@dingtalk-real-ai/dingtalk-connector 0.7.6 → 0.7.7

package/.github/workflows/issue-to-AI-table.yml

@@ -0,0 +1,52 @@
+# Issue 变更推送到 Webhook
+# 当有 Issue 变更时，发送指定格式的数据到 webhook
+name: 📤 Issue Webhook Notification
+
+on:
+  issues:
+    types: [opened, reopened, closed, edited, labeled, unlabeled]
+
+jobs:
+  notify:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 📬 Send Issue to Webhook
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const webhook = process.env.ISSUE_WEBHOOK_URL;
+            if (!webhook) {
+              console.log('⚠️ ISSUE_WEBHOOK_URL not set, skipping notification');
+              return;
+            }
+            
+            const payload = context.payload;
+            const issue = payload.issue;
+            const action = payload.action;
+            
+            // 构建指定格式的数据
+            const webhookPayload = {
+              action: action,
+              issue: {
+                id: issue.id,
+                number: issue.number,
+                title: issue.title,
+                body: issue.body,
+                state: issue.state,
+                html_url: issue.html_url
+              }
+            };
+            
+            const response = await fetch(webhook, {
+              method: 'POST',
+              headers: { 'Content-Type': 'application/json' },
+              body: JSON.stringify(webhookPayload)
+            });
+            
+            if (response.ok) {
+              console.log('✅ Webhook notification sent successfully');
+            } else {
+              console.log('❌ Failed to send webhook notification:', response.status, response.statusText);
+            }
+        env:
+          ISSUE_WEBHOOK_URL: ${{ secrets.DINGTALK_AI_TABLE_WEBHOOK }}

package/CHANGELOG.md

@@ -6,6 +6,26 @@
 This document records all significant changes. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and version numbers follow [Semantic Versioning](https://semver.org/).
 
+## [0.7.7] - 2026-03-13
+
+### 新增 / Added
+- ✨ **自定义 Gateway URL 支持** - 新增 `gatewayBaseUrl` 配置项，支持通过自定义 URL（如 Nginx 反向代理到 TLS/HTTPS Gateway）访问 Gateway  
+  **Custom Gateway URL support** - Added `gatewayBaseUrl` option to allow using a custom URL (e.g., Nginx reverse proxy to a TLS/HTTPS Gateway)
+- ✨ **钉钉「思考中」表情反馈** - 在处理用户消息期间为原消息贴上「🤔思考中」表情，处理结束后自动撤回，清晰展示处理进度  
+  **DingTalk “thinking” emotion feedback** - Attaches a “🤔 Thinking” emotion to the original user message while processing and automatically recalls it after completion to clearly indicate progress
+- ✨ **测试基础设施完善** - 引入 Vitest 及多种测试脚本（run/watch/coverage/ui/integration），为后续自动化测试和回归验证提供基础  
+  **Improved testing infrastructure** - Introduced Vitest and multiple test scripts (run/watch/coverage/ui/integration) to enable better automated and regression testing
+- ✨ **Issue Webhook 工作流** - 新增 GitHub Actions 工作流，将 Issue 变更以统一 JSON 格式推送到配置的 Webhook  
+  **Issue webhook workflow** - Added a GitHub Actions workflow to push Issue changes as unified JSON payloads to a configured webhook
+
+### 修复 / Fixes
+- 🐛 **媒体元数据与缩略图提取更健壮** - ffprobe 或缩略图生成失败时不再中断主流程，而是返回默认元数据或空缩略图  
+  **More robust media metadata & thumbnail extraction** - ffprobe or thumbnail generation failures no longer abort the main flow but return default metadata or a null thumbnail instead
+- 🐛 **音频时长提取兼容性改进** - 使用动态 `import('child_process')` 替代 `require('child_process')`，提升在不同运行环境下的兼容性  
+  **Audio duration extraction compatibility** - Replaced `require('child_process')` with dynamic `import('child_process')` to improve compatibility across environments
+- 🐛 **主动消息用户列表校验** - 为主动消息的 `userIds` 列表增加空值过滤，避免因无效用户 ID 导致请求失败  
+  **Proactive message user list validation** - Added empty value filtering for the `userIds` list in proactive messages to prevent request failures caused by invalid IDs
+
 ## [0.7.6] - 2026-03-12
 
 ### 修复 / Fixes

package/README.md

@@ -1,8 +1,9 @@
-# DingTalk OpenClaw Connector
+# Offical DingTalk OpenClaw Connector 
+## 钉钉官方OpenClaw连接器
 
 以下提供两种方案连接到 [OpenClaw](https://openclaw.ai) Gateway，分别是钉钉机器人和钉钉 DEAP Agent。
 
-> 📝 **版本信息**：当前版本 v0.7.6 | [查看变更日志](CHANGELOG.md) | [发布说明](docs/RELEASE_NOTES_V0.7.6.md) | [发布指南](RELEASE.md)
+> 📝 **版本信息**：当前版本 v0.7.7 | [查看变更日志](CHANGELOG.md) | [发布说明](docs/RELEASE_NOTES_V0.7.7.md) | [发布指南](RELEASE.md)
 
 ## 快速导航
 
@@ -86,6 +87,7 @@ openclaw plugins install -l .
