@wu529778790/open-im 1.10.9-beta.2 → 1.10.9-beta.21

package/dist/clawbot/types.d.ts

@@ -0,0 +1,111 @@
+/**
+ * ClawBot Types - WeChat iLink Bot API
+ *
+ * Matches the official iLink API protocol (POST + JSON body + Bearer token).
+ * Reference: @tencent-weixin/openclaw-weixin, cc-wechat, claude-code-wechat-channel
+ */
+/** Connection state */
+export type ClawBotState = 'disconnected' | 'connecting' | 'connected' | 'error';
+/** ClawBot configuration */
+export interface ClawBotConfig {
+    /** iLink API base URL (default: https://ilinkai.weixin.qq.com) */
+    apiUrl: string;
+    /** Bearer token for authentication */
+    apiToken: string;
+}
+/** iLink message content item types */
+export declare const enum MessageItemType {
+    NONE = 0,
+    TEXT = 1,
+    IMAGE = 2,
+    VOICE = 3,
+    FILE = 4,
+    VIDEO = 5
+}
+/** Text content item */
+export interface TextItem {
+    text?: string;
+}
+/** Image content item */
+export interface ImageItem {
+    media?: {
+        aes_key?: string;
+        cdn_url?: string;
+    };
+    width?: number;
+    height?: number;
+}
+/** Voice content item */
+export interface VoiceItem {
+    text?: string;
+    media?: {
+        aes_key?: string;
+        cdn_url?: string;
+    };
+    playtime?: number;
+}
+/** File content item */
+export interface FileItem {
+    file_name?: string;
+    file_size?: number;
+    media?: {
+        aes_key?: string;
+        cdn_url?: string;
+    };
+}
+/** Video content item */
+export interface VideoItem {
+    media?: {
+        aes_key?: string;
+        cdn_url?: string;
+    };
+    duration_ms?: number;
+}
+/** A single content item in a message */
+export interface MessageItem {
+    type?: number;
+    text_item?: TextItem;
+    image_item?: ImageItem;
+    voice_item?: VoiceItem;
+    file_item?: FileItem;
+    video_item?: VideoItem;
+    ref_msg?: {
+        title?: string;
+        message_item?: MessageItem;
+    };
+    msg_id?: string;
+}
+/** iLink message from getupdates */
+export interface ILinkMessage {
+    seq?: number;
+    message_id?: number;
+    from_user_id?: string;
+    to_user_id?: string;
+    client_id?: string;
+    create_time_ms?: number;
+    session_id?: string;
+    /** 1=USER (inbound), 2=BOT (outbound) */
+    message_type?: number;
+    /** 0=NEW, 1=GENERATING, 2=FINISH */
+    message_state?: number;
+    item_list?: MessageItem[];
+    /** Token required for sending replies to this conversation */
+    context_token?: string;
+    group_id?: string;
+}
+/** getupdates response */
+export interface GetUpdatesResponse {
+    ret?: number;
+    errcode?: number;
+    errmsg?: string;
+    msgs?: ILinkMessage[];
+    /** Opaque cursor for next poll — pass back as-is */
+    get_updates_buf?: string;
+    longpolling_timeout_ms?: number;
+}
+/** sendmessage response */
+export interface SendMessageResponse {
+    ret?: number;
+    errcode?: number;
+    errmsg?: string;
+}

package/dist/clawbot/types.js

@@ -0,0 +1,7 @@
+/**
+ * ClawBot Types - WeChat iLink Bot API
+ *
+ * Matches the official iLink API protocol (POST + JSON body + Bearer token).
+ * Reference: @tencent-weixin/openclaw-weixin, cc-wechat, claude-code-wechat-channel
+ */
+export {};

