@sunnoy/wecom 1.7.0 → 1.8.0

package/README.md

@@ -20,6 +20,7 @@
 - [方式三：配置群机器人 (Webhook 模式)](#方式三配置群机器人-webhook-模式)
 
 ### 能力与路由
+- [三种模式消息能力对比](#三种模式消息能力对比)
 - [支持的消息类型](#支持的消息类型)
 - [流式回复能力](#流式回复能力)
 - [管理员用户](#管理员用户)
@@ -322,6 +323,131 @@ Webhook Bot 用于向群聊发送通知消息。
 - 每个群聊可添加多个机器人
 - Webhook 地址请妥善保管，避免泄露
 
+## 三种模式消息能力对比
+
+企业微信提供了三种不同的接入方式，每种方式在私聊和群聊场景下的消息收发能力不同：
+
+### 能力矩阵
+
+| 能力 | Bot 模式 (AI 机器人) | Agent 模式 (自建应用) | Webhook 模式 (群机器人) |
+|------|---------------------|---------------------|----------------------|
+| **私聊接收** | ✅ JSON 回调 | ✅ XML 回调 | ❌ 不支持 |
+| **私聊被动回复** | ✅ 流式 stream | ✅ 同步回复 | ❌ 不支持 |
+| **私聊主动发送** | ❌ 不支持 | ✅ 应用消息 API | ❌ 不支持 |
+| **群聊接收** | ✅ @提及 JSON 回调 | ✅ @提及 XML 回调 | ❌ 不支持 |
+| **群聊被动回复** | ✅ 流式 stream | ✅ 同步回复 | ❌ 不支持 |
+| **群聊主动发送** | ❌ 不支持 | ✅ 应用消息 API | ✅ Webhook URL |
+| **流式回复** | ✅ 打字机效果 | ❌ 仅完整消息 | ❌ 仅完整消息 |
+| **思考过程展示** | ✅ thinking_content | ❌ | ❌ |
+| **媒体发送** | ✅ msg_item (图片) | ✅ API 上传 (图片/文件) | ✅ base64/upload |
+| **Markdown** | ✅ stream content | ✅ Markdown 消息类型 | ✅ Markdown 消息类型 |
+
+### 各模式详细说明
+
+#### Bot 模式 (AI 机器人)
+
+> 📖 [企业微信 AI 机器人开发指南](https://developer.work.weixin.qq.com/document/path/101039)
+
+**消息接收机制**：企业微信将用户消息以 **JSON 格式**通过 HTTP POST 回调到配置的 URL。支持私聊消息和群聊中 @提及机器人的消息。
+
+**消息回复机制**：采用**流式分片（streaming）**回复。收到回调后立即返回 `stream_id`，后续通过 `stream_refresh` 轮询接口推送增量内容。客户端展示打字机效果。
+
+- **被动回复**：用户发消息 → 回调触发 → 流式回复（支持文本、Markdown、图片、思考过程）
+- **主动发送**：❌ 不支持。AI 机器人没有主动发送 API，只能在收到消息后回复
+- **适用场景**：实时对话、问答，流式体验好
+
+#### Agent 模式 (自建应用)
+
+> 📖 [企业微信自建应用开发指南](https://developer.work.weixin.qq.com/document/path/90226)
+> 📖 [应用消息发送 API](https://developer.work.weixin.qq.com/document/path/90236)
+
+**消息接收机制**：企业微信将用户消息以 **XML 格式**通过 HTTP POST 回调到配置的 URL。支持私聊和群聊消息，以及图片、语音、文件等多种消息类型。
+
+**消息回复机制**：
+- **被动回复**：在回调响应中直接返回 XML 格式回复（需在 5 秒内响应）
+- **主动发送**：通过[应用消息 API](https://developer.work.weixin.qq.com/document/path/90236) 可主动向用户发送文本、图片、文件、Markdown 等消息。支持指定 `touser`（用户）、`toparty`（部门）、`totag`（标签）
+
