@henryxiaoyang/wechat-access-unqclawed 1.1.0-beta.3 → 1.1.0-beta.30

package/dist/index.js

@@ -7890,6 +7890,7 @@ var CentrifugeGatewayClient = class _CentrifugeGatewayClient {
   callbacks;
   client = null;
   sub = null;
+  extraSubs = [];
   state = "disconnected";
   processedMsgIds = /* @__PURE__ */ new Set();
   static MAX_MSG_ID_CACHE = 1e3;
@@ -7949,6 +7950,10 @@ var CentrifugeGatewayClient = class _CentrifugeGatewayClient {
     console.log(`${this.logPrefix} \u6B63\u5728\u505C\u6B62...`);
     this.state = "disconnected";
     this.processedMsgIds.clear();
+    for (const sub of this.extraSubs) {
+      sub.unsubscribe();
+    }
+    this.extraSubs = [];
     if (this.sub) {
       this.sub.unsubscribe();
       this.sub = null;
@@ -7963,6 +7968,26 @@ var CentrifugeGatewayClient = class _CentrifugeGatewayClient {
   setCallbacks = (callbacks) => {
     this.callbacks = { ...this.callbacks, ...callbacks };
   };
+  /** 订阅额外的 channel（用于 Claw workspace 等，复用同一个 Centrifuge 连接） */
+  subscribeChannel = (channel, subscriptionToken) => {
+    if (!this.client) {
+      console.warn(`${this.logPrefix} \u65E0\u6CD5\u8BA2\u9605: \u5BA2\u6237\u7AEF\u672A\u521D\u59CB\u5316`);
+      return;
+    }
+    console.log(`${this.logPrefix} \u8BA2\u9605\u989D\u5916 channel: ${channel}`);
+    const sub = this.client.newSubscription(channel, { token: subscriptionToken });
+    sub.on("publication", (ctx) => {
+      this.handlePublication(ctx.data);
+    });
+    sub.on("error", (ctx) => {
+      console.error(`${this.logPrefix} \u989D\u5916\u8BA2\u9605\u9519\u8BEF (${channel}): ${ctx.error.message}`);
+    });
+    sub.on("subscribed", () => {
+      console.log(`${this.logPrefix} \u989D\u5916 channel \u5DF2\u8BA2\u9605: ${channel}`);
+    });
+    this.extraSubs.push(sub);
+    sub.subscribe();
+  };
   // ============================================
   // 上行消息发送（与 WechatAccessWebSocketClient 同签名）
   // ============================================
@@ -7994,6 +8019,41 @@ var CentrifugeGatewayClient = class _CentrifugeGatewayClient {
     this.sendEnvelope("session.update", payload, guid, userId);
   };
   sendPromptResponse = (payload, guid, userId) => {
+    if (this.config.httpBaseUrl && this.config.httpAccessToken) {
+      const message = payload.content?.map((c) => c.text).join("") || payload.error || "";
+      const httpPayload = {
+        type: "COPILOT_RESPONSE",
+        msgId: payload.prompt_id,
+        chatId: payload.session_id,
+        // 原始 WeChat KF chatId（从 incoming message 透传）
+        success: payload.stop_reason === "end_turn",
+        message,
+        metadata: {
+          sessionId: this.config.workspaceSessionId || payload.session_id,
+          // workspace sessionId
+          requestId: payload.prompt_id,
+          state: payload.stop_reason === "end_turn" ? "completed" : payload.stop_reason
+        }
+      };
+      const url = `${this.config.httpBaseUrl}/v2/backgroundagent/wecom/local-proxy/receive`;
+      fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Authorization": `Bearer ${this.config.httpAccessToken}`
+        },
+        body: JSON.stringify(httpPayload),
+        signal: AbortSignal.timeout(3e4)
+      }).then(async (res) => {
+        if (!res.ok) {
+          const body = await res.text().catch(() => "");
+          console.error(`${this.logPrefix} HTTP COPILOT_RESPONSE \u5931\u8D25: ${res.status} ${body.substring(0, 200)}`);
+        }
+      }).catch((err) => {
+        console.error(`${this.logPrefix} HTTP COPILOT_RESPONSE \u5F02\u5E38:`, err);
+      });
+      return;
+    }
     this.sendEnvelope("session.promptResponse", payload, guid, userId);
   };
   // ============================================
@@ -8001,28 +8061,57 @@ var CentrifugeGatewayClient = class _CentrifugeGatewayClient {
   // ============================================
   handlePublication = (data) => {
     try {
-      const envelope = data;
-      if (!envelope?.method || !envelope?.msg_id) {
-        console.warn(`${this.logPrefix} \u6536\u5230\u975E AGP \u683C\u5F0F\u6D88\u606F\uFF0C\u8DF3\u8FC7`);
+      const raw = data;
+      if (raw?.method && raw?.msg_id) {
+        const envelope = raw;
+        if (this.processedMsgIds.has(envelope.msg_id)) {
+          console.log(`${this.logPrefix} \u91CD\u590D\u6D88\u606F\uFF0C\u8DF3\u8FC7: ${envelope.msg_id}`);
+          return;
+        }
+        this.processedMsgIds.add(envelope.msg_id);
+        this.cleanMsgIdCache();
+        console.log(`${this.logPrefix} \u6536\u5230 AGP \u6D88\u606F: method=${envelope.method}, msg_id=${envelope.msg_id}`);
+        switch (envelope.method) {
+          case "session.prompt":
+            this.callbacks.onPrompt?.(envelope);
+            break;
+          case "session.cancel":
+            this.callbacks.onCancel?.(envelope);
+            break;
+          default:
+            console.warn(`${this.logPrefix} \u672A\u77E5 AGP \u6D88\u606F\u7C7B\u578B: ${envelope.method}`);
+        }
         return;
       }
-      if (this.processedMsgIds.has(envelope.msg_id)) {
-        console.log(`${this.logPrefix} \u91CD\u590D\u6D88\u606F\uFF0C\u8DF3\u8FC7: ${envelope.msg_id}`);
+      if (raw?.chatId && raw?.msgId) {
+        const msgId = String(raw.msgId);
+        if (this.processedMsgIds.has(msgId)) {
+          console.log(`${this.logPrefix} \u91CD\u590D\u6D88\u606F\uFF0C\u8DF3\u8FC7: ${msgId}`);
+          return;
+        }
+        this.processedMsgIds.add(msgId);
+        this.cleanMsgIdCache();
+        const content = String(raw.content ?? "");
+        const chatId = String(raw.chatId);
+        console.log(`${this.logPrefix} \u6536\u5230 WeChat KF \u6D88\u606F: msgId=${msgId}, chatId=${chatId}, content=${content.substring(0, 50)}`);
+        const envelope = {
+          msg_id: msgId,
+          guid: this.config.guid,
+          user_id: this.config.userId,
+          method: "session.prompt",
+          payload: {
+            session_id: chatId,
+            prompt_id: msgId,
+            agent_app: "default",
+            content: [{ type: "text", text: content }]
+          }
+        };
+        envelope._wechatKf = { chatId, msgId, raw };
+        this.callbacks.onPrompt?.(envelope);
         return;
       }
-      this.processedMsgIds.add(envelope.msg_id);
-      this.cleanMsgIdCache();
-      console.log(`${this.logPrefix} \u6536\u5230\u6D88\u606F: method=${envelope.method}, msg_id=${envelope.msg_id}`);
-      switch (envelope.method) {
-        case "session.prompt":
-          this.callbacks.onPrompt?.(envelope);
-          break;
-        case "session.cancel":
-          this.callbacks.onCancel?.(envelope);
-          break;
-        default:
-          console.warn(`${this.logPrefix} \u672A\u77E5\u6D88\u606F\u7C7B\u578B: ${envelope.method}`);
-      }
+      const preview = JSON.stringify(data).substring(0, 500);
+      console.warn(`${this.logPrefix} \u6536\u5230\u672A\u77E5\u683C\u5F0F\u6D88\u606F: ${preview}`);
     } catch (error) {
       console.error(`${this.logPrefix} \u6D88\u606F\u5904\u7406\u5931\u8D25:`, error);
       this.callbacks.onError?.(
@@ -8170,6 +8259,8 @@ var buildMessageContext = (message) => {
     // 原始消息内容
     CommandBody: content,
     // 命令体（用于解析命令）
+    CommandAuthorized: true,
+    // 自建通道，所有命令均授权
     From: `wechat-access:${userId}`,
     // 发送者标识（带频道前缀）
     To: `wechat-access:${toUser}`,
@@ -8335,7 +8426,7 @@ var handlePrompt = async (message, client) => {
       route.agentId
     );
     let finalText = null;
-    const { queuedFinal } = await runtime2.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+    await runtime2.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
       ctx,
       cfg,
       dispatcherOptions: {
@@ -8615,7 +8706,8 @@ var QClawAPI = class {
 };
 
 // auth/codebuddy-api.ts
-import { hostname } from "os";
+import { hostname, homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 var DEFAULT_BASE_URL = "https://copilot.tencent.com";
 var PREFIX_PATH = "/plugin";
 var PLATFORM = "ide";
@@ -8759,9 +8851,10 @@ var CodeBuddyAPI = class {
     throw new Error("refreshToken: missing accessToken in response");
   }
   // ==================== WeChat KF 绑定 ====================
-  /** 构造 sessionId */
-  buildSessionId(workspacePath = "") {
-    return `${this.userId}_${this.hostId}_${workspacePath}`;
+  /** 构造 sessionId（与 WorkBuddy 保持一致） */
+  buildSessionId(workspacePath) {
+    const wp = workspacePath ?? join2(homedir2(), "WorkBuddy", "Claw");
+    return `${this.userId}_${this.hostId}_${wp}`;
   }
   /** 获取微信客服绑定链接 (QR 码) */
   async wechatkfGetLink(sessionId, userId) {
@@ -8867,153 +8960,30 @@ var CodeBuddyAPI = class {
   }
 };
 
-// auth/state-store.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync, mkdirSync as mkdirSync2, chmodSync } from "fs";
-import { join as join2, dirname as dirname2 } from "path";
-import { homedir as homedir2 } from "os";
-var DEFAULT_STATE_PATH = join2(homedir2(), ".openclaw", "wechat-access-auth.json");
-var loadState = () => {
-  try {
-    const raw = readFileSync2(DEFAULT_STATE_PATH, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-};
-var saveState = (state) => {
-  mkdirSync2(dirname2(DEFAULT_STATE_PATH), { recursive: true });
-  writeFileSync2(DEFAULT_STATE_PATH, JSON.stringify(state, null, 2), { encoding: "utf-8", mode: 384 });
-  try {
-    chmodSync(DEFAULT_STATE_PATH, 384);
-  } catch {
-  }
-};
-var clearState = () => {
-  try {
-    unlinkSync(DEFAULT_STATE_PATH);
-  } catch {
-  }
-};
-
 // auth/wechat-login.ts
-import { readFileSync as readFileSync3, unlinkSync as unlinkSync2, existsSync } from "fs";
-import { join as join3 } from "path";
-import { homedir as homedir3 } from "os";
+import { createInterface } from "readline";
 
-// auth/device-bind.ts
-var DEFAULT_OPEN_KFID = "wkzLlJLAAAfbxEV3ZcS-lHZxkaKmpejQ";
-var POLL_INTERVAL_MS = 2e3;
-var DEFAULT_TIMEOUT_MS = 3e5;
-async function defaultShowQr(url) {
-  try {
-    const qrterm = await import("qrcode-terminal");
-    const generate = qrterm.default?.generate ?? qrterm.generate;
-    generate(url, { small: true }, (qrcode) => {
-      console.log(qrcode);
-    });
-  } catch {
-  }
-}
