@yanhaidao/wecom 2.4.120 → 2.5.110

package/src/transport/agent-api/upstream-reply.ts

@@ -1,43 +0,0 @@
-import type { ResolvedAgentAccount } from "../../types/index.js";
-import type { WecomTarget } from "../../target.js";
-import { sendUpstreamAgentApiMedia, sendUpstreamAgentApiText } from "./client.js";
-
-export async function sendUpstreamAgentApiTextReply(params: {
-  upstreamAgent: ResolvedAgentAccount;
-  primaryAgent: ResolvedAgentAccount;
-  target: WecomTarget;
-  text: string;
-}): Promise<void> {
-  await sendUpstreamAgentApiText({
-    upstreamAgent: params.upstreamAgent,
-    primaryAgent: params.primaryAgent,
-    toUser: params.target.touser,
-    toParty: params.target.toparty,
-    toTag: params.target.totag,
-    chatId: params.target.chatid,
-    text: params.text,
-  });
-}
-
-export async function sendUpstreamAgentApiMediaReply(params: {
-  upstreamAgent: ResolvedAgentAccount;
-  primaryAgent: ResolvedAgentAccount;
-  target: WecomTarget;
-  mediaId: string;
-  mediaType: "image" | "voice" | "video" | "file";
-  title?: string;
-  description?: string;
-}): Promise<void> {
-  await sendUpstreamAgentApiMedia({
-    upstreamAgent: params.upstreamAgent,
-    primaryAgent: params.primaryAgent,
-    toUser: params.target.touser,
-    toParty: params.target.toparty,
-    toTag: params.target.totag,
-    chatId: params.target.chatid,
-    mediaId: params.mediaId,
-    mediaType: params.mediaType,
-    title: params.title,
-    description: params.description,
-  });
-}

package/src/transport/agent-callback/http-handler.ts

@@ -1,47 +0,0 @@
-import type { OpenClawConfig } from "openclaw/plugin-sdk";
-
-import type { WecomRuntimeEnv } from "../../types/runtime-context.js";
-import type { ResolvedAgentAccount } from "../../types/index.js";
-import type { WecomAccountRuntime } from "../../app/account-runtime.js";
-import { resolveAgentCallbackPaths } from "./inbound.js";
-import { createAgentCallbackSessionSnapshot } from "./session.js";
-import { registerAgentWebhookTarget } from "../http/registry.js";
-
-export function startAgentCallbackTransport(params: {
-  account: ResolvedAgentAccount;
-  cfg: OpenClawConfig;
-  runtime: WecomAccountRuntime;
-  runtimeEnv: WecomRuntimeEnv;
-}): { paths: string[]; stop: () => void } {
-  const paths = resolveAgentCallbackPaths(params.account.accountId);
-  params.runtime.updateTransportSession(
-    createAgentCallbackSessionSnapshot({
-      accountId: params.account.accountId,
-      running: true,
-    }),
-  );
-  const unregisters = paths.map((path) =>
-    registerAgentWebhookTarget({
-      agent: params.account,
-      config: params.cfg,
-      runtimeEnv: params.runtimeEnv,
-      touchTransportSession: (patch) => params.runtime.touchTransportSession("agent-callback", patch),
-      auditSink: (event) => params.runtime.recordOperationalIssue(event),
-      path,
-    }),
-  );
-  return {
-    paths,
-    stop: () => {
-      for (const unregister of unregisters) {
-        unregister();
-      }
-      params.runtime.updateTransportSession(
-        createAgentCallbackSessionSnapshot({
-          accountId: params.account.accountId,
-          running: false,
-        }),
-      );
-    },
-  };
-}

package/src/transport/agent-callback/inbound.ts

@@ -1,5 +0,0 @@
-import { resolveDerivedPathSummary } from "../../config/index.js";
-
-export function resolveAgentCallbackPaths(accountId: string): string[] {
-  return resolveDerivedPathSummary(accountId).agentCallback;
-}

package/src/transport/agent-callback/reply.ts

@@ -1,13 +0,0 @@
-import type { ReplyContext } from "../../types/index.js";
-
-export function createAgentCallbackReplyContext(params: {
-  accountId: string;
-  raw: ReplyContext["raw"];
-}): ReplyContext {
-  return {
-    transport: "agent-callback",
-    accountId: params.accountId,
-    passiveWindowMs: 5_000,
-    raw: params.raw,
-  };
-}

