@yanhaidao/wecom 2.4.120 → 2.5.110

package/src/agent/index.ts

@@ -1,12 +0,0 @@
-/**
- * WeCom Agent 模块导出
- */
-
-export { handleAgentWebhook, type AgentWebhookParams } from "./handler.js";
-export {
-    getAccessToken,
-    sendText,
-    uploadMedia,
-    sendMedia,
-    downloadMedia,
-} from "../transport/agent-api/core.js";

package/src/agent/script-runner.ts

@@ -1,186 +0,0 @@
-import path from "node:path";
-import { spawn } from "node:child_process";
-
-import type {
-  WecomAgentEventRouteHandlerConfig,
-  WecomAgentScriptRuntimeConfig,
-} from "../types/index.js";
-
-export type AgentEventScriptEnvelope = {
-  version: "1.0";
-  channel: "wecom";
-  accountId: string;
-  receivedAt: number;
-  message: {
-    msgType: string;
-    eventType: string;
-    eventKey: string | null;
-    changeType: string | null;
-    fromUser: string;
-    toUser: string | null;
-    chatId: string | null;
-    agentId: number | null;
-    createTime: number | null;
-    msgId: string | null;
-    raw: Record<string, unknown>;
-  };
-  route: {
-    matchedRuleId: string;
-    handlerType: "node_script" | "python_script";
-  };
-};
-
-export type AgentEventScriptResponse = {
-  ok?: boolean;
-  action?: "none" | "reply_text";
-  reply?: {
-    text?: string;
-  };
-  chainToAgent?: boolean;
-  audit?: {
-    tags?: string[];
-  };
-  error?: string;
-};
-
-export type AgentEventScriptExecutionMeta = {
-  command: string;
-  entryPath: string;
-  durationMs: number;
-  exitCode: number | null;
-};
-
-function resolveAllowedRoots(runtime: WecomAgentScriptRuntimeConfig): string[] {
-  return (runtime.allowPaths ?? []).map((entry) => path.resolve(entry));
-}
-
-function resolveScriptEntry(entry: string): string {
-  return path.resolve(entry);
-}
-
-function ensureScriptAllowed(entryPath: string, runtime: WecomAgentScriptRuntimeConfig): void {
-  // 安全兜底：脚本执行必须显式开启
-  if (runtime.enabled !== true) {
-    throw new Error("script runtime is disabled");
-  }
-  // 安全兜底：必须配置允许目录，拒绝任意路径执行
-  const roots = resolveAllowedRoots(runtime);
-  if (roots.length === 0) {
-    throw new Error("script runtime allowPaths is empty");
-  }
-  const allowed = roots.some((root) => entryPath === root || entryPath.startsWith(`${root}${path.sep}`));
-  if (!allowed) {
-    throw new Error(`script path is not allowed: ${entryPath}`);
-  }
-}
-
-export async function runAgentEventScript(params: {
-  runtime: WecomAgentScriptRuntimeConfig | undefined;
-  handler: Extract<WecomAgentEventRouteHandlerConfig, { type: "node_script" | "python_script" }>;
-  envelope: AgentEventScriptEnvelope;
-}): Promise<{ response: AgentEventScriptResponse; meta: AgentEventScriptExecutionMeta }> {
-  const runtime = params.runtime ?? {};
-  const entryPath = resolveScriptEntry(params.handler.entry);
-  ensureScriptAllowed(entryPath, runtime);
-
-  // 优先使用 route 覆盖值，其次使用全局 runtime 默认值
-  const timeoutMs = params.handler.timeoutMs ?? runtime.defaultTimeoutMs ?? 5000;
-  const maxStdoutBytes = runtime.maxStdoutBytes ?? 262144;
-  const maxStderrBytes = runtime.maxStderrBytes ?? 131072;
-  const command = params.handler.type === "python_script"
-    ? runtime.pythonCommand ?? "python3"
-    : runtime.nodeCommand ?? "node";
-  const startedAt = Date.now();
-
-  return await new Promise<{ response: AgentEventScriptResponse; meta: AgentEventScriptExecutionMeta }>((resolve, reject) => {
-    const child = spawn(command, [entryPath], {
-      cwd: process.cwd(),
-      stdio: ["pipe", "pipe", "pipe"],
-      env: {
-        PATH: process.env.PATH ?? "",
-      },
-    });
-
-    let stdout = "";
-    let stderr = "";
-    let stdoutExceeded = false;
-    let stderrExceeded = false;
-    let settled = false;
-    let exitCode: number | null = null;
-
-    const finish = (fn: () => void): void => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      fn();
-    };
-
-    const timer = setTimeout(() => {
-      // 超时强制终止，防止脚本阻塞事件处理链
-      child.kill("SIGKILL");
-      finish(() => reject(new Error(`script execution timed out after ${timeoutMs}ms`)));
-    }, timeoutMs);
-
-    child.stdout.on("data", (chunk: Buffer | string) => {
-      const value = typeof chunk === "string" ? chunk : chunk.toString("utf8");
-      // 限制输出体积，避免异常脚本刷爆内存/日志
-      if (Buffer.byteLength(stdout, "utf8") + Buffer.byteLength(value, "utf8") > maxStdoutBytes) {
-        stdoutExceeded = true;
-        return;
-      }
-      stdout += value;
-    });
-
-    child.stderr.on("data", (chunk: Buffer | string) => {
-      const value = typeof chunk === "string" ? chunk : chunk.toString("utf8");
-      if (Buffer.byteLength(stderr, "utf8") + Buffer.byteLength(value, "utf8") > maxStderrBytes) {
-        stderrExceeded = true;
-        return;
-      }
-      stderr += value;
-    });
-
-    child.on("error", (err) => {
-      finish(() => reject(err));
-    });
-
-    child.on("close", (code) => {
-      exitCode = code;
-      const meta: AgentEventScriptExecutionMeta = {
-        command,
-        entryPath,
-        durationMs: Date.now() - startedAt,
-        exitCode,
-      };
-      if (stdoutExceeded) {
-        finish(() => reject(new Error("script stdout exceeded limit")));
-        return;
-      }
-      if (stderrExceeded) {
-        finish(() => reject(new Error("script stderr exceeded limit")));
-        return;
-      }
-      if (code !== 0) {
-        finish(() => reject(new Error(`script exited with code ${code}: ${stderr.trim() || stdout.trim()}`)));
-        return;
-      }
-      const trimmed = stdout.trim();
-      if (!trimmed) {
-        // 空输出按无动作处理，减少脚本端样板代码
-        finish(() => resolve({ response: { ok: true, action: "none" }, meta }));
-        return;
-      }
-      try {
-        // 脚本协议要求 stdout 必须是 JSON
-        const parsed = JSON.parse(trimmed) as AgentEventScriptResponse;
-        finish(() => resolve({ response: parsed, meta }));
-      } catch (err) {
-        finish(() => reject(new Error(`script output is not valid JSON: ${String(err)}`)));
-      }
-    });
-
-    // 将完整 envelope 传给脚本，再关闭 stdin
-    child.stdin.write(JSON.stringify(params.envelope));
-    child.stdin.end();
-  });
-}