   "channels": {
     "dingtalk-connector": {
       "enabled": true,
+      "gatewayBaseUrl": "http://localhost:18789", // 可选：如果Gateway地址是TLS/HTTPS，see PR #117
       "clientId": "dingxxxxxxxxx",       // 钉钉 AppKey
       "clientSecret": "your_secret_here", // 钉钉 AppSecret
       "gatewayToken": "",                 // 可选：Gateway 认证 token, openclaw.json配置中 gateway.auth.token 的值 
@@ -97,19 +99,17 @@ openclaw plugins install -l .
       "asyncMode": false,                 // 可选：异步模式，立即回执用户消息，后台处理并推送结果（默认：false）
       "ackText": "🫡 任务已接收"      // 可选：异步模式下的回执消息文本（默认：'🫡 任务已接收，处理中...'）
     }
-  },
-  "gateway": { // gateway通常是已有的节点，配置时注意把http部分追加到已有节点下
-    "http": {
-      "endpoints": {
-        "chatCompletions": {
-          "enabled": true
-        }
-      }
-    }
   }
 }
 ```
 
+执行配置命令
+
+```bash
+openclaw config set gateway.http.endpoints.chatCompletions.enabled true
+```
+
+
 或者在 OpenClaw Dashboard 页面配置：
 
 <img width="1916" height="1996" alt="image" src="https://github.com/user-attachments/assets/00b585ca-c1df-456c-9c65-7345a718b94b" />
@@ -129,21 +129,20 @@ openclaw plugins list  # 确认 dingtalk-connector 已加载
 ## 创建钉钉机器人
 
 1. 打开 [钉钉开放平台](https://open.dingtalk.com/)
-2. 进入 **应用开发** → **企业内部开发** → 创建应用
-3. 添加 **机器人** 能力，消息接收模式选择 **Stream 模式**
-4. 开通权限：
-   - `Card.Streaming.Write` - AI Card 流式响应
-   - `Card.Instance.Write` - AI Card 实例写入
-   - `qyapi_robot_sendmsg` - 主动发送消息
-   - 如需使用文档 API 功能，还需开通文档相关权限
-5. **发布应用**，记录 **AppKey** 和 **AppSecret**
+2. 进入 **应用开发** → **企业内部开发** → 创建openclaw机器人
+   <img width="2529" height="961" alt="image" src="https://github.com/user-attachments/assets/4163dc50-808c-43c2-84bd-a1e8dde42e05" />
+3. 创建好机器人后，保存一下生成的clientId和clientSecret, 后续配置参数需要
+   <img width="687" height="540" alt="image" src="https://github.com/user-attachments/assets/c036ea46-9750-4814-8c24-3e4b54bd2788" />
+
+   或者在机器人详情中 也可以拿到
+   <img width="1527" height="377" alt="image" src="https://github.com/user-attachments/assets/3cf2a661-ed81-441d-9cda-024a6a5377cc" />
 
 ## 配置参考
 
 | 配置项 | 环境变量 | 说明 |
 |--------|----------|------|
-| `clientId` | `DINGTALK_CLIENT_ID` | 钉钉 AppKey |
-| `clientSecret` | `DINGTALK_CLIENT_SECRET` | 钉钉 AppSecret |
+| `clientId` | `DINGTALK_CLIENT_ID` | 上一步创建openclaw机器人给到的 clinetId |
+| `clientSecret` | `DINGTALK_CLIENT_SECRET` | 上一步创建openclaw机器人给到的 clientSecret |
 | `gatewayToken` | `OPENCLAW_GATEWAY_TOKEN` | Gateway 认证 token（可选） |
 | `gatewayPassword` | — | Gateway 认证 password（可选，与 token 二选一） |
 | `sessionTimeout` | — | ⚠️ 已废弃，请使用 Gateway 的 [`session.reset.idleMinutes`](https://docs.openclaw.ai/gateway/configuration) 配置 |
@@ -679,6 +678,9 @@ openclaw gateway start
 
    <img width="3426" height="1752" alt="配置 OpenClaw 技能参数" src="https://github.com/user-attachments/assets/bc725789-382f-41b5-bbdb-ba8f29923d5c" />
 
