@wecom/wecom-openclaw-plugin 2026.3.31-beta.0 → 2026.4.1-beta.1

package/README.md

@@ -19,7 +19,7 @@
 
 **WeCom channel plugin for [OpenClaw](https://github.com/openclaw)** — by the Tencent WeCom team.
 
-> A channel plugin powered by WeCom. Supports **Bot mode** (WebSocket long-polling) and **Agent mode** (HTTP webhook with XML encrypted callbacks). Direct messages, group chats, streaming replies, and proactive messaging.
+> A bot plugin powered by WeCom AI Bot WebSocket persistent connections. Supports direct messages & group chats, streaming replies, and proactive messaging.
 
 ---
 
@@ -28,15 +28,13 @@
 
 ## ✨ Features
 
-- 🔗 **Dual-mode**: Bot (WebSocket) and Agent (HTTP webhook) can run independently or together
+- 🔗 WebSocket persistent connection for stable communication
 - 💬 Supports both direct messages (DM) and group chat
 - 📤 Proactive messaging to specific users or groups
 - 🖼️ Receives and processes image and file messages with automatic downloading
-- ⏳ Streaming replies with "thinking" placeholder messages (Bot mode)
-- 🔐 Agent mode: AES-256-CBC encrypted XML callbacks with SHA1 signature verification
+- ⏳ Streaming replies with "thinking" placeholder messages
 - 📝 Markdown formatting support for replies
 - 🔒 Built-in access control: DM Policy (pairing / open / allowlist / disabled) and Group Policy (open / allowlist / disabled)
-- 👥 Multi-account support: run multiple WeCom accounts with independent bot/agent configs
 - ⚡ Auto heartbeat keep-alive and reconnection (up to 100 reconnect attempts)
 - 🧙 Interactive CLI setup wizard
 
@@ -91,16 +89,7 @@ openclaw config set channels.wecom.enabled true
 openclaw gateway restart
 ```
 
-### Mode Overview
-
-The plugin supports two connection modes that can be used independently or together:
-
-| Mode | Connection | Message Format | Use Case |
-|------|-----------|---------------|----------|
-| **Bot** (智能体) | WebSocket long-polling | JSON | Quick setup, streaming replies |
-| **Agent** (自建应用) | HTTP webhook callbacks | XML | Enterprise apps, API-driven messaging |
-
-### Bot Mode Configuration
+### Configuration Reference
 
 | Config Path | Description | Options | Default |
 |---|---|---|---|
@@ -114,141 +103,6 @@ The plugin supports two connection modes that can be used independently or toget
 | `channels.wecom.groupAllowFrom` | Group allowlist (group IDs) | — | `[]` |
 | `channels.wecom.sendThinkingMessage` | Send "thinking" placeholder | `true` / `false` | `true` |
 
-### Agent Mode Configuration
-
-Agent mode uses HTTP webhook callbacks with XML encrypted messages. You need to configure the callback URL in the WeCom admin console under "API Receive" settings.
