@vrs-soft/wecom-aibot-mcp 2.4.8 → 2.4.10

package/README.md

@@ -12,6 +12,44 @@
 
 ---
 
+## 效果预览
+
+<img src="docs/approval-card.png" width="320" alt="微信审批卡片" />
+
+每次 Claude 执行敏感操作（Bash 命令、编辑文件等）时，企业微信会推送审批卡片，点击**允许**或**拒绝**即可实时控制执行权限。超时未响应时，根据配置自动代批（允许项目内操作，拒绝删除命令）。
+
+---
+
+## 使用场景
+
+### 场景一：离开电脑，微信远程监督
+
+出门开会或离开座位时，告诉 Claude「现在开始通过微信联系」，进入微信模式后：
+
+- Claude 执行每一步操作前发送审批请求到微信
+- 你在手机上点击**允许 / 拒绝**，Claude 实时响应
+- 设置超时自动审批（`autoApproveTimeout`），无人值守时自动处理项目内操作
+
+### 场景二：微信直接下达任务
+
+不在电脑前，直接在企业微信给机器人发消息：
+
+- 「帮我跑一下单元测试，把结果发给我」
+- 「把 src/index.ts 里的 TODO 都处理掉」
+- 「最近有什么错误日志？」
+
+Claude 执行完成后自动回复进度和结果到微信。
+
+### 场景三：团队共享机器人，群聊协作
+
+在企业微信群中 @机器人，多个成员可以同时：
+
+- 查询项目状态
+- 触发 CI 任务
+- 审批自己负责的操作（审批请求精确路由到对应 Claude 窗口）
+
+---
+
 ## 前置条件
 
 企业微信管理后台创建智能机器人，连接方式选「使用长连接」，记录 **Bot ID** 和 **Secret** 以及 **DocURL**（文档url）。

package/dist/config-wizard.js

@@ -448,15 +448,42 @@ case "$TOOL_NAME" in
     ;;
 esac
 
-# 检查项目目录的微信模式配置文件
-PROJECT_DIR=$(pwd)
-CONFIG_FILE="$PROJECT_DIR/.claude/wecom-aibot.json"
+# 通过进程树匹配活跃项目（以 Claude 进程为准，不依赖 pwd）
+ACTIVE_INDEX="$HOME/.wecom-aibot-mcp/active-projects.json"
+log_debug "[$(date)] Checking active-projects index via PID tree (pid=$$, ppid=$PPID)"
 
-log_debug "[$(date)] Checking config: $CONFIG_FILE"
+if [[ ! -f "$ACTIVE_INDEX" ]]; then
+  log_debug "[$(date)] No active-projects index, exit 0"
+  exit 0
+fi
+
+# 沿进程树向上查找，深度 8 层
+PROJECT_DIR=""
+SEARCH_PID=$PPID
+for i in {1..8}; do
+  if [[ -z "$SEARCH_PID" ]] || [[ "$SEARCH_PID" -le 1 ]]; then
+    break
+  fi
+  MATCH=$(jq -r --argjson p "$SEARCH_PID" '.[] | select(.pid==$p) | .projectDir' "$ACTIVE_INDEX" 2>/dev/null)
+  if [[ -n "$MATCH" ]]; then
+    PROJECT_DIR="$MATCH"
+    log_debug "[$(date)] Found project via PID $SEARCH_PID (depth $i): $PROJECT_DIR"
+    break
+  fi
+  SEARCH_PID=$(ps -o ppid= -p "$SEARCH_PID" 2>/dev/null | tr -d ' ')
+done
+
+if [[ -z "$PROJECT_DIR" ]]; then
+  log_debug "[$(date)] No PID match in process tree, exit 0"
+  exit 0
+fi
+
+CONFIG_FILE="$PROJECT_DIR/.claude/wecom-aibot.json"
+log_debug "[$(date)] Found project: $PROJECT_DIR"
 
 # 配置文件不存在，不在微信模式
 if [[ ! -f "$CONFIG_FILE" ]]; then
-  log_debug "[$(date)] No config file, exit 0"
+  log_debug "[$(date)] No wecom-aibot.json config, exit 0"
   exit 0
 fi
 
@@ -468,37 +495,48 @@ if [[ "$WECHAT_MODE" != "true" ]]; then
   exit 0
 fi
 
-# 确定 MCP Server 地址（本地优先，失败则尝试远程 channel 配置）
+# 确定 MCP Server 地址
+# channel 模式直接使用远程地址，http 模式先试本地再回退远程
+MODE=$(jq -r '.mode // "http"' "$CONFIG_FILE" 2>/dev/null)
 MCP_BASE_URL="http://127.0.0.1:$MCP_PORT"
 AUTH_ARGS=()
 
