@dingxiang-me/openclaw-wechat 2.1.0 → 2.3.0

package/src/wecom/api-client-media.js

@@ -1,3 +1,5 @@
+import { buildWecomApiUrl } from "./network-config.js";
+
 export function createWecomApiMediaClient({
   fetchWithRetry,
   getWecomAccessToken,
@@ -9,9 +11,12 @@ export function createWecomApiMediaClient({
     throw new Error("createWecomApiMediaClient: getWecomAccessToken is required");
   }
 
-  async function uploadWecomMedia({ corpId, corpSecret, type, buffer, filename, logger, proxyUrl }) {
-    const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger });
-    const uploadUrl = `https://qyapi.weixin.qq.com/cgi-bin/media/upload?access_token=${encodeURIComponent(accessToken)}&type=${encodeURIComponent(type)}`;
+  async function uploadWecomMedia({ corpId, corpSecret, type, buffer, filename, logger, proxyUrl, apiBaseUrl }) {
+    const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger, apiBaseUrl });
+    const uploadUrl = buildWecomApiUrl(
+      `/cgi-bin/media/upload?access_token=${encodeURIComponent(accessToken)}&type=${encodeURIComponent(type)}`,
+      { apiBaseUrl },
+    );
 
     const boundary = `----WecomMediaUpload${Date.now()}`;
     const header = Buffer.from(
@@ -30,6 +35,7 @@ export function createWecomApiMediaClient({
           "Content-Type": `multipart/form-data; boundary=${boundary}`,
         },
         body,
+        apiBaseUrl,
       },
       3,
       1000,
@@ -43,11 +49,14 @@ export function createWecomApiMediaClient({
     return json.media_id;
   }
 
-  async function downloadWecomMedia({ corpId, corpSecret, mediaId, proxyUrl, logger }) {
-    const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger });
-    const mediaUrl = `https://qyapi.weixin.qq.com/cgi-bin/media/get?access_token=${encodeURIComponent(accessToken)}&media_id=${encodeURIComponent(mediaId)}`;
+  async function downloadWecomMedia({ corpId, corpSecret, mediaId, proxyUrl, logger, apiBaseUrl }) {
+    const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger, apiBaseUrl });
+    const mediaUrl = buildWecomApiUrl(
+      `/cgi-bin/media/get?access_token=${encodeURIComponent(accessToken)}&media_id=${encodeURIComponent(mediaId)}`,
+      { apiBaseUrl },
+    );
 
-    const res = await fetchWithRetry(mediaUrl, {}, 3, 1000, { proxyUrl, logger });
+    const res = await fetchWithRetry(mediaUrl, { apiBaseUrl }, 3, 1000, { proxyUrl, logger });
     if (!res.ok) {
       throw new Error(`Failed to download media: ${res.status}`);
     }

package/src/wecom/api-client-send-text.js

@@ -42,6 +42,7 @@ export function createWecomTextSender({
     text,
     logger,
     proxyUrl,
+    apiBaseUrl,
   }) {
     const sendJson = await sendWecomTypedMessage({
       corpId,
@@ -57,6 +58,7 @@ export function createWecomTextSender({
       },
       logger,
       proxyUrl,
+      apiBaseUrl,
       errorPrefix: "",
     });
     const isAppChat = Boolean(chatId);
@@ -76,6 +78,7 @@ export function createWecomTextSender({
     text,
     logger,
     proxyUrl,
+    apiBaseUrl,
   }) {
     const targetKey = buildTargetKey({ corpId, agentId, toUser, toParty, toTag, chatId });
     return enqueueTargetSend(targetKey, async () => {
@@ -96,6 +99,7 @@ export function createWecomTextSender({
           text: chunks[i],
           logger,
           proxyUrl,
+          apiBaseUrl,
         });
         if (i < chunks.length - 1) {
           // eslint-disable-next-line no-await-in-loop