package/src/agent/test-fixtures/invalid-json-script.mjs

@@ -1 +0,0 @@
-process.stdout.write("this is not json");

package/src/agent/test-fixtures/reply-event-script.mjs

@@ -1,29 +0,0 @@
-let raw = "";
-process.stdin.setEncoding("utf8");
-process.stdin.on("data", (chunk) => {
-  raw += chunk;
-});
-process.stdin.on("end", () => {
-  const payload = JSON.parse(raw || "{}");
-  const eventType = payload?.message?.eventType ?? "unknown";
-  const eventKey = payload?.message?.eventKey ?? "";
-  const changeType = payload?.message?.changeType ?? "";
-
-  if (eventKey === "PASS_TO_DEFAULT") {
-    process.stdout.write(JSON.stringify({
-      ok: true,
-      action: "none",
-      chainToAgent: true,
-    }));
-    return;
-  }
-
-  process.stdout.write(JSON.stringify({
-    ok: true,
-    action: "reply_text",
-    reply: {
-      text: `script:${eventType}:${eventKey}:${changeType}`,
-    },
-    chainToAgent: false,
-  }));
-});

package/src/agent/test-fixtures/reply-event-script.py

@@ -1,17 +0,0 @@
-import json
-import sys
-
-payload = json.load(sys.stdin)
-message = payload.get("message", {})
-event_type = message.get("eventType", "unknown")
-event_key = message.get("eventKey") or ""
-change_type = message.get("changeType") or ""
-
-json.dump({
-    "ok": True,
-    "action": "reply_text",
-    "reply": {
-        "text": f"python:{event_type}:{event_key}:{change_type}"
-    },
-    "chainToAgent": False
-}, sys.stdout)

