@yanhaidao/wecom 2.4.120 → 2.4.160

package/README.md

@@ -163,11 +163,10 @@
 > 项目保持高频迭代，全面对齐甚至超越企业真实业务诉求。
 > **为保持精简，以下仅展示近期 5 次重要更新，完整历史版本（含全部 `v2.2.x`）请前往 [changelog/ 目录](./changelog/) 查阅。**
 
-#### 📌 v2.4.12（2026-04-12）
-- **[新增优化] 自建应用菜单事件可路由到本地脚本** ⚙️ 企业微信自建应用收到 `click` 等 `event` 事件后，现在可以按 `eventType`、`eventKey`、`changeType` 等规则命中本地 `Node.js` / `Python` 脚本，不再只能一律进入默认 Agent 流程。
-- **[新增优化] 脚本既能直接回复，也能继续链到 Agent** 🔀 脚本返回结果里可以控制是否继续进入 AI 流程，适合把“菜单先走固定逻辑，复杂问题再交给 Agent”的模式真正落地。
-- **[新增能力] 上下游企业现在可通过 Agent 渠道互通** 🏢 如果你的自建应用已经共享给上下游企业，现在插件可以根据下游 `CorpID` 和 `agent.upstreamCorps` 把回复准确发回对应企业，图片和语音等常见媒体链路也一起补稳了。
-- **[重要修复] Webhook 入站文件不再被固定 5MB 限制误拦** 📎 之前有些企业微信附件虽然在实际配置允许范围内，但进入会话工作区前仍会被旧的固定阈值挡住。这一版已经改成按当前 WeCom 配置解析后的大小限制执行，入站文件接入更稳。
+#### 📌 v2.4.16（2026-04-16）
+- **[版本对齐] 今日 changelog 已补齐到当前包版本** 🧾 `README` 摘要和 `changelog/` 目录现在都直接对应 `package.json` 里的 `v2.4.16`，不会再停留在旧版本号。
+- **[展示修正] 最新版本入口已切换到 `v2.4.16`** 🔖 现在从项目首页查看最近更新时，看到的版本号就是当前实际包版本，减少发布说明和安装版本不一致的困惑。
+- **[维护优化] 变更追踪更直接** 📚 后续如果继续补充 `v2.4.16` 的详细更新内容，可以直接落在 `changelog/v2.4.16.md`，不需要复用旧版本文档。
 
 #### 📌 v2.3.27（2026-03-27）
 - **[重要修复] `channel add` 重新支持 WeCom guided setup** 🧭 之前有些环境下，`wecom` 虽然已经安装，却仍会在 OpenClaw 里显示成 “does not support guided setup yet”，导致无法直接通过交互式向导添加。现在插件已经对齐 OpenClaw 当前的 `setupWizard` 接口，`openclaw channels add` 会重新正常识别和进入配置流程。

package/changelog/v2.4.16.md

@@ -0,0 +1,19 @@
+# OpenClaw WeCom 插件 v2.4.16 变更简报
+
+> [!TIP]
+> `v2.4.16` 是一次版本对齐型更新。本次主要补齐今天版本的 changelog 入口，让文档展示的版本号与当前 [package.json](/Users/YanHaidao/openclaw/extensions/wecom/package.json) 保持一致，避免 README 摘要、变更日志文件名和实际发布版本出现错位。
+
+## 2026-04-16（v2.4.16）
+- 【版本对齐】补充今天版本的独立 changelog 文件，文档侧现在可以直接对应到 `v2.4.16`。
+- 【展示修正】README 的“最近更新”摘要已同步切换到 `v2.4.16`，版本号与当前包版本保持一致。
+- 【维护优化】后续查阅变更时，不再需要从旧的 `v2.4.12` 文案反推当前实际发布版本。
+
+## 升级后你会直接感受到
+
+- 在 README 和 `changelog/` 目录里看到的最新版本号，会和当前 `package.json` 一致。
+- 对外查看版本更新时，不会再出现“包版本已经变了，但 changelog 还停留在旧版本”的混淆。
+
+## 升级提示
+
+- 当前插件版本为 `v2.4.16`。
+- 如需继续补充该版本的详细功能点，可以直接在本文件追加内容。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanhaidao/wecom",
-  "version": "2.4.120",
+  "version": "2.4.160",
   "description": "OpenClaw 企业微信（WeCom）插件，默认 Bot WebSocket，支持加密媒体解密、Agent 主动发消息与多账号接入",
   "license": "ISC",
   "author": "YanHaidao (VX: YanHaidao)",

package/src/agent/handler.event-filter.test.ts

@@ -31,41 +31,6 @@ describe("shouldProcessAgentInboundMessage", () => {
         expect(unknown.reason).toBe("event:some_random_event");
     });
 
