@vrs-soft/wecom-aibot-mcp 1.2.1 → 1.3.0

package/README.md

@@ -44,7 +44,7 @@ PermissionRequest Hook 拦截
               ↓
      ┌────────────────────────┐
      │ 检查 headless 模式状态  │
-     │ (检查 .claude/wecom-aibot.json)
+     │ (检查 .claude/headless.json)
      └────────────────────────┘
               │
       ┌───────┴───────┐

package/dist/bin.js

@@ -15,9 +15,7 @@ import * as path from 'path';
 import * as os from 'os';
 import { runConfigWizard, loadConfig, saveConfig, deleteConfig, deleteMcpConfigInteractive, uninstall, addMcpConfig, detectUserIdFromMessage, ensureHookInstalled, listAllRobots, } from './config-wizard.js';
 import { initClient } from './client.js';
-import { registerTools } from './tools/index.js';
 import { startHttpServer, stopHttpServer, HTTP_PORT } from './http-server.js';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { getAllConnectionStates } from './connection-manager.js';
 import { loadStats, cleanupOldLogs } from './connection-log.js';
 import { startKeepaliveMonitor, stopKeepaliveMonitor } from './keepalive-monitor.js';
@@ -86,11 +84,11 @@ function showStatus() {
         console.log('尚未配置机器人，请运行 npx @vrs-soft/wecom-aibot-mcp 启动配置向导');
         return;
     }
-    // 构建机器人占用信息（v3.0: ccId 由 cc-registry 管理，连接状态不再含 ccId）
+    // 构建机器人占用信息
     const robotUsage = new Map();
     for (const conn of connections) {
-        if (conn.connected) {
-            robotUsage.set(conn.robotName, { ccId: '' });
+        if (conn.agentName) {
+            robotUsage.set(conn.robotName, { agentName: conn.agentName });
         }
     }
     console.log(`已配置 ${allRobots.length} 个机器人:\n`);
@@ -101,7 +99,7 @@ function showStatus() {
         console.log(`    Bot ID:     ${robot.botId}`);
         console.log(`    目标用户:   ${robot.targetUserId}`);
         if (usage) {
-            console.log(`    使用者:     ${usage.ccId}`);
+            console.log(`    使用者:     ${usage.agentName}`);
         }
         console.log('');
     }
@@ -174,13 +172,11 @@ async function waitForConnection(client, timeoutMs = 10000) {
 }
 // 启动 MCP Server（前台运行，供 --start 使用）
 async function startMcpServerForeground() {
-    // 检查是否有任何机器人配置（支持 config.json 和 robot-*.json）
-    const allRobots = listAllRobots();
-    if (allRobots.length === 0) {
+    const savedConfig = loadConfig();
+    if (!savedConfig || !savedConfig.botId || !savedConfig.secret || !savedConfig.targetUserId) {
         console.error('[mcp] 未找到配置，请先运行: npx @vrs-soft/wecom-aibot-mcp');
         process.exit(1);
     }
-    console.log(`[mcp] 发现 ${allRobots.length} 个机器人配置: ${allRobots.map(r => r.name).join(', ')}`);
     // 写入 PID 文件
     fs.writeFileSync(PID_FILE, String(process.pid));
     // 确保 hook 已安装
@@ -188,12 +184,6 @@ async function startMcpServerForeground() {
     // 加载统计并清理旧日志
     loadStats();
     cleanupOldLogs(1 / 24);
-    // 创建 MCP Server
-    const server = new McpServer({
-        name: 'wecom-aibot-mcp',
-        version: VERSION,
-    });
-    registerTools(server);
     // 启动 HTTP 服务
     console.log('');
     console.log('  ╔════════════════════════════════════════════════════════╗');
@@ -202,7 +192,7 @@ async function startMcpServerForeground() {
     console.log('  ╚════════════════════════════════════════════════════════╝');
     console.log('');
     console.log(`[mcp] 启动 MCP HTTP Server (端口: ${HTTP_PORT})...`);
-    await startHttpServer(server);
+    await startHttpServer();
     startKeepaliveMonitor();
     console.log(`[mcp] MCP Server 已就绪`);
     console.log(`[mcp] HTTP endpoint: http://127.0.0.1:${HTTP_PORT}/mcp`);
@@ -224,9 +214,9 @@ async function startMcpServerForeground() {
 }
 // 后台启动 MCP Server（使用 spawn）
 function startMcpServerBackground() {
-    // 检查是否有任何机器人配置
-    const allRobots = listAllRobots();
-    if (allRobots.length === 0) {
+    // 检查配置是否存在
+    const savedConfig = loadConfig();
+    if (!savedConfig || !savedConfig.botId || !savedConfig.secret || !savedConfig.targetUserId) {
         console.error('[mcp] 未找到配置，请先运行: npx @vrs-soft/wecom-aibot-mcp');
         process.exit(1);
     }