package/src/app/account-runtime.ts

@@ -1,276 +0,0 @@
-import type { OpenClawConfig, PluginRuntime } from "openclaw/plugin-sdk";
-import { formatErrorMessage } from "openclaw/plugin-sdk/infra-runtime";
-import type { ResolvedRuntimeAccount } from "../config/runtime-config.js";
-import { WecomAuditLog } from "../observability/audit-log.js";
-import { WecomStatusRegistry } from "../observability/status-registry.js";
-import { summarizeTransportSessions } from "../observability/transport-session-view.js";
-import { dispatchInboundEvent } from "../runtime/dispatcher.js";
-import { WecomMediaService } from "../shared/media-service.js";
-import { InMemoryRuntimeStore } from "../store/memory-store.js";
-import type {
-  AccountRuntimeStatusSnapshot,
-  ReplyHandle,
-  ReplyPayload,
-  TransportSessionPatch,
-  TransportSessionSnapshot,
-  UnifiedInboundEvent,
-  WecomAuditCategory,
-  WecomRuntimeHealth,
-  WecomTransportKind,
-} from "../types/index.js";
-
-export class WecomAccountRuntime {
-  readonly store = new InMemoryRuntimeStore();
-  readonly mediaService: WecomMediaService;
-  readonly auditLog = new WecomAuditLog();
-  readonly statusRegistry = new WecomStatusRegistry();
-  private readonly runtimeStatus: AccountRuntimeStatusSnapshot;
-
-  constructor(
-    readonly core: PluginRuntime,
-    readonly cfg: OpenClawConfig,
-    readonly resolved: ResolvedRuntimeAccount,
-    readonly log: {
-      info?: (message: string) => void;
-      warn?: (message: string) => void;
-      error?: (message: string) => void;
-    } = {},
-    private readonly statusSink?: (snapshot: Record<string, unknown>) => void,
-  ) {
-    this.mediaService = new WecomMediaService(core, cfg);
-    this.runtimeStatus = {
-      accountId: resolved.account.accountId,
-      health: "idle",
-      ownerId: null,
-      ownerDriftAt: null,
-      lastError: null,
-      lastErrorAt: null,
-      lastInboundAt: null,
-      lastOutboundAt: null,
-      recentInboundSummary: null,
-      recentOutboundSummary: null,
-      recentIssueCategory: null,
-      recentIssueSummary: null,
-      transportSessions: [],
-    };
-  }
-
-  get account() {
-    return this.resolved.account;
-  }
-
-  async handleEvent(event: UnifiedInboundEvent, replyHandle: ReplyHandle): Promise<void> {
-    const dispatchStartedAt = Date.now();
-    this.runtimeStatus.lastInboundAt = Date.now();
-    this.runtimeStatus.recentInboundSummary = `${event.transport} ${event.inboundKind} ${event.messageId}`;
-    this.log.info?.(
-      `[wecom-runtime] inbound account=${event.accountId} transport=${event.transport} kind=${event.inboundKind} messageId=${event.messageId} peer=${event.conversation.peerKind}:${event.conversation.peerId}`,
-    );
-    this.log.info?.(
-      `[wecom-runtime] dispatch-start account=${event.accountId} transport=${event.transport} kind=${event.inboundKind} messageId=${event.messageId}`,
-    );
-    this.emitStatus();
-
-    const trackedReplyHandle: ReplyHandle = {
-      context: replyHandle.context,
-      deliver: async (payload: ReplyPayload, info) => {
-        const deliverStartedAt = Date.now();
-        const textLen = payload.text?.trim().length ?? 0;
-        const mediaCount = (payload.mediaUrls?.length ?? 0) + (payload.mediaUrl ? 1 : 0);
-        this.log.info?.(
-          `[wecom-runtime] deliver-start account=${event.accountId} transport=${replyHandle.context.transport} kind=${info.kind} messageId=${event.messageId} textLen=${textLen} mediaCount=${mediaCount} reasoning=${String(payload.isReasoning === true)}`,
-        );
-        await replyHandle.deliver(payload, info);
-        this.runtimeStatus.lastOutboundAt = Date.now();
-        const outboundSummary =
-          payload.text?.trim() || payload.mediaUrl || payload.mediaUrls?.[0] || info.kind;
-        this.runtimeStatus.recentOutboundSummary = `${replyHandle.context.transport} ${outboundSummary.slice(0, 120)}`;
-        this.log.info?.(
-          `[wecom-runtime] outbound account=${event.accountId} transport=${replyHandle.context.transport} kind=${info.kind} messageId=${event.messageId} summary=${JSON.stringify(this.runtimeStatus.recentOutboundSummary)}`,
-        );