-
-#### Prerequisites
-
-1. Create a self-built app in [WeCom Admin Console](https://work.weixin.qq.com/wework_admin/frame#apps)
-2. In the app settings, go to "API Receive" (API接收) and configure:
-   - **URL**: `https://<your-gateway-host>/plugins/wecom/agent` (or `/plugins/wecom/agent/<accountId>` for multi-account)
-   - **Token**: auto-generated or custom
-   - **EncodingAESKey**: auto-generated or custom
-3. Note down the **CorpID**, **CorpSecret**, **Token**, and **EncodingAESKey**
-
-#### Quick Setup
-
-```shell
-openclaw config set channels.wecom.agent.corpId <YOUR_CORP_ID>
-openclaw config set channels.wecom.agent.corpSecret <YOUR_CORP_SECRET>
-openclaw config set channels.wecom.agent.agentId <YOUR_AGENT_ID>
-openclaw config set channels.wecom.agent.token <YOUR_CALLBACK_TOKEN>
-openclaw config set channels.wecom.agent.encodingAESKey <YOUR_ENCODING_AES_KEY>
-openclaw config set channels.wecom.enabled true
-openclaw gateway restart
-```
-
-#### JSON Configuration
-
-```json
-{
-  "channels": {
-    "wecom": {
-      "enabled": true,
-      "agent": {
-        "corpId": "ww1234567890abcdef",
-        "corpSecret": "your-corp-secret",
-        "agentId": 1000002,
-        "token": "your-callback-token",
-        "encodingAESKey": "your-encoding-aes-key-43-chars"
-      }
-    }
-  }
-}
-```
-
-#### Agent Config Reference
-
-| Config Path | Description | Required |
-|---|---|---|
-| `channels.wecom.agent.corpId` | Enterprise Corp ID | Yes |
-| `channels.wecom.agent.corpSecret` | App secret | Yes |
-| `channels.wecom.agent.agentId` | App agent ID | No (needed for proactive messaging) |
-| `channels.wecom.agent.token` | Callback verification token | Yes |
-| `channels.wecom.agent.encodingAESKey` | Callback encryption key (43 chars) | Yes |
-
-#### Webhook Paths
-
-| Path | Description |
-|---|---|
-| `/plugins/wecom/agent` | Recommended path (single account) |
-| `/plugins/wecom/agent/<accountId>` | Multi-account path |
-| `/wecom/agent` | Legacy compatible path |
-
-### Outbound Delivery (Bot WS → Agent HTTP Fallback)
-
-The plugin uses a **Bot-first, Agent-fallback** strategy for outbound message delivery:
-
-1. **Bot WebSocket available** → send via WS (supports markdown, streaming)
-2. **Bot WS unavailable** → automatically fallback to **Agent HTTP API** (`cgi-bin/message/send`)
-
-This means:
-- **Agent-only accounts** (no Bot configured) can still send proactive messages, cron deliveries, and broadcasts
-- **Target formats** like `party:1`, `tag:Ops`, `user:zhangsan` are fully supported in both paths
-- No manual switching needed — the plugin handles fallback transparently
-
-### Using Both Modes Together
-
-Bot and Agent can run simultaneously on the same account. Bot handles WebSocket streaming; Agent handles HTTP webhook callbacks with API-driven replies.
-
-```json
-{
-  "channels": {
-    "wecom": {
-      "enabled": true,
-      "botId": "your-bot-id",
-      "secret": "your-bot-secret",
-      "agent": {
-        "corpId": "ww1234567890abcdef",
-        "corpSecret": "your-corp-secret",
-        "agentId": 1000002,
-        "token": "your-callback-token",
-        "encodingAESKey": "your-encoding-aes-key-43-chars"
-      }
-    }
-  }
-}
-```
-
-### Multi-Account Configuration
-
-Use `accounts` to configure multiple WeCom accounts, each with optional bot and/or agent sub-configs:
-
-```json
-{
-  "channels": {
-    "wecom": {
-      "enabled": true,
-      "accounts": {
-        "main": {
-          "bot": {
-            "botId": "bot-id-1",
-            "secret": "secret-1"
-          },
-          "agent": {
-            "corpId": "ww1234567890abcdef",
-            "corpSecret": "secret-a",
-            "agentId": 1000002,
-            "token": "token-a",
-            "encodingAESKey": "aes-key-a"
-          }
-        },
-        "support": {
-          "agent": {
-            "corpId": "ww1234567890abcdef",
-            "corpSecret": "secret-b",
-            "agentId": 1000003,
-            "token": "token-b",
-            "encodingAESKey": "aes-key-b"
-          }
-        }
-      }
-    }
-  }
-}
-```
-
 ---
 
 ## 🔒 Access Control
@@ -344,107 +198,6 @@ In addition to the group allowlist, you can restrict which members within a grou
 
 ---
 
-## ⏰ Cronjob (Scheduled Tasks)
-
-The plugin supports scheduled message delivery via OpenClaw's built-in Cron service. Cron jobs run through the **Agent outbound** channel, so Agent mode must be configured.
