weclaude 0.0.4

package/dist/daemon/redact.js

@@ -0,0 +1,27 @@
+// Sensitive value redaction for tool_input before sending to IM.
+// Keep it boring: regex on JSON keys/values that look like credentials.
+const KEY_RE = /(password|passwd|pwd|secret|token|api[_-]?key|access[_-]?key|authorization|cookie)/i;
+const VALUE_RE = /^(eyJ[A-Za-z0-9_-]{10,}|sk-[A-Za-z0-9]{16,}|[A-Fa-f0-9]{32,}|ghp_[A-Za-z0-9]{20,})$/;
+const redactString = (s) => (VALUE_RE.test(s) ? "***" : s);
+export const redact = (input) => {
+    if (input === null || input === undefined)
+        return input;
+    if (typeof input === "string")
+        return redactString(input);
+    if (Array.isArray(input))
+        return input.map(redact);
+    if (typeof input === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(input)) {
+            if (KEY_RE.test(k) && typeof v === "string") {
+                out[k] = "***";
+            }
+            else {
+                out[k] = redact(v);
+            }
+        }
+        return out;
+    }
+    return input;
+};
+//# sourceMappingURL=redact.js.map

package/dist/daemon/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../daemon/redact.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,wEAAwE;AACxE,MAAM,MAAM,GAAG,qFAAqF,CAAC;AACrG,MAAM,QAAQ,GAAG,qFAAqF,CAAC;AAEvG,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE;IAChD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC"}

package/dist/daemon/session-cache.js

@@ -0,0 +1,66 @@
+// Session cache for "Allow for session" decisions.
+// Key = (sessionId, toolName, hash(cmd_prefix)). In-memory, TTL via approval.sessionCacheMinutes.
+import { createHash } from "node:crypto";
+const cache = new Map();
+const norm = (s) => s.trim().replace(/\s+/g, " ");
+const cmdPrefix = (toolName, toolInput) => {
+    // Bash: first token of command. Others: stable JSON.
+    if (toolName === "Bash" && toolInput && typeof toolInput === "object") {
+        const cmd = toolInput.command;
+        if (typeof cmd === "string") {
+            const first = norm(cmd).split(" ")[0] ?? "";
+            return first;
+        }
+    }
+    try {
+        return JSON.stringify(toolInput);
+    }
+    catch {
+        return String(toolInput);
+    }
+};
+export const cacheKey = (sessionId, toolName, toolInput) => {
+    const h = createHash("sha1").update(cmdPrefix(toolName, toolInput)).digest("hex").slice(0, 12);
+    return `${sessionId}::${toolName}::${h}`;
+};
+export const cacheGet = (key) => {
+    const e = cache.get(key);
+    if (!e)
+        return undefined;
+    if (Date.now() > e.expiresAt) {
+        cache.delete(key);
+        return undefined;
+    }
+    return e.decision;
+};
+export const cachePut = (key, decision, ttlMs) => {
+    cache.set(key, { decision, expiresAt: Date.now() + ttlMs });
+};
+export const cacheClear = () => cache.clear();
+// ── Per-session auto-approve window ────────────────────────────────────
+// Set by `allow_window` clicks; while active, approval requests within the
+// SAME sessionId bypass the card flow and return allow immediately.
+const autoApproveUntilBySession = new Map();
+export const setAutoWindow = (sessionId, ttlMs) => {
+    const until = Date.now() + ttlMs;
+    autoApproveUntilBySession.set(sessionId, until);
+    return until;
+};
+export const autoWindowRemainingMs = (sessionId) => Math.max(0, (autoApproveUntilBySession.get(sessionId) ?? 0) - Date.now());
+export const isAutoWindowActive = (sessionId) => {
+    const until = autoApproveUntilBySession.get(sessionId);
+    if (until === undefined)
+        return false;
+    if (Date.now() >= until) {
+        autoApproveUntilBySession.delete(sessionId);
+        return false;
+    }
+    return true;
+};
+export const clearAutoWindow = (sessionId) => {
+    if (sessionId === undefined)
+        autoApproveUntilBySession.clear();
+    else
+        autoApproveUntilBySession.delete(sessionId);
+};
+//# sourceMappingURL=session-cache.js.map