-async function performDeviceBinding(options) {
-  const {
-    api,
-    openKfId = DEFAULT_OPEN_KFID,
-    timeoutMs = DEFAULT_TIMEOUT_MS,
-    log: log2 = { info: console.log, warn: console.warn, error: console.error },
-    showQr = defaultShowQr
-  } = options;
-  log2.info("[device-bind] \u751F\u6210\u4F01\u5FAE\u5BA2\u670D\u94FE\u63A5...");
-  let linkResult;
-  try {
-    linkResult = await api.generateContactLink(openKfId);
-  } catch (e) {
-    const msg = `\u751F\u6210\u5BA2\u670D\u94FE\u63A5\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`;
-    log2.warn(`[device-bind] ${msg}`);
-    return { success: false, message: msg };
-  }
-  if (!linkResult.success) {
-    const msg = `\u751F\u6210\u5BA2\u670D\u94FE\u63A5\u5931\u8D25: ${linkResult.message ?? "\u672A\u77E5\u9519\u8BEF"}`;
-    log2.warn(`[device-bind] ${msg}`);
-    return { success: false, message: msg };
-  }
-  const linkData = linkResult.data;
-  const contactUrl = nested(linkData, "url") || nested(linkData, "data", "url") || nested(linkData, "resp", "url") || "";
-  if (!contactUrl) {
-    const msg = "\u670D\u52A1\u7AEF\u672A\u8FD4\u56DE\u5BA2\u670D\u94FE\u63A5 URL";
-    log2.warn(`[device-bind] ${msg}`);
-    return { success: false, message: msg };
-  }
-  console.log("");
-  console.log("=".repeat(64));
-  console.log("\u8BF7\u7528\u300C\u63A7\u5236\u7AEF\u5FAE\u4FE1\u300D\u6253\u5F00\u4E0B\u65B9\u94FE\u63A5\uFF0C\u5B8C\u6210\u8BBE\u5907\u7ED1\u5B9A");
-  console.log("\u7ED1\u5B9A\u540E\u5FAE\u4FE1\u4E2D\u4F1A\u51FA\u73B0\u5BF9\u8BDD\u5165\u53E3");
-  console.log("=".repeat(64));
-  await showQr(contactUrl);
-  console.log(`
-\u94FE\u63A5: ${contactUrl}
-`);
-  log2.info("[device-bind] \u7B49\u5F85\u8BBE\u5907\u7ED1\u5B9A...");
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
-    try {
-      const status = await api.queryDeviceByGuid();
-      if (status.success) {
-        const sd = status.data;
-        const nickname = nested(sd, "nickname") || nested(sd, "data", "nickname");
-        const externalUserId = nested(sd, "external_user_id") || nested(sd, "data", "external_user_id");
-        if (nickname || externalUserId) {
-          const msg = `\u8BBE\u5907\u7ED1\u5B9A\u6210\u529F!${nickname ? ` \u5FAE\u4FE1\u6635\u79F0: ${nickname}` : ""}`;
-          log2.info(`[device-bind] ${msg}`);
-          return { success: true, contactUrl, nickname: nickname || void 0, message: msg };
-        }
-      }
-    } catch {
-    }
-  }
-  return {
-    success: false,
-    contactUrl,
-    message: "\u8BBE\u5907\u7ED1\u5B9A\u8D85\u65F6\u3002\u8BF7\u786E\u8BA4\u5DF2\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4E0A\u65B9\u94FE\u63A5\uFF0C\u7136\u540E\u91CD\u542F Gateway \u91CD\u8BD5\u3002"
-  };
-}
+// auth/wechat-qr-poll.ts
+var buildAuthUrl = (state, env) => {
+  const params = new URLSearchParams({
+    appid: env.wxAppId,
+    redirect_uri: env.wxLoginRedirectUri,
+    response_type: "code",
+    scope: "snsapi_login",
+    state
+  });
+  return `https://open.weixin.qq.com/connect/qrconnect?${params.toString()}#wechat_redirect`;
+};
 
 // auth/wechat-login.ts
-var waitForInviteCodeFile = async (log2) => {
-  const inviteCodeTmpFile = join3(homedir3(), ".openclaw", "wechat-invite-code.tmp");
-  try {
-    unlinkSync2(inviteCodeTmpFile);
-  } catch {
-  }
-  log2("");
-  log2("=".repeat(64));
-  log2("\u9700\u8981\u9080\u8BF7\u7801\u9A8C\u8BC1\u3002\u8BF7\u5728\u53E6\u4E00\u4E2A\u7EC8\u7AEF\u6267\u884C\uFF1A");
-  log2("");
-  log2(`echo "\u4F60\u7684\u9080\u8BF7\u7801" > ${inviteCodeTmpFile}`);
-  log2("");
-  log2("\u6CA1\u6709\u9080\u8BF7\u7801\uFF1F\u76F4\u63A5\u6267\u884C\uFF1A");
-  log2(`echo "" > ${inviteCodeTmpFile}`);
-  log2("");
-  log2("\u672C\u7A97\u53E3\u4F1A\u81EA\u52A8\u68C0\u6D4B\u5E76\u7EE7\u7EED\u3002");
-  log2("=".repeat(64));
-  const deadline = Date.now() + 3e5;
-  while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, 1500));
-    if (!existsSync(inviteCodeTmpFile)) continue;
-    let raw = "";
-    try {
-      raw = readFileSync3(inviteCodeTmpFile, "utf-8").trim();
-      unlinkSync2(inviteCodeTmpFile);
-    } catch {
-      continue;
-    }
-    return raw;
-  }
-  try {
-    unlinkSync2(inviteCodeTmpFile);
-  } catch {
-  }
-  return "";
+var askInput = (prompt) => {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(prompt, (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
 };
 var performLogin = async (options) => {
   const { guid, env, inviteCode, log: log2 } = options;
@@ -9028,66 +8998,44 @@ var performLogin = async (options) => {
     if (s) state = s;
   }
   info(`[Login] state=${state}`);
-  info("[Login] \u6B65\u9AA4 2/5: \u8BF7\u901A\u8FC7\u8C03\u7528\u65B9\u5C55\u793A\u4E8C\u7EF4\u7801\u5E76\u83B7\u53D6 code...");
-  info("[Login] \u6B65\u9AA4 3/5: \u7B49\u5F85\u5FAE\u4FE1\u626B\u7801\u6388\u6743...");
-  const codeTmpFile = join3(homedir3(), ".openclaw", "wechat-auth-code.tmp");
-  try {
-    unlinkSync2(codeTmpFile);
-  } catch {
-  }
+  info("[Login] \u6B65\u9AA4 2/5: \u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u626B\u7801\u767B\u5F55...");
+  const authUrl = buildAuthUrl(state, env);
   info("");
   info("=".repeat(64));
-  info("\u626B\u7801\u5E76\u5728\u624B\u673A\u4E0A\u786E\u8BA4\u540E\uFF0C\u6D4F\u89C8\u5668\u4F1A\u8DF3\u8F6C\u5230\u65B0\u9875\u9762\u3002");
-  info("\u5730\u5740\u680F URL \u5F62\u5982\uFF1A");
+  info("\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\uFF0C\u7528\u5FAE\u4FE1\u626B\u7801\u767B\u5F55\uFF1A");
   info("");
-  info("https://security.guanjia.qq.com/login?code=0a1B2c...&state=xxx");
+  info(authUrl);
+  info("=".repeat(64));
+  info("[Login] \u6B65\u9AA4 3/5: \u7B49\u5F85\u5FAE\u4FE1\u626B\u7801\u6388\u6743...");
   info("");
-  info("\u8BF7\u590D\u5236 code= \u540E\u9762\u7684\u503C\uFF08\u5230 & \u4E4B\u524D\uFF09\uFF0C\u5728\u53E6\u4E00\u4E2A\u7EC8\u7AEF\u6267\u884C\uFF1A");
+  info("\u626B\u7801\u5E76\u5728\u624B\u673A\u4E0A\u786E\u8BA4\u540E\uFF0C\u6D4F\u89C8\u5668\u4F1A\u8DF3\u8F6C\u5230\u65B0\u9875\u9762\u3002");
+  info("\u5730\u5740\u680F URL \u5F62\u5982\uFF1A");
   info("");
-  info(`echo "0a1B2c3D4e" > ${codeTmpFile}`);
+  info("  https://security.guanjia.qq.com/login?code=0a1B2c...&state=xxx");
   info("");
-  info("\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574 URL\uFF0C\u4F1A\u81EA\u52A8\u63D0\u53D6 code\u3002");
-  info("\u672C\u7A97\u53E3\u4F1A\u81EA\u52A8\u68C0\u6D4B\u5E76\u5B8C\u6210\u767B\u5F55\u3002");
-  info("=".repeat(64));
+  info("\u8BF7\u590D\u5236 code= \u540E\u9762\u7684\u503C\uFF08\u5230 & \u4E4B\u524D\uFF09\uFF0C\u6216\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574 URL\u3002");
   let code = "";
-  const deadline = Date.now() + 3e5;
-  while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, 1500));
-    if (!existsSync(codeTmpFile)) continue;
-    let raw = "";
+  const raw = await askInput("\n\u8BF7\u7C98\u8D34 code \u6216\u5B8C\u6574 URL: ");
+  if (!raw) {
+    throw new Error("\u672A\u83B7\u53D6\u5230\u6388\u6743 code");
+  }
+  const cleaned = raw.replace(/\\([?=&#])/g, "$1");
+  if (cleaned.includes("open.weixin.qq.com/connect/qrconnect")) {
+    throw new Error("\u8FD9\u662F\u626B\u7801\u9875\u9762\u7684 URL\uFF0C\u4E0D\u662F\u56DE\u8C03 URL\u3002\u8BF7\u5148\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u6B64\u94FE\u63A5\u626B\u7801\uFF0C\u626B\u7801\u786E\u8BA4\u540E\u6D4F\u89C8\u5668\u4F1A\u8DF3\u8F6C\u5230\u65B0\u9875\u9762\uFF0C\u518D\u590D\u5236\u65B0\u9875\u9762\u5730\u5740\u680F\u4E2D\u7684 URL\u3002");
+  }
+  if (cleaned.includes("code=")) {
     try {
-      raw = readFileSync3(codeTmpFile, "utf-8").trim();
-      unlinkSync2(codeTmpFile);
+      const url = new URL(cleaned);
+      const c = url.searchParams.get("code");
+      if (c) code = c;
     } catch {
-      continue;
-    }
-    if (!raw) continue;
-    raw = raw.replace(/\\([?=&#])/g, "$1");
-    if (raw.includes("code=")) {
-      try {
-        const url = new URL(raw);
-        const c = url.searchParams.get("code");
-        if (c) {
-          code = c;
-          break;
-        }
-      } catch {
-        const match = raw.match(/[?&#]code=([^&#]+)/);
-        if (match?.[1]) {
-          code = match[1];
-          break;
-        }
-      }
+      const match = cleaned.match(/[?&#]code=([^&#]+)/);
+      if (match?.[1]) code = match[1];
     }
-    code = raw;
-    break;
-  }
-  try {
-    unlinkSync2(codeTmpFile);
-  } catch {
   }
-  if (!code) {
-    throw new Error("\u672A\u83B7\u53D6\u5230\u6388\u6743 code\uFF08\u8D85\u65F6\uFF09");
+  if (!code) code = cleaned;
+  if (code.startsWith("http")) {
+    throw new Error("\u65E0\u6CD5\u4ECE URL \u4E2D\u63D0\u53D6 code\u3002\u8BF7\u786E\u8BA4\u7C98\u8D34\u7684\u662F\u626B\u7801\u786E\u8BA4\u540E\u8DF3\u8F6C\u9875\u9762\u7684 URL\u3002");
   }
   info(`[Login] \u6B65\u9AA4 4/5: \u7528\u6388\u6743\u7801\u767B\u5F55 (code=${code.substring(0, 10)}...)`);
   const loginResult = await api.wxLogin(code, state);
@@ -9125,7 +9073,9 @@ var performLogin = async (options) => {
         if (!verified) {
           let codeToSubmit = inviteCode;
           if (codeToSubmit === void 0) {
-            codeToSubmit = await waitForInviteCodeFile(info);
+            info("");
+            info("\u9700\u8981\u9080\u8BF7\u7801\u9A8C\u8BC1\u3002\u6CA1\u6709\u9080\u8BF7\u7801\u53EF\u76F4\u63A5\u6309\u56DE\u8F66\u8DF3\u8FC7\u3002");
+            codeToSubmit = await askInput("\u8BF7\u8F93\u5165\u9080\u8BF7\u7801: ");
           }
           const submitResult = await api.submitInviteCode(userId, codeToSubmit ?? "");
           if (!submitResult.success) {
@@ -9146,109 +9096,123 @@ var performLogin = async (options) => {
     apiKey,
     guid
   };
-  const persistedState = {
-    jwtToken,
-    channelToken,
-    apiKey,
-    guid,
-    userInfo,
-    savedAt: Date.now()
-  };
-  saveState(persistedState);
-  info("[Login] \u767B\u5F55\u6001\u5DF2\u4FDD\u5B58");
-  info("[Login] \u5F00\u59CB\u8BBE\u5907\u7ED1\u5B9A...");
-  const bindResult = await performDeviceBinding({
-    api,
-    log: log2 ?? { info: console.log, warn: console.warn, error: console.error }
-  });
-  if (bindResult.success) {
-    info(`[Login] ${bindResult.message}`);
-  } else {
