@zhin.js/adapter-weixin-ilink 4.0.0 → 4.0.1

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @zhin.js/adapter-weixin-ilink
 
+## 4.0.1
+
+### Patch Changes
+
+- 5691aba: 第二轮全量审计修复批（8 面 ~60 bug）：
+
+  - **安全**：email 附件路径穿越修复（basename + downloadPath 约束）；lark/telegram/satori webhook 鉴权（缺密钥告警、timingSafeEqual、±5min 时效窗、chat_type 修正）；onebot wss/webhook 缺 token 告警；qq webhook 改原始字节验签；renderJsx/JSX 转义注入修复；console runtime token 401 死循环。
+  - **P0 功能**：sandbox 多 endpoint 解析 + WS 路径隔离；short-url expand（undici opaqueredirect）改 follow；AI 压缩摘要失败不再静默丢历史（熔断恢复生效）；console-ui 实时推送事件名归一化 + IndexedDB schema 对齐；process-monitor 热重载不再误判崩溃。
+  - **生命周期**：email IMAP 断线重连 + 在飞锁；onebot11/12 start 失败清理；line replyToken TTL + push 兜底；wechat-mp token 过期重试 + MsgId 去重；weixin-ilink buf 推进/防抖写盘/媒体 TTL/QR abort；satori PONG 看门狗；退避自毁修复。
+  - **游戏**：text-adventure 终局 restart 复活 + requires 服务端校验；tic-tac-toe PvP 占用/restart/队列清理/TTL；idiom-chain/word-riddle 闲聊不扣失误；别名中间件不劫持普通聊天。
+  - **共享库**：schema falsy 默认值/date/tuple/union 修复；database parseCondition Date/未知操作符、sqlite TEXT 往返、query 分派、belongsToMany 方言、migration dry-run；schedule DST 回拨死循环、重复 id 去重、flush 串行化；game-kit fallback 编号/onboarding 提示/尾缀边界/活引用拷贝。
+  - **渲染语音**：fetch 全部超时 + 渲染并发闸；sanitizeHtml form 保文本；STT 扩展名映射 + 删临时文件；TTS 未知 provider 报错；emojiCache LRU 负缓存/fontCache style/clearFonts 恢复；register 错误分类收窄。
+
+- 74b035c: endpoint 管理命令扩展至 18/20 适配器：kook / discord / github（private_key 支持内联文件路径）/ icqq（bindFlow 登记式 add + `icqq login` 引导）/ dingtalk / lark / line / satori / wechat-mp / wecom / weixin-ilink 接入 `endpoint list/add/remove`（字段对齐各自 schema，凭据写 `.env`）。email（smtp/imap 嵌套对象）与 sandbox（无凭据）暂不接。
+- 09d4f25: Console 社交读取面（management 语义端口）多平台落地：napcat/onebot11/onebot12/milky（好友+群+群成员，OneBot 标准动作）；discord/kook/satori（guild+频道+成员，分页聚合，id 保精度留字符串）；slack（workspace 成员+public channels+conversations.members）；line（群/room 成员分页+profile 回退）；wechat-mp（followers openid）；weixin-ilink（context_token 对端推导）；lark（chats+members 全分页）。`EndpointFriend.user_id`/`EndpointGroup.group_id` 放宽为 `number | string`（雪花 id 不丢精度）。telegram/wecom/dingtalk/github/email/sandbox 注明平台无列表面暂不接。
+- Updated dependencies [cdf64e7]
+- Updated dependencies [5691aba]
+- Updated dependencies [078e3f7]
+- Updated dependencies [50497a5]
+- Updated dependencies [9c997b2]
+- Updated dependencies [09d4f25]
+- Updated dependencies [43485a9]
+- Updated dependencies [f0ec5ab]
+- Updated dependencies [3e925d0]
+- Updated dependencies [fa66c4c]
+- Updated dependencies [fa66c4c]
+- Updated dependencies [6cb6152]
+  - @zhin.js/command@1.0.3
+  - @zhin.js/plugin-runtime@1.1.1
+  - zhin.js@5.0.1
+  - @zhin.js/adapter@1.1.1
+  - @zhin.js/core@1.4.1
+
 ## 4.0.0
 
 ### Patch Changes

package/adapters/weixin-ilink.ts

@@ -8,6 +8,7 @@ import {
   resolveWeixinIlinkConfig,
   type WeixinIlinkAdapterConfig,
 } from '../src/protocol.js';
+import { weixinIlinkRuntimeStateToken } from '../src/weixin-ilink-runtime-state.js';
 
 export { WeixinIlinkEndpoint } from '../src/endpoint.js';
 export type {
@@ -20,11 +21,22 @@ export type {
 
 export default defineAdapter<WeixinIlinkAdapterConfig>({
   capabilities: ['inbound', 'outbound'],
+  // base64 / 远程 URL 落盘后走 CDN 上传（sendWeixinMediaFile）；微信无卡片交互面，交互段降级纯文本。
+  segments: {
+    outboundMedia: ['base64', 'url', 'upload'],
+    interactive: 'text',
+  },
   create(context) {
+    const config = resolveWeixinIlinkConfig(context.config);
+    // 注册到插件运行时状态（weixin-ilink endpoint list 的"运行中"数据源）
+    context.use(weixinIlinkRuntimeStateToken).endpoints.set(config.name, {
+      name: config.name,
+      mode: config.connection,
+    });
     return new WeixinIlinkEndpoint({
       id: context.id,
       gateway: context.use(messageGatewayToken),
-      config: resolveWeixinIlinkConfig(context.config),
+      config,
     });
   },
 });

package/commands/endpoint/add/[name:string].ts

@@ -0,0 +1,3 @@
+import { weixinIlinkEndpointCommands } from '../../../src/weixin-ilink-endpoint-commands.js';
+
+export default weixinIlinkEndpointCommands.add;

package/commands/endpoint/list.ts

@@ -0,0 +1,3 @@
+import { weixinIlinkEndpointCommands } from '../../src/weixin-ilink-endpoint-commands.js';
+
+export default weixinIlinkEndpointCommands.list;