package/src/transport/agent-callback/request-handler.ts

@@ -1,244 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-
-import { decryptWecomEncrypted, verifyWecomSignature } from "../../crypto.js";
-import { extractEncryptFromXml } from "../../crypto/xml.js";
-import { getWecomRuntime } from "../../runtime.js";
-import { handleAgentWebhook } from "../../agent/index.js";
-import { extractAgentId, parseXml } from "../../shared/xml-parser.js";
-import { LIMITS as WECOM_LIMITS } from "../../types/constants.js";
-import type { AgentWebhookTarget } from "../http/registry.js";
-import {
-  logRouteFailure,
-  readTextBody,
-  resolveQueryParams,
-  resolveSignatureParam,
-  type RouteFailureReason,
-  writeRouteFailure,
-} from "../http/common.js";
-
-const ERROR_HELP = "\n\n遇到问题？联系作者: YanHaidao (微信: YanHaidao)";
-
-function truncateForLog(raw: string, maxChars = 600): string {
-  const compact = raw.replace(/\s+/g, " ").trim();
-  if (compact.length <= maxChars) return compact;
-  return `${compact.slice(0, maxChars)}...(truncated)`;
-}
-
-function buildParsedAgentSummary(parsed: ReturnType<typeof parseXml>): string {
-  const data = parsed as Record<string, unknown>;
-  const msgType = String(data.MsgType ?? "").trim() || "unknown";
-  const fromUser = String(data.FromUserName ?? "").trim() || "N/A";
-  const toUser = String(data.ToUserName ?? "").trim() || "N/A";
-  const event = String(data.Event ?? "").trim() || "N/A";
-  const msgId = String(data.MsgId ?? "").trim() || "N/A";
-  const chatId = String(data.ChatId ?? data.chatid ?? "").trim() || "N/A";
-  const agentId = String(data.AgentID ?? "").trim() || "N/A";
-  return `msgType=${msgType} from=${fromUser} to=${toUser} event=${event} msgId=${msgId} chatId=${chatId} agentId=${agentId}`;
-}
-
-function normalizeAgentIdValue(value: unknown): number | undefined {
-  if (typeof value === "number" && Number.isFinite(value)) return value;
-  const raw = String(value ?? "").trim();
-  if (!raw) return undefined;
-  const parsed = Number(raw);
-  return Number.isFinite(parsed) ? parsed : undefined;
-}
-
-export async function handleAgentCallbackRequest(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  path: string;
-  reqId: string;
-  targets: AgentWebhookTarget[];
-}): Promise<boolean> {
-  const { req, res, path, reqId, targets } = params;
-  if (targets.length === 0) {
-    console.error(
-      `[wecom] inbound(agent): reqId=${reqId} path=${path} no_registered_target availableTargets=0`,
-    );
-    res.statusCode = 404;
-    res.setHeader("Content-Type", "text/plain; charset=utf-8");
-    res.end(`agent not configured for path=${path} - Agent 模式未配置或回调路径错误，请运行 openclaw onboarding${ERROR_HELP}`);
-    return true;
-  }
-
-  const query = resolveQueryParams(req);
-  const timestamp = query.get("timestamp") ?? "";
-  const nonce = query.get("nonce") ?? "";
-  const signature = resolveSignatureParam(query);
-  const hasSig = Boolean(signature);
-  const remote = req.socket?.remoteAddress ?? "unknown";
-
-  if (req.method === "GET") {
-    const echostr = query.get("echostr") ?? "";
-    const signatureMatches = targets.filter((target) =>
-      verifyWecomSignature({
-        token: target.agent.token,
-        timestamp,
-        nonce,
-        encrypt: echostr,
-        signature,
-      }),
-    );
-    if (signatureMatches.length !== 1) {
-      const reason: RouteFailureReason =
-        signatureMatches.length === 0 ? "wecom_account_not_found" : "wecom_account_conflict";
-      const candidateIds = (signatureMatches.length > 0 ? signatureMatches : targets).map((target) => target.agent.accountId);
-      logRouteFailure({
-        reqId,
-        path,
-        method: "GET",
-        reason,
-        candidateAccountIds: candidateIds,
-      });
-      writeRouteFailure(
-        res,
-        reason,
-        reason === "wecom_account_conflict"
-          ? "Agent callback account conflict: multiple accounts matched signature."
-          : "Agent callback account not found: signature verification failed.",
-      );
-      return true;
-    }
-    const selected = signatureMatches[0]!;
-    try {
-      const plain = decryptWecomEncrypted({
-        encodingAESKey: selected.agent.encodingAESKey,
-        receiveId: selected.agent.corpId,
-        encrypt: echostr,
-      });
-      res.statusCode = 200;
-      res.setHeader("Content-Type", "text/plain; charset=utf-8");
