `principal.platform`）；`SenderRole` → `PrincipalRole`，`SELF_CHANGE_MASTER_ROLE` → `SELF_CHANGE_OWNER_ROLE`；回合开始时读取机器人自身身份（`contextState.bot.platform`），按三条维度过滤 tool / skill / Agent 包后才披露，执行工具时再校验一次；群规「群主和管理员豁免」改为平台群主 / 管理员与 zhin `owner`。
+  - @zhin.js/feature-kit：`OperationSession.sender` 改为 `chatRole` / `platform`。
+  - @zhin.js/im-contract：新增 `PlatformStanding`、`SelfStandingRequest`、`standingFromMemberRole`。
+  - @zhin.js/adapter：入站 sender 可带 `platform`；账号管理命令需要聊天角色 `owner`；`EndpointManagement` 新增可选 `inspectSelfStanding`，能力画像新增 `scene.selfStanding`（声明即须实现），`AdapterIndex.selfStanding` / `invalidateSelfStanding` 按会话缓存机器人自身身份。
+  - @zhin.js/middleware：入站中间件可声明 `permit`，不满足时跳过该中间件（机器人身份只读缓存）。
+  - @zhin.js/tool：定义工具时拒绝已移除的 permit 写法。
+  - @zhin.js/ai：注释更新。
+  - @zhin.js/console-protocol：`chat-roles.list|grant|revoke`（`iam.manage`）；`ConsoleChatRoleSource` 只有 `grant`。
+  - @zhin.js/runtime：Host 配置 Schema 删除 `features.selfService.platformAdmins|roles|allowUsers`。
+  - @zhin.js/testing：伪造消息与 `PluginTestKit` 用 `sender.chatRole` 声明测试身份。
+  - @zhin.js/scaffold-wizard：ICQQ 向导不再写 `master`，完成后提示在 Console 账号「角色」页签或聊天 `角色 授予` 设置 owner。
+  - 适配器：配置 Schema 删除 `master` / `trusted`（以及预览版的 `roles`）；群管理类工具同时声明发言者条件与机器人条件（如 `platform:admin` + `bot:admin`、`bot-permission:manage_roles`），NapCat / OneBot11 工具不再使用已移除的 `platform(adapter,…)` 写法。
+  - 插件：内容审核以 `inbound.bypass`（permit 列表，默认 `owner` 或 `platform:admin`）取代 `masters` / `inbound.bypassMasters`；群管、音乐、日历、地震、B 站、轮盘赌的权限改用 zhin 角色，订阅类命令只认 zhin `admin` / `owner`。
+
+- Updated dependencies [53932e5]
+- Updated dependencies [57c6cdc]
+- Updated dependencies [e1fda87]
+- Updated dependencies [a9c7a13]
+- Updated dependencies [120e225]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [63595fc]
+- Updated dependencies [fd055d2]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [663473b]
+- Updated dependencies [c606d51]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [d655ef0]
+- Updated dependencies [1e54b1e]
+  - @zhin.js/adapter@1.1.33
+  - @zhin.js/core@1.2.0
+  - @zhin.js/logger@1.1.3
+  - @zhin.js/feature-kit@1.1.16
+  - @zhin.js/console-contract@1.1.6
+  - @zhin.js/im-contract@1.1.14
+  - @zhin.js/page@1.1.18
+
+## 1.1.26
+
+### Patch Changes
+
+- 0d76a7c: Overhaul Console interactive workbenches, platform-specific adapter account onboarding/login flows, DeclarativePageView visual/interactive capabilities, and official utility plugin Console pages.