package/commands/endpoint/remove/[name:string].ts

@@ -0,0 +1,3 @@
+import { weixinIlinkEndpointCommands } from '../../../src/weixin-ilink-endpoint-commands.js';
+
+export default weixinIlinkEndpointCommands.remove;

package/lib/context-store.d.ts

@@ -1 +1 @@
-export { setContextToken, getContextToken, restoreContextTokens, clearContextTokensForAccount, bodyFromItemList, isMediaItem, } from "./weixin-inbound.js";
+export { setContextToken, getContextToken, listContextTokenUserIds, restoreContextTokens, clearContextTokensForAccount, flushContextTokenPersist, bodyFromItemList, isMediaItem, } from "./weixin-inbound.js";

package/lib/context-store.js

@@ -1 +1 @@
-export { setContextToken, getContextToken, restoreContextTokens, clearContextTokensForAccount, bodyFromItemList, isMediaItem, } from "./weixin-inbound.js";
+export { setContextToken, getContextToken, listContextTokenUserIds, restoreContextTokens, clearContextTokensForAccount, flushContextTokenPersist, bodyFromItemList, isMediaItem, } from "./weixin-inbound.js";

package/lib/endpoint.d.ts

@@ -1,4 +1,4 @@
-import type { EndpointInstance } from '@zhin.js/adapter';
+import type { EndpointInstance, EndpointManagement } from '@zhin.js/adapter';
 import type { MessageGateway } from '@zhin.js/core/runtime';
 import type { CapabilityId } from '@zhin.js/plugin-runtime';
 import { getUpdates, notifyStart, notifyStop } from './ilink-api.js';
@@ -13,7 +13,7 @@ export interface WeixinIlinkEndpointOptions {
     readonly id: CapabilityId;
     readonly gateway: MessageGateway;
     readonly config: ResolvedWeixinIlinkConfig;
-    readonly resolveCredentials?: (config: ResolvedWeixinIlinkConfig) => Promise<WeixinIlinkCredentials>;
+    readonly resolveCredentials?: (config: ResolvedWeixinIlinkConfig, signal?: AbortSignal) => Promise<WeixinIlinkCredentials>;
     /** Test / internal: override network side effects. */
     readonly notifyStart?: WeixinIlinkNotifyStart;
     readonly notifyStop?: WeixinIlinkNotifyStop;
@@ -22,8 +22,11 @@ export interface WeixinIlinkEndpointOptions {
 }
 export declare class WeixinIlinkEndpoint implements EndpointInstance {
     #private;
+    readonly management: EndpointManagement;
     constructor(options: WeixinIlinkEndpointOptions);
     get hasCredentials(): boolean;
+    /** Live endpoint 名（context token 按 account 名分桶，management 推导对端用）。 */
+    get configName(): string;
     apiBaseUrl(): string;
     cdnBaseUrl(): string;
     start(): Promise<void>;

