@youdu/openclaw-youdu 2026.4.28 → 2026.5.7

package/dist/src/channel.js

@@ -0,0 +1,250 @@
+import { monitorYouDuProvider } from './monitor.js';
+import { resolveYouDuAccount } from './utils.js';
+import { TEXT_CHUNK_LIMIT, CHANNEL_ID, DEFAULT_DM_POLICY } from './const.js';
+import { youduSetupAdapter, youduSetupWizard } from './onboarding.js';
+import { DEFAULT_ACCOUNT_ID, formatPairingApproveHint } from './openclaw-compat.js';
+import { getYouDuRuntime } from './runtime.js';
+
+/*
+* Licensed under the MIT License.
+*/
+const meta = {
+    id: CHANNEL_ID,
+    label: '有度',
+    selectionLabel: '有度',
+    detailLabel: '有度机器人',
+    docsPath: `/channels/${CHANNEL_ID}`,
+    docsLabel: CHANNEL_ID,
+    blurb: '有度机器人接入插件',
+    systemImage: 'message.fill',
+};
+const youduPlugin = {
+    id: CHANNEL_ID,
+    meta: {
+        ...meta,
+        quickstartAllowFrom: true,
+    },
+    pairing: {
+        idLabel: 'youduUserId',
+        // 格式化用户输入的ID/配对码，去除前缀、空格等
+        normalizeAllowEntry: (entry) => entry.replace(new RegExp(`^(${CHANNEL_ID}|user):`, 'i'), '').trim(),
+        // 配对成功后的回调：可以给用户发配对成功通知
+        notifyApproval: async ({ cfg, id }) => { },
+    },
+    setupWizard: youduSetupWizard,
+    setup: youduSetupAdapter,
+    capabilities: {
+        chatTypes: ['direct', 'group'],
+        reactions: false,
+        threads: false,
+        media: true,
+        nativeCommands: false,
+        blockStreaming: true,
+    },
+    reload: { configPrefixes: [`channels.${CHANNEL_ID}`] },
+    config: {
+        listAccountIds: () => [DEFAULT_ACCOUNT_ID],
+        resolveAccount: (cfg) => resolveYouDuAccount(cfg),
+        defaultAccountId: () => DEFAULT_ACCOUNT_ID,
+        setAccountEnabled: ({ cfg, enabled }) => {
+            const youduConfig = (cfg.channels?.[CHANNEL_ID] ?? {});
+            return {
+                ...cfg,
+                channels: {
+                    ...cfg.channels,
+                    [CHANNEL_ID]: {
+                        ...youduConfig,
+                        enabled,
+                    },
+                },
+            };
+        },
+        deleteAccount: ({ cfg }) => {
+            const youduConfig = (cfg.channels?.[CHANNEL_ID] ?? {});
+            const { botId, secret, ...rest } = youduConfig;
+            return {
+                ...cfg,
+                channels: {
+                    ...cfg.channels,
+                    [CHANNEL_ID]: rest,
+                },
+            };
+        },
+        isConfigured: (account) => Boolean(account.botId?.trim() && account.secret?.trim() && account.url?.trim()),
+        describeAccount: (account) => ({
+            accountId: account.accountId,
+            name: account.name,
+            enabled: account.enabled,
+            configured: Boolean(account.botId?.trim() && account.secret?.trim() && account.url?.trim()),
+            botId: account.botId,
+            url: account.url,
+        }),
+        // 读取允许的用户白名单（配对成功的用户会被SDK自动写入这里）
+        resolveAllowFrom: ({ cfg }) => {
+            const account = resolveYouDuAccount(cfg);
+            return (account.config.allowFrom ?? []).map((entry) => String(entry));
+        },
+        // 格式化用户输入的白名单条目，和配对逻辑保持一致
+        formatAllowFrom: ({ allowFrom }) => allowFrom
+            .map((entry) => String(entry).trim())
+            .filter(Boolean),
+    },
+    security: {
+        // 私信权限策略核心：控制谁能给机器人发私信
+        resolveDmPolicy: ({ account }) => {
+            const basePath = `channels.${CHANNEL_ID}.`;
+            return {
+                // 默认改为 pairing 模式
+                policy: account.config.dmPolicy ?? DEFAULT_DM_POLICY,
+                // 白名单列表
+                allowFrom: account.config.allowFrom ?? [],
+                policyPath: `${basePath}dmPolicy`,
+                allowFromPath: basePath,
+                // 配对提示语：用户未配对时，机器人自动回复的提示
+                approveHint: formatPairingApproveHint(CHANNEL_ID),
+                // 格式化用户ID，和pairing模块保持一致
+                normalizeEntry: (raw) => raw.replace(new RegExp(`^${CHANNEL_ID}:`, 'i'), '').trim(),
+            };
+        },
+        // 配置风险告警：检测不安全的配置并提示
+        collectWarnings: ({ account, cfg }) => {
+            const warnings = [];
+            const dmPolicy = account.config.dmPolicy ?? 'open';
+            if (dmPolicy === 'open') {
+                const hasWildcard = (account.config.allowFrom ?? []).some((entry) => String(entry).trim() === '*');
+                if (!hasWildcard) {
+                    warnings.push(`- 有度私信：dmPolicy="open" 但 allowFrom 未包含 "*"。任何人都可以发消息，但允许列表为空可能导致意外行为。`);
+                }
+            }
+            const groupPolicy = account.config.groupPolicy ?? 'open';
+            if (groupPolicy === 'open') {
