@aspalagin/openclaw-max 0.8.0 → 0.8.2

package/README.md

@@ -6,7 +6,7 @@
 
 Плагин нужен тем, кто пользуется OpenClaw и хочет, чтобы ассистент был доступен в MAX. Понадобятся токен бота MAX (ботов создают организации на [business.max.ru](https://business.max.ru/self)) и собственный gateway OpenClaw.
 
-Версия 0.8.0. Изменения: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md).
+Версия 0.8.2. Изменения: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md).
 
 ## Содержание
 
@@ -490,3 +490,5 @@ CI также запускает `typecheck` и тесты на `openclaw@latest
 Разработка ведётся с помощью ИИ-агентов.
 
 **Лицензия:** MIT, см. [LICENSE](LICENSE).
+
+**Товарный знак.** Плагин неофициальный. MAX — товарный знак правообладателя, ООО «МАХ»; иконка пакета — логотип из [брендбука MAX](https://go.max.ru/brandbook).

package/README_EN.md

@@ -6,7 +6,7 @@ A channel plugin that connects an [OpenClaw](https://openclaw.ai) assistant to t
 
 It is for OpenClaw users who need their assistant reachable in MAX. You need a MAX bot token (bots are created by organisations on [business.max.ru](https://business.max.ru/self)) and an OpenClaw gateway you run yourself.
 
-Version 0.8.0. Changes: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md) (in Russian).
+Version 0.8.2. Changes: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md) (in Russian).
 
 ## Contents
 
@@ -490,3 +490,5 @@ Questions and proposals: [GitHub Issues](https://github.com/aspalagin/openclaw-m
 Development is carried out with the help of AI agents.
 
 **License:** MIT, see [LICENSE](LICENSE).
+
+**Trademark.** This plugin is unofficial. MAX is a trademark of its rights holder, ООО «МАХ»; the package icon is the logo from the [MAX brand book](https://go.max.ru/brandbook).

package/dist/src/api.js

@@ -200,6 +200,40 @@ export class MaxApiError extends Error {
         }
     }
 }
+/** A MAX error code as it may appear in the log: a short dotted identifier. */
+const LOGGABLE_ERROR_CODE = /^[A-Za-z0-9][\w.-]{0,63}$/;
+/** A localization key MAX puts in `message`, e.g. "Key: errors.process.attachment.movie.not.owner". */
+const LOGGABLE_ERROR_KEY = /^Key:\s*(errors\.[\w.-]{1,100})$/;
+/**
+ * The machine-readable part of a MAX error response for the log: `code`
+ * (e.g. "proto.payload") and, when `message` is a bare localization key, that
+ * key. Free-form `message` text is left out: MAX documents it only as a
+ * human-readable description and some messages quote the request (e.g. "Path
+ * /chats is not recognized"), so it may echo user data. Accepts the parsed
+ * body or the raw response text; an empty or non-JSON body yields "".
+ * @internal exported for testing.
+ */
+export function describeMaxErrorBody(body) {
+    let parsed = body;
+    if (typeof body === 'string') {
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch {
+            return '';
+        }
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return '';
+    const { code, message } = parsed;
+    const parts = [];
+    if (typeof code === 'string' && LOGGABLE_ERROR_CODE.test(code))
+        parts.push(`code=${code}`);
+    const key = typeof message === 'string' ? LOGGABLE_ERROR_KEY.exec(message.trim())?.[1] : undefined;
+    if (key)
+        parts.push(`key=${key}`);
+    return parts.join(' ');
+}
 /**
  * A request that hit the client-side deadline (our AbortController), as opposed
  * to a caller-supplied stop signal. Carries the stalled phase so the send path
@@ -325,9 +359,12 @@ export class MaxApi {
             }
             if (!res.ok) {
                 // Never log the request body: it may carry the webhook secret (POST
-                // /subscriptions) or private message text. Log only method+path+status.
-                getMaxLogger().error(`[MAX API] ${method} ${path} → ${res.status}`);
-                const error = new MaxApiError(`MAX API ${method} ${path} → ${res.status}`, res.status, json);
+                // /subscriptions) or private message text. Log only method+path+status
+                // and the MAX error code (describeMaxErrorBody).
+                const detail = describeMaxErrorBody(json);
+                const summary = `${method} ${path} → ${res.status}${detail ? ` (${detail})` : ''}`;
+                getMaxLogger().error(`[MAX API] ${summary}`);
+                const error = new MaxApiError(`MAX API ${summary}`, res.status, json);
                 const retryAfter = res.headers?.get?.('retry-after');
                 if (retryAfter) {
                     const seconds = Number(retryAfter);
@@ -534,7 +571,9 @@ export class MaxApi {
             body: multipart.body,
         }, this.network().proxyUrl);
         if (!uploadRes.ok) {
-            throw new MaxApiError(`MAX media upload failed: ${uploadRes.status}`, uploadRes.status, await uploadRes.text().catch(() => null));
+            const text = await uploadRes.text().catch(() => null);
+            const detail = describeMaxErrorBody(text);
+            throw new MaxApiError(`MAX media upload failed: ${uploadRes.status}${detail ? ` (${detail})` : ''}`, uploadRes.status, text);
         }
         // Step 3: Parse response to extract token
         // Image response: { photos: { "<id>": { token: "...", url: "..." } } }