package/dist/codebuddy/cli-runner.js

@@ -3,6 +3,7 @@ import { accessSync, constants } from 'node:fs';
 import { isAbsolute, join } from 'node:path';
 import { createLogger } from '../logger.js';
 import { processEnvForNonClaudeCliChild } from '../config/file-io.js';
+import { killProcessTree, trackChild } from '../shared/process-kill.js';
 const log = createLogger('CodeBuddyCli');
 export function buildCodeBuddyArgs(prompt, sessionId, options) {
     const args = ['--print', '--output-format', 'stream-json'];
@@ -200,10 +201,14 @@ export function runCodeBuddy(cliPath, prompt, sessionId, workDir, callbacks, opt
     log.info(`Spawning CodeBuddy CLI: path=${normalizedCliPath}, cwd=${workDir}, session=${sessionId ?? 'new'}, args=${args.join(' ')}`);
     const child = spawn(spawnCmd, spawnArgs, {
         cwd: workDir,
+        // Unix 上放入独立进程组，使 abort/关停能用 process.kill(-pid) 杀掉整棵子树（含 MCP/shell 孙进程）
+        detached: process.platform !== 'win32',
         stdio: ['ignore', 'pipe', 'pipe'],
         env,
         windowsHide: process.platform === 'win32',
     });
+    trackChild(child);
+    let cliTimeoutHandle = null;
     let accumulated = '';
     let accumulatedThinking = '';
     let completed = false;
@@ -311,6 +316,10 @@ export function runCodeBuddy(cliPath, prompt, sessionId, workDir, callbacks, opt
         }
     });
     child.on('close', (code) => {
+        if (cliTimeoutHandle) {
+            clearTimeout(cliTimeoutHandle);
+            cliTimeoutHandle = null;
+        }
         if (completed)
             return;
         if (stdoutState.buffer.trim()) {
@@ -343,16 +352,36 @@ export function runCodeBuddy(cliPath, prompt, sessionId, workDir, callbacks, opt
         });
     });
     child.on('error', (err) => {
+        if (cliTimeoutHandle) {
+            clearTimeout(cliTimeoutHandle);
+            cliTimeoutHandle = null;
+        }
         if (completed)
             return;
         completed = true;
         callbacks.onError(`Failed to start CodeBuddy CLI: ${err.message}`);
     });
+    // 墙钟超时：防止 CLI 挂死永久占用用户队列槽
+    const cliTimeoutMs = Number(process.env.OPEN_IM_CLI_TIMEOUT_MS) || 30 * 60 * 1000;
+    cliTimeoutHandle = setTimeout(() => {
+        if (completed)
+            return;
+        log.warn(`CodeBuddy CLI 超过 ${cliTimeoutMs}ms，强制终止 (pid=${child.pid})`);
+        completed = true;
+        killProcessTree(child);
+        callbacks.onError(`CodeBuddy CLI 运行超时（${Math.round(cliTimeoutMs / 1000)}s），已终止。请重试。`);
+    }, cliTimeoutMs);
+    cliTimeoutHandle.unref();
     return {
         abort: () => {
+            if (completed)
+                return;
             completed = true;
-            if (!child.killed)
-                child.kill('SIGTERM');
+            if (cliTimeoutHandle) {
+                clearTimeout(cliTimeoutHandle);
+                cliTimeoutHandle = null;
+            }
+            killProcessTree(child);
         },
     };
 }

package/dist/codex/cli-runner.js

@@ -7,6 +7,7 @@ import { dirname, join } from 'node:path';
 import { createInterface } from 'node:readline';
 import { createLogger } from '../logger.js';
 import { processEnvForNonClaudeCliChild } from '../config/file-io.js';
+import { killProcessTree, trackChild } from '../shared/process-kill.js';
 const log = createLogger('CodexCli');
 const windowsCodexLaunchCache = new Map();
 const SUPPORTED_IMAGE_EXTENSIONS = new Set([
@@ -201,10 +202,13 @@ export function runCodex(cliPath, prompt, sessionId, workDir, callbacks, options
             : args;
     const child = spawn(spawnCmd, spawnArgs, {
         cwd: workDir,
+        // Unix 上放入独立进程组，使 abort/关停能用 process.kill(-pid) 杀掉整棵子树（含 MCP/shell 孙进程）
+        detached: process.platform !== 'win32',
         stdio: ['pipe', 'pipe', 'pipe'],
         env,
         windowsHide: process.platform === 'win32',
     });
+    trackChild(child);
     child.stdin?.write(prompt);
     child.stdin?.end();
     let accumulated = '';
@@ -327,7 +331,12 @@ export function runCodex(cliPath, prompt, sessionId, workDir, callbacks, options
     let exitCode = null;
     let rlClosed = false;
     let childClosed = false;
+    let cliTimeoutHandle = null;
     const finalize = () => {
+        if (cliTimeoutHandle) {
+            clearTimeout(cliTimeoutHandle);
+            cliTimeoutHandle = null;
+        }
         if (!rlClosed || !childClosed)
             return;
         if (completed)
@@ -387,12 +396,29 @@ export function runCodex(cliPath, prompt, sessionId, workDir, callbacks, options
         childClosed = true;
         finalize();
     });
+    // 墙钟超时：防止 CLI 挂死（网络卡住、工具死循环等）永久占用用户队列槽
+    const cliTimeoutMs = Number(process.env.OPEN_IM_CLI_TIMEOUT_MS) || 30 * 60 * 1000;
+    cliTimeoutHandle = setTimeout(() => {
+        if (completed)
+            return;
+        log.warn(`Codex CLI 超过 ${cliTimeoutMs}ms，强制终止 (pid=${child.pid})`);
+        completed = true;
+        rl.close();
+        killProcessTree(child);
+        callbacks.onError(`Codex CLI 运行超时（${Math.round(cliTimeoutMs / 1000)}s），已终止。请重试。`);
+    }, cliTimeoutMs);
+    cliTimeoutHandle.unref();
     return {
         abort: () => {
+            if (completed)
+                return;
             completed = true;
+            if (cliTimeoutHandle) {
+                clearTimeout(cliTimeoutHandle);
+                cliTimeoutHandle = null;
+            }
             rl.close();
-            if (!child.killed)
-                child.kill('SIGTERM');
+            killProcessTree(child);
         },
     };
 }