package/dist/daemon/session-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cache.js","sourceRoot":"","sources":["../../daemon/session-cache.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,kGAAkG;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;AAEvC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAElE,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,SAAkB,EAAU,EAAE;IACjE,qDAAqD;IACrD,IAAI,QAAQ,KAAK,MAAM,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,GAAG,GAAI,SAAqC,CAAC,OAAO,CAAC;QAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAkB,EAAU,EAAE;IAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,OAAO,GAAG,SAAS,KAAK,QAAQ,KAAK,CAAC,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAwB,EAAE;IAC5D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,QAAkB,EAAE,KAAa,EAAQ,EAAE;IAC/E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAEpD,0EAA0E;AAC1E,2EAA2E;AAC3E,oEAAoE;AACpE,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAU,EAAE;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACjC,yBAAyB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAiB,EAAU,EAAE,CACjE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAW,EAAE;IAC/D,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;QACxB,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAkB,EAAQ,EAAE;IAC1D,IAAI,SAAS,KAAK,SAAS;QAAE,yBAAyB,CAAC,KAAK,EAAE,CAAC;;QAC1D,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC,CAAC"}

package/dist/daemon/sessions.js

@@ -0,0 +1,35 @@
+// Persisted principal → claude session_id map. Single JSON file, write-through.
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { expandHome } from "../shared/paths.js";
+export const loadSessionStore = (filePath) => {
+    const abs = expandHome(filePath);
+    let map = {};
+    if (existsSync(abs)) {
+        try {
+            map = JSON.parse(readFileSync(abs, "utf8"));
+        }
+        catch {
+            map = {};
+        }
+    }
+    else {
+        mkdirSync(dirname(abs), { recursive: true });
+    }
+    const persist = () => {
+        writeFileSync(abs, JSON.stringify(map, null, 2), "utf8");
+    };
+    return {
+        get: (p) => map[p],
+        set: (p, sid) => {
+            map[p] = sid;
+            persist();
+        },
+        drop: (p) => {
+            delete map[p];
+            persist();
+        },
+        all: () => ({ ...map }),
+    };
+};
+//# sourceMappingURL=sessions.js.map

package/dist/daemon/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../daemon/sessions.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAShD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAgB,EAAE;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,GAAG,GAA2B,EAAE,CAAC;IACrC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAA2B,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClB,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACd,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;YACV,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;KACxB,CAAC;AACJ,CAAC,CAAC"}

package/dist/daemon/ws.js

@@ -0,0 +1,67 @@
+// Wraps @wecom/aibot-node-sdk WSClient. Pure construction + event wiring;
+// outbound helpers (text/card) live in `outbound.ts`.
+import { WSClient, WSAuthFailureError, WSReconnectExhaustedError, } from "@wecom/aibot-node-sdk";
+// SCENE is a numeric channel tag assigned by WeCom for telemetry;
+// 0 = generic / unbranded.
+const SCENE = 0;
+const PLUG_VERSION = "0.0.1";
+const HEARTBEAT_MS = 30_000;
+const MAX_RECONNECT = 10;
+const MAX_AUTH_FAIL = 5;
+const sdkLogger = (log) => ({
+    debug: (msg, ...a) => log.debug({ a }, String(msg)),
+    info: (msg, ...a) => log.info({ a }, String(msg)),
+    warn: (msg, ...a) => log.warn({ a }, String(msg)),
+    error: (msg, ...a) => log.error({ a }, String(msg)),
+});
+export const startWs = (cfg, log) => {
+    const { bot } = cfg;
+    log.info({ botId: bot.botId, ws: bot.websocketUrl }, "WS init");
+    const client = new WSClient({
+        botId: bot.botId,
+        secret: bot.secret,
+        wsUrl: bot.websocketUrl,
+        logger: sdkLogger(log),
+        heartbeatInterval: HEARTBEAT_MS,
+        maxReconnectAttempts: MAX_RECONNECT,
+        maxAuthFailureAttempts: MAX_AUTH_FAIL,
+        scene: SCENE,
+        plug_version: PLUG_VERSION,
+    });
+    let resolveReady;
+    let rejectReady;
+    const ready = new Promise((res, rej) => {
+        resolveReady = res;
+        rejectReady = rej;
+    });
+    client.on("connected", () => log.info("WS connected"));
+    client.on("authenticated", () => {
+        log.info("WS authenticated");
+        resolveReady();
+    });
+    client.on("disconnected", (reason) => log.warn({ reason }, "WS disconnected"));
+    client.on("reconnecting", (attempt) => log.info({ attempt }, "WS reconnecting"));
+    client.on("error", (err) => {
+        log.error({ err: err.message, kind: err.constructor.name }, "WS error");
+        if (err instanceof WSAuthFailureError || err instanceof WSReconnectExhaustedError) {
+            rejectReady(err);
+        }
+    });
+    client.on("event.disconnected_event", () => {
+        log.error("WS kicked by server (new connection elsewhere); auto-restart suppressed");
+        client.disconnect();
+    });
+    const shutdown = async () => {
+        log.info("WS shutdown");
+        try {
+            client.disconnect();
+        }
+        catch (e) {
+            log.warn({ err: e.message }, "disconnect threw");
+        }
+    };
+    // SDK 构造不自动连接，需显式调用。
+    client.connect();
+    return { client, ready, shutdown };
+};
+//# sourceMappingURL=ws.js.map