+- Updated dependencies [0d76a7c]
+  - @zhin.js/adapter@1.1.32
+  - @zhin.js/core@1.1.60
+
 ## 1.1.25
 
 ### Patch Changes

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 凉菜
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -20,6 +20,12 @@
 - 微信客户端需已灰度 **ClawBot** 入口（最新版微信 + 灰度资格）
 - Node.js >=22.19.0
 
+## 安装
+
+```bash
+pnpm add @zhin.js/adapter-weixin-ilink
+```
+
 ## 最小配置
 
 ```yaml
@@ -72,7 +78,7 @@ data/weixin-ilink/<id>/credentials.json
 
 新增仅保存，需手动启动；运行账号的普通配置更新只重连该账号。身份变化走明确替换，新账号不会继承旧 Session 或登录状态。账号凭据变化先按平台实际只读接口核验；平台无法核验时需明确替换。空白或遮蔽的密码不会覆盖既有密码。
 
-读取需要 `weixin-ilink:read`，写入需要 `weixin-ilink:write`；首次迁移还需管理员身份。无持久化存储时管理操作不可用，提交结果未知时先刷新核实，不重复提交。
+读取需要 `weixin-ilink:read`（`read` 级别，内置角色 `viewer` 及以上都有），写入需要 `weixin-ilink:write`（`operate` 级别，`operator` 及以上都有，绑定到本适配器的角色也算）；首次迁移还需管理员身份，见[插件权限的级别](https://zhin.js.org/console/#插件权限的级别)。无持久化存储时管理操作不可用，提交结果未知时先刷新核实，不重复提交。
 
 未提供 `botToken` 时，启动沿既有凭据文件或日志二维码登录流程；本平台当前没有 Console 二维码待办。新账号的状态目录按内部实例身份隔离。
 

package/lib/client.js

@@ -42,6 +42,9 @@ export class WeixinIlinkClient extends EventEmitter {
     #metadata;
     #creds = null;
     #pollAbort;
+    /** Aborts the in-flight long poll when input closes. */
+    #pollRequestAbort;
+    #openWaiters = [];
     #pollPromise;
     #loginAbort;
     #configManager;
@@ -208,11 +211,31 @@ export class WeixinIlinkClient extends EventEmitter {
     }
     openInput() {
         this.#open = true;
+        for (const resume of this.#openWaiters.splice(0))
+            resume();
         if (this.#pollAbort && !this.#pollPromise)
             this.#pollPromise = this.#pollLoop(this.#pollAbort.signal);
     }
     closeInput() {
         this.#open = false;
+        // Nothing can be admitted while closed: stop the long poll instead of re-fetching the same batch.
+        this.#pollRequestAbort?.abort();
+    }
+    /** Resolves on the next openInput(), or when the poll loop is aborted. */
+    #waitForOpen(abortSignal) {
+        if (this.#open || abortSignal.aborted)
+            return Promise.resolve();
+        return new Promise((resolve) => {
+            const done = () => {
+                abortSignal.removeEventListener('abort', done);
+                const index = this.#openWaiters.indexOf(done);
+                if (index >= 0)
+                    this.#openWaiters.splice(index, 1);
+                resolve();
+            };
+            this.#openWaiters.push(done);
+            abortSignal.addEventListener('abort', done, { once: true });
+        });
     }
     disconnectTransport() { return this.#disconnecting ??= this.#disconnectNative(); }
     async #disconnectNative() {
@@ -357,10 +380,16 @@ export class WeixinIlinkClient extends EventEmitter {
         let nextTimeoutMs = this.#options.config.longPollTimeoutMs;
         let consecutiveFailures = 0;
         while (!abortSignal.aborted) {
+            if (!this.#open) {
+                await this.#waitForOpen(abortSignal);
+                continue;
+            }
             if (this.#sessionGuard.paused) {
                 await sleep(this.#sessionGuard.remainingMs, abortSignal);
                 continue;
             }
+            const request = new AbortController();
+            this.#pollRequestAbort = request;
             try {
                 const resp = await this.#getUpdates({
                     baseUrl: this.apiBaseUrl,
@@ -368,9 +397,12 @@ export class WeixinIlinkClient extends EventEmitter {
                     token: this.#creds.botToken,
                     get_updates_buf: getUpdatesBuf,
                     timeoutMs: nextTimeoutMs,
-                    abortSignal,
+                    abortSignal: AbortSignal.any([abortSignal, request.signal]),
                 });
                 abortSignal.throwIfAborted();
+                // Closed while polling: drop the batch without advancing the cursor; it is re-fetched after reopen.
+                if (!this.#open)
+                    continue;
                 if (resp.longpolling_timeout_ms != null && resp.longpolling_timeout_ms > 0) {
                     nextTimeoutMs = resp.longpolling_timeout_ms;
                 }
@@ -408,6 +440,9 @@ export class WeixinIlinkClient extends EventEmitter {
             catch (err) {
                 if (abortSignal.aborted)
                     return;
+                // Input closed mid-request or mid-batch is a pause, not a failure.