+                warnings.push(`- 有度群组：groupPolicy="open" 允许所有群组中的成员触发。`);
+            }
+            return warnings;
+        },
+    },
+    messaging: {
+        normalizeTarget: (target) => {
+            const trimmed = target.trim();
+            if (!trimmed)
+                return undefined;
+            return trimmed;
+        },
+        targetResolver: {
+            looksLikeId: (id) => {
+                const trimmed = id?.trim();
+                return Boolean(trimmed);
+            },
+            hint: '<userId|groupId>',
+        },
+    },
+    directory: {
+        self: async () => null,
+        listPeers: async () => [],
+        listGroups: async () => [],
+    },
+    outbound: {
+        deliveryMode: "gateway",
+        chunker: (text, limit) => getYouDuRuntime().channel.text.chunkMarkdownText(text, limit),
+        textChunkLimit: TEXT_CHUNK_LIMIT,
+    },
+    status: {
+        defaultRuntime: {
+            accountId: DEFAULT_ACCOUNT_ID,
+            running: false,
+            lastStartAt: null,
+            lastStopAt: null,
+            lastError: null,
+        },
+        collectStatusIssues: (accounts) => {
+            return accounts.flatMap((entry) => {
+                const accountId = String(entry.accountId ?? DEFAULT_ACCOUNT_ID);
+                const enabled = entry.enabled !== false;
+                const configured = entry.configured === true;
+                if (!enabled) {
+                    return [];
+                }
+                const issues = [];
+                if (!configured) {
+                    issues.push({
+                        channel: CHANNEL_ID,
+                        accountId,
+                        kind: 'config',
+                        message: '有度机器人 ID 或 Secret 或 Url 未配置',
+                        fix: `Run: openclaw channels add ${CHANNEL_ID} --bot-id <id> --secret <secret> --url <url>`,
+                    });
+                }
+                return issues;
+            });
+        },
+        buildChannelSummary: ({ snapshot }) => ({
+            configured: snapshot.configured ?? false,
+            running: snapshot.running ?? false,
+            lastStartAt: snapshot.lastStartAt ?? null,
+            lastStopAt: snapshot.lastStopAt ?? null,
+            lastError: snapshot.lastError ?? null,
+        }),
+        probeAccount: async () => {
+            return { ok: true, status: 200 };
+        },
+        buildAccountSnapshot: ({ account, runtime }) => {
+            const configured = Boolean(account.botId?.trim() &&
+                account.secret?.trim() &&
+                account.url?.trim());
+            return {
+                accountId: account.accountId,
+                name: account.name,
+                enabled: account.enabled,
+                configured,
+                running: runtime?.running ?? false,
+                lastStartAt: runtime?.lastStartAt ?? null,
+                lastStopAt: runtime?.lastStopAt ?? null,
+                lastError: runtime?.lastError ?? null,
+            };
+        },
+    },
+    gateway: {
+        startAccount: async (ctx) => {
+            const account = ctx.account;
+            return monitorYouDuProvider({
+                account,
+                config: ctx.cfg,
+                runtime: ctx.runtime,
+                abortSignal: ctx.abortSignal,
+            });
+        },
+        logoutAccount: async ({ cfg }) => {
+            const nextCfg = { ...cfg };
+            const youduConfig = (cfg.channels?.[CHANNEL_ID] ?? {});
+            const nextYoudu = { ...youduConfig };
+            let cleared = false;
+            let changed = false;
+            if (nextYoudu.botId || nextYoudu.secret) {
+                delete nextYoudu.botId;
+                delete nextYoudu.secret;
+                cleared = true;
+                changed = true;
+            }
+            if (changed) {
+                if (Object.keys(nextYoudu).length > 0) {
+                    nextCfg.channels = { ...nextCfg.channels, [CHANNEL_ID]: nextYoudu };
+                }
+                else {
+                    const nextChannels = { ...nextCfg.channels };
+                    delete nextChannels[CHANNEL_ID];
+                    if (Object.keys(nextChannels).length > 0) {
+                        nextCfg.channels = nextChannels;
+                    }
+                    else {
+                        delete nextCfg.channels;
+                    }
+                }
+            }
+            const resolved = resolveYouDuAccount(changed ? nextCfg : cfg);
+            const loggedOut = !resolved.botId && !resolved.secret;
+            return { cleared, envToken: false, loggedOut };
+        },
+    },
+};
+
+export { youduPlugin };