-        this.log.info?.(
-          `[wecom-runtime] deliver-done account=${event.accountId} transport=${replyHandle.context.transport} kind=${info.kind} messageId=${event.messageId} durationMs=${Date.now() - deliverStartedAt}`,
-        );
-        this.emitStatus();
-      },
-      fail: async (error: unknown) => {
-        const formattedError = formatErrorMessage(error);
-        this.recordOperationalIssue({
-          transport: replyHandle.context.transport,
-          category: "runtime-error",
-          messageId: event.messageId,
-          raw: replyHandle.context.raw,
-          summary: `reply-fail ${formattedError}`,
-          error: formattedError,
-        });
-        this.log.error?.(
-          `[wecom-runtime] reply-fail account=${event.accountId} transport=${replyHandle.context.transport} messageId=${event.messageId} error=${formattedError}`,
-        );
-        await replyHandle.fail?.(error);
-      },
-      markExternalActivity: () => {
-        replyHandle.markExternalActivity?.();
-      },
-    };
-
-    try {
-      await dispatchInboundEvent({
-        core: this.core,
-        cfg: this.cfg,
-        store: this.store,
-        auditLog: this.auditLog,
-        mediaService: this.mediaService,
-        event,
-        replyHandle: trackedReplyHandle,
-      });
-      this.log.info?.(
-        `[wecom-runtime] dispatch-done account=${event.accountId} transport=${event.transport} kind=${event.inboundKind} messageId=${event.messageId} durationMs=${Date.now() - dispatchStartedAt}`,
-      );
-    } catch (error) {
-      this.log.error?.(
-        `[wecom-runtime] dispatch-fail account=${event.accountId} transport=${event.transport} kind=${event.inboundKind} messageId=${event.messageId} durationMs=${Date.now() - dispatchStartedAt} error=${formatErrorMessage(error)}`,
-      );
-      throw error;
-    }
-  }
-
-  updateTransportSession(snapshot: TransportSessionSnapshot): void {
-    const previous = this.store.readTransportSession(snapshot.accountId, snapshot.transport);
-    this.store.writeTransportSession(snapshot);
-    this.statusRegistry.write(snapshot);
-    this.log.info?.(
-      `[wecom-runtime] session account=${snapshot.accountId} transport=${snapshot.transport} running=${snapshot.running} owner=${snapshot.ownerId ?? "none"} connected=${String(snapshot.connected ?? false)} authenticated=${String(snapshot.authenticated ?? false)} error=${snapshot.lastError ?? "none"}`,
-    );
-    if (
-      previous?.ownerId &&
-      snapshot.ownerId &&
-      previous.ownerId !== snapshot.ownerId &&
-      previous.running
-    ) {
-      this.recordOperationalIssue({
-        transport: snapshot.transport,
-        category: "owner-drift",
-        summary: `owner drift ${previous.ownerId} -> ${snapshot.ownerId}`,
-      });
-    }
-    if (snapshot.lastError) {
-      this.runtimeStatus.lastError = snapshot.lastError;
-      this.runtimeStatus.lastErrorAt = Date.now();
-    } else if (snapshot.running) {
-      this.runtimeStatus.lastError = null;
-    }
-    this.emitStatus();
-  }
-
-  touchTransportSession(transport: WecomTransportKind, patch: TransportSessionPatch): void {
-    const current = this.store.readTransportSession(this.account.accountId, transport);
-    const next: TransportSessionSnapshot = {
-      accountId: this.account.accountId,
-      transport,
-      running: patch.running ?? current?.running ?? true,
-      ownerId: patch.ownerId ?? current?.ownerId,
-      connected: patch.connected ?? current?.connected,
-      authenticated: patch.authenticated ?? current?.authenticated,
-      lastConnectedAt: patch.lastConnectedAt ?? current?.lastConnectedAt,
-      lastDisconnectedAt: patch.lastDisconnectedAt ?? current?.lastDisconnectedAt,
-      lastInboundAt: patch.lastInboundAt ?? current?.lastInboundAt,
-      lastOutboundAt: patch.lastOutboundAt ?? current?.lastOutboundAt,
-      lastError: "lastError" in patch ? (patch.lastError ?? undefined) : current?.lastError,
-    };
-    this.updateTransportSession(next);
-  }
-
-  listTransportSessions() {
-    return this.statusRegistry.read(this.account.accountId);
-  }
-
-  listAuditEntries() {