+- **适用场景**：需要主动推送的场景（异步任务完成通知、定时报告），需要收发文件的场景
+
+#### Webhook 模式 (群机器人)
+
+> 📖 [企业微信群机器人配置说明](https://developer.work.weixin.qq.com/document/path/99110)
+
+**消息发送机制**：通过 HTTP POST 请求向 Webhook URL 发送消息。支持文本、Markdown、图片（base64）、文件（需先上传获取 media_id）。
+
+- **接收消息**：❌ 不支持。Webhook 仅为单向发送通道
+- **主动发送**：✅ 向 Webhook URL POST 即可发送到群聊
+- **适用场景**：单向通知（告警、日报）、定时推送
+
+### Webhook 消息发送方式
+
+Webhook 配置好后（见[方式三](#方式三配置群机器人-webhook-模式)），有以下方式发送消息：
+
+#### CLI 直接发送
+
+```bash
+openclaw message send --channel wecom --to "webhook:ops-group" "服务已恢复正常"
+```
+
+#### Agent 处理后投递到群
+
+让 agent 处理消息后将回复发到 webhook 群：
+
+```bash
+openclaw agent --agent myagent \
+  --message "帮我总结今天的监控告警" \
+  --deliver \
+  --reply-channel wecom \
+  --reply-to "webhook:ops-group"
+```
+
+#### Heartbeat 定时推送（推荐）
+
+在 agent 配置中添加 heartbeat，自动定时触发并将回复发到 webhook 群：
+
+```json
+{
+  "id": "report-agent",
+  "heartbeat": {
+    "every": "1h",
+    "target": "webhook:ops-group",
+    "prompt": "请总结最新的系统监控状态",
+    "activeHours": {
+      "start": "09:00",
+      "end": "18:00",
+      "timezone": "Asia/Shanghai"
+    }
+  }
+}
+```
+
+- `every` — 触发间隔（如 `30m`, `1h`, `6h`）
+- `target` — 回复目标，`webhook:` 前缀加配置中的 webhook 名称
+- `prompt` — 每次触发时给 agent 的提示语
+- `activeHours` — 可选，限制只在工作时间段内触发
+
+#### 系统 Crontab 定时发送
+
+```bash
+# crontab -e
+# 每天早上9点发送日报
+0 9 * * * openclaw agent --agent report-agent --message "生成今日晨报" --deliver --reply-channel wecom --reply-to "webhook:ops-group"
+
+# 每小时发送监控摘要
+0 * * * * openclaw message send --channel wecom --to "webhook:monitor-group" "$(curl -s http://localhost:9090/api/v1/alerts | jq -r '.data.alerts | length') 条活跃告警"
+```
+
+### 模式选择建议
+
+| 需求 | 推荐模式 |
+|------|---------|
+| 实时对话，流式打字机体验 | **Bot 模式** |
+| 双向对话 + 主动推送 + 文件处理 | **Agent 模式** |
+| 仅需向群聊推送通知 | **Webhook 模式** |
+| 同时需要对话和群通知 | **Bot/Agent 模式 + Webhook 模式** 组合使用 |
+
+> 💡 **三种模式可以同时启用**。例如：Bot 模式处理日常对话，Webhook 模式负责定时推送通知到群。配置时在同一个 `channels.wecom` 下同时填写 `token`/`encodingAesKey`（Bot）、`agent`（Agent）和 `webhooks`（Webhook）即可。
+
 ## 支持的消息类型
 
