@sunnoy/wecom 1.7.1 → 1.8.0

package/index.js

@@ -26,7 +26,7 @@ const plugin = {
   id: "wecom",
   name: "Enterprise WeChat",
   description: "Enterprise WeChat AI Bot channel plugin for OpenClaw",
-  configSchema: { type: "object", additionalProperties: false, properties: {} },
+  configSchema: { type: "object", additionalProperties: true, properties: {} },
   register(api) {
     logger.info("WeCom plugin registering...");
 

package/openclaw.plugin.json

@@ -7,7 +7,7 @@
   ],
   "configSchema": {
     "type": "object",
-    "additionalProperties": false,
+    "additionalProperties": true,
     "properties": {}
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@sunnoy/wecom",
-    "version": "1.7.1",
+    "version": "1.8.0",
     "description": "Enterprise WeChat AI Bot channel plugin for OpenClaw",
     "type": "module",
     "main": "index.js",

package/wecom/accounts.js

@@ -56,6 +56,15 @@ const RESERVED_KEYS = new Set([
   "allowFrom",
   "commandAllowlist",
   "commandBlockMessage",
+  // Top-level config keys that are NOT account IDs (issue #79).
+  "network",
+  "commands",
+  "dynamicAgents",
+  "dm",
+  "groupChat",
+  "adminUsers",
+  "workspaceTemplate",
+  "instances",
 ]);
 
 // ── Helpers ─────────────────────────────────────────────────────────

package/wecom/channel-plugin.js

@@ -13,6 +13,7 @@ import { resolveWecomTarget } from "./target.js";
 import { webhookSendImage, webhookSendText, webhookUploadFile, webhookSendFile } from "./webhook-bot.js";
 import { normalizeWebhookPath, registerWebhookTarget } from "./webhook-targets.js";
 import { wecomFetch, setConfigProxyUrl } from "./http.js";
+import { setApiBaseUrl } from "./constants.js";
 
 
 const AGENT_IMAGE_EXTS = new Set(["jpg", "jpeg", "png", "gif", "bmp"]);
@@ -164,6 +165,10 @@ export const wecomChannelPlugin = {
               type: "string",
               description: "HTTP(S) proxy URL for outbound WeCom API requests (e.g. http://proxy:8080). Env var WECOM_EGRESS_PROXY_URL takes precedence.",
             },
+            apiBaseUrl: {
+              type: "string",
+              description: "Custom WeCom API base URL (default: https://qyapi.weixin.qq.com). Use when routing through a reverse-proxy or API gateway. Env var WECOM_API_BASE_URL takes precedence.",
+            },
           },
         },
         webhooks: {
@@ -739,6 +744,8 @@ export const wecomChannelPlugin = {
       // Wire proxy URL from config (env var takes precedence inside http.js).
       const wecomCfg = ctx.cfg?.channels?.wecom ?? {};
       setConfigProxyUrl(wecomCfg.network?.egressProxyUrl ?? "");
+      // Wire API base URL override (env var WECOM_API_BASE_URL takes precedence).
+      setApiBaseUrl(wecomCfg.network?.apiBaseUrl ?? "");
 
       // Conflict detection: warn about duplicate tokens / agent IDs.
       const conflicts = detectAccountConflicts(ctx.cfg);

package/wecom/constants.js

@@ -40,13 +40,36 @@ export const MAIN_RESPONSE_IDLE_CLOSE_MS = 30 * 1000;
 export const SAFETY_NET_IDLE_CLOSE_MS = 90 * 1000;
 export const RESPONSE_URL_ERROR_BODY_PREVIEW_MAX = 300;
 
+// Default Agent API base URL (self-built application mode).
+// Can be overridden via `channels.wecom.network.apiBaseUrl` config or
+// `WECOM_API_BASE_URL` env var for users behind a reverse-proxy gateway
+// that relays requests to qyapi.weixin.qq.com (issue #79).
+const DEFAULT_API_BASE = "https://qyapi.weixin.qq.com";
+
+let _apiBase = DEFAULT_API_BASE;
+
+/**
+ * Set the API base URL from plugin config (called during plugin load).
+ * @param {string} url
+ */
+export function setApiBaseUrl(url) {
+  const trimmed = (url || "").trim().replace(/\/+$/, "");
+  _apiBase = trimmed || DEFAULT_API_BASE;
+}
+
+function apiBase() {
+  // Env var takes precedence over config.
+  const env = (process.env.WECOM_API_BASE_URL || "").trim().replace(/\/+$/, "");
+  return env || _apiBase;
+}
+
 // Agent API endpoints (self-built application mode).
 export const AGENT_API_ENDPOINTS = {
-  GET_TOKEN: "https://qyapi.weixin.qq.com/cgi-bin/gettoken",
-  SEND_MESSAGE: "https://qyapi.weixin.qq.com/cgi-bin/message/send",
-  SEND_APPCHAT: "https://qyapi.weixin.qq.com/cgi-bin/appchat/send",
-  UPLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/upload",
-  DOWNLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/get",
+  get GET_TOKEN() { return `${apiBase()}/cgi-bin/gettoken`; },
+  get SEND_MESSAGE() { return `${apiBase()}/cgi-bin/message/send`; },
+  get SEND_APPCHAT() { return `${apiBase()}/cgi-bin/appchat/send`; },
+  get UPLOAD_MEDIA() { return `${apiBase()}/cgi-bin/media/upload`; },
+  get DOWNLOAD_MEDIA() { return `${apiBase()}/cgi-bin/media/get`; },
 };
 
 export const TOKEN_REFRESH_BUFFER_MS = 60 * 1000;
@@ -54,5 +77,13 @@ export const AGENT_API_REQUEST_TIMEOUT_MS = 15 * 1000;
 export const MAX_REQUEST_BODY_SIZE = 1024 * 1024; // 1 MB
 