package/src/wecom/api-client-send-typed.js

@@ -29,10 +29,11 @@ export function createWecomTypedMessageSender({
     payload,
     logger,
     proxyUrl,
+    apiBaseUrl,
     errorPrefix,
   }) {
     return apiLimiter.execute(async () => {
-      const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger });
+      const accessToken = await getWecomAccessToken({ corpId, corpSecret, proxyUrl, logger, apiBaseUrl });
       const { sendUrl, body, isAppChat } = buildWecomMessageSendRequest({
         accessToken,
         agentId,
@@ -42,6 +43,7 @@ export function createWecomTypedMessageSender({
         chatId,
         msgType,
         payload,
+        apiBaseUrl,
       });
       const sendRes = await fetchWithRetry(
         sendUrl,
@@ -49,6 +51,7 @@ export function createWecomTypedMessageSender({
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(body),
+          apiBaseUrl,
         },
         3,
         1000,

package/src/wecom/api-client-senders.js

@@ -24,7 +24,39 @@ export function createWecomApiSenders({
     sendWecomTypedMessage,
   });
 
-  async function sendWecomImage({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl }) {
+  async function sendWecomMarkdown({
+    corpId,
+    corpSecret,
+    agentId,
+    toUser,
+    toParty,
+    toTag,
+    chatId,
+    content,
+    logger,
+    proxyUrl,
+    apiBaseUrl,
+  }) {
+    return sendWecomTypedMessage({
+      corpId,
+      corpSecret,
+      agentId,
+      toUser,
+      toParty,
+      toTag,
+      chatId,
+      msgType: "markdown",
+      payload: {
+        markdown: { content: String(content ?? "") },
+      },
+      logger,
+      proxyUrl,
+      apiBaseUrl,
+      errorPrefix: "WeCom markdown send failed",
+    });
+  }
+
+  async function sendWecomImage({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl, apiBaseUrl }) {
     return sendWecomTypedMessage({
       corpId,
       corpSecret,
@@ -39,6 +71,7 @@ export function createWecomApiSenders({
       },
       logger,
       proxyUrl,
+      apiBaseUrl,
       errorPrefix: "WeCom image send failed",
     });
   }
@@ -56,6 +89,7 @@ export function createWecomApiSenders({
     description,
     logger,
     proxyUrl,
+    apiBaseUrl,
   }) {
     const videoPayload = {
       media_id: mediaId,
@@ -76,11 +110,12 @@ export function createWecomApiSenders({
       },
       logger,
       proxyUrl,
+      apiBaseUrl,
       errorPrefix: "WeCom video send failed",
     });
   }
 
-  async function sendWecomFile({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl }) {
+  async function sendWecomFile({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl, apiBaseUrl }) {
     return sendWecomTypedMessage({
       corpId,
       corpSecret,
@@ -95,11 +130,12 @@ export function createWecomApiSenders({
       },
       logger,
       proxyUrl,
+      apiBaseUrl,
       errorPrefix: "WeCom file send failed",
     });
   }
 
-  async function sendWecomVoice({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl }) {
+  async function sendWecomVoice({ corpId, corpSecret, agentId, toUser, toParty, toTag, chatId, mediaId, logger, proxyUrl, apiBaseUrl }) {
     return sendWecomTypedMessage({
       corpId,
       corpSecret,
@@ -114,12 +150,14 @@ export function createWecomApiSenders({
       },
       logger,
       proxyUrl,
+      apiBaseUrl,
       errorPrefix: "WeCom voice send failed",
     });
   }
 
   return {
     sendWecomText,
+    sendWecomMarkdown,
     sendWecomImage,
     sendWecomVideo,
     sendWecomFile,

package/src/wecom/api-client.js

@@ -46,6 +46,7 @@ export function createWecomApiClient({
     getWecomAccessToken: core.getWecomAccessToken,
     buildWecomMessageSendRequest: core.buildWecomMessageSendRequest,
     sendWecomText: senders.sendWecomText,
+    sendWecomMarkdown: senders.sendWecomMarkdown,
     uploadWecomMedia: media.uploadWecomMedia,
     sendWecomImage: senders.sendWecomImage,
     sendWecomVideo: senders.sendWecomVideo,

package/src/wecom/bot-dispatch-fallback.js

@@ -1,4 +1,5 @@
 import { parseThinkingContent } from "./thinking-parser.js";
+import { applyWecomReasoningPolicy } from "./reasoning-visibility.js";
 
 function assertFunction(name, value) {
   if (typeof value !== "function") {
@@ -6,13 +7,24 @@ function assertFunction(name, value) {
   }
 }
 
