@wecom/wecom-openclaw-plugin 2026.3.30-beta.2 → 2026.3.31-beta.0

package/dist/src/const.d.ts

@@ -70,5 +70,51 @@ export declare const EVENT_ENTER_CHECK_UPDATE = "event.enter_check_update";
 export declare const CMD_ENTER_EVENT_REPLY = "ww_ai_robot_enter_event";
 /** WSClient scene 参数：企微 OpenClaw 场景 */
 export declare const SCENE_WECOM_OPENCLAW = 1;
+/**
+ * WeCom 双模式常量定义
+ */
+/** 固定 Webhook 路径 */
+export declare const WEBHOOK_PATHS: {
+    /** Bot 模式历史兼容路径（不再维护） */
+    readonly BOT: "/wecom";
+    /** Bot 模式历史备用兼容路径（不再维护） */
+    readonly BOT_ALT: "/wecom/bot";
+    /** Agent 模式历史兼容路径（不再维护） */
+    readonly AGENT: "/wecom/agent";
+    /** Bot 模式推荐路径前缀 */
+    readonly BOT_PLUGIN: "/plugins/wecom/bot";
+    /** Agent 模式推荐路径前缀 */
+    readonly AGENT_PLUGIN: "/plugins/wecom/agent";
+};
+/** 企业微信 API 端点 */
+export declare const API_ENDPOINTS: {
+    readonly GET_TOKEN: "https://qyapi.weixin.qq.com/cgi-bin/gettoken";
+    readonly SEND_MESSAGE: "https://qyapi.weixin.qq.com/cgi-bin/message/send";
+    readonly SEND_APPCHAT: "https://qyapi.weixin.qq.com/cgi-bin/appchat/send";
+    readonly UPLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/upload";
+    readonly DOWNLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/get";
+};
+/** 各类限制常量 */
+export declare const LIMITS: {
+    /** 文本消息最大字节数 */
+    readonly TEXT_MAX_BYTES: 2048;
+    /** Token 刷新缓冲时间 (提前刷新) */
+    readonly TOKEN_REFRESH_BUFFER_MS: 60000;
+    /** HTTP 请求超时 */
+    readonly REQUEST_TIMEOUT_MS: 15000;
+    /** 最大请求体大小 */
+    readonly MAX_REQUEST_BODY_SIZE: number;
+};
+/** AES 加密常量 */
+export declare const CRYPTO: {
+    /** PKCS#7 块大小 */
+    readonly PKCS7_BLOCK_SIZE: 32;
+    /** AES Key 长度 */
+    readonly AES_KEY_LENGTH: 32;
+};
 /** 合法的模板卡片 card_type 列表 */
 export declare const VALID_CARD_TYPES: string[];
+/** 模板卡片缓存条目 TTL（毫秒）：24小时 */
+export declare const TEMPLATE_CARD_CACHE_TTL_MS: number;
+/** 模板卡片缓存最大条目数 */
+export declare const TEMPLATE_CARD_CACHE_MAX_SIZE = 300;