package/dist/cc-registry.js

@@ -10,7 +10,9 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
 import { atomicWriteFileSync } from './utils/atomic-write.js';
-const EXPIRY_MS = 14 * 24 * 60 * 60 * 1000;
+import { logWarn } from './connection-log.js';
+const WARNING_MS = 10 * 24 * 60 * 60 * 1000; // 10 天：过期前警告
+const EXPIRY_MS = 14 * 24 * 60 * 60 * 1000; // 14 天：清理
 // 心跳检测常量
 const OFFLINE_THRESHOLD = 10 * 60 * 1000; // 10 分钟无心跳视为离线
 const NOTIFICATION_INTERVAL = 30 * 60 * 1000; // 30 分钟最多通知一次
@@ -88,11 +90,15 @@ function pruneExpired(registry) {
     const now = Date.now();
     let changed = false;
     for (const [ccId, entry] of Object.entries(registry)) {
-        if (now - entry.lastActive > EXPIRY_MS) {
-            console.log(`[cc-registry] 清理过期条目: ccId=${ccId}, robot=${entry.robotName}`);
+        const inactive = now - entry.lastActive;
+        if (inactive > EXPIRY_MS) {
+            logWarn(`[cc-registry] 已清理过期 ccId "${ccId}" (robot: ${entry.robotName})，超过 14 天未活跃`);
             delete registry[ccId];
             changed = true;
         }
+        else if (inactive > WARNING_MS) {
+            logWarn(`[cc-registry] 警告：ccId "${ccId}" (robot: ${entry.robotName}) 已 10 天未活跃，4 天后将自动清理`);
+        }
     }
     return changed;
 }
@@ -230,7 +236,8 @@ async function sendOfflineNotification(ccId, robotName) {
             console.log(`[heartbeat] 机器人 ${robotName} 未连接，无法发送离线通知`);
             return;
         }
-        const inactiveMinutes = Math.floor((Date.now() - getRegistry()[ccId]?.lastActive || 0) / 60000);
+        const registryEntry = getRegistry()[ccId];
+        const inactiveMinutes = registryEntry ? Math.floor((Date.now() - registryEntry.lastActive) / 60000) : 0;
         const message = `【系统警告】CC "${ccId}" 已超过 ${inactiveMinutes} 分钟无心跳，可能已离线。
 
 可能原因：
@@ -252,13 +259,12 @@ async function sendOfflineNotification(ccId, robotName) {
 export function startHeartbeatMonitor() {
     if (heartbeatInterval)
         return;
-    // 测试期间改为 1 分钟，正式环境改为 5 * 60 * 1000
     heartbeatInterval = setInterval(() => {
         checkCcHeartbeat().catch(err => {
             console.error('[heartbeat] 心跳检测错误:', err);
         });
-    }, 1 * 60 * 1000);
-    console.log('[heartbeat] 心跳检测已启动（测试模式：1 分钟周期）');
+    }, 5 * 60 * 1000);
+    console.log('[heartbeat] 心跳检测已启动（5 分钟周期）');
 }
 /**
  * 停止心跳检测