-
-### Target Formats
-
-The `delivery.to` field supports the following target formats:
-
-| Format | Target | Example |
-|--------|--------|---------|
-| `party:<id>` | Department (all members) | `party:1` (root dept = all employees) |
-| `dept:<id>` | Department (alias) | `dept:5` |
-| `tag:<id>` | Tag group | `tag:Ops` |
-| `user:<id>` | Specific user | `user:zhangsan` |
-| `group:<id>` | External group chat | `group:wr123abc` |
-| `chat:<id>` | Group chat (alias) | `chat:wc456def` |
-| Pure number | Auto-detected as department | `1` → `party:1` |
-| `wr...` / `wc...` | Auto-detected as group chat | `wr123` → `chatid` |
-| Other string | Auto-detected as user | `zhangsan` → `touser` |
-
-### Method 1: CLI (Recommended — takes effect immediately)
-
-```shell
-openclaw cron add \
-  --name "daily-report" \
-  --agent main \
-  --cron "0 9 * * 1-5" \
-  --message "Good morning! Here is your daily briefing." \
-  --deliver \
-  --delivery-channel wecom \
-  --delivery-to "party:1"
-```
-
-Common CLI commands:
-
-```shell
-openclaw cron list              # List all cron jobs
-openclaw cron enable <id>       # Enable a job
-openclaw cron disable <id>      # Disable a job
-openclaw cron remove <id>       # Remove a job
-openclaw cron run <id>          # Manually trigger a job
-```
-
-### Method 2: Edit `jobs.json` (requires gateway restart)
-
-File path: `~/.openclaw/cron/jobs.json`
-
-```json
-{
-  "version": 1,
-  "jobs": [
-    {
-      "id": "daily-report",
-      "name": "Daily Report",
-      "agentId": "main",
-      "enabled": true,
-      "schedule": { "kind": "cron", "expr": "0 9 * * 1-5", "tz": "Asia/Shanghai" },
-      "sessionTarget": "isolated",
-      "wakeMode": "now",
-      "payload": {
-        "kind": "agentTurn",
-        "message": "Generate today's briefing and send it.",
-        "deliver": true,
-        "channel": "wecom",
-        "to": "party:1"
-      },
-      "delivery": {
-        "mode": "announce",
-        "channel": "wecom",
-        "to": "party:1",
-        "accountId": "main"
-      },
-      "state": {}
-    }
-  ]
-}
-```
-
-After editing, restart the gateway:
-
-```shell
-openclaw gateway restart
-```
-
-### Method 3: Create via chat (takes effect immediately)
-
-You can ask the AI agent directly in a WeCom conversation:
-
-> "Create a scheduled task: send a daily briefing to the entire company at 9am every weekday"
-
-The agent will call the Cron API to create the job — no restart needed.
-
-### Notes
-
-- Cron jobs use the **Agent outbound** path — Agent mode (`corpId` / `corpSecret` / `agentId`) must be configured.
-- The server IP must be in the WeCom trusted IP allowlist, or configure `egressProxyUrl` for a fixed egress proxy.
-- Jobs created via CLI or chat API take effect immediately. Manual edits to `jobs.json` require `openclaw gateway restart`.
-- For multi-account setups, set `delivery.accountId` to the target account (e.g. `"main"`, `"support"`).
-
----
-
 ## 📦 Update
 
 ```shell

package/dist/cjs/index.js

@@ -0,0 +1,45 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var openclawCompat = require('./src/openclaw-compat.js');
+var channel = require('./src/channel.js');
+var tool = require('./src/mcp/tool.js');
+require('@wecom/aibot-node-sdk');
+var _const = require('./src/const.js');
+require('./src/version.js');
+var runtime = require('./src/runtime.js');
+
+const plugin = {
+    id: "wecom-openclaw-plugin",
+    name: "企业微信",
+    description: "企业微信 OpenClaw 插件",
+    configSchema: openclawCompat.emptyPluginConfigSchema(),
+    register(api) {
+        runtime.setWeComRuntime(api.runtime);
+        api.registerChannel({ plugin: channel.wecomPlugin });
+        // 注册 wecom_mcp：通过 HTTP 直接调用企业微信 MCP Server
