@wwlocal/aibot-plugin-node 20260409.20.0

package/dist/esm/src/const.js

@@ -0,0 +1,100 @@
+/**
+ * 企业微信私有部署渠道常量定义
+ */
+/**
+ * 渠道 ID
+ */
+const CHANNEL_ID = "wecomserver";
+/**
+ * 企业微信私有部署 WebSocket 命令枚举
+ */
+var WeComCommand;
+(function (WeComCommand) {
+    /** 认证订阅 */
+    WeComCommand["SUBSCRIBE"] = "aibot_subscribe";
+    /** 心跳 */
+    WeComCommand["PING"] = "ping";
+    /** 企业微信推送消息 */
+    WeComCommand["AIBOT_CALLBACK"] = "aibot_callback";
+    /** 响应消息 */
+    WeComCommand["AIBOT_RESPONSE"] = "aibot_response";
+})(WeComCommand || (WeComCommand = {}));
+// ============================================================================
+// 超时和重试配置
+// ============================================================================
+/** 图片下载超时时间（毫秒） */
+const IMAGE_DOWNLOAD_TIMEOUT_MS = 30000;
+/** 文件下载超时时间（毫秒） */
+const FILE_DOWNLOAD_TIMEOUT_MS = 60000;
+/** 消息发送超时时间（毫秒） */
+const REPLY_SEND_TIMEOUT_MS = 15000;
+/** WebSocket 心跳间隔（毫秒） */
+const WS_HEARTBEAT_INTERVAL_MS = 30000;
+/** WebSocket 连接断开时的最大重连次数 */
+const WS_MAX_RECONNECT_ATTEMPTS = 10;
+/** WebSocket 认证失败时的最大重试次数 */
+const WS_MAX_AUTH_FAILURE_ATTEMPTS = 5;
+// ============================================================================
+// 消息状态管理配置
+// ============================================================================
+/** messageStates Map 条目的最大 TTL（毫秒），防止内存泄漏 */
+const MESSAGE_STATE_TTL_MS = 10 * 60 * 1000;
+/** messageStates Map 清理间隔（毫秒） */
+const MESSAGE_STATE_CLEANUP_INTERVAL_MS = 60000;
+/** messageStates Map 最大条目数 */
+const MESSAGE_STATE_MAX_SIZE = 500;
+// ============================================================================
+// 消息模板
+// ============================================================================
+/** "思考中"流式消息占位内容 */
+const THINKING_MESSAGE = "<think></think>";
+// ============================================================================
+// 流式 deliver 节流配置（monitor 层统一节流）
+// ============================================================================
+/** monitor 层中间帧 deliver 节流：最小发送间隔（毫秒） */
+const MONITOR_DELIVER_THROTTLE_MS = 1000;
+/** monitor 层中间帧 deliver 节流：最少新增字符数才触发 deliver */
+const MONITOR_DELIVER_MIN_DELTA = 30;
+// ============================================================================
+// 默认值
+// ============================================================================
+/** 默认媒体大小上限（MB） */
+const DEFAULT_MEDIA_MAX_MB = 5;
+// ============================================================================
+// 媒体上传相关常量
+// ============================================================================
+/** 图片大小上限（字节）：10MB */
+const IMAGE_MAX_BYTES = 10 * 1024 * 1024;
+/** 视频大小上限（字节）：10MB */
+const VIDEO_MAX_BYTES = 10 * 1024 * 1024;
+/** 语音大小上限（字节）：2MB */
+const VOICE_MAX_BYTES = 2 * 1024 * 1024;
+/** 文件大小上限（字节）：20MB */
+const FILE_MAX_BYTES = 20 * 1024 * 1024;
+/** 文件绝对上限（字节）：超过此值无法发送，等于 FILE_MAX_BYTES */
+const ABSOLUTE_MAX_BYTES = FILE_MAX_BYTES;
+// ============================================================================
+// 事件/命令名称常量
+// ============================================================================
+/** 版本检查事件名称（SDK 事件监听用） */
+const EVENT_ENTER_CHECK_UPDATE = "event.enter_check_update";
+/** 版本检查事件回复命令名称 */
+const CMD_ENTER_EVENT_REPLY = "ww_ai_robot_enter_event";
+// ============================================================================
+// SDK 连接配置
+// ============================================================================
+/** WSClient scene 参数：企微 AI 机器人场景 */
+const SCENE_WECOM_AIBOT = 1;
+// ============================================================================
+// 模板卡片配置
+// ============================================================================
+/** 合法的模板卡片 card_type 列表 */
+const VALID_CARD_TYPES = [
+    "text_notice",
+    "news_notice",
+    "button_interaction",
+    "vote_interaction",
+    "multiple_interaction",
+];
+
+export { ABSOLUTE_MAX_BYTES, CHANNEL_ID, CMD_ENTER_EVENT_REPLY, DEFAULT_MEDIA_MAX_MB, EVENT_ENTER_CHECK_UPDATE, FILE_DOWNLOAD_TIMEOUT_MS, FILE_MAX_BYTES, IMAGE_DOWNLOAD_TIMEOUT_MS, IMAGE_MAX_BYTES, MESSAGE_STATE_CLEANUP_INTERVAL_MS, MESSAGE_STATE_MAX_SIZE, MESSAGE_STATE_TTL_MS, MONITOR_DELIVER_MIN_DELTA, MONITOR_DELIVER_THROTTLE_MS, REPLY_SEND_TIMEOUT_MS, SCENE_WECOM_AIBOT, THINKING_MESSAGE, VALID_CARD_TYPES, VIDEO_MAX_BYTES, VOICE_MAX_BYTES, WS_HEARTBEAT_INTERVAL_MS, WS_MAX_AUTH_FAILURE_ATTEMPTS, WS_MAX_RECONNECT_ATTEMPTS, WeComCommand };