package/dist/src/channel-policy.js

@@ -5,7 +5,7 @@
 import { resolveToolsBySender } from 'openclaw/plugin-sdk/channel-policy';
 import { PAIRING_APPROVED_MESSAGE } from 'openclaw/plugin-sdk/channel-status';
 import { DEFAULT_ACCOUNT_ID, formatPairingApproveHint } from 'openclaw/plugin-sdk/core';
-import { resolveMaxAccount } from './accounts.js';
+import { readMaxAccount, resolveMaxAccount } from './accounts.js';
 import { sendMaxMessage } from './send.js';
 // ── MAX group policy helpers ──
 // These mirror resolveChannelGroupRequireMention/resolveChannelGroupToolsPolicy
@@ -69,18 +69,30 @@ function resolveMaxGroupToolPolicy(params) {
         return defaultConfig.tools;
     return undefined;
 }
+/**
+ * Account config for the security adapter. Since OpenClaw 2026.9.7 `security audit`
+ * (and doctor) hand the adapter the read-only `config.inspectAccount` status, which
+ * carries no `config` — re-read the account section from cfg (side-effect free) in that case.
+ */
+function resolveMaxPolicyAccountConfig(cfg, accountId, account) {
+    const config = account?.config;
+    if (config && typeof config === 'object')
+        return config;
+    return readMaxAccount({ cfg, accountId }).config;
+}
 /** DM policy (default pairing) and warnings for open group policy. */
 export const maxSecurityAdapter = {
     resolveDmPolicy: ({ cfg, accountId, account }) => {
-        const resolvedAccountId = accountId ?? account.accountId ?? DEFAULT_ACCOUNT_ID;
+        const resolvedAccountId = accountId ?? account?.accountId ?? DEFAULT_ACCOUNT_ID;
+        const config = resolveMaxPolicyAccountConfig(cfg, resolvedAccountId, account);
         const maxSection = cfg.channels?.max;
         const useAccountPath = Boolean(maxSection?.accounts?.[resolvedAccountId]);
         const basePath = useAccountPath
             ? `channels.max.accounts.${resolvedAccountId}.`
             : 'channels.max.';
         return {
-            policy: account.config.dmPolicy ?? 'pairing',
-            allowFrom: account.config.allowFrom ?? [],
+            policy: config.dmPolicy ?? 'pairing',
+            allowFrom: config.allowFrom ?? [],
             policyPath: `${basePath}dmPolicy`,
             allowFromPath: basePath,
             approveHint: formatPairingApproveHint('max'),
@@ -88,12 +100,13 @@ export const maxSecurityAdapter = {
         };
     },
     collectWarnings: ({ account, cfg }) => {
+        const config = resolveMaxPolicyAccountConfig(cfg, account?.accountId ?? DEFAULT_ACCOUNT_ID, account);
         const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-        const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? 'allowlist';
+        const groupPolicy = config.groupPolicy ?? defaultGroupPolicy ?? 'allowlist';
         if (groupPolicy !== 'open') {
             return [];
         }
-        const groupAllowlistConfigured = account.config.groups && Object.keys(account.config.groups).length > 0;
+        const groupAllowlistConfigured = config.groups && Object.keys(config.groups).length > 0;
         if (groupAllowlistConfigured) {
             return [
                 `- MAX groups: groupPolicy="open" allows any member in allowed groups to trigger (mention-gated). Set channels.max.groupPolicy="allowlist" + channels.max.groupAllowFrom to restrict senders.`,

package/dist/src/deliver.js

@@ -42,8 +42,9 @@ export function toMaxDeliveryError(err, visible) {
     return err;
 }
 function logSendFailure(account, log, what, err) {
-    const body = err?.body;
-    log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}${body ? ` body=${JSON.stringify(body)}` : ''}`);
+    // A MaxApiError message already carries the MAX error code; the response body
+    // stays out of the log, its free-form `message` may echo user data.
+    log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}`);
 }
 export async function deliverMaxReply(params) {
     const { payload, account, chatId, config, log, statusSink } = params;