package/dist/src/const.js

@@ -0,0 +1,157 @@
+/**
+ * 企业微信渠道常量定义
+ */
+/**
+ * 企业微信渠道 ID
+ */
+export const CHANNEL_ID = "wecom";
+/**
+ * 企业微信 WebSocket 命令枚举
+ */
+export var WeComCommand;
+(function (WeComCommand) {
+    /** 认证订阅 */
+    WeComCommand["SUBSCRIBE"] = "aibot_subscribe";
+    /** 心跳 */
+    WeComCommand["PING"] = "ping";
+    /** 企业微信推送消息 */
+    WeComCommand["AIBOT_CALLBACK"] = "aibot_callback";
+    /** clawdbot 响应消息 */
+    WeComCommand["AIBOT_RESPONSE"] = "aibot_response";
+})(WeComCommand || (WeComCommand = {}));
+// ============================================================================
+// 超时和重试配置
+// ============================================================================
+/** 图片下载超时时间（毫秒） */
+export const IMAGE_DOWNLOAD_TIMEOUT_MS = 30_000;
+/** 文件下载超时时间（毫秒） */
+export const FILE_DOWNLOAD_TIMEOUT_MS = 60_000;
+/** 消息发送超时时间（毫秒） */
+export const REPLY_SEND_TIMEOUT_MS = 15_000;
+/** 消息处理总超时时间（毫秒） */
+export const MESSAGE_PROCESS_TIMEOUT_MS = 6 * 60 * 1000;
+/** WebSocket 心跳间隔（毫秒） */
+export const WS_HEARTBEAT_INTERVAL_MS = 30_000;
+/** WebSocket 连接断开时的最大重连次数 */
+export const WS_MAX_RECONNECT_ATTEMPTS = 10;
+/** WebSocket 认证失败时的最大重试次数 */
+export const WS_MAX_AUTH_FAILURE_ATTEMPTS = 5;
+// ============================================================================
+// 消息状态管理配置
+// ============================================================================
+/** messageStates Map 条目的最大 TTL（毫秒），防止内存泄漏 */
+export const MESSAGE_STATE_TTL_MS = 10 * 60 * 1000;
+/** messageStates Map 清理间隔（毫秒） */
+export const MESSAGE_STATE_CLEANUP_INTERVAL_MS = 60_000;
+/** messageStates Map 最大条目数 */
+export const MESSAGE_STATE_MAX_SIZE = 500;
+// ============================================================================
+// 消息模板
+// ============================================================================
+/** "思考中"流式消息占位内容 */
+export const THINKING_MESSAGE = "<think></think>";
+/** 仅包含图片时的消息占位符 */
+export const MEDIA_IMAGE_PLACEHOLDER = "<media:image>";
+/** 仅包含文件时的消息占位符 */
+export const MEDIA_DOCUMENT_PLACEHOLDER = "<media:document>";
+// ============================================================================
+// 默认值
+// ============================================================================
+// ============================================================================
+// MCP 配置
+// ============================================================================
+/** 获取 MCP 配置的 WebSocket 命令 */
+export const MCP_GET_CONFIG_CMD = "aibot_get_mcp_config";
+/** MCP 配置拉取超时时间（毫秒） */
+export const MCP_CONFIG_FETCH_TIMEOUT_MS = 15_000;
+// ============================================================================
+// 默认值
+// ============================================================================
+/** 默认媒体大小上限（MB） */
+export const DEFAULT_MEDIA_MAX_MB = 5;
+/** 文本分块大小上限 */
+export const TEXT_CHUNK_LIMIT = 4000;
+// ============================================================================
+// 媒体上传相关常量
+// ============================================================================
+/** 图片大小上限（字节）：10MB */
+export const IMAGE_MAX_BYTES = 10 * 1024 * 1024;
+/** 视频大小上限（字节）：10MB */
+export const VIDEO_MAX_BYTES = 10 * 1024 * 1024;
+/** 语音大小上限（字节）：2MB */
+export const VOICE_MAX_BYTES = 2 * 1024 * 1024;
+/** 文件大小上限（字节）：20MB */
+export const FILE_MAX_BYTES = 20 * 1024 * 1024;
+/** 文件绝对上限（字节）：超过此值无法发送，等于 FILE_MAX_BYTES */
+export const ABSOLUTE_MAX_BYTES = FILE_MAX_BYTES;
+/** 上传分片大小（字节，Base64 编码前）：512KB */
+export const UPLOAD_CHUNK_SIZE = 512 * 1024;
+// ============================================================================
+// 事件/命令名称常量
+// ============================================================================
+/** 版本检查事件名称（SDK 事件监听用） */
+export const EVENT_ENTER_CHECK_UPDATE = "event.enter_check_update";
+/** 版本检查事件回复命令名称 */
+export const CMD_ENTER_EVENT_REPLY = "ww_ai_robot_enter_event";
+// ============================================================================
+// SDK 连接配置
+// ============================================================================
+/** WSClient scene 参数：企微 OpenClaw 场景 */
+export const SCENE_WECOM_OPENCLAW = 1;
+/**
+ * WeCom 双模式常量定义
+ */
+/** 固定 Webhook 路径 */
+export const WEBHOOK_PATHS = {
+    /** Bot 模式历史兼容路径（不再维护） */
+    BOT: "/wecom",
+    /** Bot 模式历史备用兼容路径（不再维护） */
+    BOT_ALT: "/wecom/bot",
+    /** Agent 模式历史兼容路径（不再维护） */
+    AGENT: "/wecom/agent",
+    /** Bot 模式推荐路径前缀 */
+    BOT_PLUGIN: "/plugins/wecom/bot",
+    /** Agent 模式推荐路径前缀 */
+    AGENT_PLUGIN: "/plugins/wecom/agent",
+};
+/** 企业微信 API 端点 */
+export const API_ENDPOINTS = {
+    GET_TOKEN: "https://qyapi.weixin.qq.com/cgi-bin/gettoken",
+    SEND_MESSAGE: "https://qyapi.weixin.qq.com/cgi-bin/message/send",
+    SEND_APPCHAT: "https://qyapi.weixin.qq.com/cgi-bin/appchat/send",
+    UPLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/upload",
+    DOWNLOAD_MEDIA: "https://qyapi.weixin.qq.com/cgi-bin/media/get",
+};
+/** 各类限制常量 */
+export const LIMITS = {
+    /** 文本消息最大字节数 */
+    TEXT_MAX_BYTES: 2048,
+    /** Token 刷新缓冲时间 (提前刷新) */
+    TOKEN_REFRESH_BUFFER_MS: 60_000,
+    /** HTTP 请求超时 */
+    REQUEST_TIMEOUT_MS: 15_000,
+    /** 最大请求体大小 */
+    MAX_REQUEST_BODY_SIZE: 1024 * 1024,
+};
+/** AES 加密常量 */
+export const CRYPTO = {
+    /** PKCS#7 块大小 */
+    PKCS7_BLOCK_SIZE: 32,
+    /** AES Key 长度 */
+    AES_KEY_LENGTH: 32,
+};
+// ============================================================================
+// 模板卡片配置
+// ============================================================================
+/** 合法的模板卡片 card_type 列表 */
+export const VALID_CARD_TYPES = [
+    "text_notice",
+    "news_notice",
+    "button_interaction",
+    "vote_interaction",
+    "multiple_interaction",
+];
+/** 模板卡片缓存条目 TTL（毫秒）：24小时 */
+export const TEMPLATE_CARD_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+/** 模板卡片缓存最大条目数 */
+export const TEMPLATE_CARD_CACHE_MAX_SIZE = 300;