-    return this.auditLog.list();
-  }
-
-  buildRuntimeStatus(): AccountRuntimeStatusSnapshot {
-    const sessions = this.listTransportSessions();
-    const primarySession = this.resolvePrimarySession(sessions);
-    return {
-      ...this.runtimeStatus,
-      health: this.computeHealth(sessions),
-      transport: primarySession?.transport,
-      ownerId: primarySession?.ownerId ?? this.runtimeStatus.ownerId ?? null,
-      connected: primarySession?.connected,
-      authenticated: primarySession?.authenticated,
-      lastError:
-        primarySession?.lastError ??
-        (primarySession?.running ? null : (this.runtimeStatus.lastError ?? null)),
-      transportSessions: summarizeTransportSessions(sessions),
-    };
-  }
-
-  recordOperationalIssue(params: {
-    transport: WecomTransportKind;
-    category: WecomAuditCategory;
-    summary: string;
-    messageId?: string;
-    raw?: ReplyHandle["context"]["raw"];
-    error?: string;
-  }): void {
-    this.auditLog.appendOperational({
-      accountId: this.account.accountId,
-      transport: params.transport,
-      category: params.category,
-      messageId: params.messageId,
-      summary: params.summary,
-      raw: params.raw,
-      error: params.error,
-    });
-    if (params.category === "owner-drift" || params.category === "ws-kicked") {
-      this.runtimeStatus.ownerDriftAt = Date.now();
-    }
-    this.runtimeStatus.lastError = params.error ?? params.summary;
-    this.runtimeStatus.lastErrorAt = Date.now();
-    this.runtimeStatus.recentIssueCategory = params.category;
-    this.runtimeStatus.recentIssueSummary = params.summary;
-    const sink =
-      params.category === "runtime-error" || params.category === "fallback-delivery-failed"
-        ? this.log.error
-        : this.log.warn;
-    sink?.(
-      `[wecom-runtime] issue account=${this.account.accountId} transport=${params.transport} category=${params.category} messageId=${params.messageId ?? "n/a"} summary=${params.summary}`,
-    );
-    this.emitStatus();
-  }
-
-  private emitStatus(): void {
-    this.statusSink?.(this.buildRuntimeStatus() as unknown as Record<string, unknown>);
-  }
-
-  private resolvePrimarySession(
-    sessions: TransportSessionSnapshot[],
-  ): TransportSessionSnapshot | undefined {
-    const primaryTransport = this.account.bot?.configured
-      ? this.account.bot.primaryTransport === "ws"
-        ? "bot-ws"
-        : "bot-webhook"
-      : this.account.agent?.callbackConfigured
-        ? "agent-callback"
-        : undefined;
-    if (!primaryTransport) {
-      return sessions[0];
-    }
-    return sessions.find((session) => session.transport === primaryTransport) ?? sessions[0];
-  }
-
-  private computeHealth(sessions: TransportSessionSnapshot[]): WecomRuntimeHealth {
-    if (sessions.length === 0) {
-      return this.runtimeStatus.lastError ? "down" : "idle";
-    }
-    const hasRunning = sessions.some((session) => session.running);
-    const hasError = sessions.some((session) => Boolean(session.lastError));
-    if (hasRunning && !hasError) {
-      return "healthy";
-    }
-    if (hasRunning) {
-      return "degraded";
-    }
-    return hasError ? "down" : "idle";
-  }
-}

package/src/app/bootstrap.ts

@@ -1,29 +0,0 @@
-import type { ChannelGatewayContext } from "openclaw/plugin-sdk";
-
-import { resolveWecomRuntimeAccount } from "../config/runtime-config.js";
-import type { ResolvedWecomAccount } from "../types/index.js";
-import { WecomAccountRuntime } from "./account-runtime.js";
-import { getWecomRuntime } from "./index.js";
-
-export function createAccountRuntime(ctx: ChannelGatewayContext<ResolvedWecomAccount>): WecomAccountRuntime {
-  const resolved = resolveWecomRuntimeAccount({
-    cfg: ctx.cfg,
-    accountId: ctx.accountId,
-  });
-  return new WecomAccountRuntime(
-    getWecomRuntime(),
-    ctx.cfg,
-    resolved,
-    {
-      info: (message) => ctx.log?.info(message),
-      warn: (message) => ctx.log?.warn(message),
-      error: (message) => ctx.log?.error(message),
-    },
-    (snapshot) => {
-      ctx.setStatus({
-        accountId: ctx.accountId,
-        ...snapshot,
-      });
-    },
-  );
-}