package/dist/client.d.ts

@@ -22,6 +22,7 @@ interface MessageRecord {
     from_userid: string;
     chatid: string;
     chattype: 'single' | 'group';
+    quoteContent?: string;
 }
 declare class WecomClient extends EventEmitter {
     private wsClient;
@@ -90,5 +91,7 @@ declare class WecomClient extends EventEmitter {
     };
 }
 export declare function initClient(botId: string, secret: string, targetUserId: string, robotName: string): WecomClient;
-export declare function getClient(): WecomClient;
+export declare function getClient(robotName?: string): WecomClient;
+export declare function getAllClients(): Map<string, WecomClient>;
+export declare function disconnectClient(robotName: string): boolean;
 export { WecomClient, ApprovalRecord, MessageRecord, MAX_PENDING_MESSAGES };

package/dist/client.js

@@ -53,14 +53,14 @@ class WecomClient extends EventEmitter {
     }
     setupEventHandlers() {
         this.wsClient.on('connected', () => {
-            logConnected(this.robotName);
+            logConnected();
         });
         this.wsClient.on('authenticated', () => {
             const wasReconnecting = this.wasReconnecting;
             this.connected = true;
             this.wasReconnecting = false;
             this.reconnectAttempt = 0;
-            logAuthenticated(this.robotName);
+            logAuthenticated();
             // 重连成功后发送通知
             if (wasReconnecting) {
                 this.sendText('【系统】连接已恢复').catch(err => {
@@ -74,7 +74,7 @@ class WecomClient extends EventEmitter {
             this.connected = false;
             this.wasReconnecting = true;
             this.lastDisconnectTime = Date.now();
-            logDisconnected(this.robotName, reason);
+            logDisconnected(reason);
             // 发送断线通知
             this.sendText('【系统】连接中断，正在重连...').catch(err => {
                 console.error('[wecom] 发送断线通知失败:', err);
@@ -82,10 +82,10 @@ class WecomClient extends EventEmitter {
         });
         this.wsClient.on('reconnecting', (attempt) => {
             this.reconnectAttempt = attempt;
-            logReconnecting(this.robotName, attempt);
+            logReconnecting(attempt);
         });
         this.wsClient.on('error', (err) => {
-            logError(this.robotName, err.message);
+            logError(err.message);
             // 检测授权相关错误（40058: invalid Request Parameter）
             if (err.message.includes('40058') || err.message.includes('invalid Request Parameter')) {
                 console.log('');
@@ -159,6 +159,7 @@ class WecomClient extends EventEmitter {
                 from_userid,
                 chatid,
                 chattype,
+                quoteContent,
             };
             // v3.0: 检查队列上限
             if (this.messages.length >= MAX_PENDING_MESSAGES) {
@@ -185,12 +186,21 @@ class WecomClient extends EventEmitter {
         const event = frame.body?.event;
         if (!event)
             return;
-        // template_card_event 结构在 event.template_card_event 中
-        const cardEvent = event.template_card_event;
-        if (!cardEvent)
+        // 调试：打印完整事件结构
+        console.log('[wecom] 审批事件原始结构:', JSON.stringify(event).substring(0, 500));
+        // task_id 和 event_key 可能在 event 层级（SDK 扁平化）
+        // 也可能嵌套在 template_card_event 对象内（WeChat 原始结构）
+        let taskId = event.task_id;
+        let eventKey = event.event_key;
+        // 如果直接找不到，尝试嵌套结构
+        if (!taskId && event.template_card_event) {
+            taskId = event.template_card_event.task_id;
+            eventKey = event.template_card_event.event_key;
+        }
+        if (!taskId) {
+            console.log('[wecom] 审批事件未找到 task_id，事件 keys:', Object.keys(event));
             return;
-        const taskId = cardEvent.task_id;
-        const eventKey = cardEvent.event_key; // 用户点击的按钮 key
+        }
         console.log(`[wecom] 收到审批响应: taskId=${taskId}, key=${eventKey}`);
         const approval = this.approvals.get(taskId);
         if (approval && !approval.resolved) {
@@ -303,7 +313,7 @@ class WecomClient extends EventEmitter {
         if (toolInput && toolName) {
             const operationHash = hashOperation(ccId ?? '', toolName, toolInput);
             const existing = this.findApprovalByHash(operationHash);
-            if (existing) {
+            if (existing && !existing.resolved) {
                 console.log(`[wecom] 复用已有审批: ${existing.taskId} (hash: ${operationHash.slice(0, 8)}...)`);
                 return existing.taskId;
             }
@@ -550,20 +560,46 @@ class WecomClient extends EventEmitter {
         };
     }
 }
-// 单例实例
-let instance = null;
+// 多实例支持（按 robotName 索引）
+const instances = new Map();
 export function initClient(botId, secret, targetUserId, robotName) {
-    if (instance) {
-        instance.disconnect();
+    // 如果该机器人已存在，先断开旧连接
+    if (instances.has(robotName)) {
+        instances.get(robotName).disconnect();
     }
-    instance = new WecomClient(botId, secret, targetUserId, robotName);
-    instance.connect();
-    return instance;
+    const client = new WecomClient(botId, secret, targetUserId, robotName);
+    client.connect();
+    instances.set(robotName, client);
+    return client;
 }
-export function getClient() {
-    if (!instance) {
+export function getClient(robotName) {
+    if (robotName) {
+        const client = instances.get(robotName);
+        if (!client) {
+            throw new Error(`WecomClient 未初始化：机器人 "${robotName}" 不存在`);
+        }
+        return client;
+    }
+    // 无参数时返回第一个实例（向后兼容）
+    if (instances.size === 0) {
         throw new Error('WecomClient 未初始化，请先调用 initClient');
     }
-    return instance;
+    const first = instances.values().next().value;
+    if (!first) {
+        throw new Error('WecomClient 未初始化');
+    }
+    return first;
+}
+export function getAllClients() {
+    return instances;
+}
+export function disconnectClient(robotName) {
+    const client = instances.get(robotName);
+    if (client) {
+        client.disconnect();
+        instances.delete(robotName);
+        return true;
+    }
+    return false;
 }
 export { WecomClient, MAX_PENDING_MESSAGES };