+                if (!this.#open)
+                    continue;
                 consecutiveFailures += 1;
                 this.#logger.error(formatCompact({
                     op: 'poll',

package/lib/console-spec.js

@@ -2,7 +2,18 @@ export const weixinIlinkConsoleSpec = {
     adapterKey: 'weixin-ilink',
     adapterDisplayName: '微信 iLink',
     fields: [
-        { key: 'botToken', env: true, description: 'iLink bot token' },
+        {
+            key: 'botToken',
+            env: true,
+            label: 'iLink Bot Token',
+            labelI18n: { en: 'iLink Bot Token' },
+            group: '企业应用凭证',
+            groupI18n: { en: 'Enterprise App Credentials' },
+            placeholder: '扫码授权获取的 iLink Bot Token',
+            placeholderI18n: { en: 'iLink bot token obtained via QR auth' },
+            description: '微信 iLink 机器人凭证（也可通过命令扫码自动写入）',
+            descriptionI18n: { en: 'iLink bot token' },
+        },
     ],
     docsUrl: 'https://zhin.js.org/adapters/weixin-ilink',
     readPermission: 'weixin-ilink:read',

package/lib/ilink-redact.d.ts

@@ -3,11 +3,6 @@
  * Returns `""` for empty/undefined input.
  */
 export declare function truncate(s: string | undefined, max: number): string;
-/**
- * Redact a token/secret: show only the first few chars + total length.
- * Returns `"(none)"` when absent.
- */
-export declare function redactToken(token: string | undefined, prefixLen?: number): string;
 /**
  * Truncate a JSON body string to `maxLen` chars for safe logging.
  * Redacts known sensitive fields before truncating.

package/lib/ilink-redact.js

@@ -1,5 +1,4 @@
 const DEFAULT_BODY_MAX_LEN = 200;
-const DEFAULT_TOKEN_PREFIX_LEN = 6;
 /**
  * Truncate a string, appending a length indicator when trimmed.
  * Returns `""` for empty/undefined input.
@@ -11,17 +10,6 @@ export function truncate(s, max) {
         return s;
     return `${s.slice(0, max)}…(len=${s.length})`;
 }
-/**
- * Redact a token/secret: show only the first few chars + total length.
- * Returns `"(none)"` when absent.
- */
-export function redactToken(token, prefixLen = DEFAULT_TOKEN_PREFIX_LEN) {
-    if (!token)
-        return "(none)";
-    if (token.length <= prefixLen)
-        return `****(len=${token.length})`;
-    return `${token.slice(0, prefixLen)}…(len=${token.length})`;
-}
 /** Field names whose values should be masked in logged JSON bodies. */
 const SENSITIVE_FIELDS = /\b(context_token|bot_token|token|authorization|Authorization)\b/;
 /**

package/lib/ilink-types.d.ts

@@ -189,11 +189,6 @@ export interface SendMessageReq {
 }
 export interface SendMessageResp {
 }
-/** Typing status: 1 = typing (default), 2 = cancel typing. */
-export declare const TypingStatus: {
-    readonly TYPING: 1;
-    readonly CANCEL: 2;
-};
 /** SendTyping request: send a typing indicator to a user. */
 export interface SendTypingReq {
     ilink_user_id?: string;

package/lib/ilink-types.js

@@ -27,8 +27,3 @@ export const MessageState = {
     GENERATING: 1,
     FINISH: 2,
 };
-/** Typing status: 1 = typing (default), 2 = cancel typing. */
-export const TypingStatus = {
-    TYPING: 1,
-    CANCEL: 2,
-};

package/lib/weixin-inbound.d.ts

@@ -1,23 +1,4 @@
-import { type WeixinMessage, type MessageItem } from './ilink-types.js';
-export type WeixinMsgContext = {
-    Body: string;
-    From: string;
-    To: string;
-    AccountId: string;
-    OriginatingChannel: 'openclaw-weixin';
-    OriginatingTo: string;
-    MessageSid: string;
-    Timestamp?: number;
-    Provider: 'openclaw-weixin';
-    ChatType: 'direct';
-    SessionKey?: string;
-    context_token?: string;
-    MediaUrl?: string;
-    MediaPath?: string;
-    MediaType?: string;
-    CommandBody?: string;
-    CommandAuthorized?: boolean;
-};
+import { type MessageItem } from './ilink-types.js';
 export declare function isMediaItem(item: MessageItem): boolean;
 export declare function bodyFromItemList(itemList?: MessageItem[]): string;
 export type WeixinInboundMediaOpts = {
@@ -28,5 +9,3 @@ export type WeixinInboundMediaOpts = {
     fileMediaType?: string;
     decryptedVideoPath?: string;
 };
-export declare function weixinMessageToMsgContext(msg: WeixinMessage, accountId: string, opts?: WeixinInboundMediaOpts): WeixinMsgContext;
-export declare function getContextTokenFromMsgContext(ctx: WeixinMsgContext): string | undefined;

package/lib/weixin-inbound.js

@@ -1,8 +1,4 @@
-import { generateId } from './ilink-random.js';
 import { MessageItemType } from './ilink-types.js';