package/dist/esm/src/conversation-manager.js

@@ -0,0 +1,144 @@
+/**
+ * 对话历史管理器
+ *
+ * 按 chatId 维护多轮对话的 messages 数组（内存缓存）
+ * - 支持配置最大保留轮数（maxRounds）
+ * - 带 TTL 自动过期（默认 2 小时）
+ * - 带容量上限防止内存泄漏
+ *
+ * 一轮对话 = 一条 user 消息 + 一条 assistant 消息
+ */
+// ============================================================================
+// ConversationManager
+// ============================================================================
+class ConversationManager {
+    constructor(options = {}) {
+        this.cache = new Map();
+        this.maxRounds = options.maxRounds ?? 20;
+        this.ttlMs = options.ttlMs ?? 2 * 60 * 60 * 1000; // 2 小时
+        this.maxConversations = options.maxConversations ?? 500;
+    }
+    /**
+     * 获取指定对话的历史消息
+     *
+     * 返回按时间排列的 user/assistant 消息数组
+     * 如果对话已过期或不存在，返回空数组
+     */
+    getHistory(chatId) {
+        const entry = this.cache.get(chatId);
+        if (!entry)
+            return [];
+        // 检查 TTL
+        if (Date.now() - entry.updatedAt > this.ttlMs) {
+            this.cache.delete(chatId);
+            return [];
+        }
+        return [...entry.messages];
+    }
+    /**
+     * 添加一条用户消息到对话历史
+     */
+    addUserMessage(chatId, content) {
+        this.ensureEntry(chatId);
+        const entry = this.cache.get(chatId);
+        entry.messages.push({ role: "user", content });
+        entry.updatedAt = Date.now();
+        this.trimMessages(entry);
+    }
+    /**
+     * 添加一条 AI 回复消息到对话历史
+     */
+    addAssistantMessage(chatId, content) {
+        const entry = this.cache.get(chatId);
+        if (!entry)
+            return; // 如果没有对应的对话，跳过
+        entry.messages.push({ role: "assistant", content });
+        entry.updatedAt = Date.now();
+        this.trimMessages(entry);
+    }
+    /**
+     * 清除指定对话的历史
+     */
+    clearHistory(chatId) {
+        this.cache.delete(chatId);
+    }
+    /**
+     * 清除所有对话历史
+     */
+    clearAll() {
+        this.cache.clear();
+    }
+    /**
+     * 获取当前缓存的对话数量（用于调试/监控）
+     */
+    get size() {
+        return this.cache.size;
+    }
+    // ──────────────────────────────────────────────────────────────────────
+    // 内部方法
+    // ──────────────────────────────────────────────────────────────────────
+    /**
+     * 确保 chatId 对应的条目存在
+     */
+    ensureEntry(chatId) {
+        if (!this.cache.has(chatId)) {
+            this.cache.set(chatId, {
+                messages: [],
+                updatedAt: Date.now(),
+            });
+        }
+        // 容量限制：淘汰最旧的对话
+        if (this.cache.size > this.maxConversations) {
+            this.evictOldest();
+        }
+    }
+    /**
+     * 裁剪消息数量，保留最近 maxRounds 轮
+     *
+     * 一轮 = user + assistant = 2 条消息
+     * 最多保留 maxRounds * 2 条消息
+     */
+    trimMessages(entry) {
+        const maxMessages = this.maxRounds * 2;
+        if (entry.messages.length > maxMessages) {
+            // 保留最新的 maxMessages 条
+            entry.messages = entry.messages.slice(-maxMessages);
+        }
+    }
+    /**
+     * 淘汰最旧的对话（LRU 策略）
+     */
+    evictOldest() {
+        const now = Date.now();
+        // 先清理过期的
+        for (const [key, entry] of this.cache) {
+            if (now - entry.updatedAt > this.ttlMs) {
+                this.cache.delete(key);
+            }
+        }
+        // 如果仍超限，按 updatedAt 淘汰最旧的
+        if (this.cache.size > this.maxConversations) {
+            const entries = [...this.cache.entries()].sort((a, b) => a[1].updatedAt - b[1].updatedAt);
+            const toRemove = entries.slice(0, this.cache.size - this.maxConversations);
+            for (const [key] of toRemove) {
+                this.cache.delete(key);
+            }
+        }
+    }
+}
+// ============================================================================
+// 全局单例
+// ============================================================================
+/** 全局对话管理器实例 */
+let globalInstance = null;
+/**
+ * 获取全局对话管理器（懒初始化）
+ */
+function getConversationManager(options) {
+    if (!globalInstance) {
+        globalInstance = new ConversationManager(options);
+    }
+    return globalInstance;
+}
+
+export { ConversationManager, getConversationManager };