+        api.registerTool(tool.createWeComMcpTool(), { name: "wecom_mcp" });
+        // ── Gateway 启动时自动确保 tools.alsoAllow 包含 wecom_mcp ──────────
+        // 在 gateway_start 阶段检测并写入，保证插件安装/更新后首次启动即生效
+        // api.on("gateway_start", async () => {
+        //   await ensureToolsAlsoAllow(api);
+        // });
+        // 注入媒体发送指令和文件大小限制提示词（仅对企业微信 channel 生效）
+        api.on("before_prompt_build", (_event, ctx) => {
+            // 只在企业微信 channel 的会话中注入，避免影响其他 channel 插件
+            if (ctx?.channelId !== _const.CHANNEL_ID) {
+                return;
+            }
+            return {
+                appendSystemContext: [
+                    "重要：涉及发送图片/视频/语音/文件给用户时，请务必使用 `MEDIA:` 指令。详见  wecom-send-media 这个 skill（技能）。",
+                    "重要：当需要向用户发送结构化卡片消息（如通知、投票、按钮选择等）时，请在回复中直接输出 JSON 代码块（```json ... ```），其中 card_type 字段标明卡片类型。详见 wecom-send-template-card 技能。"
+                ].join("\n"),
+            };
+        });
+    },
+};
+
+exports.default = plugin;
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../index.ts"],"sourcesContent":["import type { OpenClawPluginApi } from \"openclaw/plugin-sdk/core\";\nimport { emptyPluginConfigSchema } from \"./src/openclaw-compat.js\";\nimport { wecomPlugin } from \"./src/channel.js\";\nimport { createWeComMcpTool } from \"./src/mcp\";\nimport { setWeComRuntime } from \"./src/runtime.js\";\nimport { CHANNEL_ID } from \"./src/const.js\";\n\n// ============================================================================\n// 需要自动注入 tools.alsoAllow 的工具名列表\n// ============================================================================\n\nconst REQUIRED_ALSO_ALLOW_TOOLS = [\"wecom_mcp\"] as const;\n\n/**\n * 确保 tools.alsoAllow 中包含插件所需的工具名。\n *\n * 逻辑：\n *  1. 读取当前配置\n *  2. 检查 tools.alsoAllow 中是否已包含所需工具\n *  3. 如有缺失，合并写入配置文件\n *\n * 幂等操作——重复调用不会产生副作用。\n * 若 tools.allow 已显式设置（与 alsoAllow 互斥），则跳过注入并打印提示。\n */\nasync function ensureToolsAlsoAllow(api: OpenClawPluginApi): Promise<void> {\n  try {\n    const cfg = api.runtime.config.loadConfig();\n    const tools = cfg.tools ?? {};\n\n    // 如果用户显式配置了 tools.allow（全量白名单），则 alsoAllow 与之互斥，\n    // 此时不应自动追加 alsoAllow，避免产生校验冲突\n    if (tools.allow && tools.allow.length > 0) {\n      const missing = REQUIRED_ALSO_ALLOW_TOOLS.filter(\n        (t) => !tools.allow!.includes(t),\n      );\n      if (missing.length > 0) {\n        console.warn(\n          `[wecom] tools.allow 已显式设置，无法自动注入 alsoAllow。` +\n          `请手动将 ${JSON.stringify(missing)} 加入 tools.allow。`,\n        );\n      }\n      return;\n    }\n\n    const existing = tools.alsoAllow ?? [];\n    const missing = REQUIRED_ALSO_ALLOW_TOOLS.filter(\n      (t) => !existing.includes(t),\n    );\n\n    if (missing.length === 0) {\n      // 所有工具已在白名单中，无需操作\n      return;\n    }\n\n    const merged = [...existing, ...missing];\n    const nextConfig = {\n      ...cfg,\n      tools: {\n        ...tools,\n        alsoAllow: merged,\n      },\n    };\n\n    await api.runtime.config.writeConfigFile(nextConfig);\n    console.log(\n      `[wecom] 已自动将 ${JSON.stringify(missing)} 加入 tools.alsoAllow`,\n    );\n  } catch (err) {\n    // 配置写入失败不应阻断 Gateway 启动\n    console.error(\n      `[wecom] 自动注入 tools.alsoAllow 失败:`,\n      err instanceof Error ? err.message : String(err),\n    );\n  }\n}\n\nconst plugin = {\n  id: \"wecom-openclaw-plugin\",\n  name: \"企业微信\",\n  description: \"企业微信 OpenClaw 插件\",\n  configSchema: emptyPluginConfigSchema(),\n  register(api: OpenClawPluginApi) {\n\n    setWeComRuntime(api.runtime);\n    api.registerChannel({ plugin: wecomPlugin });\n\n    // 注册 wecom_mcp：通过 HTTP 直接调用企业微信 MCP Server\n    api.registerTool(createWeComMcpTool(), { name: \"wecom_mcp\" });\n\n    // ── Gateway 启动时自动确保 tools.alsoAllow 包含 wecom_mcp ──────────\n    // 在 gateway_start 阶段检测并写入，保证插件安装/更新后首次启动即生效\n    // api.on(\"gateway_start\", async () => {\n    //   await ensureToolsAlsoAllow(api);\n    // });\n\n    // 注入媒体发送指令和文件大小限制提示词（仅对企业微信 channel 生效）\n    api.on(\"before_prompt_build\", (_event, ctx) => {\n      // 只在企业微信 channel 的会话中注入，避免影响其他 channel 插件\n      if (ctx?.channelId !