-function generateMessageSid() {
-    return generateId('openclaw-weixin');
-}
 export function isMediaItem(item) {
     return item.type === MessageItemType.IMAGE
         || item.type === MessageItemType.VIDEO
@@ -22,40 +18,3 @@ export function bodyFromItemList(itemList) {
     }
     return '';
 }
-export function weixinMessageToMsgContext(msg, accountId, opts) {
-    const fromUserId = msg.from_user_id ?? '';
-    const ctx = {
-        Body: bodyFromItemList(msg.item_list),
-        From: fromUserId,
-        To: fromUserId,
-        AccountId: accountId,
-        OriginatingChannel: 'openclaw-weixin',
-        OriginatingTo: fromUserId,
-        MessageSid: generateMessageSid(),
-        Timestamp: msg.create_time_ms,
-        Provider: 'openclaw-weixin',
-        ChatType: 'direct',
-    };
-    if (msg.context_token)
-        ctx.context_token = msg.context_token;
-    if (opts?.decryptedPicPath) {
-        ctx.MediaPath = opts.decryptedPicPath;
-        ctx.MediaType = 'image/*';
-    }
-    else if (opts?.decryptedVideoPath) {
-        ctx.MediaPath = opts.decryptedVideoPath;
-        ctx.MediaType = 'video/mp4';
-    }
-    else if (opts?.decryptedFilePath) {
-        ctx.MediaPath = opts.decryptedFilePath;
-        ctx.MediaType = opts.fileMediaType ?? 'application/octet-stream';
-    }
-    else if (opts?.decryptedVoicePath) {
-        ctx.MediaPath = opts.decryptedVoicePath;
-        ctx.MediaType = opts.voiceMediaType ?? 'audio/wav';
-    }
-    return ctx;
-}
-export function getContextTokenFromMsgContext(ctx) {
-    return ctx.context_token;
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-weixin-ilink",
-  "version": "1.1.25",
+  "version": "1.1.27",
   "type": "module",
   "description": "Zhin.js Weixin iLink (ClawBot) adapter for Plugin Runtime (long-poll)",
   "main": "./lib/index.js",
@@ -49,19 +49,19 @@
     }
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.1.31",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.59",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17"
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18"
   },
   "peerDependencies": {
-    "@zhin.js/adapter": "^1.1.31",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.59",
-    "zhin.js": "^1.1.24"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -75,7 +75,8 @@
     "@types/node": "^26.1.2",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zhin.js": "1.1.24"
+    "@zhin.js/host-http": "1.2.0",
+    "zhin.js": "1.1.26"
   },
   "ilink_appid": "bot",
   "engines": {
@@ -106,6 +107,6 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/weixin-ilink/tests"
+    "test": "vitest run --root ../../.. plugins/adapters/weixin-ilink/tests"
   }
 }

package/schema.json

@@ -24,34 +24,6 @@
       "default": "data/weixin-ilink",
       "description": "Endpoint state root for credentials, cursors, context tokens, and media"
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（Weixin user id；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (Weixin user id; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted Weixin user id"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -60,34 +32,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（Weixin user id）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (Weixin user id), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted Weixin user id"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "botToken": {
             "type": "string",
             "description": "iLink bot token; omit to load endpoint state or start QR login"

package/src/client.ts

@@ -112,6 +112,9 @@ export class WeixinIlinkClient extends EventEmitter {
   readonly #metadata: IlinkClientMetadata;
   #creds: WeixinIlinkCredentials | null = null;
   #pollAbort?: AbortController;
+  /** Aborts the in-flight long poll when input closes. */
+  #pollRequestAbort?: AbortController;
+  #openWaiters: (() => void)[] = [];
   #pollPromise?: Promise<void>;
   #loginAbort?: AbortController;
   #configManager?: WeixinConfigManager;
@@ -291,11 +294,29 @@ export class WeixinIlinkClient extends EventEmitter {
 
   protected openInput(): void {
     this.#open = true;
+    for (const resume of this.#openWaiters.splice(0)) resume();
     if (this.#pollAbort && !this.#pollPromise) this.#pollPromise = this.#pollLoop(this.#pollAbort.signal);
   }
 
   protected closeInput(): void {
     this.#open = false;
+    // Nothing can be admitted while closed: stop the long poll instead of re-fetching the same batch.