package/dist/src/const.d.ts

@@ -1,4 +1,3 @@
-import * as https from "node:https";
 /** 渠道 ID */
 export declare const CHANNEL_ID: "youdu";
 export declare const DEFAULT_DM_POLICY = "pairing";
@@ -8,7 +7,6 @@ export declare const PORT = 7443;
 export declare const WS_URL = "/cgi/bot/wss";
 export declare const DOWNLOAD_MEDIA_URL = "/cgi/bot/file/download";
 export declare const UPLOAD_MEDIA_URL = "/cgi/bot/file/upload";
-export declare const agent: https.Agent;
 /** 文本分块大小上限 */
 export declare const TEXT_CHUNK_LIMIT = 4000;
 /** WebSocket 心跳间隔（毫秒） */

package/dist/src/const.js

@@ -0,0 +1,32 @@
+/*
+* Licensed under the MIT License.
+*/
+/** 渠道 ID */
+const CHANNEL_ID = 'youdu';
+const DEFAULT_DM_POLICY = 'pairing';
+const WEBSOCKET_SCHEME = 'wss://';
+const HTTP_SCHEME = 'https://';
+const PORT = 7443;
+const WS_URL = "/cgi/bot/wss";
+const DOWNLOAD_MEDIA_URL = "/cgi/bot/file/download";
+const UPLOAD_MEDIA_URL = "/cgi/bot/file/upload";
+/** 文本分块大小上限 */
+const TEXT_CHUNK_LIMIT = 4000;
+/** WebSocket 心跳间隔（毫秒） */
+const WS_HEARTBEAT_INTERVAL_MS = 30000;
+/** WebSocket 最大重连次数 */
+const WS_MAX_RECONNECT_ATTEMPTS = 10;
+/** 消息处理总超时时间（毫秒） */
+const MESSAGE_PROCESS_TIMEOUT_MS = 5 * 60 * 1000;
+/** "思考中"流式消息占位内容 */
+const THINKING_MESSAGE = '<think></think>';
+/** 消息状态清理间隔（毫秒） */
+const MESSAGE_STATE_CLEANUP_INTERVAL_MS = 60000;
+/** 仅包含图片时的消息占位符 */
+const MEDIA_IMAGE_PLACEHOLDER = "<media:image>";
+/** 仅包含文件时的消息占位符 */
+const MEDIA_DOCUMENT_PLACEHOLDER = "<media:document>";
+/** 最大的媒体传输大小 */
+const DEFAULT_MEDIA_MAX_SIZE = 12 * 1024 * 1024; // 12MB
+
+export { CHANNEL_ID, DEFAULT_DM_POLICY, DEFAULT_MEDIA_MAX_SIZE, DOWNLOAD_MEDIA_URL, HTTP_SCHEME, MEDIA_DOCUMENT_PLACEHOLDER, MEDIA_IMAGE_PLACEHOLDER, MESSAGE_PROCESS_TIMEOUT_MS, MESSAGE_STATE_CLEANUP_INTERVAL_MS, PORT, TEXT_CHUNK_LIMIT, THINKING_MESSAGE, UPLOAD_MEDIA_URL, WEBSOCKET_SCHEME, WS_HEARTBEAT_INTERVAL_MS, WS_MAX_RECONNECT_ATTEMPTS, WS_URL };