== CHANNEL_ID) {\n        return;\n      }\n      return {\n        appendSystemContext: [\n          \"重要：涉及发送图片/视频/语音/文件给用户时，请务必使用 `MEDIA:` 指令。详见  wecom-send-media 这个 skill（技能）。\",\n          \"重要：当需要向用户发送结构化卡片消息（如通知、投票、按钮选择等）时，请在回复中直接输出 JSON 代码块（```json ... ```），其中 card_type 字段标明卡片类型。详见 wecom-send-template-card 技能。\"\n        ].join(\"\\n\"),\n      };\n    });\n  },\n};\n\nexport default plugin;\n"],"names":["emptyPluginConfigSchema","setWeComRuntime","wecomPlugin","createWeComMcpTool","CHANNEL_ID"],"mappings":";;;;;;;;;;;;AA4EA,MAAM,MAAM,GAAG;AACb,IAAA,EAAE,EAAE,uBAAuB;AAC3B,IAAA,IAAI,EAAE,MAAM;AACZ,IAAA,WAAW,EAAE,kBAAkB;IAC/B,YAAY,EAAEA,sCAAuB,EAAE;AACvC,IAAA,QAAQ,CAAC,GAAsB,EAAA;AAE7B,QAAAC,uBAAe,CAAC,GAAG,CAAC,OAAO,CAAC;QAC5B,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,EAAEC,mBAAW,EAAE,CAAC;;AAG5C,QAAA,GAAG,CAAC,YAAY,CAACC,uBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;;;;;;QAS7D,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,GAAG,KAAI;;AAE5C,YAAA,IAAI,GAAG,EAAE,SAAS,KAAKC,iBAAU,EAAE;gBACjC;YACF;YACA,OAAO;AACL,gBAAA,mBAAmB,EAAE;oBACnB,6EAA6E;oBAC7E;iBACD,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;AACH,QAAA,CAAC,CAAC;IACJ,CAAC;;;;;"}

package/dist/cjs/src/channel.js

@@ -0,0 +1,339 @@
+'use strict';
+
+var openclawCompat = require('./openclaw-compat.js');
+var runtime = require('./runtime.js');
+var monitor = require('./monitor.js');
+var stateManager = require('./state-manager.js');
+var onboarding = require('./onboarding.js');
+var utils = require('./utils.js');
+var _const = require('./const.js');
+var mediaUploader = require('./media-uploader.js');
+
+/**
+ * 使用 SDK 的 sendMessage 主动发送企业微信消息
+ * 无需依赖 reqId，直接向指定会话推送消息
+ */
+async function sendWeComMessage({ to, content, accountId, }) {
+    const resolvedAccountId = accountId ?? openclawCompat.DEFAULT_ACCOUNT_ID;
+    // 从 to 中提取 chatId（格式是 "${CHANNEL_ID}:chatId" 或直接是 chatId）
+    const channelPrefix = new RegExp(`^${_const.CHANNEL_ID}:`, "i");
+    const chatId = to.replace(channelPrefix, "");
+    // 获取 WSClient 实例
+    const wsClient = stateManager.getWeComWebSocket(resolvedAccountId);
+    if (!wsClient) {
+        throw new Error(`WSClient not connected for account ${resolvedAccountId}`);
+    }
+    // 使用 SDK 的 sendMessage 主动发送 markdown 消息
+    const result = await wsClient.sendMessage(chatId, {
+        msgtype: 'markdown',
+        markdown: { content },
+    });
+    const messageId = result?.headers?.req_id ?? `wecom-${Date.now()}`;
+    return {
+        channel: _const.CHANNEL_ID,
+        messageId,
+        chatId,
+    };
+}
+// 企业微信频道元数据
+const meta = {
+    id: _const.CHANNEL_ID,
+    label: "企业微信",
+    selectionLabel: "企业微信 (WeCom)",
+    detailLabel: "企业微信智能机器人",
+    docsPath: `/channels/${_const.CHANNEL_ID}`,
+    docsLabel: _const.CHANNEL_ID,
+    blurb: "企业微信智能机器人接入插件",
+    systemImage: "message.fill",
+};
+const wecomPlugin = {
+    id: _const.CHANNEL_ID,
+    meta: {
+        ...meta,
+        quickstartAllowFrom: true,
+    },
+    pairing: {
+        idLabel: "wecomUserId",
+        normalizeAllowEntry: (entry) => entry.replace(new RegExp(`^(${_const.CHANNEL_ID}|user):`, "i"), "").trim(),
+        notifyApproval: async ({ cfg, id }) => {
+            // sendWeComMessage({
+            //   to: id,
+            //   content: " pairing approved",
+            //   accountId: cfg.accountId,
+            // });