package/dist/config/file-io.d.ts

@@ -19,8 +19,11 @@ export declare function getClaudeSdkRuntimeIssue(): string | null;
 export declare function parseCommaSeparated(value: string): string[];
 /**
  * 将最新的 Claude 认证环境变量按优先级合并到 process.env。
- * 优先级：shell 环境变量 > ~/.open-im/config.json 的 tools.claude.env >
- * 本机 Claude 配置（~/.claude/settings.json，与 Claude Code 共用）。
- * 多数用户只维护本机 settings；每次创建 Claude SDK 会话前调用，本机文件变更后下次会话即生效。
+ * 优先级：shell 环境变量 > 本机 Claude 配置（~/.claude/settings.json，与 Claude Code 共用）>
+ * ~/.open-im/config.json 的 tools.claude.env。
+ *
+ * 设计意图：用户只需维护 ~/.claude/settings.json（与 Claude Code CLI 共用），
+ * open-im 自动跟随本地 Claude 配置，无需单独配置。config.json 的 tools.claude.env
+ * 仅作为兜底，供没有本地 Claude 安装的场景使用。
  */
 export declare function refreshClaudeEnvToProcess(): void;

package/dist/config/file-io.js

@@ -350,9 +350,12 @@ export function parseCommaSeparated(value) {
 }
 /**
  * 将最新的 Claude 认证环境变量按优先级合并到 process.env。
- * 优先级：shell 环境变量 > ~/.open-im/config.json 的 tools.claude.env >
- * 本机 Claude 配置（~/.claude/settings.json，与 Claude Code 共用）。
- * 多数用户只维护本机 settings；每次创建 Claude SDK 会话前调用，本机文件变更后下次会话即生效。
+ * 优先级：shell 环境变量 > 本机 Claude 配置（~/.claude/settings.json，与 Claude Code 共用）>
+ * ~/.open-im/config.json 的 tools.claude.env。
+ *
+ * 设计意图：用户只需维护 ~/.claude/settings.json（与 Claude Code CLI 共用），
+ * open-im 自动跟随本地 Claude 配置，无需单独配置。config.json 的 tools.claude.env
+ * 仅作为兜底，供没有本地 Claude 安装的场景使用。
  */
 export function refreshClaudeEnvToProcess() {
     const file = loadFileConfig();
@@ -363,14 +366,16 @@ export function refreshClaudeEnvToProcess() {
             process.env[key] = originalShellEnv[key];
             continue;
         }
-        if (key in claudeToolEnv) {
-            process.env[key] = claudeToolEnv[key];
-            continue;
-        }
+        // 优先读取 ~/.claude/settings.json（与 Claude Code CLI 共用同一配置）
         if (key in claudeSettingsEnv) {
             process.env[key] = claudeSettingsEnv[key];
             continue;
         }
+        // 兜底：config.json tools.claude.env（仅在没有本地 Claude 安装时需要）
+        if (key in claudeToolEnv) {
+            process.env[key] = claudeToolEnv[key];
+            continue;
+        }
         delete process.env[key];
     }
 }