-    warn(`[Login] ${bindResult.message}`);
-    warn("[Login] \u53EF\u7A0D\u540E\u91CD\u65B0\u6267\u884C\u767B\u5F55\u547D\u4EE4\u5B8C\u6210\u7ED1\u5B9A\u3002");
-  }
+  info("[Login] \u767B\u5F55\u5B8C\u6210");
   return credentials;
 };
 
-// auth/wechat-qr-poll.ts
-var buildAuthUrl = (state, env) => {
-  const params = new URLSearchParams({
-    appid: env.wxAppId,
-    redirect_uri: env.wxLoginRedirectUri,
-    response_type: "code",
-    scope: "snsapi_login",
-    state
-  });
-  return `https://open.weixin.qq.com/connect/qrconnect?${params.toString()}#wechat_redirect`;
-};
-var fetchQrUuid = async (authUrl) => {
-  const res = await fetch(authUrl, {
-    headers: {
-      "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
-    },
-    signal: AbortSignal.timeout(15e3)
-  });
-  const html = await res.text();
-  const match = html.match(/\/connect\/qrcode\/([a-zA-Z0-9_=-]+)/);
-  if (!match?.[1]) {
-    throw new Error("\u65E0\u6CD5\u4ECE\u5FAE\u4FE1\u767B\u5F55\u9875\u9762\u63D0\u53D6 QR UUID");
-  }
-  return match[1];
-};
-var fetchQrImageDataUrl = async (uuid) => {
-  const url = `https://open.weixin.qq.com/connect/qrcode/${uuid}`;
-  const res = await fetch(url, { signal: AbortSignal.timeout(15e3) });
-  const buf = Buffer.from(await res.arrayBuffer());
-  const contentType = res.headers.get("content-type") || "image/png";
-  return `data:${contentType};base64,${buf.toString("base64")}`;
-};
-var pollQrStatus = async (uuid) => {
+// auth/device-bind.ts
+var DEFAULT_OPEN_KFID = "wkzLlJLAAAfbxEV3ZcS-lHZxkaKmpejQ";
+var POLL_INTERVAL_MS = 2e3;
+var DEFAULT_TIMEOUT_MS = 3e5;
+async function defaultShowQr(url) {
   try {
-    const url = `https://lp.open.weixin.qq.com/connect/l/qrconnect?uuid=${uuid}&_=${Date.now()}`;
-    const res = await fetch(url, {
-      headers: {
-        "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
-      },
-      signal: AbortSignal.timeout(3e4)
+    const qrterm = await import("qrcode-terminal");
+    const generate = qrterm.default?.generate ?? qrterm.generate;
+    generate(url, { small: true }, (qrcode) => {
+      console.log(qrcode);
     });
-    const text = await res.text();
-    const errMatch = text.match(/wx_errcode=(\d+)/);
-    const codeMatch = text.match(/wx_code='([^']*)'/);
-    const errCode = errMatch ? parseInt(errMatch[1], 10) : 0;
-    const wxCode = codeMatch?.[1] || "";
-    if (errCode === 408) return { status: "waiting" };
-    if (errCode === 404) return { status: "scanned" };
-    if (errCode === 405 && wxCode) return { status: "confirmed", code: wxCode };
-    if (errCode === 403 || errCode === 402) return { status: "expired" };
-    return { status: "error" };
   } catch {
-    return { status: "error" };
   }
-};
+}
+async function performDeviceBinding(options) {
+  const {
+    api,
+    openKfId = DEFAULT_OPEN_KFID,
+    timeoutMs = DEFAULT_TIMEOUT_MS,
+    log: log2 = { info: console.log, warn: console.warn, error: console.error },
+    showQr = defaultShowQr
+  } = options;
+  log2.info("[device-bind] \u751F\u6210\u4F01\u5FAE\u5BA2\u670D\u94FE\u63A5...");
+  let linkResult;
+  try {
+    linkResult = await api.generateContactLink(openKfId);
+  } catch (e) {
+    const msg = `\u751F\u6210\u5BA2\u670D\u94FE\u63A5\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`;
+    log2.warn(`[device-bind] ${msg}`);
+    return { success: false, message: msg };
+  }
+  if (!linkResult.success) {
+    const msg = `\u751F\u6210\u5BA2\u670D\u94FE\u63A5\u5931\u8D25: ${linkResult.message ?? "\u672A\u77E5\u9519\u8BEF"}`;
+    log2.warn(`[device-bind] ${msg}`);
+    return { success: false, message: msg };
+  }
+  const linkData = linkResult.data;
+  const contactUrl = nested(linkData, "url") || nested(linkData, "data", "url") || nested(linkData, "resp", "url") || "";
+  if (!contactUrl) {
+    const msg = "\u670D\u52A1\u7AEF\u672A\u8FD4\u56DE\u5BA2\u670D\u94FE\u63A5 URL";
+    log2.warn(`[device-bind] ${msg}`);
+    return { success: false, message: msg };
+  }
+  console.log("");
+  console.log("=".repeat(64));
+  console.log("\u8BF7\u7528\u300C\u63A7\u5236\u7AEF\u5FAE\u4FE1\u300D\u6253\u5F00\u4E0B\u65B9\u94FE\u63A5\uFF0C\u5B8C\u6210\u8BBE\u5907\u7ED1\u5B9A");
+  console.log("\u7ED1\u5B9A\u540E\u5FAE\u4FE1\u4E2D\u4F1A\u51FA\u73B0\u5BF9\u8BDD\u5165\u53E3");
+  console.log("=".repeat(64));
+  await showQr(contactUrl);
+  console.log(`
+\u94FE\u63A5: ${contactUrl}
+`);
+  log2.info("[device-bind] \u7B49\u5F85\u8BBE\u5907\u7ED1\u5B9A...");
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+    try {
+      const status = await api.queryDeviceByGuid();
+      if (status.success) {
+        const sd = status.data;
+        const nickname = nested(sd, "nickname") || nested(sd, "data", "nickname");
+        const externalUserId = nested(sd, "external_user_id") || nested(sd, "data", "external_user_id");
+        if (nickname || externalUserId) {
+          const msg = `\u8BBE\u5907\u7ED1\u5B9A\u6210\u529F!${nickname ? ` \u5FAE\u4FE1\u6635\u79F0: ${nickname}` : ""}`;
+          log2.info(`[device-bind] ${msg}`);
+          return { success: true, contactUrl, nickname: nickname || void 0, message: msg };
+        }
+      }
+    } catch {
+    }
+  }
+  return {
+    success: false,
+    contactUrl,
+    message: "\u8BBE\u5907\u7ED1\u5B9A\u8D85\u65F6\u3002\u8BF7\u786E\u8BA4\u5DF2\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4E0A\u65B9\u94FE\u63A5\uFF0C\u7136\u540E\u91CD\u542F Gateway \u91CD\u8BD5\u3002"
+  };
+}
 
 // index.ts
+import { join as join3 } from "path";
+import { homedir as homedir3 } from "os";
 var wsClients = /* @__PURE__ */ new Map();
-var pendingQrLogin = null;
+var wbHttpContext = null;
+var lastChatIdByTo = /* @__PURE__ */ new Map();
+function readChannelConfig() {
+  const runtime2 = getWecomRuntime();
+  const cfg = runtime2.config.loadConfig();
+  return cfg?.channels?.["wechat-access-unqclawed"] ?? {};
+}
+async function writeChannelConfig(update) {
+  const runtime2 = getWecomRuntime();
+  const cfg = runtime2.config.loadConfig();
+  const channels = { ...cfg.channels ?? {} };
+  channels["wechat-access-unqclawed"] = {
+    ...channels["wechat-access-unqclawed"] ?? {},
+    ...update
+  };
+  await runtime2.config.writeConfigFile({ ...cfg, channels });
+}
 var meta = {
   id: "wechat-access-unqclawed",
   label: "\u817E\u8BAF\u901A\u8DEF",
-  /** 选择时的显示文本 */
   selectionLabel: "\u817E\u8BAF\u901A\u8DEF",
   detailLabel: "\u817E\u8BAF\u901A\u8DEF",
-  /** 文档路径 */
   docsPath: "/channels/wechat-access",
   docsLabel: "wechat-access-unqclawed",
-  /** 简介 */
   blurb: "\u901A\u7528\u901A\u8DEF",
-  /** 图标 */
   systemImage: "message.fill",
-  /** 排序权重 */
   order: 85
 };
 var tencentAccessPlugin = {
   id: "wechat-access-unqclawed",
   meta,
-  // 能力声明
   capabilities: {
     chatTypes: ["direct"],
     reactions: false,
@@ -9257,13 +9221,9 @@ var tencentAccessPlugin = {
     nativeCommands: false,
     blockStreaming: false
   },
-  // 热重载：token 或 wsUrl 变更时触发 gateway 重启
   reload: {
     configPrefixes: ["channels.wechat-access-unqclawed.token", "channels.wechat-access-unqclawed.wsUrl"]
   },
-  // 声明支持的 gateway 方法（框架通过此字段找到 login provider）
-  gatewayMethods: ["web.login.start", "web.login.wait"],
-  // 配置适配器（必需）
   config: {
     listAccountIds: (cfg) => {
       const accounts = cfg.channels?.["wechat-access-unqclawed"]?.accounts;
@@ -9276,174 +9236,62 @@ var tencentAccessPlugin = {
       const accounts = cfg.channels?.["wechat-access-unqclawed"]?.accounts;
       const account = accounts?.[accountId ?? "default"];
       return account ?? { accountId: accountId ?? "default" };
-    }
+    },
+    resolveAllowFrom: () => ["*"]
   },
-  // 认证适配器：openclaw channels login --channel wechat-access-unqclawed
+  // 认证适配器：提示用户使用 CLI
   auth: {
-    login: async ({ cfg, accountId, runtime: runtime2 }) => {
-      const channelCfg = cfg?.channels?.["wechat-access-unqclawed"];
-      const envName = channelCfg?.environment ? String(channelCfg.environment) : "production";
-      const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
-      const env = getEnvironment(envName);
-      const guid = getDeviceGuid();
-      runtime2.log("[wechat-access] \u83B7\u53D6\u767B\u5F55 state...");
-      const api = new QClawAPI(env, guid);
-      const stateResult = await api.getWxLoginState();
-      let state = String(Math.floor(Math.random() * 1e4));
-      if (stateResult.success) {
-        const s = nested(stateResult.data, "state");
-        if (s) state = s;
-      }
-      runtime2.log("[wechat-access] \u751F\u6210\u5FAE\u4FE1\u767B\u5F55\u4E8C\u7EF4\u7801...");
-      const authUrl = buildAuthUrl(state, env);
-      try {
-        const qrterm = await import("qrcode-terminal");
-        const generate = qrterm.default?.generate ?? qrterm.generate;
-        generate(authUrl, { small: true }, (qrcode) => {
-          runtime2.log("\n" + qrcode);
-        });
-      } catch {
-        runtime2.log("(qrcode-terminal \u4E0D\u53EF\u7528)");
-      }
-      runtime2.log(`
-\u6216\u5728\u6D4F\u89C8\u5668\u6253\u5F00: ${authUrl}
-`);
-      const { join: join4 } = await import("path");
-      const { homedir: homedir4 } = await import("os");
-      const { readFileSync: readFileSync4, unlinkSync: unlinkSync3, existsSync: existsSync2 } = await import("fs");
-      const codeTmpFile = join4(homedir4(), ".openclaw", "wechat-auth-code.tmp");
-      try {
-        unlinkSync3(codeTmpFile);
-      } catch {
-      }
-      runtime2.log("");
-      runtime2.log("=".repeat(64));
-      runtime2.log("\u626B\u7801\u5E76\u5728\u624B\u673A\u4E0A\u786E\u8BA4\u540E\uFF0C\u6D4F\u89C8\u5668\u4F1A\u8DF3\u8F6C\u5230\u65B0\u9875\u9762\u3002");
-      runtime2.log("\u5730\u5740\u680F URL \u5F62\u5982\uFF1A");
-      runtime2.log("");
-      runtime2.log("https://security.guanjia.qq.com/login?code=0a1B2c...&state=xxx");
-      runtime2.log("");
-      runtime2.log("\u8BF7\u590D\u5236 code= \u540E\u9762\u7684\u503C\uFF08\u5230 & \u4E4B\u524D\uFF09\uFF0C\u5728\u53E6\u4E00\u4E2A\u7EC8\u7AEF\u6267\u884C\uFF1A");
-      runtime2.log("");
-      runtime2.log(`echo "0a1B2c3D4e" > ${codeTmpFile}`);
-      runtime2.log("");