package/dist/config-wizard.js

@@ -249,32 +249,16 @@ export function uninstall() {
 function writeHookScript() {
     const script = `#!/bin/bash
 # wecom-aibot-mcp PermissionRequest hook
-# HTTP Transport 版本 - v3.0
+# HTTP Transport 版本
 #
-# v3.0 增强：
-# - 工具名验证（防止注入攻击）
-# - curl 错误处理（检查退出码）
-# - 重试机制（3 次重试）
+# 固定端口: 18963
+# 直接检查 $(pwd)/.claude/headless.json
 
 MCP_PORT=18963
-MAX_RETRIES=3
-RETRY_DELAY=2
 
 INPUT=$(cat)
 TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // empty')
 
-# ============================================
-# 工具名验证（防止注入攻击）
-# ============================================
-# 只允许字母、数字、下划线、连字符
-if [[ ! "$TOOL_NAME" =~ ^[a-zA-Z0-9_-]+$ ]]; then
-  # MCP 工具名可能包含特殊字符（如 mcp__server__tool）
-  if [[ ! "$TOOL_NAME" =~ ^[a-zA-Z0-9_-]+$ ]] && [[ ! "$TOOL_NAME" == mcp__* ]]; then
-    echo "[hook] 无效的工具名: $TOOL_NAME" >&2
-    exit 0
-  fi
-fi
-
 # MCP 工具本身不需要拦截
 if [[ "$TOOL_NAME" == mcp__* ]]; then
   printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"allow"}}}'
@@ -289,97 +273,52 @@ case "$TOOL_NAME" in
     ;;
 esac
 