 // Webhook Bot endpoints (group robot notifications).
-export const WEBHOOK_BOT_SEND_URL = "https://qyapi.weixin.qq.com/cgi-bin/webhook/send";
-export const WEBHOOK_BOT_UPLOAD_URL = "https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media";
+export const WEBHOOK_BOT_SEND_URL_DEFAULT = "https://qyapi.weixin.qq.com/cgi-bin/webhook/send";
+export const WEBHOOK_BOT_UPLOAD_URL_DEFAULT = "https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media";
+
+// Dynamic getters so apiBaseUrl override applies to webhook bot too.
+export function getWebhookBotSendUrl() {
+  return `${apiBase()}/cgi-bin/webhook/send`;
+}
+export function getWebhookBotUploadUrl() {
+  return `${apiBase()}/cgi-bin/webhook/upload_media`;
+}

package/wecom/http-handler.js

@@ -48,7 +48,13 @@ export async function wecomHttpHandler(req, res) {
   const targets = webhookTargets.get(path);
 
   if (!targets || targets.length === 0) {
-    return false; // Not handled by this plugin
+    // Return a proper HTTP response instead of `false`. Returning false tells
+    // OpenClaw 3.x "not handled", which causes the SPA catch-all to serve the
+    // chat UI on webhook paths (issue #81).
+    logger.debug("WeCom: no webhook target registered for path", { path });
+    res.writeHead(404, { "Content-Type": "text/plain" });
+    res.end(`No WeCom webhook target configured for ${path}`);
+    return true;
   }
 
   const query = Object.fromEntries(url.searchParams);

package/wecom/http.js

@@ -12,6 +12,7 @@
  *   3. Config: `channels.wecom.network.egressProxyUrl`
  */
 
+import { logger } from "../logger.js";
 import { AGENT_API_REQUEST_TIMEOUT_MS } from "./constants.js";
 
 // ── Lazy-loaded undici (optional dependency) ──────────────────────────
@@ -64,6 +65,7 @@ function mergeAbortSignal({ signal, timeoutMs }) {
 // ── Proxy URL resolution ──────────────────────────────────────────────
 
 let _configProxyUrl = "";
+let _proxyWarningLogged = false;
 
 /**
  * Set the proxy URL from plugin config (called once during plugin load).
@@ -118,7 +120,16 @@ export async function wecomFetch(input, init, opts) {
         dispatcher,
       });
     }
-    // undici not available — fall through to native fetch (no proxy)
+    // undici not available — log warning and fall through to native fetch (no proxy).
+    // This is a common cause of proxy misconfiguration (issue #79).
+    if (!_proxyWarningLogged) {
+      _proxyWarningLogged = true;
+      logger.error(
+        "[wecom/http] Proxy configured but undici is not available — requests will go DIRECT without proxy. " +
+        "Install undici (npm install undici) to enable proxy support.",
+        { proxyUrl },
+      );
+    }
   }
 
   // Native fetch (no proxy)

package/wecom/state.js

@@ -1,5 +1,5 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-import { WEBHOOK_BOT_SEND_URL } from "./constants.js";
+import { getWebhookBotSendUrl } from "./constants.js";
 import { resolveAgentConfigForAccount, resolveAccount } from "./accounts.js";
 
 const runtimeState = {
@@ -81,5 +81,5 @@ export function resolveWebhookUrl(name, accountId) {
   if (!webhooks || !webhooks[name]) return null;
   const value = webhooks[name];
   if (value.startsWith("http")) return value;
-  return `${WEBHOOK_BOT_SEND_URL}?key=${value}`;
+  return `${getWebhookBotSendUrl()}?key=${value}`;
 }

package/wecom/webhook-bot.js

@@ -10,6 +10,7 @@
 import crypto from "node:crypto";
 import { logger } from "../logger.js";
 import { AGENT_API_REQUEST_TIMEOUT_MS } from "./constants.js";
+import { getWebhookBotUploadUrl } from "./constants.js";
 import { wecomFetch } from "./http.js";
 
 /**
@@ -76,7 +77,7 @@ export async function webhookSendImage({ url, base64, md5 }) {
  */
 export async function webhookUploadFile({ url, buffer, filename }) {
   const key = extractKey(url);
-  const uploadUrl = `https://qyapi.weixin.qq.com/cgi-bin/webhook/upload_media?key=${encodeURIComponent(key)}&type=file`;
+  const uploadUrl = `${getWebhookBotUploadUrl()}?key=${encodeURIComponent(key)}&type=file`;
 
   const boundary = `----WebKitFormBoundary${crypto.randomBytes(16).toString("hex")}`;
   const header = Buffer.from(