@agent-wechat/agent-wechat 1.0.0-beta.13 → 1.0.0-beta.15

package/README.md

@@ -66,7 +66,7 @@ By default, `readPolicy: "on_inbound"` marks a whole thread read after its incom
 
 A whole-thread read also clears earlier unread messages in that thread, including messages the model did not receive. The daemon freezes the latest local message boundary, checks the expected version, updates local unread state and submits one native read-status notification. Server acceptance alone does not prove that a phone badge changed. A lost notification response remains `needs_review` and is never automatically resubmitted. Pending reads survive a Gateway restart and retry independently of model execution or new SSE traffic. `readPolicy: "never"` disables both local and remote marking, including previously queued reads. Crashes during an unfinished dispatch retain `needs_review`; the plugin does not automatically duplicate model turns or uncertain outgoing sends.
 
-The optional `readPolicy: "on_model_dispatch"` instead requires a confirmed model handoff. OpenClaw **2026.10.2** lacks `onPreparedAgentRunStart`, so its released public hooks provide a bounded compatibility path. Before dispatch, the adapter persists an immutable manifest binding the exact new message ID/version/content hash, policy hash, source and supplied asset hashes, and context roles. Text requires the exact current input and host-created message/account/session facts plus a matching `model_call_started`. Media additionally waits for the same run's `agent_end` snapshot and source-turn identity. Image bytes/MIME/length must match the frozen supplied representation; file/video/voice references must appear in the exact current body. Image count, model selection and reply delivery alone cannot confirm a model handoff. Unknown, omitted, rewritten, merged or ambiguous inputs remain unconfirmed. Host/provider history formats can prevent confirmation even when a reply was delivered; use `on_inbound` for ordinary bot read behavior.
+The optional `readPolicy: "on_model_dispatch"` instead requires a confirmed model handoff. OpenClaw **2026.10.7** lacks `onPreparedAgentRunStart`, so its released public hooks provide a bounded compatibility path. Before dispatch, the adapter persists an immutable manifest binding the exact new message ID/version/content hash, policy hash, source and supplied asset hashes, and context roles. Text requires the exact current input and host-created message/account/session facts plus a matching `model_call_started`. Media additionally waits for the same run's `agent_end` snapshot and source-turn identity. Image bytes/MIME/length must match the frozen supplied representation; file/video/voice references must appear in the exact current body. Image count, model selection and reply delivery alone cannot confirm a model handoff. Unknown, omitted, rewritten, merged or ambiguous inputs remain unconfirmed. Host/provider history formats can prevent confirmation even when a reply was delivered; use `on_inbound` for ordinary bot read behavior.
 
 The model-handoff compatibility path requires the operator's explicit host permission, `plugins.entries.agent-wechat.hooks.allowConversationAccess: true`. It observes only run IDs issued by this adapter and never enables that permission itself. Without the grant, or on an unsupported host, the explicit `on_model_dispatch` policy leaves messages unread and status reports `handoffUnconfirmed`. The older `onAgentRunStart` also reports direct tools and early lifecycle phases and is never used as proof. Access and mention gates still precede model dispatch; a rejected message does not itself trigger a read.
 
@@ -203,6 +203,6 @@ Set `native.gatewayFacade: {"enabled": true}` to register `/plugins/agent-wechat
 
 The actual Gateway authenticates requests before the proxy runs. Its bearer is never forwarded to the daemon; the plugin uses its private daemon token reference. Routes are restricted to the configured account, with no daemon-wide token/account administration. Binary bodies, byte ranges, status codes and SSE are preserved within explicit size limits. Client disconnect/plugin shutdown closes upstream streaming work without cancelling durable sends.
 
-`scripts/native-gateway-smoke.mjs` tests the built plugin on an isolated OpenClaw **2026.10.2** Gateway with synthetic loopback data: auth rejection, separate credentials, account boundaries, Range206, SSE and cancellation. This transport test is separate from the local model-boundary test above; neither uses an external model provider or a real WeChat account.
+`scripts/native-gateway-smoke.mjs` tests the built plugin on an isolated OpenClaw **2026.10.7** Gateway with synthetic loopback data: auth rejection, separate credentials, account boundaries, Range206, SSE and cancellation. This transport test is separate from the local model-boundary test above; neither uses an external model provider or a real WeChat account.
 