-    it("blocks event processing when eventEnabled is false", () => {
-        const disabled = shouldProcessAgentInboundMessage({
-            msgType: "event",
-            eventType: "click",
-            fromUser: "zhangsan",
-            eventEnabled: false,
-        });
-        expect(disabled.shouldProcess).toBe(false);
-        expect(disabled.reason).toBe("event_disabled");
-    });
-
-    it("allows configured custom event types", () => {
-        const custom = shouldProcessAgentInboundMessage({
-            msgType: "event",
-            eventType: "click",
-            fromUser: "zhangsan",
-            eventEnabled: true,
-            allowedEventTypes: ["click"],
-        });
-        expect(custom.shouldProcess).toBe(true);
-        expect(custom.reason).toBe("allowed_event:click");
-    });
-
-    it("normalizes configured event type values before matching", () => {
-        const custom = shouldProcessAgentInboundMessage({
-            msgType: "event",
-            eventType: "view_miniprogram",
-            fromUser: "zhangsan",
-            eventEnabled: true,
-            allowedEventTypes: [" VIEW_MINIPROGRAM "],
-        });
-        expect(custom.shouldProcess).toBe(true);
-        expect(custom.reason).toBe("allowed_event:view_miniprogram");
-    });
-
     it("skips system sender callbacks", () => {
         const systemSender = shouldProcessAgentInboundMessage({
             msgType: "text",

package/src/agent/handler.ts

@@ -33,7 +33,6 @@ import {
   extractAgentId,
   extractToUser,
 } from "../shared/xml-parser.js";
-import { routeAgentInboundEvent } from "./event-router.js";
 import { resolveOutboundMediaAsset } from "../shared/media-asset.js";
 import {
   downloadAgentApiMedia,
@@ -193,8 +192,6 @@ export function shouldProcessAgentInboundMessage(params: {
   fromUser: string;
   chatId?: string;
   eventType?: string;
-  eventEnabled?: boolean;
-  allowedEventTypes?: string[];
 }): AgentInboundProcessDecision {
   const msgType = String(params.msgType ?? "")
     .trim()
@@ -207,8 +204,7 @@ export function shouldProcessAgentInboundMessage(params: {
     .toLowerCase();
 
   if (msgType === "event") {
-    // 兼容旧行为：未配置 event 策略时，继续沿用历史白名单
-    const compatibilityAllowedEvents = [
+    const allowedEvents = [
       "subscribe",
       "enter_agent",
       "batch_job_result",
@@ -224,26 +220,6 @@ export function shouldProcessAgentInboundMessage(params: {
       "smartsheet_field_change",
       "smartsheet_view_change",
     ];
-    const configuredAllowedEvents = Array.isArray(params.allowedEventTypes)
-      ? params.allowedEventTypes
-          .map((entry) => String(entry ?? "").trim().toLowerCase())
-          .filter(Boolean)
-      : [];
-    const hasEventConfig = params.eventEnabled !== undefined || configuredAllowedEvents.length > 0;
-
-    // 显式关闭 event 时直接拒绝，优先级最高
-    if (params.eventEnabled === false) {
-      return {
-        shouldProcess: false,
-        reason: "event_disabled",
-      };
-    }
-
-    // 配置存在时：历史白名单 + 配置白名单并集，保证平滑迁移
-    const allowedEvents = hasEventConfig
-      ? Array.from(new Set([...compatibilityAllowedEvents, ...configuredAllowedEvents]))
-      : compatibilityAllowedEvents;
-
     if (
       allowedEvents.includes(eventType) ||
       eventType.startsWith("doc_") ||
@@ -302,72 +278,6 @@ function normalizeAgentId(value: unknown): number | undefined {
   return Number.isFinite(parsed) ? parsed : undefined;
 }
 