-# 检查项目目录的 settings.json 是否有 hooks 配置
+# 直接检查项目目录的 headless 状态文件
 PROJECT_DIR=$(pwd)
-SETTINGS_FILE="$PROJECT_DIR/.claude/settings.json"
+HEADLESS_FILE="$PROJECT_DIR/.claude/headless.json"
 
-# 没有 hooks 配置，说明不在微信模式
-if [[ ! -f "$SETTINGS_FILE" ]]; then
+# 不在 headless 模式
+if [[ ! -f "$HEADLESS_FILE" ]]; then
   exit 0
 fi
 
-# 检查是否有 PermissionRequest hook
-if ! jq -e '.hooks.PermissionRequest' "$SETTINGS_FILE" > /dev/null 2>&1; then
+# 检查 MCP Server 是否在线
+HEALTH=$(curl -s -m 2 "http://127.0.0.1:$MCP_PORT/health" 2>/dev/null)
+if ! echo "$HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
   exit 0
 fi
 
-# ============================================
-# 带重试的 curl 函数
-# ============================================
-retry_curl() {
-  local url="$1"
-  local max_retries="$2"
-  local attempt=1
-  local response
-
-  while [[ $attempt -le $max_retries ]]; do
-    response=$(curl -s -m 10 "$url" 2>/dev/null)
-    local exit_code=$?
-
-    if [[ $exit_code -eq 0 ]]; then
-      echo "$response"
-      return 0
-    fi
-
-    echo "[hook] curl 失败 (尝试 $attempt/$max_retries, 退出码: $exit_code)" >&2
+# 从 headless.json 提取 ccId（优先 agentName，回退 ccId）
+CC_ID=$(jq -r '.agentName // .ccId // empty' "$HEADLESS_FILE" 2>/dev/null)
 
-    if [[ $attempt -lt $max_retries ]]; then
-      sleep $RETRY_DELAY
-    fi
-
-    ((attempt++))
-  done
-
-  return 1
-}
-
-# ============================================
-# 检查 MCP Server 健康状态
-# ============================================
-HEALTH=$(retry_curl "http://127.0.0.1:$MCP_PORT/health" "$MAX_RETRIES")
-if [[ $? -ne 0 ]] || ! echo "$HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
-  echo "[hook] MCP Server 不在线，跳过审批" >&2
-  exit 0
-fi
-
-# ============================================
-# 发送审批请求
-# ============================================
+# 发送审批请求（包含 ccId 用于路由）
 TOOL_INPUT=$(echo "$INPUT" | jq -c '.tool_input // {}')
-
-# 验证 tool_input 是有效的 JSON
-if ! echo "$TOOL_INPUT" | jq -e . > /dev/null 2>&1; then
-  echo "[hook] 无效的 tool_input JSON" >&2
-  exit 0
-fi
-
-BODY=$(jq -n --arg tool_name "$TOOL_NAME" --argjson tool_input "$TOOL_INPUT" --arg project_dir "$PROJECT_DIR" \\
-  '{"tool_name":$tool_name,"tool_input":$tool_input,"projectDir":$project_dir}')
+BODY=$(jq -n \\
+  --arg tool_name "$TOOL_NAME" \\
+  --argjson tool_input "$TOOL_INPUT" \\
+  --arg project_dir "$PROJECT_DIR" \\
+  --arg cc_id "$CC_ID" \\
+  '{"tool_name":$tool_name,"tool_input":$tool_input,"projectDir":$project_dir,"ccId":$cc_id}')
 
 RESPONSE=$(curl -s -m 10 -X POST "http://127.0.0.1:$MCP_PORT/approve" \\
   -H "Content-Type: application/json" \\
-  -d "$BODY" 2>/dev/null)
-CURL_EXIT=$?
-
-if [[ $CURL_EXIT -ne 0 ]]; then
-  echo "[hook] 发送审批请求失败 (退出码: $CURL_EXIT)" >&2
-  exit 0
-fi
+  -d "$BODY")
 