 | 类型 | 方向 | 说明 |
@@ -841,176 +967,6 @@ openclaw-plugin-wecom/
 
 本项目采用 [ISC License](./LICENSE) 协议。
 
-## 配置示例参考
-
-以下是一个生产环境的脱敏配置示例，供参考：
-
-```json
-{
-  "meta": {
-    "lastTouchedVersion": "2026.2.25",
-    "lastTouchedAt": "2026-02-28T03:14:11.564Z"
-  },
-  "wizard": {
-    "lastRunAt": "2026-02-26T09:29:04.028Z",
-    "lastRunVersion": "2026.2.25",
-    "lastRunCommand": "onboard",
-    "lastRunMode": "local"
-  },
-  "logging": {
-    "level": "info",
-    "consoleLevel": "debug",
-    "consoleStyle": "pretty"
-  },
-  "models": {
-    "mode": "merge",
-    "providers": {
-      "bailian": {
-        "baseUrl": "https://coding.dashscope.aliyuncs.com/v1",
-        "apiKey": "sk-xxxxxxxxxxxxxxxxxxxxxx",
-        "api": "openai-completions",
-        "models": [
-          { "id": "qwen3.5-plus", "name": "qwen3.5-plus", "reasoning": false, "input": ["text", "image"], "contextWindow": 1000000, "maxTokens": 65536 },
-          { "id": "MiniMax-M2.5", "name": "MiniMax-M2.5", "reasoning": false, "input": ["text"], "contextWindow": 1000000, "maxTokens": 65536 },
-          { "id": "glm-5", "name": "glm-5", "reasoning": false, "input": ["text"], "contextWindow": 202752, "maxTokens": 16384 },
-          { "id": "glm-4.7", "name": "glm-4.7", "reasoning": false, "input": ["text"], "contextWindow": 202752, "maxTokens": 16384 },
-          { "id": "kimi-k2.5", "name": "kimi-k2.5", "reasoning": false, "input": ["text", "image"], "contextWindow": 262144, "maxTokens": 32768 }
-        ]
-      }
-    }
-  },
-  "agents": {
-    "defaults": {
-      "model": { "primary": "bailian/kimi-k2.5" },
-      "models": {
-        "bailian/qwen3.5-plus": {},
-        "bailian/MiniMax-M2.5": {},
-        "bailian/glm-5": {},
-        "bailian/glm-4.7": {},
-        "bailian/kimi-k2.5": {}
-      },
-      "workspace": "/path/to/workspace",
-      "userTimezone": "Asia/Shanghai",
-      "timeFormat": "24",
-      "compaction": {
-        "mode": "safeguard",
-        "reserveTokensFloor": 20000,
-        "memoryFlush": {
-          "enabled": true,
-          "softThresholdTokens": 4000
-        }
-      },
-      "thinkingDefault": "medium",
-      "verboseDefault": "on",
-      "heartbeat": {
-        "every": "10m",
-        "target": "last",
-        "directPolicy": "allow"
-      },
-      "sandbox": {
-        "mode": "all",
-        "workspaceAccess": "rw",
-        "scope": "agent",
-        "docker": {
-          "image": "your-registry.com/openclaw-agent:v2026.x.x",
-          "readOnlyRoot": false,
-          "network": "bridge",
-          "extraHosts": [
-            "your-domain.internal:xxx.xxx.xxx.xxx"
-          ],
-          "binds": [
-            "/path/to/skills:/workspace/skills:ro"
-          ],
-          "dangerouslyAllowReservedContainerTargets": true,
-          "dangerouslyAllowExternalBindSources": true
-        },
-        "prune": {
-          "idleHours": 87600,
-          "maxAgeDays": 3650
-        }
-      }
-    },
-    "list": [
-      { "id": "main" },
-      { "id": "wecom-dm-xxxxxx" }
-    ]
-  },
-  "commands": {
-    "native": "auto",
-    "nativeSkills": "auto",
-    "restart": true,
-    "ownerDisplay": "raw"
-  },
-  "session": {
-    "dmScope": "per-channel-peer"
-  },
-  "hooks": {
-    "internal": {
-      "enabled": true,
-      "entries": {
-        "boot-md": { "enabled": true },
-        "command-logger": { "enabled": true },
-        "session-memory": { "enabled": true },
-        "bootstrap-extra-files": { "enabled": true }
-      }
-    }
-  },
-  "channels": {
-    "wecom": {
-      "enabled": true,
-      "token": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
-      "encodingAesKey": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
-      "commands": {
-        "enabled": true,
-        "allowlist": ["/help", "/commands", "/status", "/context", "/whoami", "/new", "/compact", "/stop", "/reset", "/usage", "/think", "/thinking", "/t", "/verbose", "/v", "/reasoning", "/reason", "/model", "/models", "/skill"]
-      },
-      "dynamicAgents": { "enabled": true },
-      "dm": { "createAgentOnFirstMessage": true },
-      "groupChat": { "enabled": true, "requireMention": true },
-      "adminUsers": ["admin_userid"],
-      "workspaceTemplate": "/path/to/workspace-template",
-      "agent": {
-        "corpId": "wwxxxxxxxxxxxxxxxx",
-        "corpSecret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
-        "agentId": 1000002,
-        "token": "xxxxxxxxxxxxxxx",
-        "encodingAesKey": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
-      }
-    }
-  },
-  "gateway": {
-    "port": 18789,
-    "mode": "local",
-    "bind": "lan",
-    "controlUi": {
-      "dangerouslyAllowHostHeaderOriginFallback": true,
-      "allowInsecureAuth": true
-    },
-    "auth": {
-      "mode": "token",
-      "token": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
-    },
-    "tailscale": {
-      "mode": "off",
-      "resetOnExit": false
-    }
-  },
-  "skills": {
-    "allowBundled": ["_none_"],
-    "load": {
-      "extraDirs": ["/path/to/skills"],
-      "watch": true,
-      "watchDebounceMs": 250
-    },
-    "install": { "nodeManager": "npm" }
-  },
-  "plugins": {
-    "allow": ["wecom"],
-    "entries": { "wecom": { "enabled": true } }
-  }
-}
-```
-
 ## 自定义 Skills 配合沙箱使用实践
 