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "openclaw-max",
   "name": "MAX",
   "description": "MAX messenger (max.ru) channel for OpenClaw: private and group chats over webhook or long polling; media, voice messages with transcription and voice replies; inline keyboards and command menus; message edits and pins; several bot accounts",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "categories": [
     "channels"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aspalagin/openclaw-max",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "MAX messenger (max.ru) channel for OpenClaw: private and group chats over webhook or long polling; media, voice messages with transcription and voice replies; inline keyboards and command menus; message edits and pins; several bot accounts",
   "keywords": [
     "openclaw",

package/src/api.ts

@@ -320,6 +320,39 @@ export class MaxApiError extends Error {
   }
 }
 
+/** A MAX error code as it may appear in the log: a short dotted identifier. */
+const LOGGABLE_ERROR_CODE = /^[A-Za-z0-9][\w.-]{0,63}$/;
+/** A localization key MAX puts in `message`, e.g. "Key: errors.process.attachment.movie.not.owner". */
+const LOGGABLE_ERROR_KEY = /^Key:\s*(errors\.[\w.-]{1,100})$/;
+
+/**
+ * The machine-readable part of a MAX error response for the log: `code`
+ * (e.g. "proto.payload") and, when `message` is a bare localization key, that
+ * key. Free-form `message` text is left out: MAX documents it only as a
+ * human-readable description and some messages quote the request (e.g. "Path
+ * /chats is not recognized"), so it may echo user data. Accepts the parsed
+ * body or the raw response text; an empty or non-JSON body yields "".
+ * @internal exported for testing.
+ */
+export function describeMaxErrorBody(body: unknown): string {
+  let parsed = body;
+  if (typeof body === 'string') {
+    try {
+      parsed = JSON.parse(body);
+    } catch {
+      return '';
+    }
+  }
+  if (!parsed || typeof parsed !== 'object') return '';
+  const { code, message } = parsed as { code?: unknown; message?: unknown };
+  const parts: string[] = [];
+  if (typeof code === 'string' && LOGGABLE_ERROR_CODE.test(code)) parts.push(`code=${code}`);
+  const key =
+    typeof message === 'string' ? LOGGABLE_ERROR_KEY.exec(message.trim())?.[1] : undefined;
+  if (key) parts.push(`key=${key}`);
+  return parts.join(' ');
+}
+
 /**
  * A request that hit the client-side deadline (our AbortController), as opposed
  * to a caller-supplied stop signal. Carries the stalled phase so the send path
@@ -462,13 +495,12 @@ export class MaxApi {
 
       if (!res.ok) {
         // Never log the request body: it may carry the webhook secret (POST
-        // /subscriptions) or private message text. Log only method+path+status.
-        getMaxLogger().error(`[MAX API] ${method} ${path} → ${res.status}`);
-        const error = new MaxApiError(
-          `MAX API ${method} ${path} → ${res.status}`,
-          res.status,
-          json,
-        );
+        // /subscriptions) or private message text. Log only method+path+status
+        // and the MAX error code (describeMaxErrorBody).
+        const detail = describeMaxErrorBody(json);
+        const summary = `${method} ${path} → ${res.status}${detail ? ` (${detail})` : ''}`;
+        getMaxLogger().error(`[MAX API] ${summary}`);
+        const error = new MaxApiError(`MAX API ${summary}`, res.status, json);
         const retryAfter = res.headers?.get?.('retry-after');
         if (retryAfter) {
           const seconds = Number(retryAfter);
@@ -769,10 +801,12 @@ export class MaxApi {
     );
 
     if (!uploadRes.ok) {
+      const text = await uploadRes.text().catch(() => null);
+      const detail = describeMaxErrorBody(text);
       throw new MaxApiError(
-        `MAX media upload failed: ${uploadRes.status}`,
+        `MAX media upload failed: ${uploadRes.status}${detail ? ` (${detail})` : ''}`,
         uploadRes.status,
-        await uploadRes.text().catch(() => null),
+        text,
       );
     }
 

package/src/channel-policy.ts

@@ -10,7 +10,7 @@ import { PAIRING_APPROVED_MESSAGE } from 'openclaw/plugin-sdk/channel-status';
 import type { OpenClawConfig } from 'openclaw/plugin-sdk/core';
 import { DEFAULT_ACCOUNT_ID, formatPairingApproveHint } from 'openclaw/plugin-sdk/core';
 