+注意 OpenClaw 属于一个MCP，还需要配置他的触发规则，满足规则的情况下才会使用这个MCP:
+<img width="1088" height="526" alt="image" src="https://github.com/user-attachments/assets/8b0b6f6d-70ff-4edc-b674-7a24126aadfa" />
+
 4. 发布 Agent：
 
    <img width="3416" height="1762" alt="发布 Agent" src="https://github.com/user-attachments/assets/3f8c3fdb-5f2b-4a4b-8896-35202e713bf3" />

package/docs/RELEASE_NOTES_V0.7.7.md

@@ -0,0 +1,122 @@
+# Release Notes - v0.7.7
+
+## ✨ 功能与体验改进 / Features & Improvements
+
+- **自定义 Gateway URL 支持 / Custom Gateway URL Support**  
+  通过新增 `gatewayBaseUrl` 配置项，支持将请求发送到自定义的 Gateway 地址，例如通过 Nginx 反向代理到启用 TLS/HTTPS 的 Gateway。  
+  With the new `gatewayBaseUrl` option, requests can be sent to a custom Gateway URL, such as an Nginx reverse proxy in front of a TLS/HTTPS-enabled Gateway.
+
+- **钉钉「思考中」表情反馈 / DingTalk “Thinking” Emotion Feedback**  
+  在处理用户消息期间，Connector 会在原消息上贴上「🤔思考中」表情，处理结束后自动撤回，以更直观地展示处理进度。  
+  While processing a user message, the connector attaches a “🤔 Thinking” emotion to the original message and automatically recalls it after completion to clearly indicate processing progress.
+
+- **测试基础设施完善 / Testing Infrastructure Enhancement**  
+  引入 Vitest 测试框架与多种测试脚本（单次运行、watch、覆盖率、UI、集成测试），为后续质量保障和回归测试打下基础。  
+  Introduced the Vitest testing framework and multiple test scripts (run, watch, coverage, UI, integration) to improve quality assurance and regression testing.
+
+- **文档与示例优化 / Documentation & Examples Improvements**  
+  更新 README，补充了 OpenClaw 官方连接器定位、Gateway TLS/HTTPS 配置示例、钉钉机器人创建引导图、以及在 OpenClaw 中配置 MCP 触发规则的截图说明。  
+  Updated README with official connector positioning, Gateway TLS/HTTPS configuration example, DingTalk bot creation walkthrough images, and screenshots for configuring MCP trigger rules in OpenClaw.
+
+## 🐛 修复 / Fixes
+
+- **媒体元数据与缩略图提取健壮性提升 / More Robust Media Metadata & Thumbnail Extraction**  
+  当 ffprobe 或缩略图生成失败（例如环境缺少依赖、视频流缺失）时，不再抛出异常中断主流程，而是安全返回默认元数据或空缩略图，确保消息处理不中断。  
+  When ffprobe or thumbnail generation fails (e.g., missing dependencies or video stream), the connector no longer throws and aborts the main flow, but safely returns default metadata or a null thumbnail so message handling continues.
+
+- **音频时长提取兼容性改进 / Audio Duration Extraction Compatibility**  
+  使用动态 `import('child_process')` 替代 `require('child_process')`，提升在不同打包/运行环境下的兼容性。  
+  Switched from `require('child_process')` to dynamic `import('child_process')` to improve compatibility across different bundling and runtime environments.
+
+- **主动消息用户列表校验 / Proactive Message User List Validation**  
+  在向多个用户发送主动消息时，对 `userIds` 列表进行空值过滤，避免因无效用户 ID 导致的请求失败。  
+  Filters out empty values from the `userIds` list when sending proactive messages to multiple users, preventing request failures caused by invalid user IDs.