 OpenClaw 支持自定义 Skills 并通过沙箱（Docker）隔离执行，以下是生产环境的实践配置：

package/index.js

@@ -26,7 +26,7 @@ const plugin = {
   id: "wecom",
   name: "Enterprise WeChat",
   description: "Enterprise WeChat AI Bot channel plugin for OpenClaw",
-  configSchema: { type: "object", additionalProperties: false, properties: {} },
+  configSchema: { type: "object", additionalProperties: true, properties: {} },
   register(api) {
     logger.info("WeCom plugin registering...");
 

package/openclaw.plugin.json

@@ -7,7 +7,7 @@
   ],
   "configSchema": {
     "type": "object",
-    "additionalProperties": false,
+    "additionalProperties": true,
     "properties": {}
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@sunnoy/wecom",
-    "version": "1.7.0",
+    "version": "1.8.0",
     "description": "Enterprise WeChat AI Bot channel plugin for OpenClaw",
     "type": "module",
     "main": "index.js",

package/wecom/accounts.js

@@ -56,6 +56,15 @@ const RESERVED_KEYS = new Set([
   "allowFrom",
   "commandAllowlist",
   "commandBlockMessage",
+  // Top-level config keys that are NOT account IDs (issue #79).
+  "network",
+  "commands",
+  "dynamicAgents",
+  "dm",
+  "groupChat",
+  "adminUsers",
+  "workspaceTemplate",
+  "instances",
 ]);
 
 // ── Helpers ─────────────────────────────────────────────────────────

package/wecom/channel-plugin.js

@@ -13,6 +13,7 @@ import { resolveWecomTarget } from "./target.js";
 import { webhookSendImage, webhookSendText, webhookUploadFile, webhookSendFile } from "./webhook-bot.js";
 import { normalizeWebhookPath, registerWebhookTarget } from "./webhook-targets.js";
 import { wecomFetch, setConfigProxyUrl } from "./http.js";
+import { setApiBaseUrl } from "./constants.js";
 
 
 const AGENT_IMAGE_EXTS = new Set(["jpg", "jpeg", "png", "gif", "bmp"]);
@@ -164,6 +165,10 @@ export const wecomChannelPlugin = {
               type: "string",
               description: "HTTP(S) proxy URL for outbound WeCom API requests (e.g. http://proxy:8080). Env var WECOM_EGRESS_PROXY_URL takes precedence.",
             },
+            apiBaseUrl: {
+              type: "string",
+              description: "Custom WeCom API base URL (default: https://qyapi.weixin.qq.com). Use when routing through a reverse-proxy or API gateway. Env var WECOM_API_BASE_URL takes precedence.",
+            },
           },
         },
         webhooks: {
@@ -739,6 +744,8 @@ export const wecomChannelPlugin = {
       // Wire proxy URL from config (env var takes precedence inside http.js).
       const wecomCfg = ctx.cfg?.channels?.wecom ?? {};
       setConfigProxyUrl(wecomCfg.network?.egressProxyUrl ?? "");
+      // Wire API base URL override (env var WECOM_API_BASE_URL takes precedence).
+      setApiBaseUrl(wecomCfg.network?.apiBaseUrl ?? "");
 