 TASK_ID=$(echo "$RESPONSE" | jq -r '.taskId // empty')
 if [[ -z "$TASK_ID" ]]; then
-  echo "[hook] 未获取到 taskId" >&2
   exit 0
 fi
 
-# ============================================
-# 阻塞等待审批结果
-# ============================================
-WAIT_RESULT=$(curl -s -m 600 -X GET "http://127.0.0.1:$MCP_PORT/approval_wait/$TASK_ID" 2>/dev/null)
-CURL_EXIT=$?
+# 轮询审批结果（带超时：10 分钟）
+POLL_COUNT=0
+MAX_POLL=300  # 300 * 2秒 = 600秒 = 10分钟
 
-if [[ $CURL_EXIT -eq 0 ]] && [[ -n "$WAIT_RESULT" ]]; then
-  RESULT=$(echo "$WAIT_RESULT" | jq -r '.result // empty')
+while [[ $POLL_COUNT -lt $MAX_POLL ]]; do
+  sleep 2
+  POLL_COUNT=$((POLL_COUNT + 1))
+
+  STATUS=$(curl -s -m 3 "http://127.0.0.1:$MCP_PORT/approval_status/$TASK_ID" 2>/dev/null)
+  RESULT=$(echo "$STATUS" | jq -r '.result // empty')
 
   if [[ "$RESULT" == "allow-once" || "$RESULT" == "allow-always" ]]; then
     printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"allow"}}}'
@@ -388,33 +327,65 @@ if [[ $CURL_EXIT -eq 0 ]] && [[ -n "$WAIT_RESULT" ]]; then
     printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"deny","message":"用户拒绝"}}}'
     exit 0
   fi
-fi
+done
 
-# ============================================
-# 无限轮询审批结果
-# ============================================
-echo "[hook] 开始无限轮询审批结果" >&2
+# 超时处理：智能代批
+# 规则：删除命令→拒绝，项目内操作→允许，项目外操作→拒绝
 
-while true; do
-  sleep 2
+# 检查是否是删除命令
+IS_DELETE=0
+if [[ "$TOOL_NAME" == "Bash" ]]; then
+  CMD=$(echo "$TOOL_INPUT" | jq -r '.command // empty')
+  if [[ "$CMD" =~ ^rm\\ ]] || [[ "$CMD" =~ \\ rm\\ ]] || \
+     [[ "$CMD" =~ ^rmdir\\ ]] || [[ "$CMD" =~ \\ rmdir\\ ]] || \
+     [[ "$CMD" =~ ^unlink\\ ]] || [[ "$CMD" =~ rm\\ -rf ]]; then
+    IS_DELETE=1
+  fi
+fi
 
-  STATUS=$(curl -s -m 3 "http://127.0.0.1:$MCP_PORT/approval_status/$TASK_ID" 2>/dev/null)
-  CURL_EXIT=$?
+# 删除操作 → 永远拒绝
+if [[ $IS_DELETE -eq 1 ]]; then
+  printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"deny","message":"超时自动拒绝：删除操作需人工确认"}}}'
+  exit 0
+fi
 
-  if [[ $CURL_EXIT -ne 0 ]]; then
-    continue
-  fi
+# 检查操作路径是否在项目内
+IS_IN_PROJECT=0
 