package/dist/config/types.d.ts

@@ -1,5 +1,5 @@
 import type { LogLevel } from '../logger.js';
-export type Platform = 'dingtalk' | 'feishu' | 'qq' | 'telegram' | 'wework' | 'workbuddy';
+export type Platform = 'clawbot' | 'dingtalk' | 'feishu' | 'qq' | 'telegram' | 'wework' | 'workbuddy';
 export type AiCommand = 'claude' | 'codex' | 'codebuddy';
 export interface Config {
     enabledPlatforms: Platform[];
@@ -21,6 +21,7 @@ export interface Config {
     weworkAllowedUserIds: string[];
     dingtalkAllowedUserIds: string[];
     workbuddyAllowedUserIds: string[];
+    clawbotAllowedUserIds: string[];
     codexCliPath: string;
     codebuddyCliPath: string;
     /** Claude 访问 API 的代理（如 http://127.0.0.1:7890） */
@@ -87,6 +88,13 @@ export interface Config {
             guid?: string;
             workspacePath?: string;
         };
+        clawbot?: {
+            enabled: boolean;
+            aiCommand?: AiCommand;
+            allowedUserIds: string[];
+            apiUrl?: string;
+            apiToken?: string;
+        };
     };
 }
 export interface FilePlatformTelegram {
@@ -147,6 +155,13 @@ export interface FilePlatformWorkBuddy {
     guid?: string;
     workspacePath?: string;
 }
+export interface FilePlatformClawbot {
+    enabled?: boolean;
+    aiCommand?: AiCommand;
+    allowedUserIds?: string[];
+    apiUrl?: string;
+    apiToken?: string;
+}
 export interface FileToolClaude {
     cliPath?: string;
     workDir?: string;
@@ -180,6 +195,7 @@ export interface FileConfig {
         wework?: FilePlatformWework;
         dingtalk?: FilePlatformDingtalk;
         workbuddy?: FilePlatformWorkBuddy;
+        clawbot?: FilePlatformClawbot;
     };
     /** @deprecated 仅旧配置兼容；运行时以各 platforms.*.aiCommand 为准 */
     aiCommand?: string;

package/dist/config-web-page-i18n.d.ts

@@ -4,7 +4,7 @@ export declare const PAGE_TEXTS: {
         readonly heroBadge: "open-im local control";
         readonly heroTitle: "Local bridge control.";
         readonly heroBody: "";
-        readonly heroBodyFull: "One local bridge for Telegram, Feishu, QQ, WeWork, DingTalk, and WorkBuddy.";
+        readonly heroBodyFull: "One local bridge for Telegram, Feishu, QQ, WeWork, DingTalk, WorkBuddy, and ClawBot.";
         readonly heroKicker: "Local AI bridge";
         readonly langButton: "中文";
         readonly darkModeToggle: "Toggle dark mode";
@@ -56,6 +56,16 @@ export declare const PAGE_TEXTS: {
         readonly weworkSummary: "Corp ID and secret for enterprise delivery.";
         readonly dingtalkSummary: "Client credentials plus optional card template.";
         readonly workbuddySummary: "CodeBuddy OAuth for WeChat customer service.";
+        readonly clawbotSummary: "WeChat iLink API via ClawBot.";
+        readonly clawbotApiUrl: "API URL";
+        readonly clawbotApiToken: "API Token (Bearer)";
+        readonly clawbotHelp: "Click \"Scan QR Login\" to authenticate via WeChat, or paste token manually.";
+        readonly qrLoginBtn: "Scan QR Login";
+        readonly qrLoginScanning: "Waiting for QR code scan...";
+        readonly qrLoginSuccess: "Login successful! Credentials saved.";
+        readonly qrLoginFailed: "Login failed";
+        readonly qrLoginExpired: "QR code expired, please try again";
+        readonly qrScanHint: "Use WeChat to scan the QR code";
         readonly platformCredentialsTitle: "Credentials";
         readonly platformAccessTitle: "Routing and access";
         readonly platformTestNote: "Checks required credentials against the platform.";
@@ -152,13 +162,14 @@ export declare const PAGE_TEXTS: {
         readonly tipWeworkCorp: "WeCom admin → app → view Corp ID (or smart-bot Bot ID) and Secret.";
         readonly tipDingtalkClient: "<a href=\"https://open-dev.dingtalk.com\" target=\"_blank\" rel=\"noopener\">DingTalk Open Platform</a> → internal app → App Key & App Secret.";
         readonly tipWorkbuddyToken: "Use terminal <code>open-im init</code> for WorkBuddy OAuth, or paste tokens from CodeBuddy login.";
+        readonly tipClawbotApiToken: "Run <code>open-im init</code> and select ClawBot to scan QR code, or paste token from ClawBot iLink login.";
     };
     readonly zh: {
         readonly pageTitle: "open-im 本地控制台";
         readonly heroBadge: "open-im";
         readonly heroTitle: "本地桥接控制台";
         readonly heroBody: "";
-        readonly heroBodyFull: "一个本地桥接入口，统一连接 Telegram、Feishu、QQ、WeWork、DingTalk 和 WorkBuddy。";
+        readonly heroBodyFull: "一个本地桥接入口，统一连接 Telegram、Feishu、QQ、WeWork、DingTalk、WorkBuddy 和 ClawBot。";
         readonly heroKicker: "本地 AI 桥接";
         readonly langButton: "EN";
         readonly darkModeToggle: "切换暗黑模式";
@@ -210,6 +221,16 @@ export declare const PAGE_TEXTS: {
         readonly weworkSummary: "企业微信 Corp ID 与 Secret。";
         readonly dingtalkSummary: "钉钉 Client 凭证，可选配置卡片模板 ID。";
         readonly workbuddySummary: "CodeBuddy OAuth 连接微信客服。";
+        readonly clawbotSummary: "通过 ClawBot 连接微信 iLink API。";
+        readonly clawbotApiUrl: "API 地址";
+        readonly clawbotApiToken: "API Token (Bearer)";
+        readonly clawbotHelp: "点击“扫码登录”通过微信认证，或手动粘贴 Token。";
+        readonly qrLoginBtn: "扫码登录";
+        readonly qrLoginScanning: "等待扫码...";
+        readonly qrLoginSuccess: "登录成功！凭证已保存。";
+        readonly qrLoginFailed: "登录失败";
+        readonly qrLoginExpired: "二维码已过期，请重试";
+        readonly qrScanHint: "请使用微信扫描二维码";
         readonly platformCredentialsTitle: "凭证";
         readonly platformAccessTitle: "路由与访问";
         readonly platformTestNote: "只会检查该平台的必填凭证是否可用。";
@@ -303,5 +324,6 @@ export declare const PAGE_TEXTS: {
         readonly tipWeworkCorp: "企业微信管理后台 → 应用 → 查省 Corp ID / 智能机器人 Bot ID 与 Secret。";
         readonly tipDingtalkClient: "<a href=\"https://open-dev.dingtalk.com\" target=\"_blank\" rel=\"noopener\">钉钉开放平台</a> → 企业内部应用 → AppKey / AppSecret。";
         readonly tipWorkbuddyToken: "建议在终端运行 <code>open-im init</code> 完成 WorkBuddy 授权；或粘贴 CodeBuddy 登录后的 Token。";
+        readonly tipClawbotApiToken: "在终端运行 <code>open-im init</code> 选择 ClawBot 扫码登录，或从 ClawBot iLink 登录后复制 Token。";
     };
 };

