@aspalagin/openclaw-max 0.8.1 → 0.8.2

package/README.md

@@ -6,7 +6,7 @@
 
 Плагин нужен тем, кто пользуется OpenClaw и хочет, чтобы ассистент был доступен в MAX. Понадобятся токен бота MAX (ботов создают организации на [business.max.ru](https://business.max.ru/self)) и собственный gateway OpenClaw.
 
-Версия 0.8.0. Изменения: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md).
+Версия 0.8.2. Изменения: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md).
 
 ## Содержание
 
@@ -490,3 +490,5 @@ CI также запускает `typecheck` и тесты на `openclaw@latest
 Разработка ведётся с помощью ИИ-агентов.
 
 **Лицензия:** MIT, см. [LICENSE](LICENSE).
+
+**Товарный знак.** Плагин неофициальный. MAX — товарный знак правообладателя, ООО «МАХ»; иконка пакета — логотип из [брендбука MAX](https://go.max.ru/brandbook).

package/README_EN.md

@@ -6,7 +6,7 @@ A channel plugin that connects an [OpenClaw](https://openclaw.ai) assistant to t
 
 It is for OpenClaw users who need their assistant reachable in MAX. You need a MAX bot token (bots are created by organisations on [business.max.ru](https://business.max.ru/self)) and an OpenClaw gateway you run yourself.
 
-Version 0.8.0. Changes: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md) (in Russian).
+Version 0.8.2. Changes: [CHANGELOG.md](https://github.com/aspalagin/openclaw-max/blob/main/CHANGELOG.md) (in Russian).
 
 ## Contents
 
@@ -490,3 +490,5 @@ Questions and proposals: [GitHub Issues](https://github.com/aspalagin/openclaw-m
 Development is carried out with the help of AI agents.
 
 **License:** MIT, see [LICENSE](LICENSE).
+
+**Trademark.** This plugin is unofficial. MAX is a trademark of its rights holder, ООО «МАХ»; the package icon is the logo from the [MAX brand book](https://go.max.ru/brandbook).

package/dist/src/api.js

@@ -200,6 +200,40 @@ export class MaxApiError extends Error {
         }
     }
 }
+/** A MAX error code as it may appear in the log: a short dotted identifier. */
+const LOGGABLE_ERROR_CODE = /^[A-Za-z0-9][\w.-]{0,63}$/;
+/** A localization key MAX puts in `message`, e.g. "Key: errors.process.attachment.movie.not.owner". */
+const LOGGABLE_ERROR_KEY = /^Key:\s*(errors\.[\w.-]{1,100})$/;
+/**
+ * The machine-readable part of a MAX error response for the log: `code`
+ * (e.g. "proto.payload") and, when `message` is a bare localization key, that
+ * key. Free-form `message` text is left out: MAX documents it only as a
+ * human-readable description and some messages quote the request (e.g. "Path
+ * /chats is not recognized"), so it may echo user data. Accepts the parsed
+ * body or the raw response text; an empty or non-JSON body yields "".
+ * @internal exported for testing.
+ */
+export function describeMaxErrorBody(body) {
+    let parsed = body;
+    if (typeof body === 'string') {
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch {
+            return '';
+        }
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return '';
+    const { code, message } = parsed;
+    const parts = [];
+    if (typeof code === 'string' && LOGGABLE_ERROR_CODE.test(code))
+        parts.push(`code=${code}`);
+    const key = typeof message === 'string' ? LOGGABLE_ERROR_KEY.exec(message.trim())?.[1] : undefined;
+    if (key)
+        parts.push(`key=${key}`);
+    return parts.join(' ');
+}
 /**
  * A request that hit the client-side deadline (our AbortController), as opposed
  * to a caller-supplied stop signal. Carries the stalled phase so the send path
@@ -325,9 +359,12 @@ export class MaxApi {
             }
             if (!res.ok) {
                 // Never log the request body: it may carry the webhook secret (POST
-                // /subscriptions) or private message text. Log only method+path+status.
-                getMaxLogger().error(`[MAX API] ${method} ${path} → ${res.status}`);
-                const error = new MaxApiError(`MAX API ${method} ${path} → ${res.status}`, res.status, json);
+                // /subscriptions) or private message text. Log only method+path+status
+                // and the MAX error code (describeMaxErrorBody).
+                const detail = describeMaxErrorBody(json);
+                const summary = `${method} ${path} → ${res.status}${detail ? ` (${detail})` : ''}`;
+                getMaxLogger().error(`[MAX API] ${summary}`);
+                const error = new MaxApiError(`MAX API ${summary}`, res.status, json);
                 const retryAfter = res.headers?.get?.('retry-after');
                 if (retryAfter) {
                     const seconds = Number(retryAfter);
@@ -534,7 +571,9 @@ export class MaxApi {
             body: multipart.body,
         }, this.network().proxyUrl);
         if (!uploadRes.ok) {
-            throw new MaxApiError(`MAX media upload failed: ${uploadRes.status}`, uploadRes.status, await uploadRes.text().catch(() => null));
+            const text = await uploadRes.text().catch(() => null);
+            const detail = describeMaxErrorBody(text);
+            throw new MaxApiError(`MAX media upload failed: ${uploadRes.status}${detail ? ` (${detail})` : ''}`, uploadRes.status, text);
         }
         // Step 3: Parse response to extract token
         // Image response: { photos: { "<id>": { token: "...", url: "..." } } }

package/dist/src/deliver.js

@@ -42,8 +42,9 @@ export function toMaxDeliveryError(err, visible) {
     return err;
 }
 function logSendFailure(account, log, what, err) {
-    const body = err?.body;
-    log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}${body ? ` body=${JSON.stringify(body)}` : ''}`);
+    // A MaxApiError message already carries the MAX error code; the response body
+    // stays out of the log, its free-form `message` may echo user data.
+    log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}`);
 }
 export async function deliverMaxReply(params) {
     const { payload, account, chatId, config, log, statusSink } = params;