-      runtime2.log("\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7C98\u8D34\u5B8C\u6574 URL\uFF0C\u4F1A\u81EA\u52A8\u63D0\u53D6 code\u3002");
-      runtime2.log("\u672C\u7A97\u53E3\u4F1A\u81EA\u52A8\u68C0\u6D4B\u5E76\u5B8C\u6210\u767B\u5F55\u3002");
-      runtime2.log("=".repeat(64));
-      const deadline = Date.now() + 3e5;
-      while (Date.now() < deadline) {
-        await new Promise((r) => setTimeout(r, 1500));
-        if (!existsSync2(codeTmpFile)) continue;
-        let raw = "";
-        try {
-          raw = readFileSync4(codeTmpFile, "utf-8").trim();
-          unlinkSync3(codeTmpFile);
-        } catch {
-          continue;
-        }
-        if (!raw) continue;
-        raw = raw.replace(/\\([?=&#])/g, "$1");
-        let code = raw;
-        if (raw.includes("code=")) {
-          try {
-            const url = new URL(raw);
-            const c = url.searchParams.get("code");
-            if (c) code = c;
-          } catch {
-            const match = raw.match(/[?&#]code=([^&#]+)/);
-            if (match?.[1]) code = match[1];
-          }
-        }
-        if (!code) {
-          runtime2.log("[wechat-access] \u672A\u80FD\u4ECE\u8F93\u5165\u4E2D\u63D0\u53D6 code\u3002\u8BF7\u53EA\u590D\u5236 code= \u540E\u9762\u7684\u503C\uFF08\u5230 & \u4E4B\u524D\uFF09\uFF0C\u91CD\u65B0\u5199\u5165\u6587\u4EF6\u3002");
-          continue;
-        }
-        runtime2.log(`[wechat-access] \u6536\u5230 code: ${code.substring(0, 10)}...\uFF0C\u6B63\u5728\u83B7\u53D6 token...`);
-        const loginResult = await api.wxLogin(code, state);
-        if (!loginResult.success) {
-          throw new Error(`\u767B\u5F55\u5931\u8D25: ${loginResult.message ?? "\u672A\u77E5\u9519\u8BEF"}`);
-        }
-        const loginData = loginResult.data;
-        const jwtToken = nested(loginData, "token") || nested(loginData, "data", "token") || "";
-        const channelToken = nested(loginData, "openclaw_channel_token") || nested(loginData, "data", "openclaw_channel_token") || "";
-        const userInfo = nested(loginData, "user_info") || nested(loginData, "data", "user_info") || {};
-        runtime2.log(`[wechat-access] wxLogin \u54CD\u5E94: jwtToken=${jwtToken ? jwtToken.substring(0, 8) + "..." : "(\u7A7A)"}, channelToken=${channelToken ? channelToken.substring(0, 8) + "..." : "(\u7A7A)"}, userId=${nested(userInfo, "user_id") ?? "(\u65E0)"}`);
-        const loginKey = userInfo.loginKey;
-        if (loginKey) api.loginKey = loginKey;
-        api.jwtToken = jwtToken;
-        api.userId = String(userInfo.user_id ?? "");
-        let apiKey = "";
-        try {
-          const keyResult = await api.createApiKey();
-          if (keyResult.success) {
-            apiKey = nested(keyResult.data, "key") ?? nested(keyResult.data, "resp", "data", "key") ?? "";
+    login: async ({ runtime: runtime2 }) => {
+      runtime2.log("[wechat-access] \u8BF7\u4F7F\u7528 'openclaw wechat login' \u547D\u4EE4\u767B\u5F55");
+    }
+  },
+  // 出站适配器
+  outbound: {
+    deliveryMode: "direct",
+    sendText: async (ctx) => {
+      if (wbHttpContext) {
+        const chatId = lastChatIdByTo.get(ctx.to) || lastChatIdByTo.get(ctx.to.split(":").pop() || "");
+        if (!chatId) {
+          console.warn(`[wechat-access] sendText: \u672A\u627E\u5230 chatId for to=${ctx.to}, \u8DF3\u8FC7`);
+          return { ok: true };
+        }
+        const httpPayload = {
+          type: "COPILOT_RESPONSE",
+          msgId: ctx.replyToId || `outbound-${Date.now()}`,
+          chatId,
+          success: true,
+          message: ctx.text,
+          metadata: {
+            sessionId: wbHttpContext.sessionId,
+            state: "completed"
           }
-        } catch {
-        }
-        const runtimeLog = {
-          info: (...args) => runtime2.log(...args),
-          warn: (...args) => runtime2.log(...args),
-          error: (...args) => runtime2.log(...args)
         };
-        const bindResult = await performDeviceBinding({
-          api,
-          log: runtimeLog,
-          showQr: async (url) => {
-            try {
-              const qrterm = await import("qrcode-terminal");
-              const generate = qrterm.default?.generate ?? qrterm.generate;
-              generate(url, { small: true }, (qrcode) => {
-                runtime2.log("\n" + qrcode);
-              });
-            } catch {
-              runtime2.log("(qrcode-terminal \u4E0D\u53EF\u7528)");
-            }
-          }
-        });
-        if (!bindResult.success) {
-          throw new Error(`\u8BBE\u5907\u7ED1\u5B9A\u5931\u8D25: ${bindResult.message}\u3002\u8BF7\u91CD\u65B0\u767B\u5F55\u91CD\u8BD5\u3002`);
-        }
-        runtime2.log(`[wechat-access] ${bindResult.message}`);
+        const url = `${wbHttpContext.baseUrl}/v2/backgroundagent/wecom/local-proxy/receive`;
         try {
-          const wRuntime = getWecomRuntime();
-          const fullCfg = wRuntime.config.loadConfig();
-          const channels = { ...fullCfg.channels ?? {} };
-          channels["wechat-access-unqclawed"] = {
-            ...channels["wechat-access-unqclawed"] ?? {},
-            token: channelToken,
-            wsUrl: env.wechatWsUrl,
-            guid,
-            userId: String(userInfo.user_id ?? "")
-          };
-          const nextCfg = { ...fullCfg, channels };
-          if (apiKey) {
-            const models = { ...fullCfg.models ?? {} };
-            const providers = { ...models.providers ?? {} };
-            providers.qclaw = { ...providers.qclaw ?? {}, apiKey };
-            models.providers = providers;
-            nextCfg.models = models;
+          const res = await fetch(url, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "Authorization": `Bearer ${wbHttpContext.accessToken}`
+            },
+            body: JSON.stringify(httpPayload),
+            signal: AbortSignal.timeout(3e4)
+          });
+          if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            console.error(`[wechat-access] sendText HTTP \u5931\u8D25: ${res.status} ${body.substring(0, 200)}`);
+          } else {
+            console.log(`[wechat-access] sendText HTTP \u53D1\u9001\u6210\u529F: to=${ctx.to}`);
           }
-          await wRuntime.config.writeConfigFile(nextCfg);
-        } catch {
+        } catch (err) {
+          console.error(`[wechat-access] sendText HTTP \u5F02\u5E38:`, err);
         }
-        saveState({ jwtToken, channelToken, apiKey, guid, userInfo, savedAt: Date.now() }, authStatePath);
-        const nickname = userInfo.nickname ?? "\u7528\u6237";
-        runtime2.log(`[wechat-access] \u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}\uFF0Ctoken \u5DF2\u4FDD\u5B58\u3002\u8BF7\u91CD\u542F Gateway \u751F\u6548\u3002`);
-        return;
-      }
-      try {
-        unlinkSync3(codeTmpFile);
-      } catch {
+        return { ok: true };
       }
-      throw new Error("\u767B\u5F55\u8D85\u65F6\uFF085 \u5206\u949F\uFF09\uFF0C\u8BF7\u91CD\u8BD5");
+      return { ok: true };
     }
   },
-  // 出站适配器（必需）
-  outbound: {
-    deliveryMode: "direct",
-    sendText: async () => ({ ok: true })
-  },
-  // 状态适配器：上报 WebSocket 连接状态
+  // 状态适配器
   status: {
     buildAccountSnapshot: ({ accountId }) => {
       const client = wsClients.get(accountId ?? "default");
@@ -9451,68 +9299,62 @@ var tencentAccessPlugin = {
       return { running };
     }
   },
-  // Gateway 适配器：按账号启动/停止 WebSocket 连接
+  // Gateway 适配器
   gateway: {
     startAccount: async (ctx) => {
       const { cfg, accountId, abortSignal, log: log2 } = ctx;
       log2?.info(`[wechat-access] >>> startAccount \u88AB\u8C03\u7528, accountId=${accountId}`);
       try {
-        const tencentAccessConfig = cfg?.channels?.["wechat-access-unqclawed"];
-        log2?.info(`[wechat-access] tencentAccessConfig=${JSON.stringify(tencentAccessConfig ?? null)}`);
-        const authStatePath = tencentAccessConfig?.authStatePath ? String(tencentAccessConfig.authStatePath) : void 0;
+        const channelCfg = readChannelConfig();
         const gatewayPort = cfg?.gateway?.port ? String(cfg.gateway.port) : "unknown";
         const guid = getDeviceGuid();
-        const savedState = loadState(authStatePath);
-        const loginMode = tencentAccessConfig?.loginMode || savedState?.loginMode || "qclaw";
+        const loginMode = channelCfg.loginMode || "qclaw";
         log2?.info(`[wechat-access] \u542F\u52A8\u8D26\u53F7 ${accountId}, loginMode=${loginMode}`);
-        if (loginMode === "codebuddy") {
-          log2?.info(`[wechat-access] CodeBuddy \u6A21\u5F0F, savedState\u5B58\u5728=${!!savedState}, accessToken\u5B58\u5728=${!!savedState?.accessToken}, loginMode=${savedState?.loginMode}`);
-          if (!savedState?.accessToken) {
-            log2?.warn(`[wechat-access] CodeBuddy \u6A21\u5F0F\u672A\u627E\u5230 accessToken\uFF0C\u8BF7\u8FD0\u884C "openclaw wechat login --mode codebuddy" \u5B8C\u6210\u767B\u5F55`);
+        if (loginMode === "workbuddy") {
+          const creds = channelCfg.workbuddy;
+          log2?.info(`[wechat-access] WorkBuddy \u6A21\u5F0F, hasCredentials=${!!creds}, hasAccessToken=${!!creds?.accessToken}`);
+          if (!creds?.accessToken) {
+            log2?.warn(`[wechat-access] WorkBuddy \u6A21\u5F0F\u672A\u627E\u5230 accessToken\uFF0C\u8BF7\u8FD0\u884C "openclaw wechat login" \u5B8C\u6210\u767B\u5F55`);
+            return;
+          }
+          const cbApi = new CodeBuddyAPI(creds.baseUrl);
+          cbApi.accessToken = creds.accessToken;
+          cbApi.refreshToken = creds.refreshToken || "";
+          cbApi.userId = creds.userId || String(creds.userInfo?.userId ?? "") || String(creds.userInfo?.user_id ?? "") || String(creds.userInfo?.uid ?? "");
+          cbApi.hostId = creds.hostId || cbApi.hostId;
+          log2?.info(`[wechat-access] CodeBuddy API \u521D\u59CB\u5316\u5B8C\u6210, userId=${cbApi.userId}, hostId=${cbApi.hostId}`);
+          if (!cbApi.userId) {
+            log2?.warn(`[wechat-access] userId \u4E3A\u7A7A\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C "openclaw wechat login" \u767B\u5F55`);
             return;
           }
-          const cbBaseUrl = tencentAccessConfig?.codebuddyBaseUrl ? String(tencentAccessConfig.codebuddyBaseUrl) : void 0;