package/dist/config-web-page-i18n.js

@@ -4,7 +4,7 @@ export const PAGE_TEXTS = {
         heroBadge: "open-im local control",
         heroTitle: "Local bridge control.",
         heroBody: "",
-        heroBodyFull: "One local bridge for Telegram, Feishu, QQ, WeWork, DingTalk, and WorkBuddy.",
+        heroBodyFull: "One local bridge for Telegram, Feishu, QQ, WeWork, DingTalk, WorkBuddy, and ClawBot.",
         heroKicker: "Local AI bridge",
         langButton: "\u4e2d\u6587",
         darkModeToggle: "Toggle dark mode",
@@ -56,6 +56,16 @@ export const PAGE_TEXTS = {
         weworkSummary: "Corp ID and secret for enterprise delivery.",
         dingtalkSummary: "Client credentials plus optional card template.",
         workbuddySummary: "CodeBuddy OAuth for WeChat customer service.",
+        clawbotSummary: "WeChat iLink API via ClawBot.",
+        clawbotApiUrl: "API URL",
+        clawbotApiToken: "API Token (Bearer)",
+        clawbotHelp: 'Click "Scan QR Login" to authenticate via WeChat, or paste token manually.',
+        qrLoginBtn: "Scan QR Login",
+        qrLoginScanning: "Waiting for QR code scan...",
+        qrLoginSuccess: "Login successful! Credentials saved.",
+        qrLoginFailed: "Login failed",
+        qrLoginExpired: "QR code expired, please try again",
+        qrScanHint: "Use WeChat to scan the QR code",
         platformCredentialsTitle: "Credentials",
         platformAccessTitle: "Routing and access",
         platformTestNote: "Checks required credentials against the platform.",
@@ -152,13 +162,14 @@ export const PAGE_TEXTS = {
         tipWeworkCorp: "WeCom admin → app → view Corp ID (or smart-bot Bot ID) and Secret.",
         tipDingtalkClient: '<a href="https://open-dev.dingtalk.com" target="_blank" rel="noopener">DingTalk Open Platform</a> → internal app → App Key & App Secret.',
         tipWorkbuddyToken: 'Use terminal <code>open-im init</code> for WorkBuddy OAuth, or paste tokens from CodeBuddy login.',
+        tipClawbotApiToken: 'Run <code>open-im init</code> and select ClawBot to scan QR code, or paste token from ClawBot iLink login.',
     },
     zh: {
         pageTitle: "open-im \u672c\u5730\u63a7\u5236\u53f0",
         heroBadge: "open-im",
         heroTitle: "\u672c\u5730\u6865\u63a5\u63a7\u5236\u53f0",
         heroBody: "",
-        heroBodyFull: "\u4e00\u4e2a\u672c\u5730\u6865\u63a5\u5165\u53e3\uff0c\u7edf\u4e00\u8fde\u63a5 Telegram\u3001Feishu\u3001QQ\u3001WeWork\u3001DingTalk \u548c WorkBuddy\u3002",
+        heroBodyFull: "\u4e00\u4e2a\u672c\u5730\u6865\u63a5\u5165\u53e3\uff0c\u7edf\u4e00\u8fde\u63a5 Telegram\u3001Feishu\u3001QQ\u3001WeWork\u3001DingTalk\u3001WorkBuddy \u548c ClawBot\u3002",
         heroKicker: "\u672c\u5730 AI \u6865\u63a5",
         langButton: "EN",
         darkModeToggle: "\u5207\u6362\u6697\u9ed1\u6a21\u5f0f",
@@ -210,6 +221,16 @@ export const PAGE_TEXTS = {
         weworkSummary: "\u4f01\u4e1a\u5fae\u4fe1 Corp ID \u4e0e Secret\u3002",
         dingtalkSummary: "\u9489\u9489 Client \u51ed\u8bc1\uff0c\u53ef\u9009\u914d\u7f6e\u5361\u7247\u6a21\u677f ID\u3002",
         workbuddySummary: "CodeBuddy OAuth \u8fde\u63a5\u5fae\u4fe1\u5ba2\u670d\u3002",
+        clawbotSummary: "\u901a\u8fc7 ClawBot \u8fde\u63a5\u5fae\u4fe1 iLink API\u3002",
+        clawbotApiUrl: "API \u5730\u5740",
+        clawbotApiToken: "API Token (Bearer)",
+        clawbotHelp: '\u70b9\u51fb\u201c\u626b\u7801\u767b\u5f55\u201d\u901a\u8fc7\u5fae\u4fe1\u8ba4\u8bc1\uff0c\u6216\u624b\u52a8\u7c98\u8d34 Token\u3002',
+        qrLoginBtn: "\u626b\u7801\u767b\u5f55",
+        qrLoginScanning: "\u7b49\u5f85\u626b\u7801...",
+        qrLoginSuccess: "\u767b\u5f55\u6210\u529f\uff01\u51ed\u8bc1\u5df2\u4fdd\u5b58\u3002",
+        qrLoginFailed: "\u767b\u5f55\u5931\u8d25",
+        qrLoginExpired: "\u4e8c\u7ef4\u7801\u5df2\u8fc7\u671f\uff0c\u8bf7\u91cd\u8bd5",
+        qrScanHint: "\u8bf7\u4f7f\u7528\u5fae\u4fe1\u626b\u63cf\u4e8c\u7ef4\u7801",
         platformCredentialsTitle: "\u51ed\u8bc1",
         platformAccessTitle: "\u8def\u7531\u4e0e\u8bbf\u95ee",
         platformTestNote: "\u53ea\u4f1a\u68c0\u67e5\u8be5\u5e73\u53f0\u7684\u5fc5\u586b\u51ed\u8bc1\u662f\u5426\u53ef\u7528\u3002",
@@ -303,5 +324,6 @@ export const PAGE_TEXTS = {
         tipWeworkCorp: "\u4f01\u4e1a\u5fae\u4fe1\u7ba1\u7406\u540e\u53f0 \u2192 \u5e94\u7528 \u2192 \u67e5\u7701 Corp ID / \u667a\u80fd\u673a\u5668\u4eba Bot ID \u4e0e Secret\u3002",
         tipDingtalkClient: '<a href="https://open-dev.dingtalk.com" target="_blank" rel="noopener">\u9489\u9489\u5f00\u653e\u5e73\u53f0</a> \u2192 \u4f01\u4e1a\u5185\u90e8\u5e94\u7528 \u2192 AppKey / AppSecret\u3002',
         tipWorkbuddyToken: "\u5efa\u8bae\u5728\u7ec8\u7aef\u8fd0\u884c <code>open-im init</code> \u5b8c\u6210 WorkBuddy \u6388\u6743\uff1b\u6216\u7c98\u8d34 CodeBuddy \u767b\u5f55\u540e\u7684 Token\u3002",
+        tipClawbotApiToken: '\u5728\u7ec8\u7aef\u8fd0\u884c <code>open-im init</code> \u9009\u62e9 ClawBot \u626b\u7801\u767b\u5f55\uff0c\u6216\u4ece ClawBot iLink \u767b\u5f55\u540e\u590d\u5236 Token\u3002',
     }
 };