 See [native deployment examples](../../deploy/native/README.md) and [native CLI installation](../cli/README.md).

package/dist/index.js

@@ -192,7 +192,7 @@ var NativeWeChatClient = class {
     if (typeof options.token !== "string" || !options.token || /[\r\n]/.test(options.token))
       throw new Error("Native API bearer token is required");
     this.token = options.token;
-    this.fetchImpl = options.fetch ?? fetch;
+    this.fetchImpl = options.fetch ?? globalThis.fetch.bind(globalThis);
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.mediaTimeoutMs = options.mediaTimeoutMs ?? 60 * 6e4;
     if (!Number.isInteger(this.mediaTimeoutMs) || this.mediaTimeoutMs < 1 || this.mediaTimeoutMs > 60 * 6e4)
@@ -279,9 +279,22 @@ var NativeWeChatClient = class {
       throw new Error("Account ID or alias is required");
     return this.request("v1/accounts", { method: "POST", body: JSON.stringify(body) });
   }
+  removeAccount(accountId, confirmAccountId) {
+    if (accountId !== confirmAccountId)
+      throw new Error("Account confirmation does not match");
+    return this.request(`v1/accounts/${id(accountId)}`, { method: "DELETE", body: JSON.stringify({ confirmAccountId }) });
+  }
   updateAccount(accountId, options) {
     return this.request(`v1/accounts/${id(accountId)}`, { method: "PATCH", body: JSON.stringify(options) });
   }
+  accountSettings(accountId, signal) {
+    return this.request(`v1/accounts/${id(accountId)}/settings`, { signal });
+  }
+  updateAccountSettings(accountId, settings, signal) {
+    if (!Number.isSafeInteger(settings.autoDownloadMaxBytes) || settings.autoDownloadMaxBytes < 0 || settings.autoDownloadMaxBytes > NATIVE_MAX_SOURCE_BYTES)
+      throw new Error("Invalid automatic download limit");
+    return this.request(`v1/accounts/${id(accountId)}/settings`, { method: "PATCH", body: JSON.stringify(settings), signal });
+  }
   capabilities(accountId) {
     return this.request(`v1/accounts/${id(accountId)}/capabilities`);
   }
@@ -629,7 +642,7 @@ var NativeWeChatClient = class {
   ack(accountId, consumerId, cursor) {
     return this.request(`v1/accounts/${id(accountId)}/consumers/${id(consumerId)}/ack`, { method: "POST", body: JSON.stringify({ cursor: decimal(cursor) }) });
   }
-  async *watch(accountId, after = "0", signal) {
+  async *watch(accountId, after = "0", signal, options = {}) {
     const connection = new AbortController();
     const streamSignal = signal ? AbortSignal.any([signal, connection.signal]) : connection.signal;
     const bounded = async (work, milliseconds, reason) => {
@@ -671,6 +684,7 @@ var NativeWeChatClient = class {
         const { value, done } = await bounded(() => activeReader.read(), this.streamIdleTimeoutMs, "Native SSE idle timeout");
         if (done)
           break;
+        options.onActivity?.();
         buffer += decoder.decode(value, { stream: true });
         if (buffer.length > 1024 * 1024)
           throw new Error("Native SSE frame exceeds its bound");
@@ -2397,7 +2411,7 @@ function nativeDispatchManifest(params) {
     }))) } : {},
     assets,
     policySha256: digest(JSON.stringify(params.policy ?? null)),
-    // Exact released 2026.10.2 source-turn identity. Requiring it in the later
+    // Exact source-turn identity of OpenClaw 2026.10.2 through 2026.10.7. Requiring it in the later
     // snapshot prevents an identical older image/body from proving this input.
     hostSourceTurnId: `channel-user:v1:${digest(JSON.stringify(["agent-wechat", params.channelAccountId, `wechat:${params.message.threadId}`, messageSid]))}`
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-wechat/agent-wechat",
-  "version": "1.0.0-beta.13",
+  "version": "1.0.0-beta.15",
   "type": "module",
   "files": [
     "dist",
@@ -9,9 +9,9 @@
   "devDependencies": {
     "@types/node": "^22",
     "esbuild": "^0.25.0",
-    "openclaw": "2026.10.2",
+    "openclaw": "2026.10.7",
     "typescript": "^5.4.5",
-    "@agent-wechat/shared": "1.0.0-beta.2"
+    "@agent-wechat/shared": "1.0.0-beta.3"
   },
   "openclaw": {
     "extensions": [