package/lib/endpoint.js

@@ -9,7 +9,7 @@ import { getUpdates, notifyStart, notifyStop, sendTyping } from './ilink-api.js'
 import { configureIlinkMeta } from './ilink-meta.js';
 import { loadSyncBuf, resolveStateDir, saveSyncBuf, } from './credentials.js';
 import { resolveCredentials } from './login.js';
-import { getContextToken, restoreContextTokens, setContextToken, } from './context-store.js';
+import { getContextToken, listContextTokenUserIds, restoreContextTokens, setContextToken, flushContextTokenPersist, } from './context-store.js';
 import { WeixinConfigManager } from './ilink-config-cache.js';
 import { getRemainingPauseMs, isSessionPaused, pauseSession, SESSION_EXPIRED_ERRCODE, } from './ilink-session-guard.js';
 import { downloadMediaFromItem } from './media-download.js';
@@ -24,6 +24,9 @@ const MAX_CONSECUTIVE_FAILURES = 3;
 const BACKOFF_DELAY_MS = 30_000;
 const RETRY_DELAY_MS = 2_000;
 const WEIXIN_MEDIA_MAX_BYTES = 100 * 1024 * 1024;
+/** 入站媒体保留 24h，每小时清扫一次。 */
+const INBOUND_MEDIA_TTL_MS = 24 * 60 * 60 * 1000;
+const MEDIA_SWEEP_INTERVAL_MS = 60 * 60 * 1000;
 export class WeixinIlinkEndpoint {
     #options;
     #resolveCredentials;
@@ -34,9 +37,12 @@ export class WeixinIlinkEndpoint {
     #creds = null;
     #pollAbort;
     #pollPromise;
+    #loginAbort;
     #configManager;
+    #mediaSweepTimer;
     #open = false;
     #started = false;
+    management = createWeixinIlinkEndpointManagement(this);
     constructor(options) {
         this.#options = options;
         this.#resolveCredentials = options.resolveCredentials ?? resolveCredentials;
@@ -48,6 +54,10 @@ export class WeixinIlinkEndpoint {
     get hasCredentials() {
         return Boolean(this.#creds?.botToken);
     }
+    /** Live endpoint 名（context token 按 account 名分桶，management 推导对端用）。 */
+    get configName() {
+        return this.#options.config.name;
+    }
     apiBaseUrl() {
         return this.#creds?.baseUrl ?? this.#options.config.baseUrl;
     }
@@ -60,7 +70,9 @@ export class WeixinIlinkEndpoint {
         this.#started = true;
         try {
             configureIlinkMeta({ botAgent: this.#options.config.botAgent });
-            this.#creds = await this.#resolveCredentials(this.#options.config);
+            // QR 登录最长 8 分钟：stop() 必须能打断
+            this.#loginAbort = new AbortController();
+            this.#creds = await this.#resolveCredentials(this.#options.config, this.#loginAbort.signal);
             restoreContextTokens(this.#options.config.name);
             await this.#notifyStart({
                 baseUrl: this.apiBaseUrl(),
@@ -69,6 +81,7 @@ export class WeixinIlinkEndpoint {
             this.#configManager = new WeixinConfigManager({ baseUrl: this.apiBaseUrl(), token: this.#creds.botToken }, (msg) => logger.debug(msg));
             this.#pollAbort = new AbortController();
             this.#pollPromise = this.#pollLoop(this.#pollAbort.signal);
+            this.#startMediaSweep();
             logger.info(formatCompact({
                 op: 'connect',
                 endpoint: this.#options.config.name,
@@ -88,6 +101,7 @@ export class WeixinIlinkEndpoint {
     }
     async stop() {
         this.#open = false;
+        this.#loginAbort?.abort();
         this.#pollAbort?.abort();
         try {
             await this.#pollPromise;
@@ -95,6 +109,9 @@ export class WeixinIlinkEndpoint {
         catch {
             /* poll loop exit */
         }
+        this.#stopMediaSweep();
+        // 防抖中的 context token 落盘，避免 stop 丢尾部写入
+        flushContextTokenPersist(this.#options.config.name);
         if (this.#creds?.botToken) {
             try {
                 await this.#notifyStop({ baseUrl: this.apiBaseUrl(), token: this.#creds.botToken });
@@ -274,8 +291,8 @@ export class WeixinIlinkEndpoint {
                         continue;
                     }
                     consecutiveFailures += 1;
+                    // 退避后不清零：对端持续挂时清零会让重试固定打满 RETRY_DELAY_MS。
                     if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                        consecutiveFailures = 0;
                         await sleep(BACKOFF_DELAY_MS, abortSignal);
                     }
                     else {
@@ -284,13 +301,15 @@ export class WeixinIlinkEndpoint {
                     continue;
                 }
                 consecutiveFailures = 0;
-                if (resp.get_updates_buf) {
-                    getUpdatesBuf = resp.get_updates_buf;
-                    saveSyncBuf(endpointName, getUpdatesBuf);
-                }
+                // 先分发再推进 buf：分发途中崩溃时 buf 未推进，下一轮重拉不丢消息。
+                const nextBuf = resp.get_updates_buf;
                 for (const inbound of resp.msgs ?? []) {
                     await this.#handleInboundMessage(inbound);
                 }
+                if (nextBuf) {
+                    getUpdatesBuf = nextBuf;
+                    saveSyncBuf(endpointName, getUpdatesBuf);
+                }
             }
             catch (err) {
                 if (abortSignal.aborted)
@@ -302,7 +321,6 @@ export class WeixinIlinkEndpoint {
                     error: err instanceof Error ? err.message : String(err),
                 }));
                 if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                    consecutiveFailures = 0;
                     await sleep(BACKOFF_DELAY_MS, abortSignal);
                 }
                 else {
@@ -361,4 +379,62 @@ export class WeixinIlinkEndpoint {
         fs.writeFileSync(filePath, buffer);
         return { path: filePath };
     }
+    /** 入站媒体 TTL 清扫：start 时立即扫一次，之后每小时扫一次。 */
+    #startMediaSweep() {
+        this.#stopMediaSweep();
+        const sweep = () => this.#sweepInboundMedia();
+        sweep();
+        this.#mediaSweepTimer = setInterval(sweep, MEDIA_SWEEP_INTERVAL_MS);
+        this.#mediaSweepTimer.unref?.();
+    }
+    #stopMediaSweep() {
+        if (this.#mediaSweepTimer) {
+            clearInterval(this.#mediaSweepTimer);
+            this.#mediaSweepTimer = undefined;
+        }
+    }
+    #sweepInboundMedia() {
+        const dir = path.join(resolveStateDir(), 'media', 'inbound');
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        const now = Date.now();
+        for (const entry of entries) {
+            if (!entry.isFile())
+                continue;
+            const filePath = path.join(dir, entry.name);
+            try {
+                const stat = fs.statSync(filePath);
+                if (now - stat.mtimeMs <= INBOUND_MEDIA_TTL_MS)
+                    continue;
+                fs.unlinkSync(filePath);
+                logger.debug(formatCompact({
+                    op: 'media_sweep',
+                    endpoint: this.#options.config.name,
+                    file: entry.name,
+                }));
+            }
+            catch {
+                /* 单个文件失败不阻塞整体清扫 */
+            }
+        }
+    }
+}
+function createWeixinIlinkEndpointManagement(endpoint) {
+    return Object.freeze({
+        // 个人微信无群概念（listGroups/listGroupMembers 不接），也没有通讯录/资料接口。
+        // "好友"只能从会话推导：凡持有 context_token 的对端（来过消息，含重启后从磁盘恢复的）
+        // 即为可达私聊对端；昵称不可得，用 user_id 占位并在 remark 注明来源。
+        async listFriends() {
+            return listContextTokenUserIds(endpoint.configName).map((userId) => ({
+                user_id: userId,
+                nickname: userId,
+                remark: 'ilink: 从会话 context_token 推导，非通讯录',
+            }));
+        },
+    });
 }

package/lib/ilink-api.d.ts

@@ -18,6 +18,7 @@ export declare function apiGetFetch(params: {
     endpoint: string;
     timeoutMs?: number;
     label: string;
+    abortSignal?: AbortSignal;
 }): Promise<string>;
 /**
  * Common fetch wrapper: POST JSON to a Weixin API endpoint.

package/lib/ilink-api.js

@@ -54,11 +54,12 @@ export async function apiGetFetch(params) {
     const t = controller != null && timeoutMs != null
         ? setTimeout(() => controller.abort(), timeoutMs)
         : undefined;
+    const { signal, cleanup } = combineAbortSignals(controller, params.abortSignal);
     try {
         const res = await fetch(url.toString(), {
             method: "GET",
             headers: hdrs,
-            ...(controller ? { signal: controller.signal } : {}),
+            ...(signal ? { signal } : {}),
         });
         if (t !== undefined)
             clearTimeout(t);
@@ -74,6 +75,9 @@ export async function apiGetFetch(params) {
             clearTimeout(t);
         throw err;
     }
+    finally {
+        cleanup();
+    }
 }
 function combineAbortSignals(internal, external) {
     if (!internal && !external)