-export function buildWecomBotVisibleFallbackPayload(rawText = "", markdownToWecomText = (text) => String(text ?? "")) {
+export function buildWecomBotVisibleFallbackPayload(
+  rawText = "",
+  markdownToWecomText = (text) => String(text ?? ""),
+  reasoningPolicy = {},
+) {
   const parsed = parseThinkingContent(rawText);
   const visibleContent = markdownToWecomText(parsed.visibleContent).trim();
   const thinkingContent = markdownToWecomText(parsed.thinkingContent).trim();
-  return {
+  const resolved = applyWecomReasoningPolicy({
     text: visibleContent,
     thinkingContent,
+    policy: reasoningPolicy,
+    transport: "bot",
+    phase: "final",
+  });
+  return {
+    text: resolved.text,
+    thinkingContent: resolved.thinkingContent,
   };
 }
 
@@ -25,6 +37,7 @@ export async function handleWecomBotPostDispatchFallback({
   markdownToWecomText,
   safeDeliverReply,
   startLateReplyWatcher,
+  reasoningPolicy = {},
 } = {}) {
   if (!dispatchState || typeof dispatchState !== "object") {
     throw new Error("handleWecomBotPostDispatchFallback: dispatchState is required");
@@ -41,6 +54,7 @@ export async function handleWecomBotPostDispatchFallback({
   const { text: fallback, thinkingContent } = buildWecomBotVisibleFallbackPayload(
     dispatchState.blockText,
     markdownToWecomText,
+    reasoningPolicy,
   );
   if (fallback || thinkingContent) {
     await safeDeliverReply(
@@ -81,6 +95,7 @@ export async function handleWecomBotDispatchError({
   readTranscriptFallbackResult,
   safeDeliverReply,
   markTranscriptReplyDelivered,
+  reasoningPolicy = {},
 } = {}) {
   assertFunction("isDispatchTimeoutError", isDispatchTimeoutError);
   assertFunction("startLateReplyWatcher", startLateReplyWatcher);
@@ -92,7 +107,7 @@ export async function handleWecomBotDispatchError({
 
   api?.logger?.warn?.(`wecom(bot): processing failed: ${String(err?.message || err)}`);
   if (dispatchState && typeof dispatchState === "object" && dispatchState.streamFinished !== true) {
-    const partialPayload = buildWecomBotVisibleFallbackPayload(dispatchState.blockText, markdownToWecomText);
+    const partialPayload = buildWecomBotVisibleFallbackPayload(dispatchState.blockText, markdownToWecomText, reasoningPolicy);
     if (partialPayload.text || partialPayload.thinkingContent) {
       const delivered = await safeDeliverReply(partialPayload, "timeout-partial-fallback");
       if (delivered) return true;

package/src/wecom/bot-dispatch-handlers.js

@@ -1,4 +1,6 @@
 import { parseThinkingContent } from "./thinking-parser.js";
+import { applyWecomReasoningPolicy } from "./reasoning-visibility.js";
+import { extractWecomReplyDirectives } from "./reply-output-policy.js";
 
 function assertFunction(name, value) {
   if (typeof value !== "function") {
@@ -30,6 +32,7 @@ export function createWecomBotDispatchHandlers({
   markdownToWecomText,
   isAgentFailureText,
   safeDeliverReply,
+  reasoningPolicy = {},
 } = {}) {
   if (!state || typeof state !== "object") {
     throw new Error("createWecomBotDispatchHandlers: state is required");
@@ -46,14 +49,46 @@ export function createWecomBotDispatchHandlers({
 
   const logger = api?.logger;
 