+
+## 📋 技术细节 / Technical Details
+
+### Gateway URL 配置 / Gateway URL Configuration
+
+- `GatewayOptions` 接口新增 `gatewayBaseUrl?: string` 字段，用于指定自定义 Gateway URL（例如 `http://127.0.0.1:18788`）。  
+- `streamFromGateway` 中优先使用 `gatewayBaseUrl` 构造请求地址，否则回退到本地端口逻辑：  
+  `gatewayBaseUrl ? \`\${gatewayBaseUrl}/v1/chat/completions\` : \`http://127.0.0.1:\${port}/v1/chat/completions\``。  
+- 插件配置新增 `gatewayBaseUrl` 字段说明，帮助用户在 TLS/HTTPS 或 Nginx 代理场景下正确配置。
+
+### 钉钉表情反馈逻辑 / DingTalk Emotion Feedback Logic
+
+- 新增 `addEmotionReply`：在处理用户消息前，为该消息贴上「🤔思考中」表情，使用机器人凭证调用 `robot/emotion/reply` 接口。  
+- 新增 `recallEmotionReply`：在消息处理完成后的 `finally` 块内调用，撤回之前贴上的表情，通过 `robot/emotion/recall` 接口实现。  
+- 以上调用均带有完善的错误日志，失败不会中断主消息处理流程，仅记录警告日志。
+
+### 媒体处理健壮性 / Media Handling Robustness
+
+- `extractVideoMetadata`：  
+  - 将 Promise 回调中的错误处理改为返回 `{ duration: 0, width: 0, height: 0 }`，而非直接 reject。  
+  - 当未找到视频流时，同样返回默认元数据结构。  
+  - 外层 `catch` 中也返回默认元数据，确保调用方不需要对 `null` 做额外分支判断。  
+- `extractVideoThumbnail`：  
+  - 截图失败时不再 reject，而是 resolve `null`，由上层逻辑决定是否展示缩略图。  
+- `extractAudioDuration`：  
+  - 使用 `await import('child_process')` 获取 `execFile`，提高 ESM/打包场景下的兼容性。
+
+### 测试与依赖 / Testing & Dependencies
+
+- 在 `package.json` 中：  
+  - 将 `test` 脚本更新为 `vitest run`，并新增 `test:watch`、`test:coverage`、`test:ui`、`test:integration` 等脚本。  
+  - 新增开发依赖：`@types/node`、`typescript`、`vitest`。  
+- 这些变更为后续补充单元测试、集成测试以及 CI 集成提供基础设施支持。
+
+### CI 工作流 / CI Workflow
+
+- 新增 `.github/workflows/issue-to-AI-table.yml`：  
+  - 监听 Issue 的创建、重开、关闭、编辑、打标签/去标签等事件。  
+  - 将 Issue 的关键信息（编号、标题、内容、状态、链接等）以统一格式推送到配置的 Webhook（`ISSUE_WEBHOOK_URL`）。  
+  - 可用于接入内部 AI 分析、需求盘点或看板同步等自动化流程。
+
+## 📥 安装升级 / Installation & Upgrade
+
+```bash
+# 通过 npm 安装最新版本 / Install latest version via npm
+openclaw plugins install @dingtalk-real-ai/dingtalk-connector
+
+# 或升级现有版本 / Or upgrade existing version
+openclaw plugins update dingtalk-connector
+
+# 通过 Git 安装 / Install via Git
+openclaw plugins install https://github.com/DingTalk-Real-AI/dingtalk-openclaw-connector.git
+```
+
+## ⚠️ 升级注意事项 / Upgrade Notes
+
+### 兼容性说明 / Compatibility Notes
+
+- **向下兼容 / Backward Compatible**：本次更新为小版本改进，保留了 v0.7.x 既有行为，对现有配置完全兼容。  
+- **推荐使用 `gatewayBaseUrl` 配置 TLS 场景 / Recommended for TLS via `gatewayBaseUrl`**：  
+  在通过 Nginx 或其他代理为 Gateway 启用 TLS/HTTPS 的场景下，建议配置 `gatewayBaseUrl`，以确保 Connector 能够直接访问代理层地址。  
+- **媒体处理更安全 / Safer Media Handling**：即便视频/音频元数据提取失败，也不会影响消息主流程，仅在日志中记录错误。
+
+### 验证步骤 / Verification Steps
+
+升级到此版本后，建议进行以下验证：
+
+1. **Gateway URL 验证 / Gateway URL Verification**  
+   - 配置 `gatewayBaseUrl` 指向你的 Nginx/Gateway 代理地址。  
+   - 发送一条消息，确认能够正常与 Gateway 通信。  
+2. **钉钉表情反馈验证 / DingTalk Emotion Feedback Verification**  
+   - 在钉钉中向机器人发送一条消息。  
+   - 确认消息上出现「🤔思考中」表情。  
+   - 等待 AI 回复结束后，确认该表情被自动撤回。  
+3. **媒体消息兼容性验证 / Media Message Compatibility Verification**  
+   - 发送包含视频或音频的消息，在缺少部分 ffmpeg 依赖的环境下确认不会导致整个会话失败，仅记录错误日志。
+
+## 🔗 相关链接 / Related Links
+
+- [完整变更日志 / Full Changelog](https://github.com/DingTalk-Real-AI/dingtalk-openclaw-connector/blob/main/CHANGELOG.md)
+- [使用文档 / Documentation](https://github.com/DingTalk-Real-AI/dingtalk-openclaw-connector/blob/main/README.md)
+- [问题反馈 / Issue Feedback](https://github.com/DingTalk-Real-AI/dingtalk-openclaw-connector/issues)
+
+---
+
+**发布日期 / Release Date**：2026-03-13  