package/dist/config-web.js

@@ -163,6 +163,7 @@ export function getHealthPlatformSnapshot(file, env = process.env) {
     const fileWework = file.platforms?.wework;
     const fileDingtalk = file.platforms?.dingtalk;
     const fileWorkbuddy = file.platforms?.workbuddy;
+    const fileClawbot = file.platforms?.clawbot;
     const telegramBotToken = env.TELEGRAM_BOT_TOKEN ?? fileTelegram?.botToken ?? file.telegramBotToken;
     const feishuAppId = env.FEISHU_APP_ID ?? fileFeishu?.appId ?? file.feishuAppId;
     const feishuAppSecret = env.FEISHU_APP_SECRET ?? fileFeishu?.appSecret ?? file.feishuAppSecret;
@@ -212,6 +213,12 @@ export function getHealthPlatformSnapshot(file, env = process.env) {
             healthy: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId),
             message: workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId ? "OAuth credentials configured" : "Missing credentials",
         },
+        clawbot: {
+            configured: !!fileClawbot?.apiToken,
+            enabled: !!fileClawbot?.apiToken && fileClawbot?.enabled !== false,
+            healthy: !!fileClawbot?.apiToken,
+            message: fileClawbot?.apiToken ? "API Token configured" : "Missing API Token",
+        },
     };
 }
 function splitCsv(value) {
@@ -325,6 +332,13 @@ function buildInitialPayload(file) {
                 baseUrl: file.platforms?.workbuddy?.baseUrl ?? "",
                 allowedUserIds: (file.platforms?.workbuddy?.allowedUserIds ?? []).join(", "),
             },
+            clawbot: {
+                enabled: file.platforms?.clawbot?.enabled ?? Boolean(file.platforms?.clawbot?.apiToken),
+                aiCommand: normalizeAiCommand(file.platforms?.clawbot?.aiCommand, "claude"),
+                apiUrl: file.platforms?.clawbot?.apiUrl ?? "http://127.0.0.1:26322",
+                apiToken: maskSecret(file.platforms?.clawbot?.apiToken),
+                allowedUserIds: (file.platforms?.clawbot?.allowedUserIds ?? []).join(", "),
+            },
         },
         ai: {
             claudeWorkDir: file.tools?.claude?.workDir ?? process.cwd(),
@@ -388,6 +402,8 @@ function validatePayload(payload) {
         errors.push("WorkBuddy refresh token is required.");
     if (payload.platforms.workbuddy.enabled && !clean(payload.platforms.workbuddy.userId))
         errors.push("WorkBuddy user ID is required.");
+    if (payload.platforms.clawbot.enabled && !clean(payload.platforms.clawbot.apiToken))
+        errors.push("ClawBot API token is required.");
     if (!clean(payload.ai.claudeWorkDir))
         errors.push("Default work directory is required.");
     return errors;
@@ -447,6 +463,11 @@ function validateConfigForPlatform(platform, config) {
                 errors.push("WorkBuddy user ID is required and must be a non-empty string.");
             }
             break;
+        case "clawbot":
+            if (!c.apiToken || typeof c.apiToken !== "string" || !clean(c.apiToken)) {
+                errors.push("ClawBot API token is required and must be a non-empty string.");
+            }
+            break;
         default:
             errors.push(`Unknown platform: ${platform}`);
     }
@@ -476,6 +497,7 @@ function createProbeConfig(values) {
         weworkAllowedUserIds: [],
         dingtalkAllowedUserIds: [],
         workbuddyAllowedUserIds: [],
+        clawbotAllowedUserIds: [],
         codexCliPath: "codex",
         claudeWorkDir: process.cwd(),
         claudeSessionIdleTtlMinutes: 30,
@@ -598,6 +620,29 @@ async function probeWorkBuddy(config) {
     }
     return "WorkBuddy credentials are valid.";
 }
+async function probeClawBot(config) {
+    const apiUrl = clean(String(config.apiUrl ?? "http://127.0.0.1:26322"));
+    const apiToken = clean(String(config.apiToken ?? ""));
+    if (!apiToken)