-  const buildThinkingState = (rawText) => {
+  const buildThinkingState = (rawText, rawThinkingOverride = "") => {
     const parsed = parseThinkingContent(rawText);
     const visibleRaw = String(parsed.visibleContent ?? "").trim();
     const thinkingRaw = String(parsed.thinkingContent ?? "").trim();
+    const visibleText = visibleRaw ? markdownToWecomText(visibleRaw).trim() : "";
+    const thinkingContent = (thinkingRaw ? markdownToWecomText(thinkingRaw).trim() : "") || String(rawThinkingOverride ?? "").trim();
+    const rawThinkingContent = String(rawThinkingOverride ?? "").trim() || thinkingRaw;
+    const cleanedStreamPayload = applyWecomReasoningPolicy({
+      text: visibleText,
+      thinkingContent,
+      policy: reasoningPolicy,
+      transport: "bot",
+      phase: "stream",
+    });
+    const cleanedFinalPayload = applyWecomReasoningPolicy({
+      text: visibleText,
+      thinkingContent,
+      policy: reasoningPolicy,
+      transport: "bot",
+      phase: "final",
+    });
+    const rawFinalPayload = applyWecomReasoningPolicy({
+      text: visibleRaw,
+      thinkingContent: rawThinkingContent,
+      policy: reasoningPolicy,
+      transport: "bot",
+      phase: "final",
+    });
     return {
       rawText: String(rawText ?? ""),
-      visibleText: visibleRaw ? markdownToWecomText(visibleRaw).trim() : "",
-      thinkingContent: thinkingRaw ? markdownToWecomText(thinkingRaw).trim() : "",
+      streamPayload: {
+        ...cleanedStreamPayload,
+        text: extractWecomReplyDirectives(cleanedStreamPayload.text).text,
+      },
+      finalPayload: {
+        ...cleanedFinalPayload,
+        text: extractWecomReplyDirectives(cleanedFinalPayload.text).text,
+        rawText: String(rawFinalPayload.text ?? "").trim(),
+        rawThinkingContent: String(rawFinalPayload.thinkingContent ?? "").trim(),
+      },
     };
   };
 
@@ -74,10 +109,10 @@ export function createWecomBotDispatchHandlers({
         if (!payload?.text) return;
         state.blockText = normalizeWecomBotBlockText(state.blockText, payload.text);
         const blockState = buildThinkingState(state.blockText);
-        updateBotStream(streamId, blockState.visibleText, {
+        updateBotStream(streamId, blockState.streamPayload.text, {
           append: false,
           finished: false,
-          thinkingContent: blockState.thinkingContent,
+          thinkingContent: blockState.streamPayload.thinkingContent,
         });
         if (typeof pushWecomBotLongConnectionStreamUpdate === "function") {
           try {
@@ -85,9 +120,9 @@ export function createWecomBotDispatchHandlers({
               accountId,
               sessionId,
               streamId,
-              content: blockState.visibleText,
+              content: blockState.streamPayload.text,
               finish: false,
-              thinkingContent: blockState.thinkingContent,
+              thinkingContent: blockState.streamPayload.thinkingContent,
             });
           } catch (err) {
             logger?.warn?.(
@@ -104,11 +139,13 @@ export function createWecomBotDispatchHandlers({
           return;
         }
         const finalState = buildThinkingState(payload.text);
-        if (finalState.visibleText || finalState.thinkingContent) {
+        if (finalState.finalPayload.text || finalState.finalPayload.thinkingContent) {
           state.streamFinished = await safeDeliverReply(
             {
-              text: finalState.visibleText,
-              thinkingContent: finalState.thinkingContent,
+              text: finalState.finalPayload.text,
+              thinkingContent: finalState.finalPayload.thinkingContent,
+              rawText: finalState.finalPayload.rawText,
+              rawThinkingContent: finalState.finalPayload.rawThinkingContent,
             },
             "final",
           );

package/src/wecom/bot-inbound-dispatch-runtime.js

@@ -35,6 +35,7 @@ export async function executeWecomBotDispatchRuntime({
   markdownToWecomText,
   isAgentFailureText,
   safeDeliverReply,
+  resolveWecomReasoningPolicy,
   markTranscriptReplyDelivered,
   ACTIVE_LATE_REPLY_WATCHERS,
   ensureTranscriptFallbackReader,
@@ -94,6 +95,7 @@ export async function executeWecomBotDispatchRuntime({
     markdownToWecomText,
     isAgentFailureText,
     safeDeliverReply,
+    reasoningPolicy: resolveWecomReasoningPolicy?.(api) ?? {},
   });
 