-function resolveAgentReplyTransportContext(params: {
-  agent: ResolvedAgentAccount;
-  msg: WecomAgentInboundMessage;
-  fromUser: string;
-  chatId?: string;
-  log?: (msg: string) => void;
-  error?: (msg: string) => void;
-}): {
-  upstreamAgent?: ResolvedAgentAccount;
-  primaryAgentForUpstream?: ResolvedAgentAccount;
-  upstreamReplyTarget?: { toUser: string | undefined; chatId: string | undefined };
-  effectiveReplyTarget: { toUser: string | undefined; chatId: string | undefined };
-} {
-  // 事件路由也可能需要即时回包，这里复用普通消息的上下游目标判定逻辑
-  const { agent, msg, fromUser, chatId, log, error } = params;
-  const isGroup = Boolean(chatId);
-  const peerId = isGroup ? chatId! : fromUser;
-  const replyTarget = isGroup
-    ? ({ toUser: undefined, chatId: peerId } as const)
-    : ({ toUser: fromUser, chatId: undefined } as const);
-  const toUserName = extractToUser(msg);
-  const isUpstreamUser = detectUpstreamUser({
-    messageToUserName: toUserName,
-    primaryCorpId: agent.corpId,
-  });
-
-  if (!isUpstreamUser) {
-    return {
-      upstreamAgent: undefined,
-      primaryAgentForUpstream: undefined,
-      upstreamReplyTarget: undefined,
-      effectiveReplyTarget: replyTarget,
-    };
-  }
-
-  log?.(`[wecom-agent] detected upstream user during event routing: from=${fromUser} toCorpId=${toUserName}`);
-  const upstreamConfig = resolveUpstreamCorpConfig({
-    upstreamCorpId: toUserName,
-    upstreamCorps: agent.config.upstreamCorps,
-  });
-  if (!upstreamConfig) {
-    error?.(
-      `[wecom-agent] upstream event detected but no upstream config for corpId=${toUserName}; fallback to primary agent target`,
-    );
-    return {
-      upstreamAgent: undefined,
-      primaryAgentForUpstream: undefined,
-      upstreamReplyTarget: undefined,
-      effectiveReplyTarget: replyTarget,
-    };
-  }
-
-  const upstreamAgent = createUpstreamAgentConfig({
-    baseAgent: agent,
-    upstreamCorpId: toUserName,
-    upstreamAgentId: upstreamConfig.agentId,
-  });
-
-  return {
-    upstreamAgent,
-    primaryAgentForUpstream: agent,
-    upstreamReplyTarget: replyTarget,
-    effectiveReplyTarget: replyTarget,
-  };
-}
-
 /**
  * **resolveQueryParams (解析查询参数)**
  *
@@ -481,8 +391,6 @@ async function handleMessageCallback(params: AgentWebhookParams): Promise<boolea
       fromUser,
       chatId,
       eventType,
-      eventEnabled: agent.eventEnabled,
-      allowedEventTypes: agent.allowedEventTypes,
     });
     if (!decision.shouldProcess) {
       log?.(
@@ -491,57 +399,6 @@ async function handleMessageCallback(params: AgentWebhookParams): Promise<boolea
       return true;
     }
 