-          const cbApi = new CodeBuddyAPI(cbBaseUrl);
-          cbApi.accessToken = savedState.accessToken;
-          cbApi.refreshToken = savedState.refreshToken || "";
-          cbApi.userId = String(savedState.userInfo?.userId ?? "");
-          cbApi.hostId = savedState.hostId || cbApi.hostId;
-          log2?.info(`[wechat-access] CodeBuddy API \u521D\u59CB\u5316\u5B8C\u6210, userId=${cbApi.userId}, hostId=${cbApi.hostId}, hasRefreshToken=${!!cbApi.refreshToken}`);
           try {
-            log2?.info(`[wechat-access] \u6B63\u5728\u5237\u65B0 CodeBuddy accessToken...`);
-            const refreshed = await cbApi.doRefreshToken();
-            log2?.info(`[wechat-access] CodeBuddy accessToken \u5DF2\u5237\u65B0`);
-            if (savedState) {
-              savedState.accessToken = refreshed.accessToken;
-              savedState.refreshToken = refreshed.refreshToken;
-              savedState.savedAt = Date.now();
-              saveState(savedState, authStatePath);
-            }
+            log2?.info(`[wechat-access] \u6B63\u5728\u5237\u65B0 accessToken...`);
+            await cbApi.doRefreshToken();
+            log2?.info(`[wechat-access] accessToken \u5DF2\u5237\u65B0`);
           } catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
-            log2?.warn(`[wechat-access] CodeBuddy token \u5237\u65B0\u5F02\u5E38: ${msg}`);
+            log2?.warn(`[wechat-access] token \u5237\u65B0\u5F02\u5E38: ${msg}`);
             if (msg.includes("\u8FC7\u671F") || msg.includes("401") || msg.includes("403")) {
-              clearState(authStatePath);
-              log2?.warn(`[wechat-access] CodeBuddy token \u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C "openclaw wechat login --mode codebuddy"`);
+              log2?.warn(`[wechat-access] token \u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C "openclaw wechat login"`);
               return;
             }
-            log2?.warn(`[wechat-access] CodeBuddy token \u5237\u65B0\u5931\u8D25\uFF0C\u4F7F\u7528\u65E7 token \u7EE7\u7EED`);
+            log2?.warn(`[wechat-access] token \u5237\u65B0\u5931\u8D25\uFF0C\u4F7F\u7528\u65E7 token \u7EE7\u7EED`);
           }
-          log2?.info(`[wechat-access] \u6B63\u5728\u6CE8\u518C Workspace...`);
+          log2?.info(`[wechat-access] \u6B63\u5728\u6CE8\u518C Host Channel...`);
           let centrifugeParams;
           try {
             centrifugeParams = await cbApi.registerWorkspace({
               userId: cbApi.userId,
               hostId: cbApi.hostId,
-              workspaceId: `openclaw-${accountId}`,
-              workspaceName: `openclaw-${accountId}`
+              workspaceId: "",
+              workspaceName: `Host Channel (${cbApi.hostId})`
             });
-            log2?.info(`[wechat-access] Workspace \u6CE8\u518C\u6210\u529F, channel=${centrifugeParams.channel}, url=${centrifugeParams.url}`);
+            log2?.info(`[wechat-access] Host Channel \u6CE8\u518C\u6210\u529F, channel=${centrifugeParams.channel}, url=${centrifugeParams.url}`);
           } catch (e) {
             log2?.error(`[wechat-access] Workspace \u6CE8\u518C\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
             return;
           }
-          const client2 = new CentrifugeGatewayClient(
+          const client = new CentrifugeGatewayClient(
             {
               url: centrifugeParams.url,
               connectionToken: centrifugeParams.connectionToken,
@@ -9520,37 +9362,62 @@ var tencentAccessPlugin = {
               subscriptionToken: centrifugeParams.subscriptionToken,
               guid,
               userId: cbApi.userId,
-              gatewayPort
+              gatewayPort,
+              httpBaseUrl: creds.baseUrl || "https://copilot.tencent.com",
+              httpAccessToken: cbApi.accessToken,
+              workspaceSessionId: cbApi.buildSessionId()
             },
             {
               onConnected: () => {
                 log2?.info(`[wechat-access] Centrifuge \u8FDE\u63A5\u6210\u529F`);
                 ctx.setStatus({ running: true });
+                const clawPath = join3(homedir3(), "WorkBuddy", "Claw");
+                cbApi.registerWorkspace({
+                  userId: cbApi.userId,
+                  hostId: cbApi.hostId,
+                  workspaceId: clawPath,
+                  workspaceName: "Claw"
+                }).then((clawParams) => {
+                  log2?.info(`[wechat-access] Claw workspace \u6CE8\u518C\u6210\u529F, channel=${clawParams.channel}`);
+                  client.subscribeChannel(clawParams.channel, clawParams.subscriptionToken);
+                }).catch((e) => {
+                  log2?.warn(`[wechat-access] Claw workspace \u6CE8\u518C\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
+                });
               },
               onDisconnected: (reason) => {
                 log2?.warn(`[wechat-access] Centrifuge \u8FDE\u63A5\u65AD\u5F00: ${reason}`);
                 ctx.setStatus({ running: false });
               },
               onPrompt: (message) => {
-                void handlePrompt(message, client2).catch((err) => {
+                if (message._wechatKf?.chatId) {
+                  const sessionKey = `agent:main:wechat-access:direct:${cbApi.userId}`;
+                  lastChatIdByTo.set(sessionKey, message._wechatKf.chatId);
+                  lastChatIdByTo.set(cbApi.userId, message._wechatKf.chatId);
+                }
+                void handlePrompt(message, client).catch((err) => {
                   log2?.error(`[wechat-access] \u5904\u7406 prompt \u5931\u8D25: ${err.message}`);
                 });
               },
               onCancel: (message) => {
-                handleCancel(message, client2);
+                handleCancel(message, client);
               },
               onError: (error) => {
                 log2?.error(`[wechat-access] Centrifuge \u9519\u8BEF: ${error.message}`);
               }
             }
           );
-          wsClients.set(accountId, client2);
-          client2.start();
+          wsClients.set(accountId, client);
+          client.start();
+          wbHttpContext = {
+            baseUrl: creds.baseUrl || "https://copilot.tencent.com",
+            accessToken: cbApi.accessToken,
+            sessionId: cbApi.buildSessionId()
+          };
           await new Promise((resolve) => {
             abortSignal.addEventListener("abort", () => {
               log2?.info(`[wechat-access] \u505C\u6B62\u8D26\u53F7 ${accountId}`);
-              client2.stop();
-              if (wsClients.get(accountId) === client2) {
+              client.stop();
+              if (wsClients.get(accountId) === client) {
                 wsClients.delete(accountId);
                 ctx.setStatus({ running: false });
               }
@@ -9559,11 +9426,11 @@ var tencentAccessPlugin = {
           });
           return;
         }
-        let token = tencentAccessConfig?.token ? String(tencentAccessConfig.token) : "";
-        const configWsUrl = tencentAccessConfig?.wsUrl ? String(tencentAccessConfig.wsUrl) : "";
-        const envName = tencentAccessConfig?.environment ? String(tencentAccessConfig.environment) : "production";
+        const qclawCreds = channelCfg.qclaw;
+        const envName = channelCfg.environment ? String(channelCfg.environment) : "production";
         const env = getEnvironment(envName);
-        const wsUrl = configWsUrl || env.wechatWsUrl;
+        const wsUrl = qclawCreds?.wsUrl || env.wechatWsUrl;
+        let token = qclawCreds?.channelToken || "";
         log2?.info(`[wechat-access] QClaw \u6A21\u5F0F\u542F\u52A8`, {
           platform: process.platform,
           nodeVersion: process.version,
@@ -9572,19 +9439,15 @@ var tencentAccessPlugin = {
           url: wsUrl || "(\u672A\u914D\u7F6E)",
           tokenPrefix: token ? token.substring(0, 6) + "..." : "(\u672A\u914D\u7F6E)"
         });
-        if (!token && savedState?.channelToken) {
-          token = savedState.channelToken;
-          log2?.info(`[wechat-access] \u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684 token: ${token.substring(0, 6)}...`);
-        }
         if (!token) {
-          log2?.warn(`[wechat-access] \u672A\u627E\u5230 token\uFF0C\u8BF7\u8FD0\u884C "openclaw channels login --channel wechat-access-unqclawed" \u5B8C\u6210\u626B\u7801\u767B\u5F55\uFF0C\u7136\u540E\u91CD\u542F Gateway`);
+          log2?.warn(`[wechat-access] \u672A\u627E\u5230 token\uFF0C\u8BF7\u8FD0\u884C "openclaw wechat login" \u5B8C\u6210\u626B\u7801\u767B\u5F55\uFF0C\u7136\u540E\u91CD\u542F Gateway`);
           return;
         }
-        const jwtToken = savedState?.jwtToken || "";
+        const jwtToken = qclawCreds?.jwtToken || "";
         if (jwtToken) {
           const api = new QClawAPI(env, guid, jwtToken);
-          api.userId = String(savedState?.userInfo?.user_id ?? "");
-          const savedLoginKey = savedState?.userInfo?.loginKey;
+          api.userId = qclawCreds?.userId || "";
+          const savedLoginKey = qclawCreds?.userInfo?.loginKey;
           if (savedLoginKey) api.loginKey = savedLoginKey;
           let refreshed = false;
           for (let attempt = 0; attempt < 3; attempt++) {
@@ -9593,29 +9456,12 @@ var tencentAccessPlugin = {
               if (newToken) {
                 token = newToken;
                 log2?.info(`[wechat-access] channel_token \u5DF2\u5237\u65B0: ${token.substring(0, 6)}...`);
-                if (savedState) {
-                  savedState.channelToken = newToken;
-                  savedState.savedAt = Date.now();
-                  saveState(savedState, authStatePath);
-                }
-                try {
-                  const wRuntime = getWecomRuntime();
-                  const fullCfg = wRuntime.config.loadConfig();
-                  const channels = { ...fullCfg.channels ?? {} };
-                  channels["wechat-access-unqclawed"] = {
-                    ...channels["wechat-access-unqclawed"] ?? {},
-                    token: newToken
-                  };
-                  await wRuntime.config.writeConfigFile({ ...fullCfg, channels });