       // Conflict detection: warn about duplicate tokens / agent IDs.
       const conflicts = detectAccountConflicts(ctx.cfg);

package/wecom/constants.js

@@ -40,13 +40,36 @@ export const MAIN_RESPONSE_IDLE_CLOSE_MS = 30 * 1000;
 export const SAFETY_NET_IDLE_CLOSE_MS = 90 * 1000;
 export const RESPONSE_URL_ERROR_BODY_PREVIEW_MAX = 300;
 
+// Default Agent API base URL (self-built application mode).
+// Can be overridden via `channels.wecom.network.apiBaseUrl` config or
+// `WECOM_API_BASE_URL` env var for users behind a reverse-proxy gateway
+// that relays requests to qyapi.weixin.qq.com (issue #79).
+const DEFAULT_API_BASE = "https://qyapi.weixin.qq.com";
+
+let _apiBase = DEFAULT_API_BASE;
+
+/**
+ * Set the API base URL from plugin config (called during plugin load).
+ * @param {string} url
+ */
+export function setApiBaseUrl(url) {
+  const trimmed = (url || "").trim().replace(/\/+$/, "");
+  _apiBase = trimmed || DEFAULT_API_BASE;
+}
+
+function apiBase() {
+  // Env var takes precedence over config.
+  const env = (process.env.WECOM_API_BASE_URL || "").trim().replace(/\/+$/, "");
+  return env || _apiBase;
+}
+
 // Agent API endpoints (self-built application mode).
 export const AGENT_API_ENDPOINTS = {
-  GET_TOKEN: "https://qyapi.weixin.qq.com/cgi-bin/gettoken",
-  SEND_MESSAGE: "https://qyapi.weixin.qq.com/cgi-bin/message/send",
-  SEND_APPCHAT: "https://qyapi.weixin.qq.com/cgi-bin/appchat/send",
-  UPLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/upload",
-  DOWNLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/get",
+  get GET_TOKEN() { return `${apiBase()}/cgi-bin/gettoken`; },
+  get SEND_MESSAGE() { return `${apiBase()}/cgi-bin/message/send`; },
+  get SEND_APPCHAT() { return `${apiBase()}/cgi-bin/appchat/send`; },
+  get UPLOAD_MEDIA() { return `${apiBase()}/cgi-bin/media/upload`; },
+  get DOWNLOAD_MEDIA() { return `${apiBase()}/cgi-bin/media/get`; },
 };
 
 export const TOKEN_REFRESH_BUFFER_MS = 60 * 1000;
@@ -54,5 +77,13 @@ export const AGENT_API_REQUEST_TIMEOUT_MS = 15 * 1000;
 export const MAX_REQUEST_BODY_SIZE = 1024 * 1024; // 1 MB
 
 // Webhook Bot endpoints (group robot notifications).
-export const WEBHOOK_BOT_SEND_URL = "https://qyapi.weixin.qq.com/cgi-bin/webhook/send";
-export const WEBHOOK_BOT_UPLOAD_URL = "https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media";
+export const WEBHOOK_BOT_SEND_URL_DEFAULT = "https://qyapi.weixin.qq.com/cgi-bin/webhook/send";
+export const WEBHOOK_BOT_UPLOAD_URL_DEFAULT = "https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media";
+
+// Dynamic getters so apiBaseUrl override applies to webhook bot too.
+export function getWebhookBotSendUrl() {
+  return `${apiBase()}/cgi-bin/webhook/send`;
+}
+export function getWebhookBotUploadUrl() {
+  return `${apiBase()}/cgi-bin/webhook/upload_media`;
+}

package/wecom/http-handler.js

@@ -48,7 +48,13 @@ export async function wecomHttpHandler(req, res) {
   const targets = webhookTargets.get(path);
 
   if (!targets || targets.length === 0) {
-    return false; // Not handled by this plugin
+    // Return a proper HTTP response instead of `false`. Returning false tells
+    // OpenClaw 3.x "not handled", which causes the SPA catch-all to serve the
+    // chat UI on webhook paths (issue #81).
+    logger.debug("WeCom: no webhook target registered for path", { path });
+    res.writeHead(404, { "Content-Type": "text/plain" });
+    res.end(`No WeCom webhook target configured for ${path}`);
+    return true;
   }
 
   const query = Object.fromEntries(url.searchParams);

package/wecom/http.js

@@ -12,6 +12,7 @@
  *   3. Config: `channels.wecom.network.egressProxyUrl`
  */
 
+import { logger } from "../logger.js";
 import { AGENT_API_REQUEST_TIMEOUT_MS } from "./constants.js";
 