package/dist/esm/src/dm-policy.js

@@ -0,0 +1,44 @@
+import { isSenderAllowed } from './group-policy.js';
+
+/**
+ * DM（私聊）访问控制模块
+ *
+ * 仅保留 open/allowlist/disabled 三种策略，不包含 OpenClaw 的 pairing 机制
+ */
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查 DM Policy 访问控制
+ *
+ * 策略说明：
+ * - open: 允许所有人私聊
+ * - allowlist: 仅允许白名单中的用户私聊
+ * - disabled: 禁用所有私聊
+ */
+async function checkDmPolicy(params) {
+    const { senderId, isGroup, account, runtime } = params;
+    // 群聊消息不检查 DM Policy
+    if (isGroup) {
+        return { allowed: true };
+    }
+    const dmPolicy = account.dmPolicy;
+    // disabled: 直接拒绝所有私聊
+    if (dmPolicy === "disabled") {
+        runtime.log?.(`[wecom] Blocked DM from ${senderId} (dmPolicy=disabled)`);
+        return { allowed: false };
+    }
+    // open: 允许所有人
+    if (dmPolicy === "open") {
+        return { allowed: true };
+    }
+    // allowlist: 检查白名单
+    const allowFrom = account.allowFrom;
+    if (isSenderAllowed(senderId, allowFrom)) {
+        return { allowed: true };
+    }
+    runtime.log?.(`[wecom] Blocked unauthorized sender ${senderId} (dmPolicy=allowlist)`);
+    return { allowed: false };
+}
+
+export { checkDmPolicy };