+**版本号 / Version**：v0.7.7  
+**兼容性 / Compatibility**：OpenClaw Gateway 0.4.0+
+

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "dingtalk-connector",
   "name": "DingTalk Channel",
-  "version": "0.7.6",
+  "version": "0.7.7",
   "description": "DingTalk (钉钉) messaging channel via Stream mode with AI Card streaming",
   "author": "DingTalk Real Team",
   "channels": ["dingtalk-connector"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dingtalk-real-ai/dingtalk-connector",
-  "version": "0.7.6",
+  "version": "0.7.7",
   "description": "DingTalk (钉钉) channel connector — Stream mode with AI Card streaming",
   "main": "plugin.ts",
   "type": "module",
@@ -8,8 +8,11 @@
     "build": "echo 'No build needed - jiti loads TS at runtime'",
     "lint": "echo 'Lint check skipped'",
     "lint:fix": "echo 'Lint fix skipped'",
-    "test": "echo 'Tests skipped'",
-    "test:watch": "echo 'Tests skipped'",
+    "test": "vitest run",
+    "test:watch": "vitest --watch",
+    "test:coverage": "vitest run --coverage",
+    "test:ui": "vitest --ui",
+    "test:integration": "vitest run tests/integration",
     "type-check": "npx tsc --noEmit",
     "version:check": "echo 'Version check skipped'",
     "release:prepare": "echo 'Release prepare skipped'",
@@ -39,13 +42,18 @@
     "access": "public"
   },
   "dependencies": {
-    "dingtalk-stream": "^2.1.4",
+    "@ffmpeg-installer/ffmpeg": "^1.1.0",
     "axios": "^1.6.0",
+    "dingtalk-stream": "^2.1.4",
     "fluent-ffmpeg": "^2.1.3",
-    "@ffmpeg-installer/ffmpeg": "^1.1.0",
     "mammoth": "^1.8.0",
     "pdf-parse": "^1.1.1"
   },
+  "devDependencies": {
+    "@types/node": "^20.19.37",
+    "typescript": "^5.6.0",
+    "vitest": "^1.6.0"
+  },
   "openclaw": {
     "extensions": [
       "./plugin.ts"

package/plugin.ts

@@ -553,17 +553,17 @@ async function extractVideoMetadata(
     const ffmpegPath = require('@ffmpeg-installer/ffmpeg').path;
     ffmpeg.setFfmpegPath(ffmpegPath);
 
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve) => {
       ffmpeg.ffprobe(filePath, (err: any, metadata: any) => {
         if (err) {
           log?.error?.(`[DingTalk][Video] 提取元数据失败: ${err.message}`);
-          return reject(err);
+          return resolve({ duration: 0, width: 0, height: 0 });
         }
 
         const videoStream = metadata.streams.find((s: any) => s.codec_type === 'video');
         if (!videoStream) {
           log?.warn?.(`[DingTalk][Video] 未找到视频流`);
-          return resolve(null);
+          return resolve({ duration: 0, width: 0, height: 0 });
         }
 
         const result = {
@@ -578,7 +578,7 @@ async function extractVideoMetadata(
     });
   } catch (err: any) {
     log?.error?.(`[DingTalk][Video] ffprobe 失败: ${err.message}`);
-    return null;
+    return { duration: 0, width: 0, height: 0 };
   }
 }
 
@@ -596,7 +596,7 @@ async function extractVideoThumbnail(
     const path = await import('path');
     ffmpeg.setFfmpegPath(ffmpegPath);
 
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve) => {
       ffmpeg(videoPath)
         .screenshots({
           count: 1,
@@ -611,7 +611,7 @@ async function extractVideoThumbnail(
         })
         .on('error', (err: any) => {
           log?.error?.(`[DingTalk][Video] 封面生成失败: ${err.message}`);