+    this.#pollRequestAbort?.abort();
+  }
+
+  /** Resolves on the next openInput(), or when the poll loop is aborted. */
+  #waitForOpen(abortSignal: AbortSignal): Promise<void> {
+    if (this.#open || abortSignal.aborted) return Promise.resolve();
+    return new Promise((resolve) => {
+      const done = (): void => {
+        abortSignal.removeEventListener('abort', done);
+        const index = this.#openWaiters.indexOf(done);
+        if (index >= 0) this.#openWaiters.splice(index, 1);
+        resolve();
+      };
+      this.#openWaiters.push(done);
+      abortSignal.addEventListener('abort', done, { once: true });
+    });
   }
 
   protected disconnectTransport(): Promise<void> { return this.#disconnecting ??= this.#disconnectNative(); }
@@ -449,11 +470,17 @@ export class WeixinIlinkClient extends EventEmitter {
     let consecutiveFailures = 0;
 
     while (!abortSignal.aborted) {
+      if (!this.#open) {
+        await this.#waitForOpen(abortSignal);
+        continue;
+      }
       if (this.#sessionGuard.paused) {
         await sleep(this.#sessionGuard.remainingMs, abortSignal);
         continue;
       }
 
+      const request = new AbortController();
+      this.#pollRequestAbort = request;
       try {
         const resp = await this.#getUpdates({
           baseUrl: this.apiBaseUrl,
@@ -461,10 +488,12 @@ export class WeixinIlinkClient extends EventEmitter {
           token: this.#creds.botToken,
           get_updates_buf: getUpdatesBuf,
           timeoutMs: nextTimeoutMs,
-          abortSignal,
+          abortSignal: AbortSignal.any([abortSignal, request.signal]),
         });
 
         abortSignal.throwIfAborted();
+        // Closed while polling: drop the batch without advancing the cursor; it is re-fetched after reopen.
+        if (!this.#open) continue;
         if (resp.longpolling_timeout_ms != null && resp.longpolling_timeout_ms > 0) {
           nextTimeoutMs = resp.longpolling_timeout_ms;
         }
@@ -504,6 +533,8 @@ export class WeixinIlinkClient extends EventEmitter {
         }
       } catch (err) {
         if (abortSignal.aborted) return;
+        // Input closed mid-request or mid-batch is a pause, not a failure.
+        if (!this.#open) continue;
         consecutiveFailures += 1;
         this.#logger.error(formatCompact({
           op: 'poll',

package/src/console-spec.ts

@@ -7,7 +7,18 @@ export const weixinIlinkConsoleSpec = {
   adapterKey: 'weixin-ilink',
   adapterDisplayName: '微信 iLink',
   fields: [
-    { key: 'botToken', env: true, description: 'iLink bot token' },
+    {
+      key: 'botToken',
+      env: true,
+      label: 'iLink Bot Token',
+      labelI18n: { en: 'iLink Bot Token' },
+      group: '企业应用凭证',
+      groupI18n: { en: 'Enterprise App Credentials' },
+      placeholder: '扫码授权获取的 iLink Bot Token',
+      placeholderI18n: { en: 'iLink bot token obtained via QR auth' },
+      description: '微信 iLink 机器人凭证（也可通过命令扫码自动写入）',
+      descriptionI18n: { en: 'iLink bot token' },
+    },
   ] as readonly AdapterConsoleField[],
   docsUrl: 'https://zhin.js.org/adapters/weixin-ilink',
   readPermission: 'weixin-ilink:read',

package/src/ilink-redact.ts

@@ -1,5 +1,4 @@
 const DEFAULT_BODY_MAX_LEN = 200;
-const DEFAULT_TOKEN_PREFIX_LEN = 6;
 
 /**
  * Truncate a string, appending a length indicator when trimmed.
@@ -11,16 +10,6 @@ export function truncate(s: string | undefined, max: number): string {
   return `${s.slice(0, max)}…(len=${s.length})`;
 }
 
-/**
- * Redact a token/secret: show only the first few chars + total length.
- * Returns `"(none)"` when absent.