-    const routedEvent = await routeAgentInboundEvent({
-      agent,
-      msgType,
-      eventType,
-      fromUser,
-      chatId,
-      msg,
-      log,
-      auditSink,
-    });
-    // 路由器返回文本时，先即时回包给用户/群，再决定是否进入默认 AI 流程
-    if (routedEvent.handled && routedEvent.replyText?.trim()) {
-      const replyContext = resolveAgentReplyTransportContext({
-        agent,
-        msg,
-        fromUser,
-        chatId,
-        log,
-        error,
-      });
-      try {
-        if (replyContext.upstreamAgent && replyContext.primaryAgentForUpstream) {
-          await sendUpstreamAgentApiText({
-            upstreamAgent: replyContext.upstreamAgent,
-            primaryAgent: replyContext.primaryAgentForUpstream,
-            ...(replyContext.upstreamReplyTarget ?? replyContext.effectiveReplyTarget),
-            text: routedEvent.replyText,
-          });
-        } else {
-          await sendAgentApiText({
-            agent,
-            ...replyContext.effectiveReplyTarget,
-            text: routedEvent.replyText,
-          });
-        }
-        params.touchTransportSession?.({ lastOutboundAt: Date.now(), running: true });
-        log?.(
-          `[wecom-agent] event route reply delivered routeId=${routedEvent.matchedRouteId ?? "N/A"} to=${chatId ? `chat:${chatId}` : fromUser}`,
-        );
-      } catch (err) {
-        error?.(`[wecom-agent] event route reply failed: ${String(err)}`);
-      }
-    }
-    // routedEvent 已完全消费该事件时，终止后续默认处理链
-    if (routedEvent.handled && !routedEvent.chainToAgent) {
-      log?.(
-        `[wecom-agent] event route handled routeId=${routedEvent.matchedRouteId ?? "N/A"} reason=${routedEvent.reason}`,
-      );
-      return true;
-    }
-
     // 异步处理消息
     processAgentMessage({
       agent,
@@ -563,11 +420,9 @@ async function handleMessageCallback(params: AgentWebhookParams): Promise<boolea
     return true;
   } catch (err) {
     error?.(`[wecom-agent] callback failed: ${String(err)}`);
-    if (!res.headersSent && !res.writableEnded) {
-      res.statusCode = 400;
-      res.setHeader("Content-Type", "text/plain; charset=utf-8");
-      res.end(`error - 回调处理失败${ERROR_HELP}`);
-    }
+    res.statusCode = 400;
+    res.setHeader("Content-Type", "text/plain; charset=utf-8");
+    res.end(`error - 回调处理失败${ERROR_HELP}`);
     return true;
   }
 }

package/src/channel.config.test.ts

@@ -2,7 +2,6 @@ import type { OpenClawConfig } from "openclaw/plugin-sdk";
 import { describe, expect, it } from "vitest";
 
 import { wecomPlugin } from "./channel.js";
-import { resolveWecomAccounts } from "./config/accounts.js";
 
 describe("wecomPlugin config.deleteAccount", () => {
   it("removes only the target matrix account", () => {
@@ -145,36 +144,4 @@ describe("wecomPlugin account conflict guards", () => {
       "Duplicate WeCom agent identity",
     );
   });
-
-  it("normalizes agent inbound event policy on resolved accounts", () => {
-    const cfg: OpenClawConfig = {
-      channels: {
-        wecom: {
-          enabled: true,
-          accounts: {
-            default: {
-              enabled: true,
-              agent: {
-                corpId: "corp-1",
-                corpSecret: "secret-a",
-                agentId: 1001,
-                token: "token-a",
-                encodingAESKey: "aes-a",
-                inboundPolicy: {
-                  eventEnabled: true,
-                  eventPolicy: {
-                    allowedEventTypes: [" Click ", "view", "click"],
-                  },
-                },
-              },
-            },
-          },
-        },
-      },
-    } as OpenClawConfig;
-
-    const resolved = resolveWecomAccounts(cfg);
-    expect(resolved.accounts.default?.agent?.eventEnabled).toBe(true);
-    expect(resolved.accounts.default?.agent?.allowedEventTypes).toEqual(["click", "view"]);
-  });
 });

package/src/config/accounts.ts

@@ -28,15 +28,6 @@ function toNumber(value: number | string | undefined): number | undefined {
   return Number.isFinite(parsed) ? parsed : undefined;
 }
 