-      res.end(plain);
-      return true;
-    } catch {
-      res.statusCode = 400;
-      res.setHeader("Content-Type", "text/plain; charset=utf-8");
-      res.end(`decrypt failed - 解密失败，请检查 EncodingAESKey${ERROR_HELP}`);
-      return true;
-    }
-  }
-
-  if (req.method !== "POST") {
-    return false;
-  }
-
-  const rawBody = await readTextBody(req, WECOM_LIMITS.MAX_REQUEST_BODY_SIZE);
-  if (!rawBody.ok) {
-    res.statusCode = 400;
-    res.setHeader("Content-Type", "text/plain; charset=utf-8");
-    res.end(rawBody.error || "invalid payload");
-    return true;
-  }
-
-  console.log(
-    `[wecom] inbound(agent): reqId=${reqId} path=${path} rawXmlBytes=${Buffer.byteLength(rawBody.value, "utf8")} rawPreview=${JSON.stringify(truncateForLog(rawBody.value))}`,
-  );
-
-  let encrypted = "";
-  try {
-    encrypted = extractEncryptFromXml(rawBody.value);
-  } catch {
-    res.statusCode = 400;
-    res.setHeader("Content-Type", "text/plain; charset=utf-8");
-    res.end(`invalid xml - 缺少 Encrypt 字段${ERROR_HELP}`);
-    return true;
-  }
-
-  console.log(
-    `[wecom] inbound(agent): reqId=${reqId} path=${path} encryptedLen=${encrypted.length}`,
-  );
-
-  const signatureMatches = targets.filter((target) =>
-    verifyWecomSignature({
-      token: target.agent.token,
-      timestamp,
-      nonce,
-      encrypt: encrypted,
-      signature,
-    }),
-  );
-  if (signatureMatches.length !== 1) {
-    const reason: RouteFailureReason =
-      signatureMatches.length === 0 ? "wecom_account_not_found" : "wecom_account_conflict";
-    const candidateIds = (signatureMatches.length > 0 ? signatureMatches : targets).map((target) => target.agent.accountId);
-    logRouteFailure({
-      reqId,
-      path,
-      method: "POST",
-      reason,
-      candidateAccountIds: candidateIds,
-    });
-    writeRouteFailure(
-      res,
-      reason,
-      reason === "wecom_account_conflict"
-        ? "Agent callback account conflict: multiple accounts matched signature."
-        : "Agent callback account not found: signature verification failed.",
-    );
-    return true;
-  }
-
-  const selected = signatureMatches[0]!;
-  let decrypted = "";
-  let parsed: ReturnType<typeof parseXml> | null = null;
-  try {
-    decrypted = decryptWecomEncrypted({
-      encodingAESKey: selected.agent.encodingAESKey,
-      receiveId: selected.agent.corpId,
-      encrypt: encrypted,
-    });
-    parsed = parseXml(decrypted);
-  } catch {
-    res.statusCode = 400;
-    res.setHeader("Content-Type", "text/plain; charset=utf-8");
-    res.end(`decrypt failed - 解密失败，请检查 EncodingAESKey${ERROR_HELP}`);
-    return true;
-  }
-  if (!parsed) {
-    res.statusCode = 400;
-    res.setHeader("Content-Type", "text/plain; charset=utf-8");
-    res.end(`invalid xml - XML 解析失败${ERROR_HELP}`);
-    return true;
-  }
-
-  selected.runtimeEnv.log?.(
-    `[wecom] inbound(agent): reqId=${reqId} accountId=${selected.agent.accountId} decryptedBytes=${Buffer.byteLength(decrypted, "utf8")} parsed=${buildParsedAgentSummary(parsed)} decryptedPreview=${JSON.stringify(truncateForLog(decrypted))}`,
-  );
-
-  const inboundAgentId = normalizeAgentIdValue(extractAgentId(parsed));
-  if (
-    inboundAgentId !== undefined &&
-    selected.agent.agentId !== undefined &&
-    inboundAgentId !== selected.agent.agentId
-  ) {
-    selected.runtimeEnv.error?.(
-      `[wecom] inbound(agent): reqId=${reqId} accountId=${selected.agent.accountId} agentId_mismatch expected=${selected.agent.agentId} actual=${inboundAgentId}`,
-    );
-  }
-
-  const core = getWecomRuntime();
-  selected.runtimeEnv.log?.(
-    `[wecom] inbound(agent): reqId=${reqId} method=${req.method ?? "UNKNOWN"} remote=${remote} timestamp=${timestamp ? "yes" : "no"} nonce=${nonce ? "yes" : "no"} msg_signature=${hasSig ? "yes" : "no"} accountId=${selected.agent.accountId}`,
-  );
-  selected.touchTransportSession?.({ lastInboundAt: Date.now(), running: true });
-  return handleAgentWebhook({
-    req,
-    res,
-    verifiedPost: {
-      timestamp,
-      nonce,
-      signature,
-      encrypted,
-      decrypted,
-      parsed,
-    },
-    agent: selected.agent,
-    config: selected.config,
-    core,
-    log: selected.runtimeEnv.log,
-    error: selected.runtimeEnv.error,
-    auditSink: selected.auditSink,
-    touchTransportSession: selected.touchTransportSession,
-  });
-}