-  RESULT=$(echo "$STATUS" | jq -r '.result // empty')
+case "$TOOL_NAME" in
+  Bash)
+    CMD=$(echo "$TOOL_INPUT" | jq -r '.command // empty')
+    if [[ "$CMD" == *"$PROJECT_DIR"* ]] || \
+       [[ "$CMD" =~ ^\\./ ]] || \
+       [[ "$CMD" =~ ^npm\\ ]] || \
+       [[ "$CMD" =~ ^npx\\ ]] || \
+       [[ "$CMD" =~ ^git\\ ]] || \
+       [[ "$CMD" =~ ^node\\ ]]; then
+      IS_IN_PROJECT=1
+    fi
+    ;;
+  Write|Edit)
+    FILE_PATH=$(echo "$TOOL_INPUT" | jq -r '.file_path // empty')
+    if [[ "$FILE_PATH" == "$PROJECT_DIR"* ]] || [[ "$FILE_PATH" != /* ]]; then
+      IS_IN_PROJECT=1
+    fi
+    ;;
+  *)
+    FILE_PATH=$(echo "$TOOL_INPUT" | jq -r '.file_path // .path // .directory // empty')
+    if [[ -n "$FILE_PATH" ]]; then
+      if [[ "$FILE_PATH" == "$PROJECT_DIR"* ]] || [[ "$FILE_PATH" != /* ]]; then
+        IS_IN_PROJECT=1
+      fi
+    fi
+    ;;
+esac
 
-  if [[ "$RESULT" == "allow-once" || "$RESULT" == "allow-always" ]]; then
-    printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"allow"}}}'
-    exit 0
-  elif [[ "$RESULT" == "deny" ]]; then
-    printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"deny","message":"用户拒绝"}}}'
-    exit 0
-  fi
-done
+# 根据项目内/外决策
+if [[ $IS_IN_PROJECT -eq 1 ]]; then
+  printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"allow","message":"超时自动允许：项目内操作"}}}'
+else
+  printf '%s\\n' '{"hookSpecificOutput":{"hookEventName":"PermissionRequest","decision":{"behavior":"deny","message":"超时自动拒绝：项目外操作需人工确认"}}}'
+fi
 `;
     ensureConfigDir();
     fs.writeFileSync(HOOK_SCRIPT_PATH, script, { mode: 0o755 });
@@ -423,7 +394,7 @@ done
 // 写入 MCP Server 配置到 ~/.claude.json
 function writeMcpServerConfig(config, instanceName) {
     try {
-        // 1. 写入机器人配置到 ~/.wecom-aibot-mcp/robot-${timestamp}.json
+        // 1. 写入机器人配置到 ~/.wecom-aibot-mcp/config.json
         ensureConfigDir();
         const botConfig = {
             botId: config.botId,
@@ -433,10 +404,8 @@ function writeMcpServerConfig(config, instanceName) {
         if (config.nameTag) {
             botConfig.nameTag = config.nameTag;
         }
-        // 所有机器人都使用独立文件，不再有默认 config.json
-        const robotConfigPath = path.join(CONFIG_DIR, `robot-${Date.now()}.json`);
-        fs.writeFileSync(robotConfigPath, JSON.stringify(botConfig, null, 2));
-        console.log(`[config] 机器人配置已写入: ${path.basename(robotConfigPath)}`);
+        fs.writeFileSync(BOT_CONFIG_FILE, JSON.stringify(botConfig, null, 2));
+        console.log('[config] 机器人配置已写入 ~/.wecom-aibot-mcp/config.json');
         // 2. 写入 MCP 配置到 ~/.claude.json（仅 URL）
         let claudeConfig = {};
         if (fs.existsSync(CLAUDE_CONFIG_FILE)) {
@@ -459,7 +428,7 @@ function writeMcpServerConfig(config, instanceName) {
         console.error('[config] 写入配置失败:', err);
         console.log('[config] ⚠️  请手动配置:');
         console.log('');
-        console.log('~/.wecom-aibot-mcp/robot-<timestamp>.json:');
+        console.log('~/.wecom-aibot-mcp/config.json:');
         console.log(JSON.stringify({
             botId: config.botId,
             secret: config.secret,
@@ -544,10 +513,19 @@ export async function addMcpConfig() {
         };
         // 确保配置目录存在
         ensureConfigDir();
-        // 所有机器人都保存为独立文件（不再区分第一个）
+        // 如果是第一个机器人，保存为默认配置
+        const defaultConfigPath = BOT_CONFIG_FILE;
         const robotConfigPath = path.join(CONFIG_DIR, `robot-${Date.now()}.json`);
-        fs.writeFileSync(robotConfigPath, JSON.stringify(robotConfig, null, 2));
-        console.log(`\n[config] ✅ 已添加机器人: ${robotName}`);
+        if (!fs.existsSync(defaultConfigPath)) {
+            // 第一个机器人作为默认
+            fs.writeFileSync(defaultConfigPath, JSON.stringify(robotConfig, null, 2));
+            console.log(`\n[config] ✅ 已设为默认机器人: ${robotName}`);
+        }
+        else {
+            // 后续机器人保存为独立文件
+            fs.writeFileSync(robotConfigPath, JSON.stringify(robotConfig, null, 2));
+            console.log(`\n[config] ✅ 已添加新机器人: ${robotName}`);
+        }
         console.log(`[config] 用户 ID: ${targetUserId}`);
         // 列出所有机器人
         const robots = listAllRobots();