-          reject(err);
+          resolve(null);
         });
     });
   } catch (err: any) {
@@ -920,7 +920,7 @@ async function extractAudioDuration(
   log?: any,
 ): Promise<number | null> {
   try {
-    const { execFile } = require('child_process');
+    const { execFile } = await import('child_process');
     const ffprobeBin = getFfprobePath();
 
     return new Promise((resolve) => {
@@ -1377,6 +1377,8 @@ interface GatewayOptions {
   memoryUser?: string;
   /** 本地图片文件路径列表，用于 OpenClaw AgentMediaPayload */
   imageLocalPaths?: string[];
+  /** 自定义 Gateway URL（如通过 Nginx 代理），用于 TLS 等场景 */
+  gatewayBaseUrl?: string;
   /** 会话类型：'direct'（单聊）或 'group'（群聊），用于 bindings 匹配 */
   peerKind?: 'direct' | 'group';
   /** 发送者 ID，用于 bindings 匹配 */
@@ -1386,10 +1388,13 @@ interface GatewayOptions {
 }
 
 async function* streamFromGateway(options: GatewayOptions, accountId: string): AsyncGenerator<string, void, unknown> {
-  const { userContent, systemPrompts, sessionKey, gatewayAuth, memoryUser, imageLocalPaths, peerKind, peerId, gatewayPort, log } = options;
+  // 支持自定义 Gateway URL（如通过 Nginx 代理），用于 TLS 等场景
+  const { userContent, systemPrompts, sessionKey, gatewayAuth, gatewayBaseUrl, memoryUser, imageLocalPaths, peerKind, peerId, gatewayPort, log } = options;
   const rt = getRuntime();
   const port = gatewayPort || rt.gateway?.port || 18789;
-  const gatewayUrl = `http://127.0.0.1:${port}/v1/chat/completions`;
+  const gatewayUrl = gatewayBaseUrl
+    ? `${gatewayBaseUrl}/v1/chat/completions`
+    : `http://127.0.0.1:${port}/v1/chat/completions`;
 
   const messages: any[] = [];
   for (const prompt of systemPrompts) {
@@ -2380,7 +2385,7 @@ async function sendToUser(
     return { ok: false, error: 'Missing clientId or clientSecret', usedAICard: false };
   }
 
-  const userIdArray = Array.isArray(userIds) ? userIds : [userIds];
+  const userIdArray = (Array.isArray(userIds) ? userIds : [userIds]).filter((id) => Boolean(id));
   if (userIdArray.length === 0) {
     return { ok: false, error: 'userIds cannot be empty', usedAICard: false };
   }
@@ -2495,6 +2500,62 @@ async function sendProactive(
   return { ok: false, error: 'Must specify userId, userIds, or openConversationId', usedAICard: false };
 }
 
+// ============ 消息处理中表情 ============
+
+/** 在用户消息上贴 🤔思考中 表情，表示正在处理 */
+async function addEmotionReply(config: any, data: any, log?: any): Promise<void> {
+  if (!data.msgId || !data.conversationId) return;
+  try {
+    const token = await getAccessToken(config);
+    await axios.post(`${DINGTALK_API}/v1.0/robot/emotion/reply`, {
+      robotCode: data.robotCode ?? config.clientId,
+      openMsgId: data.msgId,
+      openConversationId: data.conversationId,
+      emotionType: 2,
+      emotionName: '🤔思考中',
+      textEmotion: {
+        emotionId: '2659900',
+        emotionName: '🤔思考中',
+        text: '🤔思考中',
+        backgroundId: 'im_bg_1',
+      },
+    }, {
+      headers: { 'x-acs-dingtalk-access-token': token, 'Content-Type': 'application/json' },
+      timeout: 5_000,
+    });
+    log?.info?.(`[DingTalk][Emotion] 贴表情成功: msgId=${data.msgId}`);
+  } catch (err: any) {
+    log?.warn?.(`[DingTalk][Emotion] 贴表情失败（不影响主流程）: ${err.message}`);
+  }
+}
+
+/** 撤回用户消息上的 🤔思考中 表情 */