   await withTimeout(
@@ -129,6 +131,7 @@ export async function executeWecomBotDispatchRuntime({
     markdownToWecomText,
     safeDeliverReply,
     startLateReplyWatcher,
+    reasoningPolicy: resolveWecomReasoningPolicy?.(api) ?? {},
   });
 
   return {

package/src/wecom/bot-inbound-executor-helpers.js

@@ -90,6 +90,7 @@ export function assertWecomBotInboundFlowDeps({ api, ...deps } = {}) {
     "resolveWecomCommandPolicy",
     "resolveWecomAllowFromPolicy",
     "resolveWecomDmPolicy",
+    "resolveWecomReasoningPolicy",
     "isWecomSenderAllowed",
     "extractLeadingSlashCommand",
     "buildWecomBotHelpText",
@@ -117,6 +118,7 @@ export function createWecomBotInboundFlowState({
   api,
   accountId = "default",
   fromUser,
+  chatId = "",
   content,
   imageEntries,
   imageUrls,
@@ -172,7 +174,10 @@ export function createWecomBotInboundFlowState({
             content: String(quote.content ?? "").trim(),
           }
         : null,
-    groupChatPolicy: normalizeWecomBotGroupChatPolicy(resolveWecomGroupChatPolicy(api), api?.logger),
+    groupChatPolicy: normalizeWecomBotGroupChatPolicy(
+      resolveWecomGroupChatPolicy(api, normalizedAccountId, {}, chatId),
+      api?.logger,
+    ),
     dynamicAgentPolicy: resolveWecomDynamicAgentPolicy(api),
     isAdminUser: false,
   };
@@ -203,7 +208,9 @@ export function createWecomBotSafeReplyHelpers({
           ? reply
           : { text: "" };
     const contentText = String(normalizedReply.text ?? "").trim();
+    const rawContentText = String(normalizedReply.rawText ?? contentText).trim();
     const thinkingContent = String(normalizedReply.thinkingContent ?? "").trim();
+    const rawThinkingContent = String(normalizedReply.rawThinkingContent ?? thinkingContent).trim();
     const replyMediaUrls = normalizeWecomBotOutboundMediaUrls(normalizedReply);
     if (!contentText && replyMediaUrls.length === 0 && !thinkingContent) return false;
     const result = await deliverBotReplyText({
@@ -214,7 +221,10 @@ export function createWecomBotSafeReplyHelpers({
       streamId,
       responseUrl,
       text: contentText,
+      rawText: rawContentText,
       thinkingContent,
+      rawThinkingContent,
+      routeAgentId: state.routedAgentId,
       mediaUrls: replyMediaUrls,
       mediaType: String(normalizedReply.mediaType ?? "").trim().toLowerCase() || undefined,
       reason,

package/src/wecom/bot-inbound-executor.js

@@ -45,6 +45,7 @@ export async function executeWecomBotInboundFlow(payload = {}) {
     resolveWecomCommandPolicy,
     resolveWecomAllowFromPolicy,
     resolveWecomDmPolicy,
+    resolveWecomReasoningPolicy,
     isWecomSenderAllowed,
     extractLeadingSlashCommand,
     buildWecomBotHelpText,
@@ -66,6 +67,8 @@ export async function executeWecomBotInboundFlow(payload = {}) {
     ensureTranscriptFallbackReader,
     resetWecomConversationSession,
     clearSessionStoreEntry,
+    markWecomReliableInboundActivity = () => null,
+    flushWecomSessionPendingReplies = async () => {},
   } = payload;
 