package/lib/login.d.ts

@@ -1,4 +1,4 @@
 import { type WeixinIlinkCredentials } from './credentials.js';
 import type { ResolvedWeixinIlinkConfig } from './protocol.js';
-export declare function resolveCredentials(config: ResolvedWeixinIlinkConfig): Promise<WeixinIlinkCredentials>;
-export declare function loginWithQr(config: ResolvedWeixinIlinkConfig): Promise<WeixinIlinkCredentials>;
+export declare function resolveCredentials(config: ResolvedWeixinIlinkConfig, signal?: AbortSignal): Promise<WeixinIlinkCredentials>;
+export declare function loginWithQr(config: ResolvedWeixinIlinkConfig, signal?: AbortSignal): Promise<WeixinIlinkCredentials>;

package/lib/login.js

@@ -21,7 +21,7 @@ async function fetchQRCode(apiBaseUrl, botType) {
     });
     return JSON.parse(rawText);
 }
-async function pollQRStatus(apiBaseUrl, qrcode) {
+async function pollQRStatus(apiBaseUrl, qrcode, signal) {
     try {
         const endpoint = `ilink/bot/get_qrcode_status?qrcode=${encodeURIComponent(qrcode)}`;
         const rawText = await apiGetFetch({
@@ -29,18 +29,42 @@ async function pollQRStatus(apiBaseUrl, qrcode) {
             endpoint,
             timeoutMs: QR_LONG_POLL_TIMEOUT_MS,
             label: 'pollQRStatus',
+            abortSignal: signal,
         });
         return JSON.parse(rawText);
     }
     catch (err) {
         if (err instanceof Error && err.name === 'AbortError') {
+            // 外部 stop 的 abort 不能吞掉当普通长轮询超时
+            if (signal?.aborted)
+                throw err;
             return { status: 'wait' };
         }
         logger.warn(`pollQRStatus error: ${String(err)}`);
         return { status: 'wait' };
     }
 }
-export async function resolveCredentials(config) {
+function abortError() {
+    return Object.assign(new Error('扫码登录已取消'), { name: 'AbortError' });
+}
+function sleepWithAbort(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(abortError());
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(abortError());
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+export async function resolveCredentials(config, signal) {
     const envToken = process.env.WEIXIN_ILINK_TOKEN?.trim() || config.botToken?.trim();
     if (envToken) {
         const stored = loadCredentials(config.name);
@@ -58,9 +82,9 @@ export async function resolveCredentials(config) {
             baseUrl: config.baseUrl ?? stored.baseUrl ?? DEFAULT_API_BASE_URL,
         };
     }
-    return loginWithQr(config);
+    return loginWithQr(config, signal);
 }
-export async function loginWithQr(config) {
+export async function loginWithQr(config, signal) {
     const apiBaseUrl = config.baseUrl ?? DEFAULT_API_BASE_URL;
     const qr = await fetchQRCode(apiBaseUrl, DEFAULT_ILINK_BOT_TYPE);
     const qrcodeUrl = qr.qrcode_img_content || qr.qrcode;
@@ -68,7 +92,10 @@ export async function loginWithQr(config) {
     const deadline = Date.now() + LOGIN_TIMEOUT_MS;
     let currentBaseUrl = apiBaseUrl;
     while (Date.now() < deadline) {
-        const status = await pollQRStatus(currentBaseUrl, qr.qrcode);
+        // stop() 的 AbortSignal：不打满 8 分钟，立即退出登录循环
+        if (signal?.aborted)
+            throw abortError();
+        const status = await pollQRStatus(currentBaseUrl, qr.qrcode, signal);
         if (status.status === 'scaned_but_redirect' && status.redirect_host) {
             currentBaseUrl = status.redirect_host.startsWith('http')
                 ? status.redirect_host
@@ -93,7 +120,7 @@ export async function loginWithQr(config) {
         if (status.status === 'expired') {
             throw new Error('二维码已过期，请重启 bot 重新登录');
         }
-        await new Promise((r) => setTimeout(r, 500));
+        await sleepWithAbort(500, signal);
     }
     throw new Error('微信扫码登录超时');
 }

package/lib/weixin-ilink-endpoint-commands.d.ts

@@ -0,0 +1 @@
+export declare const weixinIlinkEndpointCommands: import("@zhin.js/adapter").EndpointCommands<Readonly<import("@zhin.js/command").CommandDefinition<unknown, unknown, import("@zhin.js/command").CommandMessage>>>;

package/lib/weixin-ilink-endpoint-commands.js

@@ -0,0 +1,16 @@
+/**
+ * `weixin-ilink endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ */
+import { createEndpointCommands } from '@zhin.js/adapter';
+import { defineCommand } from '@zhin.js/command';
+import { weixinIlinkRuntimeStateToken } from './weixin-ilink-runtime-state.js';
+export const weixinIlinkEndpointCommands = createEndpointCommands({
+    adapterKey: 'weixin-ilink',
+    adapterDisplayName: 'Weixin iLink',
+    fields: [
+        { key: 'botToken', required: true, env: true, description: 'iLink bot token' },
+    ],
+    running: (use) => use(weixinIlinkRuntimeStateToken).endpoints.values(),
+    describeEntry: (entry) => `botToken: ${String(entry.botToken)}`,
+}, defineCommand);

package/lib/weixin-ilink-runtime-state.d.ts

@@ -0,0 +1 @@
+export declare const weixinIlinkRuntimeStateToken: import("@zhin.js/plugin-runtime").Token<import("@zhin.js/adapter").EndpointRuntimeState>;

package/lib/weixin-ilink-runtime-state.js

@@ -0,0 +1,6 @@
+/**
+ * Weixin iLink 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
+ * 由 plugin.ts setup() provide，adapter create 与 `weixin-ilink endpoint` 命令共享（同一 owner generation）。
+ */
+import { defineEndpointRuntimeStateToken } from '@zhin.js/adapter';
+export const weixinIlinkRuntimeStateToken = defineEndpointRuntimeStateToken('weixin-ilink');