-                } catch {
-                }
                 refreshed = true;
                 break;
               }
             } catch (e) {
               if (e instanceof TokenExpiredError) {
-                clearState(authStatePath);
-                log2?.warn(`[wechat-access] jwt_token \u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C "openclaw channels login --channel wechat-access-unqclawed"`);
+                log2?.warn(`[wechat-access] jwt_token \u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C "openclaw wechat login"`);
                 return;
               }
               log2?.warn(`[wechat-access] token \u5237\u65B0\u5931\u8D25 (${attempt + 1}/3): ${e instanceof Error ? e.message : String(e)}`);
@@ -9626,7 +9472,7 @@ var tencentAccessPlugin = {
             log2?.info(`[wechat-access] token \u5237\u65B0\u5931\u8D25\uFF0C\u4F7F\u7528\u65E7 token \u5C1D\u8BD5\u8FDE\u63A5`);
           }
         }
-        const userId = tencentAccessConfig?.userId ? String(tencentAccessConfig.userId) : String(savedState?.userInfo?.user_id ?? "");
+        const userId = qclawCreds?.userId || "";
         const wsConfig = {
           url: wsUrl,
           token,
@@ -9637,7 +9483,7 @@ var tencentAccessPlugin = {
           maxReconnectAttempts: 10,
           heartbeatInterval: 2e4
         };
-        const client = new WechatAccessWebSocketClient(wsConfig, {
+        const qclawClient = new WechatAccessWebSocketClient(wsConfig, {
           onConnected: () => {
             log2?.info(`[wechat-access] WebSocket \u8FDE\u63A5\u6210\u529F`);
             ctx.setStatus({ running: true });
@@ -9647,24 +9493,24 @@ var tencentAccessPlugin = {
             ctx.setStatus({ running: false });
           },
           onPrompt: (message) => {
-            void handlePrompt(message, client).catch((err) => {
+            void handlePrompt(message, qclawClient).catch((err) => {
               log2?.error(`[wechat-access] \u5904\u7406 prompt \u5931\u8D25: ${err.message}`);
             });
           },
           onCancel: (message) => {
-            handleCancel(message, client);
+            handleCancel(message, qclawClient);
           },
           onError: (error) => {
             log2?.error(`[wechat-access] WebSocket \u9519\u8BEF: ${error.message}`);
           }
         });
-        wsClients.set(accountId, client);
-        client.start();
+        wsClients.set(accountId, qclawClient);
+        qclawClient.start();
         await new Promise((resolve) => {
           abortSignal.addEventListener("abort", () => {
             log2?.info(`[wechat-access] \u505C\u6B62\u8D26\u53F7 ${accountId}`);
-            client.stop();
-            if (wsClients.get(accountId) === client) {
+            qclawClient.stop();
+            if (wsClients.get(accountId) === qclawClient) {
               wsClients.delete(accountId);
               ctx.setStatus({ running: false });
             }
@@ -9688,253 +9534,6 @@ ${e?.stack ?? ""}`);
       } else {
         log2?.warn(`[wechat-access] stopAccount: \u672A\u627E\u5230\u8D26\u53F7 ${accountId} \u7684\u5BA2\u6237\u7AEF`);
       }
-    },
-    // QR 扫码登录：生成二维码（openclaw channels login 调用）
-    loginWithQrStart: async (_params) => {
-      try {
-        const runtime2 = getWecomRuntime();
-        const cfg = runtime2.config.loadConfig();
-        const channelCfg = cfg?.channels?.["wechat-access-unqclawed"];
-        const loginMode = channelCfg?.loginMode || "qclaw";
-        if (loginMode === "codebuddy") {
-          const cbBaseUrl = channelCfg?.codebuddyBaseUrl ? String(channelCfg.codebuddyBaseUrl) : void 0;
-          const cbApi = new CodeBuddyAPI(cbBaseUrl);
-          const { authUrl: authUrl2, state: cbState } = await cbApi.fetchAuthState();
-          pendingQrLogin = { loginMode: "codebuddy", cbApi, cbState, cbPhase: "oauth" };
-          return {
-            // 没有 qrDataUrl，前端应该展示 authUrl 链接让用户在浏览器中打开
-            authUrl: authUrl2,
-            message: `\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u5B8C\u6210\u767B\u5F55\uFF1A
-${authUrl2}`
-          };
-        }
-        const envName = channelCfg?.environment ? String(channelCfg.environment) : "production";
-        const bypassInvite = channelCfg?.bypassInvite === true;
-        const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
-        const env = getEnvironment(envName);
-        const guid = getDeviceGuid();
-        const api = new QClawAPI(env, guid);
-        const stateResult = await api.getWxLoginState();
-        let state = String(Math.floor(Math.random() * 1e4));
-        if (stateResult.success) {
-          const s = nested(stateResult.data, "state");
-          if (s) state = s;
-        }
-        const authUrl = buildAuthUrl(state, env);
-        const uuid = await fetchQrUuid(authUrl);
-        const qrDataUrl = await fetchQrImageDataUrl(uuid);
-        pendingQrLogin = { loginMode: "qclaw", state, uuid, env, guid, bypassInvite, authStatePath };
-        return { qrDataUrl, message: "\u8BF7\u7528\u5FAE\u4FE1\u626B\u63CF\u4E8C\u7EF4\u7801\u767B\u5F55" };
-      } catch (err) {
-        return { message: `\u767B\u5F55\u521D\u59CB\u5316\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}` };
-      }
-    },
-    // QR 扫码登录：轮询扫码状态（openclaw channels login 循环调用）
-    loginWithQrWait: async (_params) => {
-      if (!pendingQrLogin) {
-        return { connected: false, message: "\u8BF7\u5148\u6267\u884C loginWithQrStart" };
-      }
-      if (pendingQrLogin.loginMode === "codebuddy") {
-        try {
-          const { cbApi, cbState, cbPhase } = pendingQrLogin;
-          if (!cbApi || !cbState) {
-            pendingQrLogin = null;
-            return { connected: false, message: "CodeBuddy \u767B\u5F55\u72B6\u6001\u5F02\u5E38" };
-          }
-          if (cbPhase === "oauth") {
-            try {
-              const url = `${cbApi.baseUrl}/v2/plugin/auth/token?state=${cbState}`;
-              const res = await fetch(url, {
-                method: "GET",
-                headers: { "Content-Type": "application/json", "X-No-Authorization": "true" },
-                signal: AbortSignal.timeout(5e3)
-              });
-              if (!res.ok) {
-                const body = await res.text().catch(() => "");
-                if (body.includes("11217")) {
-                  return { connected: false, message: "\u7B49\u5F85\u6D4F\u89C8\u5668\u767B\u5F55..." };
-                }
-                return { connected: false, message: "\u7B49\u5F85\u6D4F\u89C8\u5668\u767B\u5F55..." };
-              }
-              const data = await res.json();
-              const token = data?.data;
-              if (!token?.accessToken) {
-                return { connected: false, message: "\u7B49\u5F85\u6D4F\u89C8\u5668\u767B\u5F55..." };
-              }
-              cbApi.accessToken = token.accessToken;
-              cbApi.refreshToken = token.refreshToken || "";
-              let userInfo = {};
-              try {
-                userInfo = await cbApi.getAccount(cbState);
-              } catch {
-              }
-              cbApi.userId = String(userInfo.userId ?? userInfo.user_id ?? "");
-              const sessionId = cbApi.buildSessionId(`openclaw-${_params.accountId ?? "default"}`);
-              pendingQrLogin.cbSessionId = sessionId;
-              let bindUrl = "";
-              try {
-                const linkResult = await cbApi.wechatkfGetLink(sessionId);
-                if (linkResult.success && linkResult.url) {
-                  bindUrl = linkResult.url;
-                }
-              } catch {
-              }
-              const guid = getDeviceGuid();
-              const authStatePath = (() => {
-                try {
-                  const rt = getWecomRuntime();
-                  const c = rt.config.loadConfig();
-                  const cc = c?.channels?.["wechat-access-unqclawed"];
-                  return cc?.authStatePath ? String(cc.authStatePath) : void 0;
-                } catch {
-                  return void 0;
-                }
-              })();
-              const persistedState = {
-                loginMode: "codebuddy",
-                jwtToken: "",
-                channelToken: "",
-                apiKey: "",
-                guid,
-                userInfo,
-                savedAt: Date.now(),
-                accessToken: cbApi.accessToken,
-                refreshToken: cbApi.refreshToken,
-                hostId: cbApi.hostId
-              };
-              saveState(persistedState, authStatePath);
-              try {
-                const wRuntime = getWecomRuntime();
-                const fullCfg = wRuntime.config.loadConfig();
-                const channels = { ...fullCfg.channels ?? {} };
-                channels["wechat-access-unqclawed"] = {
-                  ...channels["wechat-access-unqclawed"] ?? {},
-                  loginMode: "codebuddy"
-                };
-                await wRuntime.config.writeConfigFile({ ...fullCfg, channels });
-              } catch {
-              }
-              pendingQrLogin = null;
-              const nickname = String(userInfo.nickName ?? userInfo.nickname ?? "\u7528\u6237");
-              if (bindUrl) {
-                return {
-                  connected: true,
-                  bindUrl,
-                  message: `CodeBuddy \u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}\u3002
-
-\u8BF7\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u7ED1\u5B9A\u5FAE\u4FE1\u5BA2\u670D\u53F7\uFF08\u7ED1\u5B9A\u540E\u624D\u6709\u5BF9\u8BDD\u5165\u53E3\uFF09\uFF1A
-${bindUrl}
-
-\u7ED1\u5B9A\u5B8C\u6210\u540E\u8BF7\u91CD\u542F Gateway \u751F\u6548\u3002`
-                };
-              }
-              return {
-                connected: true,
-                message: `CodeBuddy \u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}\u3002Token \u5DF2\u4FDD\u5B58\uFF0C\u8BF7\u91CD\u542F Gateway \u751F\u6548\u3002`
-              };
-            } catch (err) {
-              return { connected: false, message: "\u7B49\u5F85\u6D4F\u89C8\u5668\u767B\u5F55..." };
-            }
-          }