   assertWecomBotInboundFlowDeps({
@@ -77,6 +80,7 @@ export async function executeWecomBotInboundFlow(payload = {}) {
     api,
     accountId,
     fromUser,
+    chatId,
     content,
     imageEntries,
     imageUrls,
@@ -93,6 +97,12 @@ export async function executeWecomBotInboundFlow(payload = {}) {
     resolveWecomGroupChatPolicy,
     resolveWecomDynamicAgentPolicy,
   });
+  markWecomReliableInboundActivity({
+    mode: "bot",
+    accountId: state.accountId,
+    sessionId: state.baseSessionId,
+    fromUser,
+  });
   const { runtime, cfg } = state;
   const { safeFinishStream, safeDeliverReply } = createWecomBotSafeReplyHelpers({
     api,
@@ -129,10 +139,12 @@ export async function executeWecomBotInboundFlow(payload = {}) {
       api,
       accountId: state.accountId,
       fromUser,
+      chatId,
       isGroupChat,
       msgType,
       commandBody: state.commandBody,
       normalizedFromUser: state.normalizedFromUser,
+      groupChatPolicy: state.groupChatPolicy,
       resolveWecomCommandPolicy,
       resolveWecomAllowFromPolicy,
       resolveWecomDmPolicy,
@@ -231,6 +243,17 @@ export async function executeWecomBotInboundFlow(payload = {}) {
     const storePath = runtimeContext.storePath;
     const ctxPayload = runtimeContext.ctxPayload;
     const sessionRuntimeId = runtimeContext.sessionRuntimeId;
+    markWecomReliableInboundActivity({
+      mode: "bot",
+      accountId: state.accountId,
+      sessionId: state.sessionId,
+      fromUser,
+    });
+    await flushWecomSessionPendingReplies({
+      mode: "bot",
+      accountId: state.accountId,
+      sessionId: state.sessionId,
+    });
 
     const dispatchResult = await executeWecomBotDispatchRuntime({
       api,
@@ -255,6 +278,7 @@ export async function executeWecomBotInboundFlow(payload = {}) {
       markdownToWecomText,
       isAgentFailureText,
       safeDeliverReply,
+      resolveWecomReasoningPolicy,
       markTranscriptReplyDelivered,
       ACTIVE_LATE_REPLY_WATCHERS,
       ensureTranscriptFallbackReader,

package/src/wecom/bot-inbound-guards.js

@@ -59,10 +59,12 @@ export async function applyWecomBotCommandAndSenderGuard({
   api,
   accountId = "default",
   fromUser,
+  chatId = "",
   isGroupChat = false,
   msgType = "text",
   commandBody = "",
   normalizedFromUser = "",
+  groupChatPolicy = {},
   resolveWecomCommandPolicy,
   resolveWecomAllowFromPolicy,
   resolveWecomDmPolicy,
@@ -84,6 +86,30 @@ export async function applyWecomBotCommandAndSenderGuard({
   const dmPolicy = resolveWecomDmPolicy(api, accountId, {});
   const allowFromPolicy = resolveWecomAllowFromPolicy(api, accountId, {});
 
+  if (isGroupChat) {
+    const groupPolicyMode = String(groupChatPolicy?.policyMode ?? (groupChatPolicy?.enabled === false ? "deny" : "open"))
+      .trim()
+      .toLowerCase();
+    const groupSenderAllowed =
+      isAdminUser ||
+      groupPolicyMode === "open" ||
+      (groupPolicyMode !== "deny" &&
+        (groupChatPolicy.allowFrom.includes("*") ||
+          isWecomSenderAllowed({
+            senderId: normalizedFromUser,
+            allowFrom: groupChatPolicy.allowFrom,
+          })));
+    if (!groupSenderAllowed) {
+      return {
+        ok: false,
+        finishText: groupChatPolicy?.rejectMessage || "当前群聊发送者未授权，请联系管理员。",
+        commandBody: String(commandBody ?? ""),
+        isAdminUser,
+        commandPolicy,
+      };
+    }
+  }
+
   if (!isGroupChat) {
     const dmAccess = await resolveWecomDirectMessageAccess({
       api,
@@ -176,7 +202,11 @@ export async function applyWecomBotCommandAndSenderGuard({
       if (commandKey === "/status") {
         return {
           ok: false,
-          finishText: buildWecomBotStatusText(api, fromUser),
+          finishText: buildWecomBotStatusText(api, fromUser, {
+            accountId,
+            chatId,
+            isGroupChat,
+          }),
           commandBody: nextCommandBody,
           isAdminUser,
           commandPolicy,