package/dist/src/dm-policy.js

@@ -0,0 +1,78 @@
+import { getYouDuRuntime } from './runtime.js';
+import { DEFAULT_DM_POLICY, CHANNEL_ID } from './const.js';
+import { isSenderAllowed } from './group-policy.js';
+import { sendYouDuReply } from './message-sender.js';
+
+/*
+* Licensed under the MIT License.
+*/
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查 DM Policy 访问控制
+ * @returns 检查结果，包含是否允许继续处理
+ */
+async function checkDmPolicy(params) {
+    const { senderId, isGroup, account, wsClient, frame, runtime } = params;
+    const core = getYouDuRuntime();
+    // 群聊消息不检查 DM Policy
+    if (isGroup) {
+        return { allowed: true };
+    }
+    const dmPolicy = account.config.dmPolicy ?? DEFAULT_DM_POLICY;
+    const configAllowFrom = (account.config.allowFrom ?? []).map((v) => String(v));
+    // 如果 dmPolicy 是 disabled，直接拒绝
+    if (dmPolicy === "disabled") {
+        runtime.log?.(`[youdu] Blocked DM from ${senderId} (dmPolicy=disabled)`);
+        return { allowed: false };
+    }
+    // 如果是 open 模式，允许所有人
+    if (dmPolicy === "open") {
+        return { allowed: true };
+    }
+    const storeAllowFrom = await core.channel.pairing
+        .readAllowFromStore({ channel: CHANNEL_ID, accountId: account.accountId })
+        .catch(() => []);
+    const effectiveAllowFrom = [...configAllowFrom, ...storeAllowFrom];
+    const senderAllowedResult = isSenderAllowed(senderId, effectiveAllowFrom);
+    if (senderAllowedResult) {
+        return { allowed: true };
+    }
+    // 处理未授权用户
+    if (dmPolicy === "pairing") {
+        const { code, created } = await core.channel.pairing.upsertPairingRequest({
+            channel: CHANNEL_ID,
+            id: senderId,
+            accountId: account.accountId,
+            meta: { name: senderId },
+        });
+        if (created) {
+            runtime.log?.(`[youdu] Pairing request created for sender=${senderId}`);
+            try {
+                await sendYouDuReply({
+                    wsClient,
+                    frame,
+                    text: core.channel.pairing.buildPairingReply({
+                        channel: CHANNEL_ID,
+                        idLine: `您的有度用户ID: ${senderId}`,
+                        code,
+                    }),
+                    runtime,
+                });
+            }
+            catch (err) {
+                runtime.error?.(`[youdu] Failed to send pairing reply to ${senderId}: ${String(err)}`);
+            }
+        }
+        else {
+            runtime.log?.(`[youdu] Pairing request already exists for sender=${senderId}`);
+        }
+        return { allowed: false, pairingSent: created };
+    }
+    // allowlist 模式：直接拒绝未授权用户
+    runtime.log?.(`[youdu] Blocked unauthorized sender ${senderId} (dmPolicy=${dmPolicy})`);
+    return { allowed: false };
+}
+
+export { checkDmPolicy };