+            // Pairing approved for user
+        },
+    },
+    setupWizard: onboarding.wecomSetupWizard,
+    setup: onboarding.wecomSetupAdapter,
+    capabilities: {
+        chatTypes: ["direct", "group"],
+        reactions: false,
+        threads: false,
+        media: true,
+        nativeCommands: false,
+        blockStreaming: true,
+    },
+    reload: { configPrefixes: [`channels.${_const.CHANNEL_ID}`] },
+    config: {
+        // 列出所有账户 ID（最小实现只支持默认账户）
+        listAccountIds: () => [openclawCompat.DEFAULT_ACCOUNT_ID],
+        // 解析账户配置
+        resolveAccount: (cfg) => utils.resolveWeComAccount(cfg),
+        // 获取默认账户 ID
+        defaultAccountId: () => openclawCompat.DEFAULT_ACCOUNT_ID,
+        // 设置账户启用状态
+        setAccountEnabled: ({ cfg, enabled }) => {
+            const wecomConfig = (cfg.channels?.[_const.CHANNEL_ID] ?? {});
+            return {
+                ...cfg,
+                channels: {
+                    ...cfg.channels,
+                    [_const.CHANNEL_ID]: {
+                        ...wecomConfig,
+                        enabled,
+                    },
+                },
+            };
+        },
+        // 删除账户
+        deleteAccount: ({ cfg }) => {
+            const wecomConfig = (cfg.channels?.[_const.CHANNEL_ID] ?? {});
+            const { botId, secret, ...rest } = wecomConfig;
+            return {
+                ...cfg,
+                channels: {
+                    ...cfg.channels,
+                    [_const.CHANNEL_ID]: rest,
+                },
+            };
+        },
+        // 检查是否已配置
+        isConfigured: (account) => Boolean(account.botId?.trim() && account.secret?.trim()),
+        // 描述账户信息
+        describeAccount: (account) => ({
+            accountId: account.accountId,
+            name: account.name,
+            enabled: account.enabled,
+            configured: Boolean(account.botId?.trim() && account.secret?.trim()),
+            botId: account.botId,
+            websocketUrl: account.websocketUrl,
+        }),
+        // 解析允许来源列表
+        resolveAllowFrom: ({ cfg }) => {
+            const account = utils.resolveWeComAccount(cfg);
+            return (account.config.allowFrom ?? []).map((entry) => String(entry));
+        },
+        // 格式化允许来源列表
+        formatAllowFrom: ({ allowFrom }) => allowFrom
+            .map((entry) => String(entry).trim())
+            .filter(Boolean),
+    },
+    security: {
+        resolveDmPolicy: ({ account }) => {
+            const basePath = `channels.${_const.CHANNEL_ID}.`;
+            return {
+                policy: account.config.dmPolicy ?? "open",
+                allowFrom: account.config.allowFrom ?? [],
+                policyPath: `${basePath}dmPolicy`,
+                allowFromPath: basePath,
+                approveHint: openclawCompat.formatPairingApproveHint(_const.CHANNEL_ID),
+                normalizeEntry: (raw) => raw.replace(new RegExp(`^${_const.CHANNEL_ID}:`, "i"), "").trim(),
+            };
+        },
+        collectWarnings: ({ account, cfg }) => {
+            const warnings = [];
+            // DM 策略警告
+            const dmPolicy = account.config.dmPolicy ?? "open";
+            if (dmPolicy === "open") {
+                const hasWildcard = (account.config.allowFrom ?? []).some((entry) => String(entry).trim() === "*");
+                if (!hasWildcard) {
+                    warnings.push(`- 企业微信私信：dmPolicy="open" 但 allowFrom 未包含 "*"。任何人都可以发消息，但允许列表为空可能导致意外行为。建议设置 channels.${_const.CHANNEL_ID}.allowFrom=["*"] 或使用 dmPolicy="pairing"。`);
+                }
+            }
+            // 群组策略警告
+            const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
+            const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? "open";