-HEALTH=$(curl -s -m 2 "$MCP_BASE_URL/health" 2>/dev/null)
-log_debug "[$(date)] Local health check: $HEALTH"
-if ! echo "$HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
-  log_debug "[$(date)] Local server not available, trying remote channel config..."
+_try_remote() {
   CLAUDE_JSON="$HOME/.claude.json"
-  if [[ -f "$CLAUDE_JSON" ]]; then
-    REMOTE_URL=$(jq -r '.mcpServers["wecom-aibot-channel"].env.MCP_URL // empty' "$CLAUDE_JSON" 2>/dev/null)
-    REMOTE_TOKEN=$(jq -r '.mcpServers["wecom-aibot-channel"].env.MCP_AUTH_TOKEN // empty' "$CLAUDE_JSON" 2>/dev/null)
-    if [[ -n "$REMOTE_URL" ]]; then
-      REMOTE_HEALTH=$(curl -s -m 5 \${REMOTE_TOKEN:+-H "Authorization: Bearer $REMOTE_TOKEN"} "$REMOTE_URL/health" 2>/dev/null)
-      log_debug "[$(date)] Remote health check ($REMOTE_URL): $REMOTE_HEALTH"
-      if echo "$REMOTE_HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
-        MCP_BASE_URL="$REMOTE_URL"
-        [[ -n "$REMOTE_TOKEN" ]] && AUTH_ARGS=(-H "Authorization: Bearer $REMOTE_TOKEN")
-        log_debug "[$(date)] Using remote server: $MCP_BASE_URL"
-      else
-        log_debug "[$(date)] Remote health check failed, exit 0"
-        exit 0
-      fi
-    else
-      log_debug "[$(date)] No remote URL configured, exit 0"
-      exit 0
-    fi
-  else
+  if [[ ! -f "$CLAUDE_JSON" ]]; then
     log_debug "[$(date)] No ~/.claude.json found, exit 0"
     exit 0
   fi
+  REMOTE_URL=$(jq -r '.mcpServers["wecom-aibot-channel"].env.MCP_URL // empty' "$CLAUDE_JSON" 2>/dev/null)
+  REMOTE_TOKEN=$(jq -r '.mcpServers["wecom-aibot-channel"].env.MCP_AUTH_TOKEN // empty' "$CLAUDE_JSON" 2>/dev/null)
+  if [[ -z "$REMOTE_URL" ]]; then
+    log_debug "[$(date)] No remote URL configured, exit 0"
+    exit 0
+  fi
+  REMOTE_HEALTH=$(curl -s -m 5 \${REMOTE_TOKEN:+-H "Authorization: Bearer $REMOTE_TOKEN"} "$REMOTE_URL/health" 2>/dev/null)
+  log_debug "[$(date)] Remote health check ($REMOTE_URL): $REMOTE_HEALTH"
+  if echo "$REMOTE_HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
+    MCP_BASE_URL="$REMOTE_URL"
+    [[ -n "$REMOTE_TOKEN" ]] && AUTH_ARGS=(-H "Authorization: Bearer $REMOTE_TOKEN")
+    log_debug "[$(date)] Using remote server: $MCP_BASE_URL"
+  else
+    log_debug "[$(date)] Remote health check failed, exit 0"
+    exit 0
+  fi
+}
+
+if [[ "$MODE" == "channel" ]]; then
+  # channel 模式：直接使用远程地址，跳过本地检查
+  log_debug "[$(date)] Channel mode, using remote server directly"
+  _try_remote
+else
+  # http 模式：本地优先，失败则尝试远程
+  HEALTH=$(curl -s -m 2 "$MCP_BASE_URL/health" 2>/dev/null)
+  log_debug "[$(date)] Local health check: $HEALTH"
+  if ! echo "$HEALTH" | jq -e '.status == "ok"' > /dev/null 2>&1; then
+    log_debug "[$(date)] Local server not available, trying remote channel config..."
+    _try_remote
+  fi
 fi
 
 # 读取当前项目使用的机器人名称和 ccId
@@ -526,7 +564,7 @@ fi
 log_debug "[$(date)] Waiting for approval, taskId: $TASK_ID"
 
 # 轮询审批结果（带超时：从配置读取）
-AUTO_APPROVE_TIMEOUT=$(jq -r '.autoApproveTimeout // 600' "$CONFIG_FILE" 2>/dev/null)
+AUTO_APPROVE_TIMEOUT=$(jq -r '.autoApproveTimeout // 300' "$CONFIG_FILE" 2>/dev/null)
 # 超时时间（秒），转换为轮询次数（每次 sleep 2秒）
 # 使用向上取整补偿整数截断：MAX_POLL = ceil(timeout/2) = (timeout+1)/2
 MAX_POLL=$(( (AUTO_APPROVE_TIMEOUT + 1) / 2 ))
@@ -588,12 +626,14 @@ fi
 # 规则：删除命令→拒绝，项目内操作→允许，项目外操作→拒绝
 log_debug "[$(date)] Executing smart auto-approval"
 