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "openclaw-max",
   "name": "MAX",
   "description": "MAX messenger (max.ru) channel for OpenClaw: private and group chats over webhook or long polling; media, voice messages with transcription and voice replies; inline keyboards and command menus; message edits and pins; several bot accounts",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "categories": [
     "channels"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aspalagin/openclaw-max",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "MAX messenger (max.ru) channel for OpenClaw: private and group chats over webhook or long polling; media, voice messages with transcription and voice replies; inline keyboards and command menus; message edits and pins; several bot accounts",
   "keywords": [
     "openclaw",

package/src/api.ts

@@ -320,6 +320,39 @@ export class MaxApiError extends Error {
   }
 }
 
+/** A MAX error code as it may appear in the log: a short dotted identifier. */
+const LOGGABLE_ERROR_CODE = /^[A-Za-z0-9][\w.-]{0,63}$/;
+/** A localization key MAX puts in `message`, e.g. "Key: errors.process.attachment.movie.not.owner". */
+const LOGGABLE_ERROR_KEY = /^Key:\s*(errors\.[\w.-]{1,100})$/;
+
+/**
+ * The machine-readable part of a MAX error response for the log: `code`
+ * (e.g. "proto.payload") and, when `message` is a bare localization key, that
+ * key. Free-form `message` text is left out: MAX documents it only as a
+ * human-readable description and some messages quote the request (e.g. "Path
+ * /chats is not recognized"), so it may echo user data. Accepts the parsed
+ * body or the raw response text; an empty or non-JSON body yields "".
+ * @internal exported for testing.
+ */
+export function describeMaxErrorBody(body: unknown): string {
+  let parsed = body;
+  if (typeof body === 'string') {
+    try {
+      parsed = JSON.parse(body);
+    } catch {
+      return '';
+    }
+  }
+  if (!parsed || typeof parsed !== 'object') return '';
+  const { code, message } = parsed as { code?: unknown; message?: unknown };
+  const parts: string[] = [];
+  if (typeof code === 'string' && LOGGABLE_ERROR_CODE.test(code)) parts.push(`code=${code}`);
+  const key =
+    typeof message === 'string' ? LOGGABLE_ERROR_KEY.exec(message.trim())?.[1] : undefined;
+  if (key) parts.push(`key=${key}`);
+  return parts.join(' ');
+}
+
 /**
  * A request that hit the client-side deadline (our AbortController), as opposed
  * to a caller-supplied stop signal. Carries the stalled phase so the send path
@@ -462,13 +495,12 @@ export class MaxApi {
 
       if (!res.ok) {
         // Never log the request body: it may carry the webhook secret (POST
-        // /subscriptions) or private message text. Log only method+path+status.
-        getMaxLogger().error(`[MAX API] ${method} ${path} → ${res.status}`);
-        const error = new MaxApiError(
-          `MAX API ${method} ${path} → ${res.status}`,
-          res.status,
-          json,
-        );
+        // /subscriptions) or private message text. Log only method+path+status
+        // and the MAX error code (describeMaxErrorBody).
+        const detail = describeMaxErrorBody(json);
+        const summary = `${method} ${path} → ${res.status}${detail ? ` (${detail})` : ''}`;
+        getMaxLogger().error(`[MAX API] ${summary}`);
+        const error = new MaxApiError(`MAX API ${summary}`, res.status, json);
         const retryAfter = res.headers?.get?.('retry-after');
         if (retryAfter) {
           const seconds = Number(retryAfter);
@@ -769,10 +801,12 @@ export class MaxApi {
     );
 
     if (!uploadRes.ok) {
+      const text = await uploadRes.text().catch(() => null);
+      const detail = describeMaxErrorBody(text);
       throw new MaxApiError(
-        `MAX media upload failed: ${uploadRes.status}`,
+        `MAX media upload failed: ${uploadRes.status}${detail ? ` (${detail})` : ''}`,
         uploadRes.status,
-        await uploadRes.text().catch(() => null),
+        text,
       );
     }
 

package/src/deliver.ts

@@ -72,10 +72,9 @@ function logSendFailure(
   what: string,
   err: unknown,
 ): void {
-  const body = (err as { body?: unknown })?.body;
-  log?.error(
-    `[${account.accountId}] MAX ${what} failed: ${String(err)}${body ? ` body=${JSON.stringify(body)}` : ''}`,
-  );
+  // A MaxApiError message already carries the MAX error code; the response body
+  // stays out of the log, its free-form `message` may echo user data.
+  log?.error(`[${account.accountId}] MAX ${what} failed: ${String(err)}`);
 }
 
 export async function deliverMaxReply(params: {