package/lib/weixin-inbound.d.ts

@@ -1,4 +1,6 @@
 import { type WeixinMessage, type MessageItem } from './ilink-types.js';
+/** 立即落盘所有待写（endpoint stop / 测试用）。 */
+export declare function flushContextTokenPersist(accountId?: string): void;
 /**
  * Restore persisted context tokens for an account into the in-memory map.
  * Called once during gateway startAccount to survive restarts.
@@ -6,10 +8,16 @@ import { type WeixinMessage, type MessageItem } from './ilink-types.js';
 export declare function restoreContextTokens(accountId: string): void;
 /** Remove all context tokens for a given account (memory + disk). */
 export declare function clearContextTokensForAccount(accountId: string): void;
-/** Store a context token for a given account+user pair (memory + disk). */
+/** Store a context token for a given account+user pair (memory + debounced disk). */
 export declare function setContextToken(accountId: string, userId: string, token: string): void;
 /** Retrieve the cached context token for a given account+user pair. */
 export declare function getContextToken(accountId: string, userId: string): string | undefined;
+/**
+ * List all peer userIds that hold a context token for the given account
+ * (memory map, already merged with the disk-backed file on restore).
+ * Personal WeChat has no contact/profile API; this is the only peer catalog.
+ */
+export declare function listContextTokenUserIds(accountId: string): string[];
 /**
  * Find all accountIds that have an active contextToken for the given userId.
  * Used to infer the sending bot account from the recipient address when

package/lib/weixin-inbound.js

@@ -41,6 +41,34 @@ function persistContextTokens(accountId) {
         logger.warn(`persistContextTokens: failed to write ${filePath}: ${String(err)}`);
     }
 }
+/**
+ * 每条入站消息都会 setContextToken；全量同步写盘在消息高峰时是纯浪费。
+ * 按 account 防抖合并，500ms 内多次写入只落盘一次。
+ */
+const PERSIST_DEBOUNCE_MS = 500;
+const persistTimers = new Map();
+function schedulePersistContextTokens(accountId) {
+    const existing = persistTimers.get(accountId);
+    if (existing)
+        clearTimeout(existing);
+    const timer = setTimeout(() => {
+        persistTimers.delete(accountId);
+        persistContextTokens(accountId);
+    }, PERSIST_DEBOUNCE_MS);
+    // 不让防抖定时器拖住进程退出
+    timer.unref?.();
+    persistTimers.set(accountId, timer);
+}
+/** 立即落盘所有待写（endpoint stop / 测试用）。 */
+export function flushContextTokenPersist(accountId) {
+    for (const [id, timer] of [...persistTimers]) {
+        if (accountId !== undefined && id !== accountId)
+            continue;
+        clearTimeout(timer);
+        persistTimers.delete(id);
+        persistContextTokens(id);
+    }
+}
 /**
  * Restore persisted context tokens for an account into the in-memory map.
  * Called once during gateway startAccount to survive restarts.
@@ -83,12 +111,12 @@ export function clearContextTokensForAccount(accountId) {
     }
     logger.info(`clearContextTokensForAccount: cleared tokens for account=${accountId}`);
 }
-/** Store a context token for a given account+user pair (memory + disk). */
+/** Store a context token for a given account+user pair (memory + debounced disk). */
 export function setContextToken(accountId, userId, token) {
     const k = contextTokenKey(accountId, userId);
     logger.debug(`setContextToken: key=${k}`);
     contextTokenStore.set(k, token);
-    persistContextTokens(accountId);
+    schedulePersistContextTokens(accountId);
 }
 /** Retrieve the cached context token for a given account+user pair. */
 export function getContextToken(accountId, userId) {
@@ -97,6 +125,20 @@ export function getContextToken(accountId, userId) {
     logger.debug(`getContextToken: key=${k} found=${val !== undefined} storeSize=${contextTokenStore.size}`);
     return val;
 }
+/**
+ * List all peer userIds that hold a context token for the given account
+ * (memory map, already merged with the disk-backed file on restore).
+ * Personal WeChat has no contact/profile API; this is the only peer catalog.
+ */
+export function listContextTokenUserIds(accountId) {
+    const prefix = `${accountId}:`;
+    const ids = [];
+    for (const k of contextTokenStore.keys()) {
+        if (k.startsWith(prefix))
+            ids.push(k.slice(prefix.length));
+    }
+    return ids;
+}
 /**
  * Find all accountIds that have an active contextToken for the given userId.
  * Used to infer the sending bot account from the recipient address when

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-weixin-ilink",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "type": "module",
   "description": "Zhin.js Weixin iLink (ClawBot) adapter for Plugin Runtime (long-poll)",
   "main": "./lib/index.js",
@@ -28,6 +28,7 @@
   },
   "files": [
     "adapters",
+    "commands",
     "plugin.ts",
     "schema.json",
     "src",
@@ -47,16 +48,17 @@
     }
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.1.0",
-    "@zhin.js/core": "1.4.0",
+    "@zhin.js/adapter": "1.1.1",
+    "@zhin.js/command": "1.0.3",
+    "@zhin.js/core": "1.4.1",
     "@zhin.js/logger": "1.0.75",
-    "@zhin.js/plugin-runtime": "1.1.0"
+    "@zhin.js/plugin-runtime": "1.1.1"
   },
   "peerDependencies": {
-    "@zhin.js/adapter": "1.1.0",
-    "@zhin.js/core": "1.4.0",
-    "@zhin.js/plugin-runtime": "1.1.0",
-    "zhin.js": "5.0.0"
+    "@zhin.js/adapter": "1.1.1",
+    "@zhin.js/core": "1.4.1",
+    "@zhin.js/plugin-runtime": "1.1.1",
+    "zhin.js": "5.0.1"
   },
   "peerDependenciesMeta": {
     "zhin.js": {
@@ -82,6 +84,10 @@
       {
         "package": "@zhin.js/adapter",
         "api": "^1.0.0"
+      },
+      {
+        "package": "@zhin.js/command",
+        "api": "^1.0.0"
       }
     ],
     "plugins": []