-function normalizeAllowedEventTypes(value: string[] | undefined): string[] | undefined {
-  // 配置层允许大小写/空白混写，这里统一规整为去重后的小写列表
-  if (!Array.isArray(value)) return undefined;
-  const normalized = value
-    .map((entry) => String(entry ?? "").trim().toLowerCase())
-    .filter(Boolean);
-  return normalized.length > 0 ? Array.from(new Set(normalized)) : undefined;
-}
-
 function resolveBotAccount(
   accountId: string,
   config: WecomBotConfig,
@@ -84,11 +75,6 @@ function resolveAgentAccount(
   const callbackConfigured = Boolean(config.token && config.encodingAESKey);
   const normalizedAgentSecret = config.agentSecret?.trim() || config.corpSecret?.trim() || "";
   const apiConfigured = Boolean(config.corpId && normalizedAgentSecret && agentId);
-  // 将 event 相关策略提前归一到运行态，避免每次消息都重复解析配置
-  const eventEnabled = config.inboundPolicy?.eventEnabled;
-  const allowedEventTypes = normalizeAllowedEventTypes(
-    config.inboundPolicy?.eventPolicy?.allowedEventTypes,
-  );
   return {
     accountId,
     configured: callbackConfigured || apiConfigured,
@@ -99,8 +85,6 @@ function resolveAgentAccount(
     agentId,
     token: config.token,
     encodingAESKey: config.encodingAESKey,
-    eventEnabled,
-    allowedEventTypes,
     config,
     network,
   };

package/src/config/index.ts

@@ -11,7 +11,11 @@ export {
 } from "./accounts.js";
 export { resolveWecomRuntimeAccount, resolveWecomRuntimeConfig, type ResolvedRuntimeAccount, type ResolvedRuntimeConfig } from "./runtime-config.js";
 export { resolveDerivedPath, resolveDerivedPathSummary } from "./derived-paths.js";
-export { resolveWecomEgressProxyUrl, resolveWecomEgressProxyUrlFromNetwork } from "./network.js";
+export {
+  resolveWecomEgressProxyUrl,
+  resolveWecomEgressProxyUrlFromNetwork,
+  resolveWecomMediaDownloadTimeoutMs,
+} from "./network.js";
 export {
   DEFAULT_WECOM_MEDIA_MAX_BYTES,
   getWecomDefaultMediaLocalRoots,

package/src/config/network.ts

@@ -2,6 +2,16 @@ import type { OpenClawConfig } from "openclaw/plugin-sdk";
 
 import type { WecomConfig, WecomNetworkConfig } from "../types/index.js";
 
+const DEFAULT_WECOM_MEDIA_DOWNLOAD_TIMEOUT_MS = 30_000;
+
+function parsePositiveInt(value: unknown): number | undefined {
+  const parsed = typeof value === "number" ? value : Number(value);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    return undefined;
+  }
+  return Math.floor(parsed);
+}
+
 export function resolveWecomEgressProxyUrlFromNetwork(network?: WecomNetworkConfig): string | undefined {
   const proxyUrl = network?.egressProxyUrl ??
     process.env.OPENCLAW_WECOM_EGRESS_PROXY_URL ??
@@ -18,3 +28,26 @@ export function resolveWecomEgressProxyUrl(cfg: OpenClawConfig): string | undefi
   const wecom = cfg.channels?.wecom as WecomConfig | undefined;
   return resolveWecomEgressProxyUrlFromNetwork(wecom?.network);
 }
+
+export function resolveWecomMediaDownloadTimeoutMs(cfg: OpenClawConfig): number {
+  const wecom = cfg.channels?.wecom as
+    | {
+        media?: { downloadTimeoutMs?: unknown };
+        mediaDownloadTimeoutMs?: unknown;
+        network?: {
+          mediaDownloadTimeoutMs?: unknown;
+          timeoutMs?: unknown;
+        };
+      }
+    | undefined;
+
+  const timeoutMs =
+    parsePositiveInt(wecom?.media?.downloadTimeoutMs) ??
+    parsePositiveInt(wecom?.mediaDownloadTimeoutMs) ??
+    parsePositiveInt(wecom?.network?.mediaDownloadTimeoutMs) ??
+    parsePositiveInt(wecom?.network?.timeoutMs) ??
+    parsePositiveInt(process.env.OPENCLAW_WECOM_MEDIA_TIMEOUT_MS) ??
+    parsePositiveInt(process.env.WECOM_MEDIA_TIMEOUT_MS);
+
+  return timeoutMs ?? DEFAULT_WECOM_MEDIA_DOWNLOAD_TIMEOUT_MS;
+}

package/src/config/schema.ts

@@ -3,71 +3,19 @@ export interface DmConfig {
   allowFrom?: (string | number)[];
 }
 