package/dist/esm/src/group-policy.js

@@ -0,0 +1,92 @@
+import { CHANNEL_ID } from './const.js';
+
+/**
+ * 群组访问控制模块
+ *
+ * 负责群组策略检查（groupPolicy、群组白名单、群内发送者白名单）
+ * 使用独立配置类型，不依赖 OpenClaw
+ */
+// ============================================================================
+// 内部辅助函数
+// ============================================================================
+/**
+ * 检查群组是否在允许列表中
+ */
+function isWeComGroupAllowed(params) {
+    const { groupPolicy } = params;
+    if (groupPolicy === "disabled")
+        return false;
+    if (groupPolicy === "open")
+        return true;
+    // allowlist 模式：检查群组是否在允许列表中
+    const normalizedAllowFrom = params.allowFrom.map((entry) => String(entry).replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim());
+    if (normalizedAllowFrom.includes("*"))
+        return true;
+    const normalizedGroupId = params.groupId.trim();
+    return normalizedAllowFrom.some((entry) => entry === normalizedGroupId || entry.toLowerCase() === normalizedGroupId.toLowerCase());
+}
+/**
+ * 检查群组内发送者是否在允许列表中
+ */
+function isGroupSenderAllowed(params) {
+    const { senderId, groupId, account } = params;
+    // 查找该群的配置
+    const groupConfig = account.groups[groupId] || account.groups["*"];
+    const perGroupSenderAllowFrom = (groupConfig?.allowFrom ?? []).map((v) => String(v));
+    // 如果没有配置每群发送者白名单，默认允许所有人
+    if (perGroupSenderAllowFrom.length === 0)
+        return true;
+    if (perGroupSenderAllowFrom.includes("*"))
+        return true;
+    return perGroupSenderAllowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查群组策略访问控制
+ *
+ * 两层检查：
+ * 1. 群组白名单（groupAllowFrom）
+ * 2. 每群发送者白名单（groups[chatId].allowFrom）
+ */
+function checkGroupPolicy(params) {
+    const { chatId, senderId, account, runtime } = params;
+    const groupPolicy = account.groupPolicy;
+    const groupAllowFrom = account.groupAllowFrom;
+    const groupAllowed = isWeComGroupAllowed({
+        groupPolicy,
+        allowFrom: groupAllowFrom,
+        groupId: chatId,
+    });
+    if (!groupAllowed) {
+        runtime.log?.(`[wecom] Group ${chatId} not allowed (groupPolicy=${groupPolicy})`);
+        return { allowed: false };
+    }
+    const senderAllowed = isGroupSenderAllowed({
+        senderId,
+        groupId: chatId,
+        account,
+    });
+    if (!senderAllowed) {
+        runtime.log?.(`[wecom] Sender ${senderId} not in group ${chatId} sender allowlist`);
+        return { allowed: false };
+    }
+    return { allowed: true };
+}
+/**
+ * 检查发送者是否在允许列表中（通用）
+ */
+function isSenderAllowed(senderId, allowFrom) {
+    if (allowFrom.includes("*"))
+        return true;
+    return allowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}
+
+export { checkGroupPolicy, isSenderAllowed };