package/dist/src/group-policy.js

@@ -0,0 +1,113 @@
+import { CHANNEL_ID } from './const.js';
+
+/*
+* Licensed under the MIT License.
+*/
+// ============================================================================
+// 内部辅助函数
+// ============================================================================
+function resolveWeComGroupConfig(params) {
+    const groups = params.cfg?.groups ?? {};
+    const wildcard = groups["*"];
+    const groupId = params.groupId?.trim();
+    if (!groupId) {
+        return undefined;
+    }
+    const direct = groups[groupId];
+    if (direct) {
+        return direct;
+    }
+    const lowered = groupId.toLowerCase();
+    const matchKey = Object.keys(groups).find((key) => key.toLowerCase() === lowered);
+    if (matchKey) {
+        return groups[matchKey];
+    }
+    return wildcard;
+}
+/**
+ * 检查群组是否在允许列表中
+ */
+function isYouDuGroupAllowed(params) {
+    const { groupPolicy } = params;
+    if (groupPolicy === "disabled") {
+        return false;
+    }
+    if (groupPolicy === "open") {
+        return true;
+    }
+    // allowlist 模式：检查群组是否在允许列表中
+    const normalizedAllowFrom = params.allowFrom.map((entry) => String(entry).replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim());
+    if (normalizedAllowFrom.includes("*")) {
+        return true;
+    }
+    const normalizedGroupId = params.groupId.trim();
+    return normalizedAllowFrom.some((entry) => entry === normalizedGroupId || entry.toLowerCase() === normalizedGroupId.toLowerCase());
+}
+/**
+ * 检查群组内发送者是否在允许列表中
+ */
+function isGroupSenderAllowed(params) {
+    const { senderId, groupId, youduConfig } = params;
+    const groupConfig = resolveWeComGroupConfig({
+        cfg: youduConfig,
+        groupId,
+    });
+    const perGroupSenderAllowFrom = (groupConfig?.allowFrom ?? []).map((v) => String(v));
+    if (perGroupSenderAllowFrom.length === 0) {
+        return true;
+    }
+    if (perGroupSenderAllowFrom.includes("*")) {
+        return true;
+    }
+    return perGroupSenderAllowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}
+// ============================================================================
+// 公开 API
+// ============================================================================
+/**
+ * 检查群组策略访问控制
+ * @returns 检查结果，包含是否允许继续处理
+ */
+function checkGroupPolicy(params) {
+    const { chatId, senderId, account, config, runtime } = params;
+    const youduConfig = (config.channels?.[CHANNEL_ID] ?? {});
+    const defaultGroupPolicy = config.channels?.[CHANNEL_ID]?.groupPolicy;
+    const groupPolicy = account.config.groupPolicy ?? defaultGroupPolicy ?? "open";
+    const groupAllowFrom = youduConfig.groupAllowFrom ?? [];
+    const groupAllowed = isYouDuGroupAllowed({
+        groupPolicy,
+        allowFrom: groupAllowFrom,
+        groupId: chatId,
+    });
+    if (!groupAllowed) {
+        runtime.log?.(`[youdu] Group ${chatId} not allowed (groupPolicy=${groupPolicy})`);
+        return { allowed: false };
+    }
+    const senderAllowed = isGroupSenderAllowed({
+        senderId,
+        groupId: chatId,
+        youduConfig,
+    });
+    if (!senderAllowed) {
+        runtime.log?.(`[youdu] Sender ${senderId} not in group ${chatId} sender allowlist`);
+        return { allowed: false };
+    }
+    return { allowed: true };
+}
+/**
+ * 检查发送者是否在允许列表中（通用）
+ */
+function isSenderAllowed(senderId, allowFrom) {
+    if (allowFrom.includes("*")) {
+        return true;
+    }
+    return allowFrom.some((entry) => {
+        const normalized = entry.replace(new RegExp(`^${CHANNEL_ID}:`, "i"), "").trim();
+        return normalized === senderId || normalized === `user:${senderId}`;
+    });
+}
+
+export { checkGroupPolicy, isSenderAllowed };

package/dist/src/media.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingHttpHeaders } from "node:http";
-import type { ResolvedYouDuAccount as ResolvedYouduAccount, YouDuConfig as YouduConfig } from './utils.js';
+import type { ResolvedYouDuAccount, YouDuConfig } from './utils.js';
 import { WSClient, WsFrame } from "./sdk/ws-client";
 import { RuntimeEnv } from "openclaw/plugin-sdk/runtime-env";
 export declare namespace Youdu {
@@ -23,7 +23,7 @@ export declare namespace Youdu {
     }
     interface UploadAndSendMediaOptions {
         wsClient: WSClient;
-        account: ResolvedYouduAccount;
+        account: ResolvedYouDuAccount;
         mediaUrl: string;
         frame: WsFrame;
         mediaLocalRoots?: readonly string[];
@@ -35,6 +35,7 @@ export declare namespace Youdu {
         body: Buffer;
     }
 }
+export declare const YouDuRequestTimeoutMs = 30000;
 export declare function inferInboundMessageText(body: {
     text?: {
         content?: string;
@@ -58,7 +59,7 @@ export declare function extractInboundMedia(body: {
 }): Youdu.InboundMediaAttachment[];
 export declare function uploadAndSendMedia(options: Youdu.UploadAndSendMediaOptions): Promise<void>;
 export declare function uploadOutboundMedia(params: {
-    account: ResolvedYouduAccount;
+    account: ResolvedYouDuAccount;
     mediaUrl: string;
     mediaLocalRoots?: readonly string[];
     preferredKind?: Youdu.InboundMediaAttachment['kind'];
@@ -66,9 +67,9 @@ export declare function uploadOutboundMedia(params: {
 }): Promise<Youdu.InboundMediaAttachment>;
 export declare function buildMediaMessageBody(media: Youdu.InboundMediaAttachment): Record<string, unknown>;
 export declare function downloadInboundMedia(params: {
-    account: ResolvedYouduAccount;
+    account: ResolvedYouDuAccount;
     attachments: Youdu.InboundMediaAttachment[];
     messageId: string;
-    config: YouduConfig;
+    config: YouDuConfig;
     token?: string;
 }): Promise<Array<Youdu.DownloadedInboundMedia>>;