-# 检查是否是删除命令
+# 检查是否是删除命令（仅匹配命令行本身，不匹配 heredoc 内容）
 IS_DELETE=0
 if [[ "$TOOL_NAME" == "Bash" ]]; then
-  CMD=$(echo "$TOOL_INPUT" | jq -r '.command // empty')
-  log_debug "[$(date)] Checking delete: CMD=$CMD"
-  if [[ "$CMD" == rm* ]] || [[ "$CMD" == *" rm "* ]] || [[ "$CMD" == *"-rf"* ]]; then
+  # 只取命令的第一行（避免 heredoc 内容干扰）
+  FIRST_LINE=$(echo "$TOOL_INPUT" | jq -r '.command // empty' | head -1)
+  log_debug "[$(date)] Checking delete: FIRST_LINE=$FIRST_LINE"
+  if [[ "$FIRST_LINE" == rm\\ * ]] || [[ "$FIRST_LINE" == rm ]] \\
+     || echo "$FIRST_LINE" | grep -qE '(^|[;&|(] *)(rm |rmdir )'; then
     IS_DELETE=1
   fi
 fi
@@ -615,10 +655,32 @@ IS_IN_PROJECT=0
 case "$TOOL_NAME" in
   Bash)
     CMD=$(echo "$TOOL_INPUT" | jq -r '.command // empty')
-    # 只有明确在项目目录内操作才认为是项目内操作
-    # 相对路径 ./ 或包含项目目录路径
-    if [[ "$CMD" == *"$PROJECT_DIR"* ]] || [[ "$CMD" == ./* ]]; then
+    EXEC_CWD=$(pwd)
+    log_debug "[$(date)] Bash CMD=$CMD, EXEC_CWD=$EXEC_CWD"
+    if [[ "$CMD" == *"$PROJECT_DIR"* ]]; then
+      # 明确包含项目路径 → 项目内
       IS_IN_PROJECT=1
+    elif echo "$CMD" | grep -qE '(^|[ \t])/[a-zA-Z0-9]'; then
+      # 含有绝对路径：过滤掉项目路径和安全系统目录，看是否还有真正的项目外路径
+      OUTSIDE=$(echo "$CMD" | grep -oE '(^| )/[a-zA-Z0-9][^ \t>|;&]*' | tr -d ' ' \
+        | grep -v "^$PROJECT_DIR" \
+        | grep -vE '^(/tmp/|/var/tmp/|/dev/null|/dev/stdin|/dev/stdout|/dev/stderr|/dev/fd/)')
+      if [[ -z "$OUTSIDE" ]]; then
+        # 绝对路径全是项目内或安全临时目录 → 以执行位置为准
+        log_debug "[$(date)] Only safe abs paths, checking EXEC_CWD: $EXEC_CWD"
+        if [[ "$EXEC_CWD" == "$PROJECT_DIR"* ]]; then
+          IS_IN_PROJECT=1
+        fi
+      else
+        log_debug "[$(date)] Outside abs path detected: $OUTSIDE"
+        IS_IN_PROJECT=0
+      fi
+    else
+      # 无绝对路径（相对路径或纯命令如 npm/git）→ 以执行位置为准
+      log_debug "[$(date)] No absolute path, checking EXEC_CWD: $EXEC_CWD"
+      if [[ "$EXEC_CWD" == "$PROJECT_DIR"* ]]; then
+        IS_IN_PROJECT=1
+      fi
     fi
     ;;
   Write|Edit)

package/dist/project-config.d.ts

@@ -20,6 +20,7 @@ export interface WechatModeConfig {
     autoApprove?: boolean;
     autoApproveTimeout?: number;
     heartbeatJobId?: string;
+    mode?: 'channel' | 'http';
 }
 /**
  * 获取项目配置文件路径
@@ -147,3 +148,7 @@ export declare function removeStopHook(projectDir: string): {
     path: string;
     existed: boolean;
 };
+/** 进入微信模式时注册 PID → projectDir */
+export declare function registerActiveProject(claudePid: number, projectDir: string): void;
+/** 退出微信模式时注销 */
+export declare function unregisterActiveProject(projectDir: string): void;