-import { type ResolvedMaxAccount, resolveMaxAccount } from './accounts.js';
+import { readMaxAccount, type ResolvedMaxAccount, resolveMaxAccount } from './accounts.js';
 import { sendMaxMessage } from './send.js';
 
 type MaxChannelPlugin = ChannelPlugin<ResolvedMaxAccount>;
@@ -109,10 +109,26 @@ function resolveMaxGroupToolPolicy(params: {
   return undefined;
 }
 
+/**
+ * Account config for the security adapter. Since OpenClaw 2026.9.7 `security audit`
+ * (and doctor) hand the adapter the read-only `config.inspectAccount` status, which
+ * carries no `config` — re-read the account section from cfg (side-effect free) in that case.
+ */
+function resolveMaxPolicyAccountConfig(
+  cfg: OpenClawConfig,
+  accountId: string,
+  account: Pick<ResolvedMaxAccount, 'config'> | { config?: undefined } | null | undefined,
+): ResolvedMaxAccount['config'] {
+  const config = (account as { config?: ResolvedMaxAccount['config'] } | null | undefined)?.config;
+  if (config && typeof config === 'object') return config;
+  return readMaxAccount({ cfg, accountId }).config;
+}
+
 /** DM policy (default pairing) and warnings for open group policy. */
 export const maxSecurityAdapter: NonNullable<MaxChannelPlugin['security']> = {
   resolveDmPolicy: ({ cfg, accountId, account }) => {
-    const resolvedAccountId = accountId ?? account.accountId ?? DEFAULT_ACCOUNT_ID;
+    const resolvedAccountId = accountId ?? account?.accountId ?? DEFAULT_ACCOUNT_ID;
+    const config = resolveMaxPolicyAccountConfig(cfg, resolvedAccountId, account);
     const maxSection = (cfg.channels as Record<string, unknown>)?.max as
       Record<string, unknown> | undefined;
     const useAccountPath = Boolean(
@@ -122,8 +138,8 @@ export const maxSecurityAdapter: NonNullable<MaxChannelPlugin['security']> = {
       ? `channels.max.accounts.${resolvedAccountId}.`
       : 'channels.max.';
     return {
-      policy: account.config.dmPolicy ?? 'pairing',
-      allowFrom: account.config.allowFrom ?? [],
+      policy: config.dmPolicy ?? 'pairing',
+      allowFrom: config.allowFrom ?? [],
       policyPath: `${basePath}dmPolicy`,
       allowFromPath: basePath,
       approveHint: formatPairingApproveHint('max'),
@@ -131,13 +147,17 @@ export const maxSecurityAdapter: NonNullable<MaxChannelPlugin['security']> = {
     };
   },
   collectWarnings: ({ account, cfg }) => {
+    const config = resolveMaxPolicyAccountConfig(
+      cfg,
+      account?.accountId ?? DEFAULT_ACCOUNT_ID,
+      account,
+    );
     const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? 'allowlist';
+    const groupPolicy = config.groupPolicy ?? defaultGroupPolicy ?? 'allowlist';
     if (groupPolicy !== 'open') {
       return [];
     }
-    const groupAllowlistConfigured =
-      account.config.groups && Object.keys(account.config.groups).length > 0;
+    const groupAllowlistConfigured = config.groups && Object.keys(config.groups).length > 0;
     if (groupAllowlistConfigured) {
       return [
         `- MAX groups: groupPolicy="open" allows any member in allowed groups to trigger (mention-gated). Set channels.max.groupPolicy="allowlist" + channels.max.groupAllowFrom to restrict senders.`,

package/src/deliver.ts

@@ -72,10 +72,9 @@ function logSendFailure(
   what: string,
   err: unknown,
 ): void {
-  const body = (err as { body?: unknown })?.body;
-  log?.error(
-    `[${account.accountId}] MAX ${what} failed: ${String(err)}${body ? ` body=${JSON.stringify(body)}` : ''}`,
-  );
+  // A MaxApiError message already carries the MAX error code; the response body
+  // stays out of the log, its free-form `message` may echo user data.
+  log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}`);
 }
 
 export async function deliverMaxReply(params: {