package/plugin.ts

@@ -1,8 +1,14 @@
+import { createEndpointRuntimeState } from '@zhin.js/adapter';
 import { definePlugin } from '@zhin.js/plugin-runtime';
+import { weixinIlinkRuntimeStateToken } from './src/weixin-ilink-runtime-state.js';
 
 export default definePlugin({
   name: 'weixin-ilink',
   metadata: {
     displayName: 'Weixin iLink Adapter',
   },
+  setup(context) {
+    // 运行中 endpoint 注册表（weixin-ilink endpoint list 的"运行中"数据源）
+    context.resources.provide(weixinIlinkRuntimeStateToken, createEndpointRuntimeState());
+  },
 });

package/src/context-store.ts

@@ -1,8 +1,10 @@
 export {
   setContextToken,
   getContextToken,
+  listContextTokenUserIds,
   restoreContextTokens,
   clearContextTokensForAccount,
+  flushContextTokenPersist,
   bodyFromItemList,
   isMediaItem,
 } from "./weixin-inbound.js";

package/src/endpoint.ts

@@ -4,7 +4,7 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
-import type { EndpointInstance } from '@zhin.js/adapter';
+import type { EndpointFriend, EndpointInstance, EndpointManagement } from '@zhin.js/adapter';
 import type { MessageGateway } from '@zhin.js/core/runtime';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import type { CapabilityId } from '@zhin.js/plugin-runtime';
@@ -19,8 +19,10 @@ import {
 import { resolveCredentials } from './login.js';
 import {
   getContextToken,
+  listContextTokenUserIds,
   restoreContextTokens,
   setContextToken,
+  flushContextTokenPersist,
 } from './context-store.js';
 import { WeixinConfigManager } from './ilink-config-cache.js';
 import {
@@ -53,6 +55,9 @@ const MAX_CONSECUTIVE_FAILURES = 3;
 const BACKOFF_DELAY_MS = 30_000;
 const RETRY_DELAY_MS = 2_000;
 const WEIXIN_MEDIA_MAX_BYTES = 100 * 1024 * 1024;
+/** 入站媒体保留 24h，每小时清扫一次。 */
+const INBOUND_MEDIA_TTL_MS = 24 * 60 * 60 * 1000;
+const MEDIA_SWEEP_INTERVAL_MS = 60 * 60 * 1000;
 
 export type WeixinIlinkSendText = typeof sendMessageWeixin;
 export type WeixinIlinkNotifyStart = typeof notifyStart;
@@ -65,6 +70,7 @@ export interface WeixinIlinkEndpointOptions {
   readonly config: ResolvedWeixinIlinkConfig;
   readonly resolveCredentials?: (
     config: ResolvedWeixinIlinkConfig,
+    signal?: AbortSignal,
   ) => Promise<WeixinIlinkCredentials>;
   /** Test / internal: override network side effects. */
   readonly notifyStart?: WeixinIlinkNotifyStart;
@@ -77,6 +83,7 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
   readonly #options: WeixinIlinkEndpointOptions;
   readonly #resolveCredentials: (
     config: ResolvedWeixinIlinkConfig,
+    signal?: AbortSignal,
   ) => Promise<WeixinIlinkCredentials>;
   readonly #notifyStart: WeixinIlinkNotifyStart;
   readonly #notifyStop: WeixinIlinkNotifyStop;
@@ -85,9 +92,12 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
   #creds: WeixinIlinkCredentials | null = null;
   #pollAbort?: AbortController;
   #pollPromise?: Promise<void>;
+  #loginAbort?: AbortController;
   #configManager?: WeixinConfigManager;
+  #mediaSweepTimer?: ReturnType<typeof setInterval>;
   #open = false;
   #started = false;
+  readonly management: EndpointManagement = createWeixinIlinkEndpointManagement(this);
 
   constructor(options: WeixinIlinkEndpointOptions) {
     this.#options = options;
@@ -102,6 +112,11 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
     return Boolean(this.#creds?.botToken);
   }
 
+  /** Live endpoint 名（context token 按 account 名分桶，management 推导对端用）。 */
+  get configName(): string {
+    return this.#options.config.name;
+  }
+
   apiBaseUrl(): string {
     return this.#creds?.baseUrl ?? this.#options.config.baseUrl;
   }
@@ -115,7 +130,9 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
     this.#started = true;
     try {
       configureIlinkMeta({ botAgent: this.#options.config.botAgent });
-      this.#creds = await this.#resolveCredentials(this.#options.config);
+      // QR 登录最长 8 分钟：stop() 必须能打断
+      this.#loginAbort = new AbortController();
+      this.#creds = await this.#resolveCredentials(this.#options.config, this.#loginAbort.signal);
       restoreContextTokens(this.#options.config.name);
 
       await this.#notifyStart({
@@ -130,6 +147,7 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
 
       this.#pollAbort = new AbortController();
       this.#pollPromise = this.#pollLoop(this.#pollAbort.signal);
+      this.#startMediaSweep();
       logger.info(formatCompact({
         op: 'connect',
         endpoint: this.#options.config.name,
@@ -151,12 +169,16 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
 
   async stop(): Promise<void> {
     this.#open = false;
+    this.#loginAbort?.abort();
     this.#pollAbort?.abort();
     try {
       await this.#pollPromise;
     } catch {
       /* poll loop exit */
     }
+    this.#stopMediaSweep();
+    // 防抖中的 context token 落盘，避免 stop 丢尾部写入
+    flushContextTokenPersist(this.#options.config.name);
     if (this.#creds?.botToken) {
       try {
         await this.#notifyStop({ baseUrl: this.apiBaseUrl(), token: this.#creds.botToken });
@@ -350,8 +372,8 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
             continue;
           }
           consecutiveFailures += 1;
+          // 退避后不清零：对端持续挂时清零会让重试固定打满 RETRY_DELAY_MS。
           if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-            consecutiveFailures = 0;
             await sleep(BACKOFF_DELAY_MS, abortSignal);
           } else {
             await sleep(RETRY_DELAY_MS, abortSignal);
@@ -360,14 +382,15 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
         }
 