package/dist/connection-log.d.ts

@@ -2,11 +2,9 @@
  * 连接状态日志模块
  *
  * 记录 WebSocket 连接状态变化，便于分析连接问题
- * 支持多机器人，每个机器人独立记录
  */
 interface ConnectionRecord {
-    robotName: string;
-    event: 'connected' | 'authenticated' | 'disconnected' | 'reconnecting' | 'error';
+    event: 'connected' | 'authenticated' | 'disconnected' | 'reconnecting' | 'error' | 'warn';
     timestamp: string;
     isoTime: string;
     reason?: string;
@@ -14,7 +12,7 @@ interface ConnectionRecord {
     errorMessage?: string;
     connectionDuration?: number;
 }
-interface RobotConnectionStats {
+interface ConnectionStats {
     totalConnections: number;
     totalDisconnections: number;
     totalReconnects: number;
@@ -23,29 +21,16 @@ interface RobotConnectionStats {
     lastDisconnectTime?: string;
     longestConnection?: number;
     totalConnectionTime?: number;
-    currentConnectionStart?: number;
-    lastHeartbeat?: number;
-    lastAuthenticated?: boolean;
 }
-export declare function loadStats(): Record<string, RobotConnectionStats>;
-export declare function getAllStats(): Record<string, RobotConnectionStats>;
-export declare function getRobotConnectionStats(robotName: string): RobotConnectionStats | undefined;
-export declare function logConnected(robotName: string): void;
-export declare function logAuthenticated(robotName: string): void;
-export declare function logDisconnected(robotName: string, reason: string): void;
-export declare function logReconnecting(robotName: string, attempt: number): void;
-export declare function logError(robotName: string, errorMessage: string): void;
-export declare function logHeartbeat(robotName: string): void;
-export declare function isConnectionHealthy(robotName: string, maxAgeMs?: number): boolean;
-export declare function getStats(): {
-    totalConnections: number;
-    totalDisconnections: number;
-    totalReconnects: number;
-    totalErrors: number;
-    lastConnectTime?: string;
-    lastDisconnectTime?: string;
-};
-export declare function getRecentLogs(count?: number, robotName?: string): ConnectionRecord[];
+export declare function loadStats(): ConnectionStats;
+export declare function logConnected(): void;
+export declare function logAuthenticated(): void;
+export declare function logDisconnected(reason: string): void;
+export declare function logReconnecting(attempt: number): void;
+export declare function logError(errorMessage: string): void;
+export declare function logWarn(message: string): void;
+export declare function getStats(): ConnectionStats;
+export declare function getRecentLogs(count?: number): ConnectionRecord[];
 export declare function cleanupOldLogs(daysToKeep?: number): void;
 export declare function getLogFilePath(): string;
 export declare function getStatsFilePath(): string;