+        throw new Error("ClawBot API token is required.");
+    const { randomUUID } = await import('node:crypto');
+    const response = await fetch(`${apiUrl}/ilink/bot/getupdates?timeout=1&bot_token=${encodeURIComponent(apiToken)}`, {
+        headers: {
+            'Content-Type': 'application/json',
+            'AuthorizationType': 'ilink_bot_token',
+            'iLink-App-Id': 'bot',
+            'iLink-App-ClientVersion': '131588',
+            'X-WECHAT-UIN': randomUUID(),
+        },
+        signal: AbortSignal.timeout(TEST_TIMEOUT_MS),
+    });
+    const body = await readJsonResponse(response);
+    const ok = body.ok === true || body.ret === 0 || body.ret === '0';
+    if (!response.ok || !ok) {
+        throw new Error(String(body.error ?? body.description ?? `HTTP ${response.status}`));
+    }
+    return "ClawBot API reachable.";
+}
 export async function testPlatformConfig(platform, config) {
     const errors = validateConfigForPlatform(platform, config);
     if (errors.length > 0) {
@@ -616,6 +661,8 @@ export async function testPlatformConfig(platform, config) {
             return probeDingTalk(config);
         case "workbuddy":
             return probeWorkBuddy(config);
+        case "clawbot":
+            return probeClawBot(config);
         default:
             throw new Error(`Unknown platform: ${platform}`);
     }
@@ -711,6 +758,14 @@ function toFileConfig(payload, existing) {
                 baseUrl: clean(payload.platforms.workbuddy.baseUrl),
                 allowedUserIds: splitCsv(payload.platforms.workbuddy.allowedUserIds),
             },
+            clawbot: {
+                ...existing.platforms?.clawbot,
+                enabled: payload.platforms.clawbot.enabled,
+                aiCommand: persistedPlatformAi(payload.platforms.clawbot.aiCommand),
+                apiUrl: clean(payload.platforms.clawbot.apiUrl) ?? "http://127.0.0.1:26322",
+                apiToken: resolveSecret(payload.platforms.clawbot.apiToken, existing.platforms?.clawbot?.apiToken),
+                allowedUserIds: splitCsv(payload.platforms.clawbot.allowedUserIds),
+            },
         },
     };
 }
@@ -1071,6 +1126,30 @@ export async function startWebConfigServer(options) {
             }
             return;
         }
+        if (request.method === "POST" && requestUrl.pathname === "/api/clawbot/qr-login/start") {
+            try {
+                const { startQRLogin } = await import("./clawbot/qr-login.js");
+                const session = await startQRLogin();
+                json(response, 200, { success: true, qrcodeUrl: session.qrcodeUrl, sessionKey: session.sessionKey }, request);
+            }
+            catch (error) {
+                json(response, 500, { success: false, error: toErrorMessage(error) }, request);
+            }
+            return;
+        }
+        if (request.method === "POST" && requestUrl.pathname === "/api/clawbot/qr-login/wait") {
+            try {
+                const body = await readJson(request);
+                const { waitForQRLogin } = await import("./clawbot/qr-login.js");
+                const session = { sessionKey: body.sessionKey, qrcode: body.qrcode, qrcodeUrl: body.qrcodeUrl, startedAt: Date.now() };
+                const result = await waitForQRLogin(session);
+                json(response, 200, { success: result.connected, botToken: result.botToken, baseUrl: result.baseUrl, userId: result.userId, message: result.message }, request);
+            }
+            catch (error) {
+                json(response, 500, { success: false, error: toErrorMessage(error) }, request);
+            }
+            return;
+        }
         if (request.method === "GET" && tryServeDashboardStatic(requestUrl, request, response, mergeCors)) {
             return;
         }