+            // const { groupPolicy } = resolveOpenProviderRuntimeGroupPolicy({
+            //   providerConfigPresent: true,
+            //   groupPolicy: account.config.groupPolicy,
+            //   defaultGroupPolicy,
+            // });
+            if (groupPolicy === "open") {
+                warnings.push(`- 企业微信群组：groupPolicy="open" 允许所有群组中的成员触发。设置 channels.${_const.CHANNEL_ID}.groupPolicy="allowlist" + channels.${_const.CHANNEL_ID}.groupAllowFrom 来限制群组。`);
+            }
+            return warnings;
+        },
+    },
+    messaging: {
+        normalizeTarget: (target) => {
+            const trimmed = target.trim();
+            if (!trimmed)
+                return undefined;
+            return trimmed;
+        },
+        targetResolver: {
+            looksLikeId: (id) => {
+                const trimmed = id?.trim();
+                return Boolean(trimmed);
+            },
+            hint: "<userId|groupId>",
+        },
+    },
+    directory: {
+        self: async () => null,
+        listPeers: async () => [],
+        listGroups: async () => [],
+    },
+    outbound: {
+        deliveryMode: "gateway",
+        chunker: (text, limit) => runtime.getWeComRuntime().channel.text.chunkMarkdownText(text, limit),
+        textChunkLimit: _const.TEXT_CHUNK_LIMIT,
+        sendText: async ({ to, text, accountId }) => {
+            return sendWeComMessage({ to, content: text, accountId: accountId ?? undefined });
+        },
+        sendMedia: async ({ to, text, mediaUrl, mediaLocalRoots, accountId }) => {
+            const resolvedAccountId = accountId ?? openclawCompat.DEFAULT_ACCOUNT_ID;
+            const channelPrefix = new RegExp(`^${_const.CHANNEL_ID}:`, "i");
+            const chatId = to.replace(channelPrefix, "");
+            // 获取 WSClient 实例
+            const wsClient = stateManager.getWeComWebSocket(resolvedAccountId);
+            if (!wsClient) {
+                throw new Error(`WSClient not connected for account ${resolvedAccountId}`);
+            }
+            // 如果没有 mediaUrl，fallback 为纯文本
+            if (!mediaUrl) {
+                return sendWeComMessage({ to, content: text || "", accountId: resolvedAccountId });
+            }
+            const result = await mediaUploader.uploadAndSendMedia({
+                wsClient,
+                mediaUrl,
+                chatId,
+                mediaLocalRoots,
+            });
+            if (result.rejected) {
+                return sendWeComMessage({ to, content: `⚠️ ${result.rejectReason}`, accountId: resolvedAccountId });
+            }
+            if (!result.ok) {
+                // 上传/发送失败，fallback 为文本 + URL
+                const fallbackContent = text
+                    ? `${text}\n📎 ${mediaUrl}`
+                    : `📎 ${mediaUrl}`;
+                return sendWeComMessage({ to, content: fallbackContent, accountId: resolvedAccountId });
+            }
+            // 如有伴随文本，额外发送一条 markdown
+            if (text) {
+                await sendWeComMessage({ to, content: text, accountId: resolvedAccountId });
+            }
+            // 如果有降级说明，额外发送提示
+            if (result.downgradeNote) {
+                await sendWeComMessage({ to, content: `ℹ️ ${result.downgradeNote}`, accountId: resolvedAccountId });
+            }
+            return {
+                channel: _const.CHANNEL_ID,
+                messageId: result.messageId,
+                chatId,
+            };
+        },
+    },
+    status: {
+        defaultRuntime: {
+            accountId: openclawCompat.DEFAULT_ACCOUNT_ID,
+            running: false,
+            lastStartAt: null,
+            lastStopAt: null,
+            lastError: null,
+        },