package/dist/project-config.js

@@ -260,7 +260,7 @@ export const STOP_HOOK_SCRIPT_PATH = path.join(CONFIG_DIR, 'stop-hook.sh');
  */
 const PERMISSION_HOOK = {
     matcher: '',
-    hooks: [{ type: 'command', command: PERMISSION_HOOK_SCRIPT_PATH }],
+    hooks: [{ type: 'command', command: PERMISSION_HOOK_SCRIPT_PATH, timeout: 3600 }],
 };
 /**
  * Stop hook 配置
@@ -405,3 +405,36 @@ export function removeStopHook(projectDir) {
         return { success: false, path: settingsPath, existed: false };
     }
 }
+// ============================================================
+// 活跃项目索引（PID → projectDir，供 permission hook 使用）
+// ============================================================
+const ACTIVE_PROJECTS_FILE = path.join(os.homedir(), '.wecom-aibot-mcp', 'active-projects.json');
+function readActiveProjects() {
+    if (!fs.existsSync(ACTIVE_PROJECTS_FILE))
+        return [];
+    try {
+        return JSON.parse(fs.readFileSync(ACTIVE_PROJECTS_FILE, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+}
+function writeActiveProjects(entries) {
+    const dir = path.dirname(ACTIVE_PROJECTS_FILE);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(ACTIVE_PROJECTS_FILE, JSON.stringify(entries, null, 2));
+}
+/** 进入微信模式时注册 PID → projectDir */
+export function registerActiveProject(claudePid, projectDir) {
+    const entries = readActiveProjects().filter(e => e.projectDir !== projectDir);
+    entries.push({ pid: claudePid, projectDir });
+    writeActiveProjects(entries);
+    logger.log(`[project-config] 注册活跃项目: pid=${claudePid} projectDir=${projectDir}`);
+}
+/** 退出微信模式时注销 */
+export function unregisterActiveProject(projectDir) {
+    const entries = readActiveProjects().filter(e => e.projectDir !== projectDir);
+    writeActiveProjects(entries);
+    logger.log(`[project-config] 注销活跃项目: ${projectDir}`);
+}

package/dist/tools/index.js

@@ -25,7 +25,7 @@ import { callDocTool } from '../doc-proxy.js';
 import { connectRobot, disconnectRobot, getClient, getConnectionState, } from '../connection-manager.js';
 import { registerCcId, unregisterCcId, getRobotByCcId, getProjectDirByCcId, generateCcId, } from '../http-server.js';
 import { subscribeWecomMessageByCcId } from '../message-bus.js';
-import { updateWechatModeConfig, loadWechatModeConfig, addPermissionHook, removePermissionHook, addStopHook, removeStopHook } from '../project-config.js';
+import { updateWechatModeConfig, loadWechatModeConfig, addPermissionHook, removePermissionHook, addStopHook, removeStopHook, registerActiveProject, unregisterActiveProject } from '../project-config.js';
 import { logger } from '../logger.js';
 // 辅助函数：从 ccId 获取客户端
 async function getConnectedClient(ccId) {
@@ -357,7 +357,7 @@ npx @vrs-soft/wecom-aibot-mcp
         mode: z.enum(['channel', 'http']).optional().default('http')
             .describe('运行模式：channel=SSE推送(推荐)，http=轮询(兼容)'),
         auto_approve: z.boolean().optional().default(true).describe('超时自动审批（默认 true）'),
-        auto_approve_timeout: z.number().optional().default(600).describe('自动审批超时时间（秒，默认 600 即 10 分钟）'),
+        auto_approve_timeout: z.number().optional().default(300).describe('自动审批超时时间（秒，默认 300 即 5 分钟）'),
     }, async ({ agent_name, cc_id, robot_id, project_dir, mode, auto_approve, auto_approve_timeout }, extra) => {
         // 获取项目目录
         const projectDir = project_dir || process.cwd();
@@ -431,7 +431,10 @@ npx @vrs-soft/wecom-aibot-mcp
             ccId: finalCcId,
             autoApprove: auto_approve,
             autoApproveTimeout: auto_approve_timeout,
+            mode,
         });
+        // 注册 PID → projectDir（供 permission hook 通过进程树匹配项目）
+        registerActiveProject(process.ppid ?? process.pid, projectDir);
         // 安装 skill 到项目本地（支持远程部署 MCP）
         const skillResult = installSkill(projectDir);
         // 添加 PermissionRequest hook 到项目 settings.json
@@ -486,9 +489,10 @@ npx @vrs-soft/wecom-aibot-mcp
         }
         // 断开连接
         disconnectRobot(robotName);
-        // 更新项目配置文件中的 wechatMode 为 false
+        // 更新项目配置文件中的 wechatMode 为 false，注销 PID 索引
         const projectDir = project_dir || process.cwd();
         updateWechatModeConfig(projectDir, { wechatMode: false });
+        unregisterActiveProject(projectDir);
         // 删除 PermissionRequest hook 从项目 settings.json
         const hookResult = removePermissionHook(projectDir);
         // 删除 Stop hook 从项目 settings.json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vrs-soft/wecom-aibot-mcp",
-  "version": "2.4.8",
+  "version": "2.4.10",
   "description": "企业微信智能机器人 MCP 服务 - Claude Code 审批通道",
   "type": "module",
   "main": "dist/index.js",