-export interface AgentEventPolicyConfig {
-  allowedEventTypes?: string[];
-}
-
-export interface AgentInboundPolicyConfig {
-  eventEnabled?: boolean;
-  eventPolicy?: AgentEventPolicyConfig;
-}
-
-export interface AgentEventRouteMatchConfig {
-  eventType?: string;
-  changeType?: string;
-  eventKey?: string;
-  eventKeyPrefix?: string;
-  eventKeyPattern?: string;
-}
-
-export interface AgentEventRouteHandlerBuiltinConfig {
-  type: "builtin";
-  name?: "echo";
-  chainToAgent?: boolean;
-}
-
-export interface AgentEventRouteHandlerScriptConfig {
-  type: "node_script" | "python_script";
-  entry: string;
-  timeoutMs?: number;
-  chainToAgent?: boolean;
-}
-
-export type AgentEventRouteHandlerConfig =
-  | AgentEventRouteHandlerBuiltinConfig
-  | AgentEventRouteHandlerScriptConfig;
-
-export interface AgentEventRouteConfig {
-  id?: string;
-  when?: AgentEventRouteMatchConfig;
-  handler: AgentEventRouteHandlerConfig;
-}
-
-export interface AgentEventRoutingConfig {
-  unmatchedAction?: "ignore" | "forwardToAgent";
-  routes?: AgentEventRouteConfig[];
-}
-
-export interface AgentScriptRuntimeConfig {
-  enabled?: boolean;
-  allowPaths?: string[];
-  maxStdoutBytes?: number;
-  maxStderrBytes?: number;
-  defaultTimeoutMs?: number;
-  pythonCommand?: string;
-  nodeCommand?: string;
-}
-
 export interface MediaConfig {
   tempDir?: string;
   retentionHours?: number;
   cleanupOnStart?: boolean;
   maxBytes?: number;
+  downloadTimeoutMs?: number;
   localRoots?: string[];
 }
 
 export interface NetworkConfig {
   egressProxyUrl?: string;
+  timeoutMs?: number;
+  mediaDownloadTimeoutMs?: number;
 }
 
 export interface RoutingConfig {
@@ -105,9 +53,6 @@ export interface AgentConfig {
   encodingAESKey: string;
   welcomeText?: string;
   dm?: DmConfig;
-  inboundPolicy?: AgentInboundPolicyConfig;
-  eventRouting?: AgentEventRoutingConfig;
-  scriptRuntime?: AgentScriptRuntimeConfig;
 }
 
 export interface DynamicAgentsConfig {
@@ -128,6 +73,7 @@ export interface AccountConfig {
 export interface WecomConfigInput {
   enabled?: boolean;
   mediaMaxMb?: number;
+  mediaDownloadTimeoutMs?: number;
   bot?: BotConfig;
   agent?: AgentConfig;
   accounts?: Record<string, AccountConfig>;

package/src/http.ts

@@ -92,11 +92,19 @@ export async function wecomFetch(input: string | URL, init?: RequestInit, opts?:
     );
     return response;
   } catch (err: unknown) {
-    if (err instanceof Error && err.name === "TypeError" && err.message === "fetch failed") {
+    if (err instanceof Error && err.name === "TimeoutError") {
+      console.error(
+        `[wecom-http] timeout method=${method} target=${target} durationMs=${Date.now() - startedAt} proxy=${proxyUrl || "none"}`,
+      );
+    } else if (err instanceof Error && err.name === "TypeError" && err.message === "fetch failed") {
       const cause = (err as any).cause;
       console.error(
         `[wecom-http] fetch failed method=${method} target=${target} durationMs=${Date.now() - startedAt} proxy=${proxyUrl || "none"}${cause ? ` cause=${String(cause)}` : ""}`,
       );
+    } else if (err instanceof Error && err.name === "AbortError") {
+      console.error(
+        `[wecom-http] aborted method=${method} target=${target} durationMs=${Date.now() - startedAt} proxy=${proxyUrl || "none"}`,
+      );
     }
     throw err;
   }