@kyan-du/agent-wechat-openclaw 0.14.6 → 0.15.2

package/dist/index.js

@@ -1158,6 +1158,14 @@ function getWeChatRuntime() {
 // src/monitor.ts
 import { unlink } from "node:fs/promises";
 
+// src/monitor-open-chat.ts
+function requireVerifiedChatOpen(result, chatId) {
+  if (result?.ok !== true || result.verified !== true || result.username !== chatId) {
+    const code = result?.errorCode ?? "TARGET_CONFIRMATION_FAILED";
+    throw new Error(`Chat open not confirmed: ${code}`);
+  }
+}
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -6325,8 +6333,7 @@ import {
 import {
   resolveAllowlistProviderRuntimeGroupPolicy,
   resolveDefaultGroupPolicy
-} from "openclaw/plugin-sdk/config-runtime";
-import { resolveSenderCommandAuthorization } from "openclaw/plugin-sdk/command-auth";
+} from "openclaw/plugin-sdk/runtime-group-policy";
 var INVISIBLE_TEXT_RE = /[\u200b-\u200f\u202a-\u202e\u2060-\u206f]/g;
 var WECHAT_MENTION_START_RE = /^[@＠]/u;
 function unique(values) {
@@ -6501,17 +6508,23 @@ function resolveWeChatInboundAccessDecision(params) {
 }
 async function resolveWeChatCommandAuthorization(params) {
   const normalizedSenderId = normalizeWeChatId(params.senderId ?? "");
-  const { commandAuthorized } = await resolveSenderCommandAuthorization({
-    cfg: params.cfg,
-    rawBody: params.rawBody,
-    isGroup: params.isGroup,
-    dmPolicy: params.dmPolicy,
-    configuredAllowFrom: params.allowFromForCommands,
-    senderId: normalizedSenderId,
-    isSenderAllowed: (senderId, allowFrom) => isWeChatSenderAllowed(senderId, normalizeWeChatAllowFrom(allowFrom)),
-    readAllowFromStore: async () => normalizeWeChatAllowFrom(await params.deps.readAllowFromStore()),
-    shouldComputeCommandAuthorized: params.deps.shouldComputeCommandAuthorized,
-    resolveCommandAuthorizedFromAuthorizers: params.deps.resolveCommandAuthorizedFromAuthorizers
+  if (!params.deps.shouldComputeCommandAuthorized(params.rawBody, params.cfg)) {
+    return void 0;
+  }
+  const isSenderAllowed = (allowFrom) => isWeChatSenderAllowed(normalizedSenderId, normalizeWeChatAllowFrom(allowFrom));
+  const configuredAllowFrom = normalizeAllowEntries(params.allowFromForCommands);
+  const storeAllowFrom = !params.isGroup && params.dmPolicy !== "allowlist" && params.dmPolicy !== "open" ? normalizeWeChatAllowFrom(await params.deps.readAllowFromStore().catch(() => [])) : [];
+  const effectiveAllowFrom = normalizeAllowEntries([...configuredAllowFrom, ...storeAllowFrom]);
+  const effectiveGroupAllowFrom = configuredAllowFrom;
+  const commandAuthorized = params.deps.resolveCommandAuthorizedFromAuthorizers({
+    useAccessGroups: params.cfg.commands?.useAccessGroups !== false,
+    authorizers: [
+      { configured: effectiveAllowFrom.length > 0, allowed: isSenderAllowed(effectiveAllowFrom) },
+      {
+        configured: effectiveGroupAllowFrom.length > 0,
+        allowed: isSenderAllowed(effectiveGroupAllowFrom)
+      }
+    ]
   });
   return commandAuthorized;
 }
@@ -6523,6 +6536,9 @@ function resolveWeChatMentionGate(params) {
   const shouldSkip = params.requireMention && params.canDetectMention && !effectiveWasMentioned;
   return { effectiveWasMentioned, shouldSkip, shouldBypassMention };
 }
+function normalizeAllowEntries(entries) {
+  return (entries ?? []).map((entry) => String(entry).trim()).filter(Boolean);
+}
 
 // src/catchup.ts
 var DEFAULT_STALE_AFTER_MS = 3 * 60 * 60 * 1e3;
@@ -8578,16 +8594,18 @@ async function processUnreadChat(client, chat, lastSeenId, equalCursorUnreadHand
   });
   let opened = false;
   const openChatIfNeeded = async () => {
-    if (skipOpen || opened) return;
-    opened = true;
+    if (skipOpen || opened) return true;
     log?.info?.(`[wechat:${liveAccount.accountId}] Opening chat ${chatId}...`);
     try {
-      await client.openChat(chatId, true);
+      requireVerifiedChatOpen(await client.openChat(chatId, true), chatId);
+      opened = true;
       log?.info?.(`[wechat:${liveAccount.accountId}] Opened chat ${chatId}`);
+      return true;
     } catch (err) {
       log?.error?.(
         `[wechat:${liveAccount.accountId}] Failed to open chat ${chatId}: ${err}`
       );
+      return false;
     }
   };
   const firstPoll = !lastSeenId.has(chatId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyan-du/agent-wechat-openclaw",
-  "version": "0.14.6",
+  "version": "0.15.2",
   "type": "module",
   "files": [
     "dist",