 // ── Lazy-loaded undici (optional dependency) ──────────────────────────
@@ -64,6 +65,7 @@ function mergeAbortSignal({ signal, timeoutMs }) {
 // ── Proxy URL resolution ──────────────────────────────────────────────
 
 let _configProxyUrl = "";
+let _proxyWarningLogged = false;
 
 /**
  * Set the proxy URL from plugin config (called once during plugin load).
@@ -118,7 +120,16 @@ export async function wecomFetch(input, init, opts) {
         dispatcher,
       });
     }
-    // undici not available — fall through to native fetch (no proxy)
+    // undici not available — log warning and fall through to native fetch (no proxy).
+    // This is a common cause of proxy misconfiguration (issue #79).
+    if (!_proxyWarningLogged) {
+      _proxyWarningLogged = true;
+      logger.error(
+        "[wecom/http] Proxy configured but undici is not available — requests will go DIRECT without proxy. " +
+        "Install undici (npm install undici) to enable proxy support.",
+        { proxyUrl },
+      );
+    }
   }
 
   // Native fetch (no proxy)

package/wecom/inbound-processor.js

@@ -482,14 +482,6 @@ export async function processInboundMessage({
               });
             }
 
-            // Mark stream meta when main response is done.
-            if (streamId && (info.kind === "final" || info.kind === "block")) {
-              streamMeta.set(streamId, {
-                mainResponseDone: true,
-                doneAt: Date.now(),
-              });
-            }
-
             // Schedule / reset stream close timer if dispatch already returned.
             if (streamId && dispatchDone) {
               scheduleStreamClose();
@@ -503,10 +495,17 @@ export async function processInboundMessage({
       });
     });
 
-    // Dispatch returned.
+    // Dispatch returned — the entire LLM turn (all blocks, tool calls,
+    // and final payloads) is complete.  Mark mainResponseDone now so the
+    // idle-close timer in http-handler only starts after there is truly
+    // no more content to deliver.
     dispatchDone = true;
 
     if (streamId) {
+      streamMeta.set(streamId, {
+        mainResponseDone: true,
+        doneAt: Date.now(),
+      });
       const stream = streamManager.getStream(streamId);
       if (!stream || stream.finished) {
         unregisterActiveStream(streamKey, streamId);

package/wecom/state.js

@@ -1,5 +1,5 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-import { WEBHOOK_BOT_SEND_URL } from "./constants.js";
+import { getWebhookBotSendUrl } from "./constants.js";
 import { resolveAgentConfigForAccount, resolveAccount } from "./accounts.js";
 
 const runtimeState = {
@@ -81,5 +81,5 @@ export function resolveWebhookUrl(name, accountId) {
   if (!webhooks || !webhooks[name]) return null;
   const value = webhooks[name];
   if (value.startsWith("http")) return value;
-  return `${WEBHOOK_BOT_SEND_URL}?key=${value}`;
+  return `${getWebhookBotSendUrl()}?key=${value}`;
 }

package/wecom/webhook-bot.js

@@ -10,6 +10,7 @@
 import crypto from "node:crypto";
 import { logger } from "../logger.js";
 import { AGENT_API_REQUEST_TIMEOUT_MS } from "./constants.js";
+import { getWebhookBotUploadUrl } from "./constants.js";
 import { wecomFetch } from "./http.js";
 
 /**
@@ -76,7 +77,7 @@ export async function webhookSendImage({ url, base64, md5 }) {
  */
 export async function webhookUploadFile({ url, buffer, filename }) {
   const key = extractKey(url);
-  const uploadUrl = `https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media?key=${encodeURIComponent(key)}&type=file`;
+  const uploadUrl = `${getWebhookBotUploadUrl()}?key=${encodeURIComponent(key)}&type=file`;
 
   const boundary = `----WebKitFormBoundary${crypto.randomBytes(16).toString("hex")}`;
   const header = Buffer.from(