package/dist/config.d.ts

@@ -1,4 +1,4 @@
-export type { Platform, AiCommand, Config, FilePlatformTelegram, FilePlatformFeishu, FilePlatformQQ, FilePlatformWechat, FilePlatformWework, FilePlatformDingtalk, FilePlatformWorkBuddy, FileToolClaude, FileToolCodex, FileToolCodeBuddy, FileConfig, } from './config/types.js';
+export type { Platform, AiCommand, Config, FilePlatformTelegram, FilePlatformFeishu, FilePlatformQQ, FilePlatformWechat, FilePlatformWework, FilePlatformDingtalk, FilePlatformWorkBuddy, FilePlatformClawbot, FileToolClaude, FileToolCodex, FileToolCodeBuddy, FileConfig, } from './config/types.js';
 import type { Platform, AiCommand, Config } from './config/types.js';
 export { CONFIG_PATH, loadFileConfig, saveFileConfig, getClaudeConfigHome, getClaudeSdkRuntimeIssue, hasCodeBuddyAuthIndicators, loadClaudeSettingsEnv, saveClaudeSettingsEnv, normalizeAiCommand, hasCodexAuth, parseCommaSeparated, CLAUDE_AUTH_ENV_KEYS, refreshClaudeEnvToProcess, processEnvForNonClaudeCliChild, CODEX_AUTH_PATHS, } from './config/file-io.js';
 /** 检测是否需要交互式配置（无 token 且无环境变量） */