package/dist/esm/src/media-handler.js

@@ -0,0 +1,133 @@
+import { fileTypeFromBuffer } from 'file-type';
+import { DEFAULT_MEDIA_MAX_MB, IMAGE_DOWNLOAD_TIMEOUT_MS, FILE_DOWNLOAD_TIMEOUT_MS } from './const.js';
+import { withTimeout } from './timeout.js';
+import { saveMediaBuffer } from './media-storage.js';
+
+/**
+ * 入站媒体（图片/文件）下载和保存模块
+ *
+ * 负责下载、检测格式、保存媒体到本地文件系统
+ * 替代 OpenClaw 的 core.channel.media.saveMediaBuffer 和 fetchRemoteMedia
+ */
+// ============================================================================
+// 图片格式检测辅助函数
+// ============================================================================
+async function isImageBuffer(data) {
+    const type = await fileTypeFromBuffer(data);
+    return type?.mime.startsWith("image/") ?? false;
+}
+async function detectImageContentType(data) {
+    const type = await fileTypeFromBuffer(data);
+    if (type?.mime.startsWith("image/")) {
+        return type.mime;
+    }
+    return "application/octet-stream";
+}
+// ============================================================================
+// 远程媒体下载回退
+// ============================================================================
+/**
+ * HTTP 直接下载媒体文件（SDK downloadFile 失败时的回退方案）
+ */
+async function fetchRemoteMedia(url) {
+    const res = await fetch(url, { redirect: "follow" });
+    if (!res.ok) {
+        throw new Error(`Failed to fetch media: HTTP ${res.status} ${res.statusText}`);
+    }
+    const buffer = Buffer.from(await res.arrayBuffer());
+    const contentType = res.headers.get("content-type")?.split(";")?.[0]?.trim();
+    return { buffer, contentType };
+}
+// ============================================================================
+// 图片下载和保存
+// ============================================================================
+/**
+ * 下载并保存所有图片到本地
+ */
+async function downloadAndSaveImages(params) {
+    const { imageUrls, config, runtime, wsClient } = params;
+    const dataDir = config.dataDir || "./data";
+    const mediaList = [];
+    for (const imageUrl of imageUrls) {
+        try {
+            runtime.log?.(`[wecom] Downloading image: url=${imageUrl}`);
+            const mediaMaxMb = DEFAULT_MEDIA_MAX_MB;
+            const maxBytes = mediaMaxMb * 1024 * 1024;
+            let imageBuffer;
+            let imageContentType;
+            let originalFilename;
+            const imageAesKey = params.imageAesKeys?.get(imageUrl);
+            try {
+                // 优先使用 SDK 的 downloadFile 方法下载（带超时保护）
+                const result = await withTimeout(wsClient.downloadFile(imageUrl, imageAesKey), IMAGE_DOWNLOAD_TIMEOUT_MS, `Image download timed out: ${imageUrl}`);
+                imageBuffer = result.buffer;
+                originalFilename = result.filename;
+                imageContentType = await detectImageContentType(imageBuffer);
+                runtime.log?.(`[wecom] Image downloaded: size=${imageBuffer.length}, contentType=${imageContentType}, filename=${originalFilename ?? '(none)'}`);
+            }
+            catch (sdkError) {
+                // SDK 方法失败，回退到 HTTP fetch
+                runtime.log?.(`[wecom] SDK download failed, fallback: ${String(sdkError)}`);
+                const fetched = await withTimeout(fetchRemoteMedia(imageUrl), IMAGE_DOWNLOAD_TIMEOUT_MS, `Manual image download timed out: ${imageUrl}`);
+                runtime.log?.(`[wecom] Image fetched: contentType=${fetched.contentType}, size=${fetched.buffer.length}`);
+                imageBuffer = fetched.buffer;
+                imageContentType = fetched.contentType ?? "application/octet-stream";
+                const isValidImage = await isImageBuffer(fetched.buffer);
+                if (!isValidImage) {
+                    runtime.log?.(`[wecom] WARN: Downloaded data is not a valid image format`);
+                }
+            }
+            // 保存到本地文件系统
+            const saved = await saveMediaBuffer(imageBuffer, imageContentType, "inbound", maxBytes, originalFilename, dataDir);
+            mediaList.push({ path: saved.path, contentType: saved.contentType });
+            runtime.log?.(`[wecom][plugin] Image saved: path=${saved.path}, contentType=${saved.contentType}`);
+        }
+        catch (err) {
+            runtime.error?.(`[wecom] Failed to download image: ${String(err)}`);
+        }
+    }
+    return mediaList;
+}
+/**
+ * 下载并保存所有文件到本地
+ */
+async function downloadAndSaveFiles(params) {
+    const { fileUrls, config, runtime, wsClient } = params;
+    const dataDir = config.dataDir || "./data";
+    const mediaList = [];
+    for (const fileUrl of fileUrls) {
+        try {
+            runtime.log?.(`[wecom] Downloading file: url=${fileUrl}`);
+            const mediaMaxMb = DEFAULT_MEDIA_MAX_MB;
+            const maxBytes = mediaMaxMb * 1024 * 1024;
+            let fileBuffer;
+            let fileContentType;
+            let originalFilename;
+            const fileAesKey = params.fileAesKeys?.get(fileUrl);
+            try {
+                const result = await withTimeout(wsClient.downloadFile(fileUrl, fileAesKey), FILE_DOWNLOAD_TIMEOUT_MS, `File download timed out: ${fileUrl}`);
+                fileBuffer = result.buffer;
+                originalFilename = result.filename;
+                const type = await fileTypeFromBuffer(fileBuffer);
+                fileContentType = type?.mime ?? "application/octet-stream";
+                runtime.log?.(`[wecom] File downloaded: size=${fileBuffer.length}, contentType=${fileContentType}, filename=${originalFilename ?? '(none)'}`);
+            }
+            catch (sdkError) {
+                runtime.log?.(`[wecom] SDK file download failed, fallback: ${String(sdkError)}`);
+                const fetched = await withTimeout(fetchRemoteMedia(fileUrl), FILE_DOWNLOAD_TIMEOUT_MS, `Manual file download timed out: ${fileUrl}`);
+                runtime.log?.(`[wecom] File fetched: contentType=${fetched.contentType}, size=${fetched.buffer.length}`);
+                fileBuffer = fetched.buffer;
+                fileContentType = fetched.contentType ?? "application/octet-stream";
+            }
+            const saved = await saveMediaBuffer(fileBuffer, fileContentType, "inbound", maxBytes, originalFilename, dataDir);
+            mediaList.push({ path: saved.path, contentType: saved.contentType });
+            runtime.log?.(`[wecom][plugin] File saved: path=${saved.path}, contentType=${saved.contentType}`);
+        }
+        catch (err) {
+            runtime.error?.(`[wecom] Failed to download file: ${String(err)}`);
+        }
+    }
+    return mediaList;
+}
+
+export { downloadAndSaveFiles, downloadAndSaveImages };