- */
-export function redactToken(token: string | undefined, prefixLen = DEFAULT_TOKEN_PREFIX_LEN): string {
-  if (!token) return "(none)";
-  if (token.length <= prefixLen) return `****(len=${token.length})`;
-  return `${token.slice(0, prefixLen)}…(len=${token.length})`;
-}
-
 /** Field names whose values should be masked in logged JSON bodies. */
 const SENSITIVE_FIELDS = /\b(context_token|bot_token|token|authorization|Authorization)\b/;
 

package/src/ilink-types.ts

@@ -211,12 +211,6 @@ export interface SendMessageResp {
   // empty
 }
 
-/** Typing status: 1 = typing (default), 2 = cancel typing. */
-export const TypingStatus = {
-  TYPING: 1,
-  CANCEL: 2,
-} as const;
-
 /** SendTyping request: send a typing indicator to a user. */
 export interface SendTypingReq {
   ilink_user_id?: string;

package/src/weixin-inbound.ts

@@ -1,29 +1,4 @@
-import { generateId } from './ilink-random.js';
-import { MessageItemType, type WeixinMessage, type MessageItem } from './ilink-types.js';
-
-function generateMessageSid(): string {
-  return generateId('openclaw-weixin');
-}
-
-export type WeixinMsgContext = {
-  Body: string;
-  From: string;
-  To: string;
-  AccountId: string;
-  OriginatingChannel: 'openclaw-weixin';
-  OriginatingTo: string;
-  MessageSid: string;
-  Timestamp?: number;
-  Provider: 'openclaw-weixin';
-  ChatType: 'direct';
-  SessionKey?: string;
-  context_token?: string;
-  MediaUrl?: string;
-  MediaPath?: string;
-  MediaType?: string;
-  CommandBody?: string;
-  CommandAuthorized?: boolean;
-};
+import { MessageItemType, type MessageItem } from './ilink-types.js';
 
 export function isMediaItem(item: MessageItem): boolean {
   return item.type === MessageItemType.IMAGE
@@ -54,42 +29,3 @@ export type WeixinInboundMediaOpts = {
   decryptedVideoPath?: string;
 };
 
-export function weixinMessageToMsgContext(
-  msg: WeixinMessage,
-  accountId: string,
-  opts?: WeixinInboundMediaOpts,
-): WeixinMsgContext {
-  const fromUserId = msg.from_user_id ?? '';
-  const ctx: WeixinMsgContext = {
-    Body: bodyFromItemList(msg.item_list),
-    From: fromUserId,
-    To: fromUserId,
-    AccountId: accountId,
-    OriginatingChannel: 'openclaw-weixin',
-    OriginatingTo: fromUserId,
-    MessageSid: generateMessageSid(),
-    Timestamp: msg.create_time_ms,
-    Provider: 'openclaw-weixin',
-    ChatType: 'direct',
-  };
-  if (msg.context_token) ctx.context_token = msg.context_token;
-
-  if (opts?.decryptedPicPath) {
-    ctx.MediaPath = opts.decryptedPicPath;
-    ctx.MediaType = 'image/*';
-  } else if (opts?.decryptedVideoPath) {
-    ctx.MediaPath = opts.decryptedVideoPath;
-    ctx.MediaType = 'video/mp4';
-  } else if (opts?.decryptedFilePath) {
-    ctx.MediaPath = opts.decryptedFilePath;
-    ctx.MediaType = opts.fileMediaType ?? 'application/octet-stream';
-  } else if (opts?.decryptedVoicePath) {
-    ctx.MediaPath = opts.decryptedVoicePath;
-    ctx.MediaType = opts.voiceMediaType ?? 'audio/wav';
-  }
-  return ctx;
-}
-
-export function getContextTokenFromMsgContext(ctx: WeixinMsgContext): string | undefined {
-  return ctx.context_token;
-}

package/lib/types.d.ts

@@ -1,2 +0,0 @@
-export type { WeixinIlinkEndpointConfig, ResolvedWeixinIlinkConfig, } from './protocol.js';
-export type { WeixinMessage, MessageItem } from './ilink-types.js';

package/lib/types.js

@@ -1 +0,0 @@
-export {};

package/src/types.ts

@@ -1,6 +0,0 @@
-export type {
-  WeixinIlinkEndpointConfig,
-  ResolvedWeixinIlinkConfig,
-} from './protocol.js';
-
-export type { WeixinMessage, MessageItem } from './ilink-types.js';