package/dist/src/dm-policy.js

@@ -0,0 +1,84 @@
+/**
+ * 企业微信 DM（私聊）访问控制模块
+ *
+ * 负责私聊策略检查、配对流程
+ */
+import { getWeComRuntime } from "./runtime.js";
+import { CHANNEL_ID } from "./const.js";
+import { sendWeComReply } from "./message-sender.js";
+import { isSenderAllowed } from "./group-policy.js";
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查 DM Policy 访问控制
+ * @returns 检查结果，包含是否允许继续处理
+ */
+export async function checkDmPolicy(params) {
+    const { senderId, isGroup, account, wsClient, frame, runtime } = params;
+    const core = getWeComRuntime();
+    // 群聊消息不检查 DM Policy
+    if (isGroup) {
+        return { allowed: true };
+    }
+    const dmPolicy = account.config.dmPolicy ?? "open";
+    const configAllowFrom = (account.config.allowFrom ?? []).map((v) => String(v));
+    // 如果 dmPolicy 是 disabled，直接拒绝
+    if (dmPolicy === "disabled") {
+        runtime.log?.(`[WeCom] Blocked DM from ${senderId} (dmPolicy=disabled)`);
+        return { allowed: false };
+    }
+    // 如果是 open 模式，允许所有人
+    if (dmPolicy === "open") {
+        return { allowed: true };
+    }
+    // OpenClaw <= 2026.2.19 signature: readAllowFromStore(channel, env?, accountId?)
+    // @ts-expect-error — 兼容旧版 SDK 的三参数签名，新版已改为单参数对象
+    const oldStoreAllowFrom = await core.channel.pairing.readAllowFromStore('wecom', undefined, account.accountId).catch(() => []);
+    // Compatibility fallback for newer OpenClaw implementations.
+    const newStoreAllowFrom = await core.channel.pairing
+        .readAllowFromStore({ channel: CHANNEL_ID, accountId: account.accountId })
+        .catch(() => []);
+    // 检查发送者是否在允许列表中
+    const storeAllowFrom = [...oldStoreAllowFrom, ...newStoreAllowFrom];
+    const effectiveAllowFrom = [...configAllowFrom, ...storeAllowFrom];
+    const senderAllowedResult = isSenderAllowed(senderId, effectiveAllowFrom);
+    if (senderAllowedResult) {
+        return { allowed: true };
+    }
+    // 处理未授权用户
+    if (dmPolicy === "pairing") {
+        const { code, created } = await core.channel.pairing.upsertPairingRequest({
+            channel: CHANNEL_ID,
+            id: senderId,
+            accountId: account.accountId,
+            meta: { name: senderId },
+        });
+        if (created) {
+            runtime.log?.(`[WeCom] Pairing request created for sender=${senderId}`);
+            try {
+                await sendWeComReply({
+                    wsClient,
+                    frame,
+                    text: core.channel.pairing.buildPairingReply({
+                        channel: CHANNEL_ID,
+                        idLine: `您的企业微信用户ID: ${senderId}`,
+                        code,
+                    }),
+                    runtime,
+                    finish: true,
+                });
+            }
+            catch (err) {
+                runtime.error?.(`[WeCom] Failed to send pairing reply to ${senderId}: ${String(err)}`);
+            }
+        }
+        else {
+            runtime.log?.(`[WeCom] Pairing request already exists for sender=${senderId}`);
+        }
+        return { allowed: false, pairingSent: created };
+    }
+    // allowlist 模式：直接拒绝未授权用户
+    runtime.log?.(`[WeCom] Blocked unauthorized sender ${senderId} (dmPolicy=${dmPolicy})`);
+    return { allowed: false };
+}

