@workclaw/openclaw-workchat 1.0.3 → 1.0.4

package/index.js

@@ -373,23 +373,9 @@ async function removeWorkChatAccountBinding(accountId) {
     logger.warn(`removeWorkChatAccountBinding: allowFrom cleanup failed: ${String(err)}`);
   }
   try {
-    const { loadConfig, writeConfigFile } = await import("openclaw/plugin-sdk/config-runtime");
-    const cfg = loadConfig();
-    const channels = cfg.channels ?? {};
-    const section = channels["openclaw-workchat"];
-    if (section?.accounts?.[accountId] !== void 0) {
-      const accounts = { ...section.accounts ?? {} };
-      delete accounts[accountId];
-      await writeConfigFile({
-        ...cfg,
-        channels: {
-          ...channels,
-          "openclaw-workchat": { ...section, accounts }
-        }
-      });
-    }
+    await triggerWorkChatChannelReload();
   } catch (err) {
-    logger.warn(`removeWorkChatAccountBinding: config cleanup failed: ${String(err)}`);
+    logger.warn(`removeWorkChatAccountBinding: channel reload trigger failed: ${String(err)}`);
   }
 }
 async function pruneStaleWorkChatAccounts(keepAgentId) {
@@ -26883,30 +26869,6 @@ __export(bind_agent_exports, {
   bindAgentToAccountFromBinding: () => bindAgentToAccountFromBinding
 });
 async function bindAgentToAccount(accountId, agentId, userId) {
-  const { loadConfig, writeConfigFile } = await import("openclaw/plugin-sdk/config-runtime");
-  const raw = loadConfig();
-  const channels = raw.channels ?? {};
-  const section = channels["openclaw-workchat"] ?? {};
-  const accounts = { ...section.accounts ?? {} };
-  accounts[accountId] = {
-    ...accounts[accountId] ?? {},
-    enabled: true,
-    agentId,
-    ...userId ? { userId } : {}
-  };
-  const updated = {
-    ...raw,
-    channels: {
-      ...channels,
-      "openclaw-workchat": {
-        ...section,
-        accounts,
-        ...userId && !section.userId ? { userId } : {},
-        channelConfigUpdatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      }
-    }
-  };
-  await writeConfigFile(updated);
   if (userId) {
     try {
       const { registerUserInFrameworkStore: registerUserInFrameworkStore2 } = await Promise.resolve().then(() => (init_pairing(), pairing_exports));
@@ -26915,8 +26877,14 @@ async function bindAgentToAccount(accountId, agentId, userId) {
       logger.warn(`bindAgentToAccount: allowFrom registration failed: ${String(err)}`);
     }
   }
+  try {
+    const { triggerWorkChatChannelReload: triggerWorkChatChannelReload2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+    await triggerWorkChatChannelReload2();
+  } catch (err) {
+    logger.warn(`bindAgentToAccount: channel reload trigger failed: ${String(err)}`);
+  }
   logger.info(
-    `bindAgentToAccount: accountId=${accountId} agentId=${agentId} userId=${userId || "(none)"} (apiKey NOT written \u2014 env-injected)`
+    `bindAgentToAccount: accountId=${accountId} agentId=${agentId} userId=${userId || "(none)"} (private-dir only; apiKey NOT written \u2014 env-injected)`
   );
 }
 var bindAgentToAccountFromBinding;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workclaw/openclaw-workchat",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "type": "module",
   "description": "OpenClaw WorkChat channel plugin: QR binding + WebSocket messaging with the WorkChat open platform",
   "license": "MIT",

package/src/auth/accounts.ts

@@ -141,24 +141,13 @@ export async function removeWorkChatAccountBinding(accountId: string): Promise<v
     logger.warn(`removeWorkChatAccountBinding: allowFrom cleanup failed: ${String(err)}`);
   }
 
+  // Account entries no longer live in openclaw.json (weixin-style private-dir
+  // ownership), so there is no shared config to clean up here — the channel
+  // reload bump below lets the gateway drop the removed account.
   try {
-    const { loadConfig, writeConfigFile } = await import("openclaw/plugin-sdk/config-runtime");
-    const cfg = loadConfig();
-    const channels = (cfg.channels ?? {}) as Record<string, any>;
-    const section = channels["openclaw-workchat"];
-    if (section?.accounts?.[accountId] !== undefined) {
-      const accounts = { ...(section.accounts ?? {}) };
-      delete accounts[accountId];
-      await writeConfigFile({
-        ...cfg,
-        channels: {
-          ...channels,
-          "openclaw-workchat": { ...section, accounts },
-        },
-      } as import("openclaw/plugin-sdk").OpenClawConfig);
-    }
+    await triggerWorkChatChannelReload();
   } catch (err) {
-    logger.warn(`removeWorkChatAccountBinding: config cleanup failed: ${String(err)}`);
+    logger.warn(`removeWorkChatAccountBinding: channel reload trigger failed: ${String(err)}`);
   }
 }
 

package/src/auth/bind-agent.ts

@@ -1,53 +1,26 @@
 import { logger } from "../util/logger.js";
 