+async function recallEmotionReply(config: any, data: any, log?: any): Promise<void> {
+  if (!data.msgId || !data.conversationId) return;
+  try {
+    const token = await getAccessToken(config);
+    await axios.post(`${DINGTALK_API}/v1.0/robot/emotion/recall`, {
+      robotCode: data.robotCode ?? config.clientId,
+      openMsgId: data.msgId,
+      openConversationId: data.conversationId,
+      emotionType: 2,
+      emotionName: '🤔思考中',
+      textEmotion: {
+        emotionId: '2659900',
+        emotionName: '🤔思考中',
+        text: '🤔思考中',
+        backgroundId: 'im_bg_1',
+      },
+    }, {
+      headers: { 'x-acs-dingtalk-access-token': token, 'Content-Type': 'application/json' },
+      timeout: 5_000,
+    });
+    log?.info?.(`[DingTalk][Emotion] 撤回表情成功: msgId=${data.msgId}`);
+  } catch (err: any) {
+    log?.warn?.(`[DingTalk][Emotion] 撤回表情失败（不影响主流程）: ${err.message}`);
+  }
+}
+
 // ============ 核心消息处理 (AI Card Streaming) ============
 
 async function handleDingTalkMessage(params: {
@@ -2679,6 +2740,10 @@ async function handleDingTalkMessage(params: {
   }
   if (!userContent && imageLocalPaths.length === 0) return;
 
+  // ===== 贴处理中表情 =====
+  await addEmotionReply(dingtalkConfig, data, log);
+
+  try {
   // ===== 异步模式：立即回执 + 后台执行 + 主动推送结果 =====
   const asyncMode = dingtalkConfig.asyncMode === true;
   const proactiveTarget = isDirect
@@ -2709,6 +2774,7 @@ async function handleDingTalkMessage(params: {
         systemPrompts,
         sessionKey: sessionContextJson,
         gatewayAuth,
+        gatewayBaseUrl: dingtalkConfig.gatewayBaseUrl,
         memoryUser,
         imageLocalPaths: imageLocalPaths.length > 0 ? imageLocalPaths : undefined,
         peerKind,
@@ -2786,6 +2852,7 @@ async function handleDingTalkMessage(params: {
         systemPrompts,
         sessionKey: sessionContextJson,
         gatewayAuth,
+        gatewayBaseUrl: dingtalkConfig.gatewayBaseUrl,
         memoryUser,
         imageLocalPaths: imageLocalPaths.length > 0 ? imageLocalPaths : undefined,
         peerKind,
@@ -2870,6 +2937,7 @@ async function handleDingTalkMessage(params: {
         systemPrompts,
         sessionKey: sessionContextJson,
         gatewayAuth,
+        gatewayBaseUrl: dingtalkConfig.gatewayBaseUrl,
         memoryUser,
         imageLocalPaths: imageLocalPaths.length > 0 ? imageLocalPaths : undefined,
         peerKind,
@@ -2909,6 +2977,10 @@ async function handleDingTalkMessage(params: {
       });
     }
   }
+  } finally {
+    // ===== 撤回处理中表情 =====
+    await recallEmotionReply(dingtalkConfig, data, log);
+  }
 }
 
 // ============ 钉钉文档 API ============
@@ -3253,6 +3325,7 @@ const dingtalkPlugin = {
         groupPolicy: { type: 'string', enum: ['open', 'allowlist'], default: 'open' },
         gatewayToken: { type: 'string', default: '', description: 'Gateway auth token (Bearer)' },
         gatewayPassword: { type: 'string', default: '', description: 'Gateway auth password (alternative to token)' },
+        gatewayBaseUrl: { type: 'string', default: '', description: 'Custom Gateway URL (e.g., http://127.0.0.1:18788 for Nginx proxy to TLS Gateway)' },
         sessionTimeout: { type: 'number', default: 1800000, description: 'Session timeout in ms (default 30min)' },
         separateSessionByConversation: { type: 'boolean', default: true, description: '是否按单聊/群聊/群区分 session' },