package/dist/src/group-policy.js

@@ -0,0 +1,126 @@
+/**
+ * 企业微信群组访问控制模块
+ *
+ * 负责群组策略检查（groupPolicy、群组白名单、群内发送者白名单）
+ */
+import { CHANNEL_ID } from "./const.js";
+// ============================================================================
+// 内部辅助函数
+// ============================================================================
+/**
+ * 解析企业微信群组配置
+ */
+function resolveWeComGroupConfig(params) {
+    const groups = params.cfg?.groups ?? {};
+    const wildcard = groups["*"];
+    const groupId = params.groupId?.trim();
+    if (!groupId) {
+        return undefined;
+    }
+    const direct = groups[groupId];
+    if (direct) {
+        return direct;
+    }
+    const lowered = groupId.toLowerCase();
+    const matchKey = Object.keys(groups).find((key) => key.toLowerCase() === lowered);
+    if (matchKey) {
+        return groups[matchKey];
+    }
+    return wildcard;
+}
+/**
+ * 检查群组是否在允许列表中
+ */
+function isWeComGroupAllowed(params) {
+    const { groupPolicy } = params;
+    if (groupPolicy === "disabled") {
+        return false;
+    }
+    if (groupPolicy === "open") {
+        return true;
+    }
+    // allowlist 模式：检查群组是否在允许列表中
+    const normalizedAllowFrom = params.allowFrom.map((entry) => String(entry).replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim());
+    if (normalizedAllowFrom.includes("*")) {
+        return true;
+    }
+    const normalizedGroupId = params.groupId.trim();
+    return normalizedAllowFrom.some((entry) => entry === normalizedGroupId || entry.toLowerCase() === normalizedGroupId.toLowerCase());
+}
+/**
+ * 检查群组内发送者是否在允许列表中
+ */
+function isGroupSenderAllowed(params) {
+    const { senderId, groupId, wecomConfig } = params;
+    const groupConfig = resolveWeComGroupConfig({
+        cfg: wecomConfig,
+        groupId,
+    });
+    const perGroupSenderAllowFrom = (groupConfig?.allowFrom ?? []).map((v) => String(v));
+    if (perGroupSenderAllowFrom.length === 0) {
+        return true;
+    }
+    if (perGroupSenderAllowFrom.includes("*")) {
+        return true;
+    }
+    return perGroupSenderAllowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查群组策略访问控制
+ * @returns 检查结果，包含是否允许继续处理
+ */
+export function checkGroupPolicy(params) {
+    const { chatId, senderId, account, config, runtime } = params;
+    const wecomConfig = (config.channels?.[CHANNEL_ID] ?? {});
+    const defaultGroupPolicy = config.channels?.[CHANNEL_ID]?.groupPolicy;
+    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? "open";
+    // const { groupPolicy, providerMissingFallbackApplied } = resolveOpenProviderRuntimeGroupPolicy({
+    //   providerConfigPresent: config.channels?.[CHANNEL_ID] !== undefined,
+    //   groupPolicy: wecomConfig.groupPolicy,
+    //   defaultGroupPolicy,
+    // });
+    // warnMissingProviderGroupPolicyFallbackOnce({
+    //   providerMissingFallbackApplied,
+    //   providerKey: CHANNEL_ID,
+    //   accountId: account.accountId,
+    //   log: (msg) => runtime.log?.(msg),
+    // });
+    const groupAllowFrom = wecomConfig.groupAllowFrom ?? [];
+    const groupAllowed = isWeComGroupAllowed({
+        groupPolicy,
+        allowFrom: groupAllowFrom,
+        groupId: chatId,
+    });
+    if (!groupAllowed) {
+        runtime.log?.(`[WeCom] Group ${chatId} not allowed (groupPolicy=${groupPolicy})`);
+        return { allowed: false };
+    }
+    const senderAllowed = isGroupSenderAllowed({
+        senderId,
+        groupId: chatId,
+        wecomConfig,
+    });
+    if (!senderAllowed) {
+        runtime.log?.(`[WeCom] Sender ${senderId} not in group ${chatId} sender allowlist`);
+        return { allowed: false };
+    }
+    return { allowed: true };
+}
+/**
+ * 检查发送者是否在允许列表中（通用）
+ */
+export function isSenderAllowed(senderId, allowFrom) {
+    if (allowFrom.includes("*")) {
+        return true;
+    }
+    return allowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}