         consecutiveFailures = 0;
-        if (resp.get_updates_buf) {
-          getUpdatesBuf = resp.get_updates_buf;
-          saveSyncBuf(endpointName, getUpdatesBuf);
-        }
-
+        // 先分发再推进 buf：分发途中崩溃时 buf 未推进，下一轮重拉不丢消息。
+        const nextBuf = resp.get_updates_buf;
         for (const inbound of resp.msgs ?? []) {
           await this.#handleInboundMessage(inbound);
         }
+        if (nextBuf) {
+          getUpdatesBuf = nextBuf;
+          saveSyncBuf(endpointName, getUpdatesBuf);
+        }
       } catch (err) {
         if (abortSignal.aborted) return;
         consecutiveFailures += 1;
@@ -377,7 +400,6 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
           error: err instanceof Error ? err.message : String(err),
         }));
         if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-          consecutiveFailures = 0;
           await sleep(BACKOFF_DELAY_MS, abortSignal);
         } else {
           await sleep(RETRY_DELAY_MS, abortSignal);
@@ -458,4 +480,62 @@ export class WeixinIlinkEndpoint implements EndpointInstance {
     fs.writeFileSync(filePath, buffer);
     return { path: filePath };
   }
+
+  /** 入站媒体 TTL 清扫：start 时立即扫一次，之后每小时扫一次。 */
+  #startMediaSweep(): void {
+    this.#stopMediaSweep();
+    const sweep = () => this.#sweepInboundMedia();
+    sweep();
+    this.#mediaSweepTimer = setInterval(sweep, MEDIA_SWEEP_INTERVAL_MS);
+    (this.#mediaSweepTimer as { unref?: () => void }).unref?.();
+  }
+
+  #stopMediaSweep(): void {
+    if (this.#mediaSweepTimer) {
+      clearInterval(this.#mediaSweepTimer);
+      this.#mediaSweepTimer = undefined;
+    }
+  }
+
+  #sweepInboundMedia(): void {
+    const dir = path.join(resolveStateDir(), 'media', 'inbound');
+    let entries: fs.Dirent[];
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    const now = Date.now();
+    for (const entry of entries) {
+      if (!entry.isFile()) continue;
+      const filePath = path.join(dir, entry.name);
+      try {
+        const stat = fs.statSync(filePath);
+        if (now - stat.mtimeMs <= INBOUND_MEDIA_TTL_MS) continue;
+        fs.unlinkSync(filePath);
+        logger.debug(formatCompact({
+          op: 'media_sweep',
+          endpoint: this.#options.config.name,
+          file: entry.name,
+        }));
+      } catch {
+        /* 单个文件失败不阻塞整体清扫 */
+      }
+    }
+  }
+}
+
+function createWeixinIlinkEndpointManagement(endpoint: WeixinIlinkEndpoint): EndpointManagement {
+  return Object.freeze<EndpointManagement>({
+    // 个人微信无群概念（listGroups/listGroupMembers 不接），也没有通讯录/资料接口。
+    // "好友"只能从会话推导：凡持有 context_token 的对端（来过消息，含重启后从磁盘恢复的）
+    // 即为可达私聊对端；昵称不可得，用 user_id 占位并在 remark 注明来源。
+    async listFriends(): Promise<readonly EndpointFriend[]> {
+      return listContextTokenUserIds(endpoint.configName).map((userId) => ({
+        user_id: userId,
+        nickname: userId,
+        remark: 'ilink: 从会话 context_token 推导，非通讯录',
+      }));
+    },
+  });
 }

package/src/ilink-api.ts

@@ -83,6 +83,7 @@ export async function apiGetFetch(params: {
   endpoint: string;
   timeoutMs?: number;
   label: string;
+  abortSignal?: AbortSignal;
 }): Promise<string> {
   const base = ensureTrailingSlash(params.baseUrl);
   const url = new URL(params.endpoint, base);
@@ -96,11 +97,12 @@ export async function apiGetFetch(params: {
     controller != null && timeoutMs != null
       ? setTimeout(() => controller.abort(), timeoutMs)
       : undefined;
+  const { signal, cleanup } = combineAbortSignals(controller, params.abortSignal);
   try {
     const res = await fetch(url.toString(), {
       method: "GET",
       headers: hdrs,
-      ...(controller ? { signal: controller.signal } : {}),
+      ...(signal ? { signal } : {}),
     });
     if (t !== undefined) clearTimeout(t);
     const rawText = await res.text();
@@ -112,6 +114,8 @@ export async function apiGetFetch(params: {
   } catch (err) {
     if (t !== undefined) clearTimeout(t);
     throw err;
+  } finally {
+    cleanup();
   }
 }
 

package/src/login.ts

@@ -55,6 +55,7 @@ async function fetchQRCode(apiBaseUrl: string, botType: string): Promise<QRCodeR
 async function pollQRStatus(
   apiBaseUrl: string,
   qrcode: string,
+  signal?: AbortSignal,
 ): Promise<StatusResponse> {
   try {
     const endpoint = `ilink/bot/get_qrcode_status?qrcode=${encodeURIComponent(qrcode)}`;
@@ -63,10 +64,13 @@ async function pollQRStatus(
       endpoint,
       timeoutMs: QR_LONG_POLL_TIMEOUT_MS,
       label: 'pollQRStatus',
+      abortSignal: signal,
     });
     return JSON.parse(rawText) as StatusResponse;
   } catch (err) {
     if (err instanceof Error && err.name === 'AbortError') {
+      // 外部 stop 的 abort 不能吞掉当普通长轮询超时
+      if (signal?.aborted) throw err;
       return { status: 'wait' };
     }
     logger.warn(`pollQRStatus error: ${String(err)}`);
@@ -74,8 +78,31 @@ async function pollQRStatus(
   }
 }
 