         sharedMemoryAcrossConversations: { type: 'boolean', default: false, description: '单 agent 场景下是否共享记忆；false 时不同群聊、群聊与私聊记忆隔离' },
@@ -3282,7 +3355,10 @@ const dingtalkPlugin = {
       const config = getConfig(cfg);
       const id = accountId || DEFAULT_ACCOUNT_ID;
       if (config.accounts?.[id]) {
-        return { accountId: id, config: config.accounts[id], enabled: config.accounts[id].enabled !== false };
+        // 合并 channel 级别配置（如 gatewayBaseUrl）到 account 配置
+        const { accounts, ...channelConfig } = config;
+        const mergedConfig = { ...channelConfig, ...config.accounts[id] };
+        return { accountId: id, config: mergedConfig, enabled: config.accounts[id].enabled !== false };
       }
       // 没有 accounts 配置或找不到指定账号时，使用顶层配置
       return { accountId: DEFAULT_ACCOUNT_ID, config, enabled: config.enabled !== false };
@@ -3456,15 +3532,15 @@ const dingtalkPlugin = {
           ctx.log?.info?.(`[DingTalk] 已立即确认回调: messageId=${messageId}`);
         }
 
-        // 【消息去重】检查是否已处理过该消息
-        if (messageId && isMessageProcessed(messageId)) {
-          ctx.log?.warn?.(`[DingTalk] 检测到重复消息，跳过处理: messageId=${messageId}`);
+        // 【消息去重】检查是否已处理过该消息（按账号维度隔离）
+        if (messageId && isMessageProcessed(account.accountId, messageId)) {
+          ctx.log?.warn?.(`[DingTalk][${account.accountId}] 检测到重复消息，跳过处理: messageId=${messageId}`);
           return;
         }
 
-        // 标记消息为已处理
+        // 标记消息为已处理（按账号维度隔离）
         if (messageId) {
-          markMessageProcessed(messageId);
+          markMessageProcessed(account.accountId, messageId);
         }
 
         // 异步处理消息（不阻塞回调确认）
@@ -3859,3 +3935,75 @@ export {
   // 钉钉文档客户端
   DingtalkDocsClient,
 };
+
+// ============ 测试辅助导出 ============
+// 仅用于单元测试，避免在业务代码中直接依赖内部实现细节
+export const __testables = {
+  // 会话 & 去重
+  normalizeSlashCommand,
+  buildSessionContext,
+  isMessageProcessed,
+  markMessageProcessed,
+  cleanupProcessedMessages,
+  // 配置 & Token
+  getConfig,
+  isConfigured,
+  getAccessToken,
+  getOapiAccessToken,
+  getUnionId,
+  // 媒体处理
+  toLocalPath,
+  processLocalImages,
+  uploadMediaToDingTalk,
+  downloadImageToFile,
+  downloadMediaByCode,
+  downloadFileByCode,
+  // 视频处理
+  extractVideoMetadata,
+  extractVideoThumbnail,
+  processVideoMarkers,
+  sendVideoMessage,
+  // 音频处理
+  getFfprobePath,
+  extractAudioDuration,
+  sendAudioMessage,
+  processAudioMarkers,
+  isAudioFile,
+  // 文件处理
+  extractFileMarkers,
+  sendFileMessage,
+  processFileMarkers,
+  // 消息内容提取
+  extractMessageContent,
+  // 消息发送
+  sendMarkdownMessage,
+  sendTextMessage,
+  sendMessage,
+  // 提示词与消息体
+  buildMediaSystemPrompt,
+  buildDeliverBody,
+  buildMsgPayload,
+  // AI Card
+  createAICard,
+  streamAICard,
+  finishAICard,
+  createAICardForTarget,
+  sendFileProactive,
+  sendAudioProactive,
+  sendVideoProactive,
+  sendAICardInternal,
+  sendAICardToUser,
+  sendAICardToGroup,
+  // 主动消息
+  sendNormalToUser,
+  sendNormalToGroup,
+  sendToUser,
+  sendToGroup,
+  sendProactive,
+  // Bindings 解析（测试时需 mock getRuntime/fs/path/os）
+  resolveAgentIdByBindings,
+  /** 仅测试用：注入 runtime 使 resolveAgentIdByBindings 不抛错 */
+  setRuntimeForTest(r: PluginRuntime | null) {
+    runtime = r;
+  },
+};