-          return { connected: false, message: "\u7B49\u5F85\u4E2D..." };
-        } catch (err) {
-          return { connected: false, message: `CodeBuddy \u8F6E\u8BE2\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}` };
-        }
-      }
-      try {
-        const result = await pollQrStatus(pendingQrLogin.uuid);
-        if (result.status === "waiting") {
-          return { connected: false, message: "\u7B49\u5F85\u626B\u7801..." };
-        }
-        if (result.status === "scanned") {
-          return { connected: false, message: "\u5DF2\u626B\u7801\uFF0C\u8BF7\u5728\u624B\u673A\u4E0A\u786E\u8BA4..." };
-        }
-        if (result.status === "expired") {
-          pendingQrLogin = null;
-          return { connected: false, message: "\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u6267\u884C openclaw channels login" };
-        }
-        if (result.status === "confirmed" && result.code) {
-          const { state, env, guid, authStatePath } = pendingQrLogin;
-          const api = new QClawAPI(env, guid);
-          const loginResult = await api.wxLogin(result.code, state);
-          if (!loginResult.success) {
-            pendingQrLogin = null;
-            return { connected: false, message: `\u767B\u5F55\u5931\u8D25: ${loginResult.message ?? "\u672A\u77E5\u9519\u8BEF"}` };
-          }
-          const loginData = loginResult.data;
-          const jwtToken = nested(loginData, "token") || nested(loginData, "data", "token") || "";
-          const channelToken = nested(loginData, "openclaw_channel_token") || nested(loginData, "data", "openclaw_channel_token") || "";
-          const userInfo = nested(loginData, "user_info") || nested(loginData, "data", "user_info") || {};
-          const loginKey = userInfo.loginKey;
-          if (loginKey) api.loginKey = loginKey;
-          api.jwtToken = jwtToken;
-          api.userId = String(userInfo.user_id ?? "");
-          let apiKey = "";
-          try {
-            const keyResult = await api.createApiKey();
-            if (keyResult.success) {
-              apiKey = nested(keyResult.data, "key") ?? nested(keyResult.data, "resp", "data", "key") ?? "";
-            }
-          } catch {
-          }
-          try {
-            const wRuntime = getWecomRuntime();
-            const fullCfg = wRuntime.config.loadConfig();
-            const channels = { ...fullCfg.channels ?? {} };
-            channels["wechat-access-unqclawed"] = {
-              ...channels["wechat-access-unqclawed"] ?? {},
-              token: channelToken,
-              guid,
-              userId: String(userInfo.user_id ?? "")
-            };
-            const nextCfg = { ...fullCfg, channels };
-            if (apiKey) {
-              const models = { ...fullCfg.models ?? {} };
-              const providers = { ...models.providers ?? {} };
-              providers.qclaw = { ...providers.qclaw ?? {}, apiKey };
-              models.providers = providers;
-              nextCfg.models = models;
-            }
-            await wRuntime.config.writeConfigFile(nextCfg);
-          } catch {
-          }
-          saveState({ loginMode: "qclaw", jwtToken, channelToken, apiKey, guid, userInfo, savedAt: Date.now() }, authStatePath);
-          let bindUrl = "";
-          let bindError = "";
-          try {
-            const OPEN_KFID = "wkzLlJLAAAfbxEV3ZcS-lHZxkaKmpejQ";
-            const linkResult = await api.generateContactLink(OPEN_KFID);
-            if (linkResult.success) {
-              const linkData = linkResult.data;
-              bindUrl = nested(linkData, "url") || nested(linkData, "data", "url") || "";
-            }
-            if (!bindUrl) {
-              bindError = "\u751F\u6210\u8BBE\u5907\u7ED1\u5B9A\u94FE\u63A5\u5931\u8D25\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55\u91CD\u8BD5";
-            }
-          } catch (e) {
-            bindError = `\u751F\u6210\u8BBE\u5907\u7ED1\u5B9A\u94FE\u63A5\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`;
-          }
-          pendingQrLogin = null;
-          const nickname = userInfo.nickname ?? "\u7528\u6237";
-          if (!bindUrl) {
-            return {
-              connected: false,
-              message: `\u767B\u5F55\u6210\u529F\u4F46\u8BBE\u5907\u7ED1\u5B9A\u5931\u8D25: ${bindError}\u3002\u8BF7\u91CD\u65B0\u767B\u5F55\u91CD\u8BD5\u3002`
-            };
-          }
-          return {
-            connected: true,
-            bindUrl,
-            message: `\u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u5B8C\u6210\u8BBE\u5907\u7ED1\u5B9A\uFF08\u7ED1\u5B9A\u540E\u624D\u6709\u5BF9\u8BDD\u5165\u53E3\uFF09\uFF1A
-${bindUrl}
-
-\u7ED1\u5B9A\u5B8C\u6210\u540E\u8BF7\u91CD\u542F Gateway \u751F\u6548\u3002`
-          };
-        }
-        return { connected: false, message: "\u7B49\u5F85\u626B\u7801..." };
-      } catch (err) {
-        return { connected: false, message: `\u8F6E\u8BE2\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}` };
-      }
     }
   }
 };
@@ -9943,21 +9542,26 @@ var index = {
   name: "\u901A\u7528\u901A\u8DEF\u63D2\u4EF6",
   description: "\u817E\u8BAF\u901A\u7528\u901A\u8DEF\u63D2\u4EF6",
   configSchema: emptyPluginConfigSchema(),
-  /**
-   * 插件注册入口点
-   */
   register(api) {
     setWecomRuntime(api.runtime);
     api.registerChannel({ plugin: tencentAccessPlugin });
     api.registerCli(
       ({ program, config }) => {
         const wechat = program.command("wechat").description("\u5FAE\u4FE1\u901A\u8DEF\u767B\u5F55\u7BA1\u7406");
-        wechat.command("login").description("\u767B\u5F55\uFF08\u652F\u6301 QClaw \u5FAE\u4FE1\u626B\u7801 \u6216 CodeBuddy OAuth\uFF09").option("--mode <mode>", "\u767B\u5F55\u6A21\u5F0F: qclaw \u6216 codebuddy").action(async (opts) => {
-          const channelCfg = config?.channels?.["wechat-access-unqclawed"];
-          const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
-          const loginMode = opts.mode || channelCfg?.loginMode || "qclaw";
-          if (loginMode === "codebuddy") {
-            console.log("[wechat login] \u4F7F\u7528 CodeBuddy \u6A21\u5F0F\u767B\u5F55...");
+        wechat.command("login").description("\u767B\u5F55\uFF08\u4EA4\u4E92\u5F0F\u9009\u62E9 QClaw \u6216 WorkBuddy\uFF09").action(async () => {
+          const { createInterface: createInterface2 } = await import("readline");
+          const rl = createInterface2({ input: process.stdin, output: process.stdout });
+          const ask = (q) => new Promise((r) => rl.question(q, (a) => {
+            r(a.trim());
+          }));
+          console.log("\n\u8BF7\u9009\u62E9\u767B\u5F55\u65B9\u5F0F\uFF1A");
+          console.log("  1. QClaw\uFF08\u5FAE\u4FE1\u626B\u7801 \u2192 JPRX \u7F51\u5173\uFF09");
+          console.log("  2. WorkBuddy\uFF08CodeBuddy OAuth \u2192 Centrifuge\uFF09");
+          const choice = await ask("\n\u8BF7\u8F93\u5165 1 \u6216 2: ");
+          rl.close();
+          if (choice === "2") {
+            console.log("[wechat login] \u4F7F\u7528 WorkBuddy \u6A21\u5F0F\u767B\u5F55...");
+            const channelCfg = config?.channels?.["wechat-access-unqclawed"];
             const cbBaseUrl = channelCfg?.codebuddyBaseUrl ? String(channelCfg.codebuddyBaseUrl) : void 0;
             const cbApi = new CodeBuddyAPI(cbBaseUrl);
             try {
@@ -9974,82 +9578,135 @@ var index = {
               let userInfo = {};
               try {
                 userInfo = await cbApi.getAccount(state);
-                cbApi.userId = String(userInfo.userId ?? userInfo.user_id ?? "");
-              } catch {
+                cbApi.userId = String(userInfo.uid ?? userInfo.userId ?? userInfo.user_id ?? "");
+              } catch (e) {
+                console.warn(`[wechat login] \u83B7\u53D6\u8D26\u53F7\u4FE1\u606F\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
               }
-              const guid2 = getDeviceGuid();
-              const persistedState = {
-                loginMode: "codebuddy",
-                jwtToken: "",
-                channelToken: "",
-                apiKey: "",
-                guid: guid2,
-                userInfo,
-                savedAt: Date.now(),
+              const wbCreds = {
                 accessToken: tokenResult.accessToken,
                 refreshToken: tokenResult.refreshToken,
-                hostId: cbApi.hostId
+                userId: cbApi.userId,
+                hostId: cbApi.hostId,
+                baseUrl: cbBaseUrl,
+                userInfo
               };
-              saveState(persistedState, authStatePath);
-              try {
-                const wRuntime = getWecomRuntime();
-                const fullCfg = wRuntime.config.loadConfig();
-                const channels = { ...fullCfg.channels ?? {} };
-                channels["wechat-access-unqclawed"] = {
-                  ...channels["wechat-access-unqclawed"] ?? {},
-                  loginMode: "codebuddy"
-                };
-                await wRuntime.config.writeConfigFile({ ...fullCfg, channels });
-              } catch {
-              }
-              const sessionId = cbApi.buildSessionId(`openclaw-default`);
-              try {
-                const linkResult = await cbApi.wechatkfGetLink(sessionId);
-                if (linkResult.success && linkResult.url) {
-                  console.log("\n" + "=".repeat(64));
-                  console.log("\u8BF7\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u7ED1\u5B9A\u5FAE\u4FE1\u5BA2\u670D\u53F7\uFF08\u7ED1\u5B9A\u540E\u624D\u6709\u5BF9\u8BDD\u5165\u53E3\uFF09\uFF1A");
-                  console.log("");
-                  console.log(linkResult.url);
-                  console.log("=".repeat(64));
-                }
-              } catch {
-              }
+              await writeChannelConfig({ loginMode: "workbuddy", workbuddy: wbCreds });
               const nickname = String(userInfo.nickName ?? userInfo.nickname ?? "\u7528\u6237");
               console.log(`
-CodeBuddy \u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}`);
-              console.log("token \u5DF2\u4FDD\u5B58\uFF0C\u8BF7\u8FD0\u884C openclaw gateway restart \u751F\u6548\u3002");
+WorkBuddy \u767B\u5F55\u6210\u529F! \u6B22\u8FCE ${nickname}`);