package/src/transport/agent-callback/session.ts

@@ -1,23 +0,0 @@
-import type { TransportSessionSnapshot } from "../../types/index.js";
-
-export function createAgentCallbackSessionSnapshot(params: {
-  accountId: string;
-  running: boolean;
-  lastInboundAt?: number;
-  lastOutboundAt?: number;
-  lastError?: string;
-}): TransportSessionSnapshot {
-  return {
-    accountId: params.accountId,
-    transport: "agent-callback",
-    running: params.running,
-    ownerId: `${params.accountId}:agent-callback`,
-    connected: params.running,
-    authenticated: true,
-    lastConnectedAt: params.running ? Date.now() : undefined,
-    lastDisconnectedAt: params.running ? undefined : Date.now(),
-    lastInboundAt: params.lastInboundAt,
-    lastOutboundAt: params.lastOutboundAt,
-    lastError: params.lastError,
-  };
-}

package/src/transport/bot-webhook/active-reply.ts

@@ -1,39 +0,0 @@
-import { wecomFetch } from "../../http.js";
-import { LIMITS, monitorState } from "../../monitor/state.js";
-
-const activeReplyStore = monitorState.activeReplyStore;
-
-export function storeActiveReply(streamId: string, responseUrl?: string, proxyUrl?: string): void {
-  activeReplyStore.store(streamId, responseUrl, proxyUrl);
-}
-
-export function getActiveReplyUrl(streamId: string): string | undefined {
-  return activeReplyStore.getUrl(streamId);
-}
-
-export async function useActiveReplyOnce(
-  streamId: string,
-  fn: (params: { responseUrl: string; proxyUrl?: string }) => Promise<void>,
-): Promise<void> {
-  return activeReplyStore.use(streamId, async (params) => {
-    await new Promise((resolve) => setTimeout(resolve, 1000));
-    await fn(params);
-  });
-}
-
-export async function sendActiveMessage(streamId: string, content: string): Promise<void> {
-  await useActiveReplyOnce(streamId, async ({ responseUrl, proxyUrl }) => {
-    const res = await wecomFetch(
-      responseUrl,
-      {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ msgtype: "text", text: { content } }),
-      },
-      { proxyUrl, timeoutMs: LIMITS.REQUEST_TIMEOUT_MS },
-    );
-    if (!res.ok) {
-      throw new Error(`active send failed: ${res.status}`);
-    }
-  });
-}

package/src/transport/bot-webhook/http-handler.ts

@@ -1,48 +0,0 @@
-import type { OpenClawConfig } from "openclaw/plugin-sdk";
-
-import type { WecomRuntimeEnv } from "../../types/runtime-context.js";
-import type { ResolvedBotAccount } from "../../types/index.js";
-import type { WecomAccountRuntime } from "../../app/account-runtime.js";
-import { resolveBotWebhookPaths } from "./inbound.js";
-import { createBotWebhookSessionSnapshot } from "./session.js";
-import { registerWecomWebhookTarget } from "../http/registry.js";
-
-export function startBotWebhookTransport(params: {
-  account: ResolvedBotAccount;
-  cfg: OpenClawConfig;
-  runtime: WecomAccountRuntime;
-  runtimeEnv: WecomRuntimeEnv;
-}): { paths: string[]; stop: () => void } {
-  const paths = resolveBotWebhookPaths(params.account.accountId);
-  params.runtime.updateTransportSession(
-    createBotWebhookSessionSnapshot({
-      accountId: params.account.accountId,
-      running: true,
-    }),
-  );
-  const unregisters = paths.map((path) =>
-    registerWecomWebhookTarget({
-      account: params.account,
-      config: params.cfg,
-      runtime: params.runtimeEnv,
-      core: params.runtime.core,
-      path,
-      touchTransportSession: (patch) => params.runtime.touchTransportSession("bot-webhook", patch),
-      auditSink: (event) => params.runtime.recordOperationalIssue(event),
-    }),
-  );
-  return {
-    paths,
-    stop: () => {
-      for (const unregister of unregisters) {
-        unregister();
-      }
-      params.runtime.updateTransportSession(
-        createBotWebhookSessionSnapshot({
-          accountId: params.account.accountId,
-          running: false,
-        }),
-      );
-    },
-  };
-}