 /**
- * Persist the (userId, agentId) -> account binding into
- * channels.openclaw-workchat.accounts of openclaw.json so inbound
- * AGENT_MESSAGE frames route to the right account and outbound sends find
- * the agent.
+ * Complete the binding on the plugin side.
  *
- * Weixin-style model: no dedicated sub-agent, no explicit binding — the
- * account routes to the main agent via the channel's default binding the
- * desktop configSync maintains (and the gateway's default-agent fallback).
- * Credentials are never written here; they arrive via
- * WORKCHAT_API_KEY / WORKCHAT_APP_SECRET env injection.
+ * The account payload (agentId/userId) lives exclusively in the plugin's
+ * private state dir (`state/openclaw-workchat/accounts/`) — weixin-style. The
+ * caller (binding listener / monitor INIT_AGENT handling) persists it via
+ * saveWorkChatAccount + registerWorkChatAccountId before calling this.
  *
- * Shared by the binding listener (login-qr wait path) and the monitor's
- * INIT_AGENT / AGENT_CREATED handling (process-message).
+ * This function only bumps `channelConfigUpdatedAt` in openclaw.json so the
+ * gateway reloads config from disk and restarts the channel with the fresh
+ * private-dir account data. Writing account entries into
+ * channels.openclaw-workchat.accounts here would race the desktop configSync
+ * (which rebuilds that field) and orphan the credentials/
+ * <account>-allowFrom.json files — the gateway's startup migration treats
+ * those as a fatal unresolved state.
  */
 export async function bindAgentToAccount(
   accountId: string,
   agentId: string,
   userId?: string,
 ): Promise<void> {
-  const { loadConfig, writeConfigFile } = await import("openclaw/plugin-sdk/config-runtime");
-  const raw = loadConfig() as Record<string, any>;
-  const channels = (raw.channels ?? {}) as Record<string, any>;
-  const section = (channels["openclaw-workchat"] ?? {}) as Record<string, any>;
-  const accounts = { ...(section.accounts ?? {}) };
-
-  accounts[accountId] = {
-    ...(accounts[accountId] ?? {}),
-    enabled: true,
-    agentId,
-    ...(userId ? { userId } : {}),
-  };
-
-  const updated = {
-    ...raw,
-    channels: {
-      ...channels,
-      "openclaw-workchat": {
-        ...section,
-        accounts,
-        ...(userId && !section.userId ? { userId } : {}),
-        channelConfigUpdatedAt: new Date().toISOString(),
-      },
-    },
-  } as Record<string, any>;
-
-  await writeConfigFile(updated as import("openclaw/plugin-sdk").OpenClawConfig);
-
   // Persist the binding user in the framework allowFrom store so command
   // authorization has an explicit source of truth (the inbound path also
   // falls back to the account's userId, but writing it keeps parity with the
@@ -61,8 +34,17 @@ export async function bindAgentToAccount(
     }
   }
 
+  // Trigger the channel hot reload; account data itself stays in the private
+  // state dir (already persisted by the caller before this runs).
+  try {
+    const { triggerWorkChatChannelReload } = await import("./accounts.js");
+    await triggerWorkChatChannelReload();
+  } catch (err) {
+    logger.warn(`bindAgentToAccount: channel reload trigger failed: ${String(err)}`);
+  }
+
   logger.info(
-    `bindAgentToAccount: accountId=${accountId} agentId=${agentId} userId=${userId || "(none)"} (apiKey NOT written — env-injected)`,
+    `bindAgentToAccount: accountId=${accountId} agentId=${agentId} userId=${userId || "(none)"} (private-dir only; apiKey NOT written — env-injected)`,
   );
 }
 

package/src/auth/login-qr.ts

@@ -427,7 +427,9 @@ async function handleListenerFrame(sessionKey: string, data: string, ws: WebSock
       ...(userId ? { userId } : {}),
     });
     registerWorkChatAccountId(accountId);
-    // Bind agent into openclaw.json accounts (routing) — no apiKey ever written.
+    // Complete the binding: account data is already in the private state
+    // dir; this call registers the allowFrom user and triggers the channel
+    // hot reload.
     const { bindAgentToAccountFromBinding } = await import("./bind-agent.js");
     await bindAgentToAccountFromBinding(accountId, agentId, userId);
     logger.info(`binding listener: account=${accountId} agent=${agentId} persisted`);