+              console.log("\u8BF7\u8FD0\u884C openclaw gateway restart \u542F\u52A8\u901A\u8DEF\u3002");
+              console.log("\u9996\u6B21\u4F7F\u7528\u8BF7\u5728 gateway \u542F\u52A8\u540E\u8FD0\u884C openclaw wechat bind \u83B7\u53D6\u5FAE\u4FE1\u5BA2\u670D\u7ED1\u5B9A\u94FE\u63A5\u3002");
             } catch (err) {
               console.error(`
-CodeBuddy \u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}`);
+WorkBuddy \u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}`);
               process.exit(1);
             }
-            return;
-          }
-          const bypassInvite = channelCfg?.bypassInvite === true;
-          const envName = channelCfg?.environment ? String(channelCfg.environment) : "production";
-          const env = getEnvironment(envName);
-          const guid = getDeviceGuid();
-          try {
-            const credentials = await performLogin({
-              guid,
-              env,
-              bypassInvite,
-              authStatePath
-            });
-            console.log(`
+          } else {
+            const channelCfg = config?.channels?.["wechat-access-unqclawed"];
+            const envName = channelCfg?.environment ? String(channelCfg.environment) : "production";
+            const env = getEnvironment(envName);
+            const guid = getDeviceGuid();
+            try {
+              const credentials = await performLogin({ guid, env });
+              const qclawCreds = {
+                jwtToken: credentials.jwtToken,
+                channelToken: credentials.channelToken,
+                apiKey: credentials.apiKey,
+                guid: credentials.guid,
+                userId: String(credentials.userInfo?.user_id ?? ""),
+                wsUrl: env.wechatWsUrl,
+                userInfo: credentials.userInfo
+              };
+              await writeChannelConfig({ loginMode: "qclaw", qclaw: qclawCreds });
+              if (credentials.apiKey) {
+                try {
+                  const wRuntime = getWecomRuntime();
+                  const fullCfg = wRuntime.config.loadConfig();
+                  const models = { ...fullCfg.models ?? {} };
+                  const providers = { ...models.providers ?? {} };
+                  providers.qclaw = { ...providers.qclaw ?? {}, apiKey: credentials.apiKey };
+                  models.providers = providers;
+                  await wRuntime.config.writeConfigFile({ ...fullCfg, models });
+                } catch {
+                }
+              }
+              console.log(`
 \u767B\u5F55\u6210\u529F! token: ${credentials.channelToken.substring(0, 6)}...`);
-            console.log("token \u5DF2\u4FDD\u5B58\uFF0C\u8BF7\u8FD0\u884C openclaw gateway restart \u751F\u6548\u3002");
-          } catch (err) {
-            console.error(`
+              console.log("\u8BF7\u8FD0\u884C openclaw gateway restart \u542F\u52A8\u901A\u8DEF\u3002");
+              console.log("\u9996\u6B21\u4F7F\u7528\u8BF7\u5728 gateway \u542F\u52A8\u540E\u8FD0\u884C openclaw wechat bind \u5B8C\u6210\u8BBE\u5907\u7ED1\u5B9A\u3002");
+            } catch (err) {
+              console.error(`
 \u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}`);
-            process.exit(1);
+              process.exit(1);
+            }
           }
         });
-        wechat.command("logout").description("\u6E05\u9664\u5DF2\u4FDD\u5B58\u7684\u5FAE\u4FE1\u767B\u5F55\u6001").action(() => {
-          const channelCfg = config?.channels?.["wechat-access-unqclawed"];
-          const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
-          clearState(authStatePath);
-          console.log("\u5DF2\u6E05\u9664\u767B\u5F55\u6001\uFF0C\u4E0B\u6B21\u542F\u52A8\u5C06\u9700\u8981\u91CD\u65B0\u626B\u7801\u767B\u5F55\u3002");
+        wechat.command("logout").description("\u6E05\u9664\u5DF2\u4FDD\u5B58\u7684\u5FAE\u4FE1\u767B\u5F55\u6001").action(async () => {
+          await writeChannelConfig({ loginMode: void 0, qclaw: void 0, workbuddy: void 0 });
+          console.log("\u5DF2\u6E05\u9664\u767B\u5F55\u6001\u3002");
+        });
+        wechat.command("bind").description("\u83B7\u53D6\u8BBE\u5907\u7ED1\u5B9A\u94FE\u63A5\uFF08\u9700\u5148\u767B\u5F55\uFF09").action(async () => {
+          const channelCfg = readChannelConfig();
+          if (channelCfg.loginMode === "workbuddy") {
+            const creds = channelCfg.workbuddy;
+            if (!creds?.accessToken) {
+              console.error("\u8BF7\u5148\u767B\u5F55: openclaw wechat login\uFF08\u9009\u62E9 2\uFF09");
+              process.exit(1);
+            }
+            const cbApi = new CodeBuddyAPI(creds.baseUrl);
+            cbApi.accessToken = creds.accessToken;
+            cbApi.refreshToken = creds.refreshToken || "";
+            cbApi.userId = creds.userId || "";
+            cbApi.hostId = creds.hostId || cbApi.hostId;
+            try {
+              const refreshed = await cbApi.doRefreshToken();
+              await writeChannelConfig({
+                workbuddy: { ...creds, accessToken: refreshed.accessToken, refreshToken: refreshed.refreshToken }
+              });
+            } catch {
+              console.warn("token \u5237\u65B0\u5931\u8D25\uFF0C\u4F7F\u7528\u65E7 token \u7EE7\u7EED...");
+            }
+            const sessionId = cbApi.buildSessionId();
+            try {
+              const linkResult = await cbApi.wechatkfGetLink(sessionId);
+              if (linkResult.success && linkResult.url) {
+                console.log("\n" + "=".repeat(64));
+                console.log("\u8BF7\u5728\u5FAE\u4FE1\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u7ED1\u5B9A\u5FAE\u4FE1\u5BA2\u670D\u53F7\uFF1A");
+                console.log("");
+                console.log(linkResult.url);
+                console.log("");
+                console.log("\u7ED1\u5B9A\u5B8C\u6210\u540E\u5373\u53EF\u901A\u8FC7\u5FAE\u4FE1\u5BA2\u670D\u53F7\u5BF9\u8BDD\u3002");
+                console.log("=".repeat(64));
+              } else {
+                console.error(`\u83B7\u53D6\u7ED1\u5B9A\u94FE\u63A5\u5931\u8D25: ${linkResult.message ?? "\u672A\u77E5\u9519\u8BEF"}`);
+              }
+            } catch (err) {
+              console.error(`\u83B7\u53D6\u7ED1\u5B9A\u94FE\u63A5\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}`);
+              process.exit(1);
+            }
+            return;
+          }
+          if (channelCfg.loginMode === "qclaw") {
+            const creds = channelCfg.qclaw;
+            if (!creds?.channelToken) {
+              console.error("\u8BF7\u5148\u767B\u5F55: openclaw wechat login\uFF08\u9009\u62E9 1\uFF09");
+              process.exit(1);
+            }
+            const envName = channelCfg.environment ? String(channelCfg.environment) : "production";
+            const env = getEnvironment(envName);
+            const api2 = new QClawAPI(env, creds.guid, creds.jwtToken);
+            api2.userId = creds.userId || "";
+            const loginKey = creds.userInfo?.loginKey;
+            if (loginKey) api2.loginKey = loginKey;
+            const bindResult = await performDeviceBinding({ api: api2 });
+            if (!bindResult.success) {
+              console.error(bindResult.message);
+              process.exit(1);
+            }
+            return;
+          }
+          console.error("\u8BF7\u5148\u767B\u5F55: openclaw wechat login");
+          process.exit(1);
         });
       },
       { commands: ["wechat"] }
@@ -10059,18 +9716,21 @@ CodeBuddy \u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : Strin
       description: "\u624B\u52A8\u6267\u884C\u5FAE\u4FE1\u626B\u7801\u767B\u5F55\uFF0C\u83B7\u53D6 channel token",
       handler: async ({ config }) => {
         const channelCfg = config?.channels?.["wechat-access-unqclawed"];
-        const bypassInvite = channelCfg?.bypassInvite === true;
-        const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
         const envName = channelCfg?.environment ? String(channelCfg.environment) : "production";
         const env = getEnvironment(envName);
         const guid = getDeviceGuid();
         try {
-          const credentials = await performLogin({
-            guid,
-            env,
-            bypassInvite,
-            authStatePath
-          });
+          const credentials = await performLogin({ guid, env });
+          const qclawCreds = {
+            jwtToken: credentials.jwtToken,
+            channelToken: credentials.channelToken,
+            apiKey: credentials.apiKey,
+            guid: credentials.guid,
+            userId: String(credentials.userInfo?.user_id ?? ""),
+            wsUrl: env.wechatWsUrl,
+            userInfo: credentials.userInfo
+          };
+          await writeChannelConfig({ loginMode: "qclaw", qclaw: qclawCreds });
           return { text: `\u767B\u5F55\u6210\u529F! token: ${credentials.channelToken.substring(0, 6)}... (\u5DF2\u4FDD\u5B58\uFF0C\u91CD\u542F Gateway \u751F\u6548)` };
         } catch (err) {
           return { text: `\u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : String(err)}`, isError: true };
@@ -10080,11 +9740,9 @@ CodeBuddy \u767B\u5F55\u5931\u8D25: ${err instanceof Error ? err.message : Strin
     api.registerCommand?.({
       name: "wechat-logout",
       description: "\u6E05\u9664\u5DF2\u4FDD\u5B58\u7684\u5FAE\u4FE1\u767B\u5F55\u6001",
-      handler: async ({ config }) => {
-        const channelCfg = config?.channels?.["wechat-access-unqclawed"];
-        const authStatePath = channelCfg?.authStatePath ? String(channelCfg.authStatePath) : void 0;
-        clearState(authStatePath);
-        return { text: "\u5DF2\u6E05\u9664\u767B\u5F55\u6001\uFF0C\u4E0B\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u626B\u7801\u767B\u5F55\u3002" };
+      handler: async () => {
+        await writeChannelConfig({ loginMode: void 0, qclaw: void 0, workbuddy: void 0 });
+        return { text: "\u5DF2\u6E05\u9664\u767B\u5F55\u6001\uFF0C\u4E0B\u6B21\u542F\u52A8\u5C06\u91CD\u65B0\u767B\u5F55\u3002" };
       }
     });
     console.log("[wechat-access] \u817E\u8BAF\u901A\u8DEF\u63D2\u4EF6\u5DF2\u6CE8\u518C");