package/dist/src/http.d.ts

@@ -0,0 +1,26 @@
+/**
+ * **WecomHttpOptions (HTTP 选项)**
+ *
+ * @property proxyUrl 代理服务器地址
+ * @property timeoutMs 请求超时时间 (毫秒)
+ * @property signal AbortSignal 信号
+ */
+export type WecomHttpOptions = {
+    proxyUrl?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+};
+/**
+ * **wecomFetch (统一 HTTP 请求)**
+ *
+ * 基于 `undici` 的 fetch 封装，自动处理 ProxyAgent 和 Timeout。
+ * 所有对企业微信 API 的调用都应经过此函数。
+ */
+export declare function wecomFetch(input: string | URL, init?: RequestInit, opts?: WecomHttpOptions): Promise<Response>;
+/**
+ * **readResponseBodyAsBuffer (读取响应 Body)**
+ *
+ * 将 Response Body 读取为 Buffer，支持最大字节限制以防止内存溢出。
+ * 适用于下载媒体文件等场景。
+ */
+export declare function readResponseBodyAsBuffer(res: Response, maxBytes?: number): Promise<Buffer>;

package/dist/src/http.js

@@ -0,0 +1,93 @@
+import { ProxyAgent, fetch as undiciFetch } from "undici";
+const proxyDispatchers = new Map();
+/**
+ * **getProxyDispatcher (获取代理 Dispatcher)**
+ *
+ * 缓存并复用 ProxyAgent，避免重复创建连接池。
+ */
+function getProxyDispatcher(proxyUrl) {
+    const existing = proxyDispatchers.get(proxyUrl);
+    if (existing)
+        return existing;
+    const created = new ProxyAgent(proxyUrl);
+    proxyDispatchers.set(proxyUrl, created);
+    return created;
+}
+function mergeAbortSignal(params) {
+    const signals = [];
+    if (params.signal)
+        signals.push(params.signal);
+    if (params.timeoutMs && Number.isFinite(params.timeoutMs) && params.timeoutMs > 0) {
+        signals.push(AbortSignal.timeout(params.timeoutMs));
+    }
+    if (!signals.length)
+        return undefined;
+    if (signals.length === 1)
+        return signals[0];
+    return AbortSignal.any(signals);
+}
+/**
+ * **wecomFetch (统一 HTTP 请求)**
+ *
+ * 基于 `undici` 的 fetch 封装，自动处理 ProxyAgent 和 Timeout。
+ * 所有对企业微信 API 的调用都应经过此函数。
+ */
+export async function wecomFetch(input, init, opts) {
+    const proxyUrl = opts?.proxyUrl?.trim() ?? "";
+    const dispatcher = proxyUrl ? getProxyDispatcher(proxyUrl) : undefined;
+    const initSignal = init?.signal ?? undefined;
+    const signal = mergeAbortSignal({ signal: opts?.signal ?? initSignal, timeoutMs: opts?.timeoutMs });
+    const headers = new Headers(init?.headers ?? {});
+    if (!headers.has("User-Agent")) {
+        headers.set("User-Agent", "OpenClaw/2.0 (WeCom-Agent)");
+    }
+    const nextInit = {
+        ...(init ?? {}),
+        ...(signal ? { signal } : {}),
+        ...(dispatcher ? { dispatcher } : {}),
+        headers,
+    };
+    try {
+        return await undiciFetch(input, nextInit);
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === "TypeError" && err.message === "fetch failed") {
+            const cause = err.cause;
+            console.error(`[wecom-http] fetch failed: ${input} (proxy: ${proxyUrl || "none"})${cause ? ` - cause: ${String(cause)}` : ""}`);
+        }
+        throw err;
+    }
+}
+/**
+ * **readResponseBodyAsBuffer (读取响应 Body)**
+ *
+ * 将 Response Body 读取为 Buffer，支持最大字节限制以防止内存溢出。
+ * 适用于下载媒体文件等场景。
+ */
+export async function readResponseBodyAsBuffer(res, maxBytes) {
+    if (!res.body)
+        return Buffer.alloc(0);
+    const limit = maxBytes && Number.isFinite(maxBytes) && maxBytes > 0 ? maxBytes : undefined;
+    const chunks = [];
+    let total = 0;
+    const reader = res.body.getReader();
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (!value)
+            continue;
+        total += value.byteLength;
+        if (limit && total > limit) {
+            try {
+                await reader.cancel("body too large");
+            }
+            catch {
+                // ignore
+            }
+            throw new Error(`response body too large (>${limit} bytes)`);
+        }
+        chunks.push(value);
+    }
+    return Buffer.concat(chunks.map((c) => Buffer.from(c)));
+}