+function abortError(): Error {
+  return Object.assign(new Error('扫码登录已取消'), { name: 'AbortError' });
+}
+
+function sleepWithAbort(ms: number, signal?: AbortSignal): Promise<void> {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(abortError());
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal?.removeEventListener('abort', onAbort);
+      resolve();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(abortError());
+    };
+    signal?.addEventListener('abort', onAbort, { once: true });
+  });
+}
+
 export async function resolveCredentials(
   config: ResolvedWeixinIlinkConfig,
+  signal?: AbortSignal,
 ): Promise<WeixinIlinkCredentials> {
   const envToken = process.env.WEIXIN_ILINK_TOKEN?.trim() || config.botToken?.trim();
   if (envToken) {
@@ -96,11 +123,12 @@ export async function resolveCredentials(
     };
   }
 
-  return loginWithQr(config);
+  return loginWithQr(config, signal);
 }
 
 export async function loginWithQr(
   config: ResolvedWeixinIlinkConfig,
+  signal?: AbortSignal,
 ): Promise<WeixinIlinkCredentials> {
   const apiBaseUrl = config.baseUrl ?? DEFAULT_API_BASE_URL;
   const qr = await fetchQRCode(apiBaseUrl, DEFAULT_ILINK_BOT_TYPE);
@@ -114,7 +142,9 @@ export async function loginWithQr(
   let currentBaseUrl = apiBaseUrl;
 
   while (Date.now() < deadline) {
-    const status = await pollQRStatus(currentBaseUrl, qr.qrcode);
+    // stop() 的 AbortSignal：不打满 8 分钟，立即退出登录循环
+    if (signal?.aborted) throw abortError();
+    const status = await pollQRStatus(currentBaseUrl, qr.qrcode, signal);
 
     if (status.status === 'scaned_but_redirect' && status.redirect_host) {
       currentBaseUrl = status.redirect_host.startsWith('http')
@@ -143,7 +173,7 @@ export async function loginWithQr(
       throw new Error('二维码已过期，请重启 bot 重新登录');
     }
 
-    await new Promise((r) => setTimeout(r, 500));
+    await sleepWithAbort(500, signal);
   }
 
   throw new Error('微信扫码登录超时');

package/src/weixin-ilink-endpoint-commands.ts

@@ -0,0 +1,17 @@
+/**
+ * `weixin-ilink endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ */
+import { createEndpointCommands } from '@zhin.js/adapter';
+import { defineCommand } from '@zhin.js/command';
+import { weixinIlinkRuntimeStateToken } from './weixin-ilink-runtime-state.js';
+
+export const weixinIlinkEndpointCommands = createEndpointCommands({
+  adapterKey: 'weixin-ilink',
+  adapterDisplayName: 'Weixin iLink',
+  fields: [
+    { key: 'botToken', required: true, env: true, description: 'iLink bot token' },
+  ],
+  running: (use) => use(weixinIlinkRuntimeStateToken).endpoints.values(),
+  describeEntry: (entry) => `botToken: ${String(entry.botToken)}`,
+}, defineCommand);

package/src/weixin-ilink-runtime-state.ts

@@ -0,0 +1,7 @@
+/**
+ * Weixin iLink 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
+ * 由 plugin.ts setup() provide，adapter create 与 `weixin-ilink endpoint` 命令共享（同一 owner generation）。
+ */
+import { defineEndpointRuntimeStateToken } from '@zhin.js/adapter';
+
+export const weixinIlinkRuntimeStateToken = defineEndpointRuntimeStateToken('weixin-ilink');

package/src/weixin-inbound.ts

@@ -49,6 +49,35 @@ function persistContextTokens(accountId: string): void {
   }
 }
 
+/**
+ * 每条入站消息都会 setContextToken；全量同步写盘在消息高峰时是纯浪费。
+ * 按 account 防抖合并，500ms 内多次写入只落盘一次。
+ */
+const PERSIST_DEBOUNCE_MS = 500;
+const persistTimers = new Map<string, ReturnType<typeof setTimeout>>();
+
+function schedulePersistContextTokens(accountId: string): void {
+  const existing = persistTimers.get(accountId);
+  if (existing) clearTimeout(existing);
+  const timer = setTimeout(() => {
+    persistTimers.delete(accountId);
+    persistContextTokens(accountId);
+  }, PERSIST_DEBOUNCE_MS);
+  // 不让防抖定时器拖住进程退出
+  (timer as { unref?: () => void }).unref?.();
+  persistTimers.set(accountId, timer);
+}
+
+/** 立即落盘所有待写（endpoint stop / 测试用）。 */
+export function flushContextTokenPersist(accountId?: string): void {
+  for (const [id, timer] of [...persistTimers]) {
+    if (accountId !== undefined && id !== accountId) continue;
+    clearTimeout(timer);
+    persistTimers.delete(id);
+    persistContextTokens(id);
+  }
+}
+
 /**
  * Restore persisted context tokens for an account into the in-memory map.
  * Called once during gateway startAccount to survive restarts.
@@ -89,12 +118,12 @@ export function clearContextTokensForAccount(accountId: string): void {
   logger.info(`clearContextTokensForAccount: cleared tokens for account=${accountId}`);
 }
 
-/** Store a context token for a given account+user pair (memory + disk). */
+/** Store a context token for a given account+user pair (memory + debounced disk). */
 export function setContextToken(accountId: string, userId: string, token: string): void {
   const k = contextTokenKey(accountId, userId);
   logger.debug(`setContextToken: key=${k}`);
   contextTokenStore.set(k, token);
-  persistContextTokens(accountId);
+  schedulePersistContextTokens(accountId);
 }
 
 /** Retrieve the cached context token for a given account+user pair. */
@@ -107,6 +136,20 @@ export function getContextToken(accountId: string, userId: string): string | und
   return val;
 }
 
+/**
+ * List all peer userIds that hold a context token for the given account
+ * (memory map, already merged with the disk-backed file on restore).
+ * Personal WeChat has no contact/profile API; this is the only peer catalog.
+ */
+export function listContextTokenUserIds(accountId: string): string[] {
+  const prefix = `${accountId}:`;
+  const ids: string[] = [];
+  for (const k of contextTokenStore.keys()) {
+    if (k.startsWith(prefix)) ids.push(k.slice(prefix.length));
+  }
+  return ids;
+}
+
 /**
  * Find all accountIds that have an active contextToken for the given userId.
  * Used to infer the sending bot account from the recipient address when