+        collectStatusIssues: (accounts) => accounts.flatMap((entry) => {
+            const accountId = String(entry.accountId ?? openclawCompat.DEFAULT_ACCOUNT_ID);
+            const enabled = entry.enabled !== false;
+            const configured = entry.configured === true;
+            if (!enabled) {
+                return [];
+            }
+            const issues = [];
+            if (!configured) {
+                issues.push({
+                    channel: _const.CHANNEL_ID,
+                    accountId,
+                    kind: "config",
+                    message: "企业微信机器人 ID 或 Secret 未配置",
+                    fix: "Run: openclaw channels add wecom --bot-id <id> --secret <secret>",
+                });
+            }
+            return issues;
+        }),
+        buildChannelSummary: ({ snapshot }) => ({
+            configured: snapshot.configured ?? false,
+            running: snapshot.running ?? false,
+            lastStartAt: snapshot.lastStartAt ?? null,
+            lastStopAt: snapshot.lastStopAt ?? null,
+            lastError: snapshot.lastError ?? null,
+        }),
+        probeAccount: async () => {
+            return { ok: true, status: 200 };
+        },
+        buildAccountSnapshot: ({ account, runtime }) => {
+            const configured = Boolean(account.botId?.trim() &&
+                account.secret?.trim());
+            return {
+                accountId: account.accountId,
+                name: account.name,
+                enabled: account.enabled,
+                configured,
+                running: runtime?.running ?? false,
+                lastStartAt: runtime?.lastStartAt ?? null,
+                lastStopAt: runtime?.lastStopAt ?? null,
+                lastError: runtime?.lastError ?? null,
+            };
+        },
+    },
+    gateway: {
+        startAccount: async (ctx) => {
+            const account = ctx.account;
+            // 启动 WebSocket 监听
+            return monitor.monitorWeComProvider({
+                account,
+                config: ctx.cfg,
+                runtime: ctx.runtime,
+                abortSignal: ctx.abortSignal,
+                setStatus: ctx.setStatus,
+            });
+        },
+        logoutAccount: async ({ cfg }) => {
+            const nextCfg = { ...cfg };
+            const wecomConfig = (cfg.channels?.[_const.CHANNEL_ID] ?? {});
+            const nextWecom = { ...wecomConfig };
+            let cleared = false;
+            let changed = false;
+            if (nextWecom.botId || nextWecom.secret) {
+                delete nextWecom.botId;
+                delete nextWecom.secret;
+                cleared = true;
+                changed = true;
+            }
+            if (changed) {
+                if (Object.keys(nextWecom).length > 0) {
+                    nextCfg.channels = { ...nextCfg.channels, [_const.CHANNEL_ID]: nextWecom };
+                }
+                else {
+                    const nextChannels = { ...nextCfg.channels };
+                    delete nextChannels[_const.CHANNEL_ID];
+                    if (Object.keys(nextChannels).length > 0) {
+                        nextCfg.channels = nextChannels;
+                    }
+                    else {
+                        delete nextCfg.channels;
+                    }
+                }
+                await runtime.getWeComRuntime().config.writeConfigFile(nextCfg);
+            }
+            const resolved = utils.resolveWeComAccount(changed ? nextCfg : cfg);
+            const loggedOut = !resolved.botId && !resolved.secret;
+            return { cleared, envToken: false, loggedOut };
+        },
+    },
+};
+
+exports.wecomPlugin = wecomPlugin;
+//# sourceMappingURL=channel.js.map