package/dist/src/interface.d.ts

@@ -29,8 +29,6 @@ export interface MessageState {
     hasMediaFailed?: boolean;
     /** 媒体发送失败时的纯文本错误摘要（用于替换 thinking 流展示给用户） */
     mediaErrorSummary?: string;
-    /** deliver 回调是否被调用过（用于区分"核心无回复"和"核心回复了空内容"） */
-    deliverCalled?: boolean;
     /** 流式回复是否已过期（errcode 846608，>6分钟），需降级为主动发送 */
     streamExpired?: boolean;
     /** 是否已成功发送过模板卡片 */

package/dist/src/interface.js

@@ -0,0 +1,4 @@
+/**
+ * 企业微信渠道类型定义
+ */
+export {};

package/dist/src/mcp/index.js

@@ -0,0 +1,6 @@
+/**
+ * MCP 模块统一导出
+ */
+export { createWeComMcpTool } from "./tool.js";
+export { sendJsonRpc, clearCategoryCache, McpRpcError, McpHttpError } from "./transport.js";
+export { cleanSchemaForGemini } from "./schema.js";

package/dist/src/mcp/interceptors/biz-error.js

@@ -0,0 +1,64 @@
+/**
+ * 业务错误码检查拦截器
+ *
+ * 检查 tools/call 返回结果中是否包含需要清理缓存的业务错误码。
+ * MCP Server 可能在正常的 JSON-RPC 响应中返回业务层错误，
+ * 这些错误被包裹在 result.content[].text 中，需要解析后判断。
+ *
+ * 此拦截器对所有 call 调用生效。
+ */
+import { clearCategoryCache } from "../transport.js";
+// ============================================================================
+// 常量
+// ============================================================================
+/**
+ * 需要触发缓存清理的业务错误码集合
+ *
+ * 这些错误码出现在 MCP 工具调用返回的 content 文本中（业务层面），
+ * 与 JSON-RPC 层面的错误码不同，需要在此处额外检测。
+ *
+ * - 850002: 机器人未被授权使用对应能力，需清理缓存以便下次重新拉取配置
+ */
+const BIZ_CACHE_CLEAR_ERROR_CODES = new Set([850002]);
+// ============================================================================
+// 拦截器实现
+// ============================================================================
+export const bizErrorInterceptor = {
+    name: "biz-error",
+    /** 对所有 call 调用生效 */
+    match: () => true,
+    /** 检查返回结果中的业务错误码，必要时清理缓存 */
+    afterCall(ctx, result) {
+        checkBizErrorAndClearCache(result, ctx.category);
+        // 不修改 result，透传给下一个拦截器
+        return result;
+    },
+};
+// ============================================================================
+// 内部实现
+// ============================================================================
+/**
+ * 检查 tools/call 的返回结果中是否包含需要清理缓存的业务错误码
+ */
+function checkBizErrorAndClearCache(result, category) {
+    if (!result || typeof result !== "object")
+        return;
+    const { content } = result;
+    if (!Array.isArray(content))
+        return;
+    for (const item of content) {
+        if (item.type !== "text" || !item.text)
+            continue;
+        try {
+            const parsed = JSON.parse(item.text);
+            if (typeof parsed.errcode === "number" && BIZ_CACHE_CLEAR_ERROR_CODES.has(parsed.errcode)) {
+                console.log(`[mcp] 检测到业务错误码 ${parsed.errcode} (category="${category}")，清理缓存`);
+                clearCategoryCache(category);
+                return;
+            }
+        }
+        catch {
+            // text 不是 JSON 格式，跳过
+        }
+    }
+}