package/dist/daemon/ws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.js","sourceRoot":"","sources":["../../daemon/ws.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,sDAAsD;AACtD,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,uBAAuB,CAAC;AAI/B,kEAAkE;AAClE,2BAA2B;AAC3B,MAAM,KAAK,GAAG,CAAC,CAAC;AAChB,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,SAAS,GAAG,CAAC,GAAW,EAAa,EAAE,CAAC,CAAC;IAC7C,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACjD,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CACpD,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,GAAW,EAAY,EAAE;IAC5D,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACpB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,YAAY;QACvB,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC;QACtB,iBAAiB,EAAE,YAAY;QAC/B,oBAAoB,EAAE,aAAa;QACnC,sBAAsB,EAAE,aAAa;QACrC,KAAK,EAAE,KAAK;QACZ,YAAY,EAAE,YAAY;KAC3B,CAAC,CAAC;IAEH,IAAI,YAAyB,CAAC;IAC9B,IAAI,WAAgC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,YAAY,GAAG,GAAG,CAAC;QACnB,WAAW,GAAG,GAAG,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QAC9B,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7B,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;QACxE,IAAI,GAAG,YAAY,kBAAkB,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAClF,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACzC,GAAG,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACrF,MAAM,CAAC,UAAU,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,qBAAqB;IACrB,MAAM,CAAC,OAAO,EAAE,CAAC;IAEjB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC,CAAC"}

package/dist/mcp/server.js

@@ -0,0 +1,82 @@
+// MCP server `wecom`. Stdio transport. Talks to local cc-wecom daemon over HTTP
+// for outbound, so this server is stateless w.r.t. WS — daemon owns the socket.
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+const DAEMON_BASE = process.env.CC_WECOM_DAEMON_BASE ?? "http://127.0.0.1:17890";
+const post = async (path, body) => {
+    const r = await fetch(`${DAEMON_BASE}${path}`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    return (await r.json().catch(() => ({})));
+};
+const ok = (data) => ({
+    content: [{ type: "text", text: JSON.stringify(data) }],
+});
+const fail = (msg) => ({
+    isError: true,
+    content: [{ type: "text", text: msg }],
+});
+const server = new McpServer({ name: "wecom", version: "0.0.1" }, { capabilities: { tools: {} } });
+server.registerTool("send_markdown", {
+    title: "Send WeCom markdown",
+    description: "Proactively send a markdown message to a WeCom chat (user or group).",
+    inputSchema: {
+        chat: z
+            .string()
+            .describe('Target chat: "user:<userid>" for DM, "chat:<chatid>" for group, or raw id.'),
+        content: z.string().describe("Markdown content."),
+    },
+}, async ({ chat, content }) => {
+    const r = await post("/message", { chat, markdown: content });
+    return r.ok ? ok({ ok: true }) : fail(`send failed: ${r.error ?? "unknown"}`);
+});
+server.registerTool("send_card", {
+    title: "Send WeCom template card",
+    description: "Send a structured template card (button_interaction / text_notice / news_notice / vote_interaction / multiple_interaction). Pass the full TemplateCard object as `card`.",
+    inputSchema: {
+        chat: z.string(),
+        card: z.record(z.string(), z.unknown()).describe("WeCom TemplateCard object."),
+    },
+}, async ({ chat, card }) => {
+    const r = await post("/card", { chat, card });
+    return r.ok ? ok({ ok: true, reqId: r.reqId }) : fail(`send card failed: ${r.error ?? "unknown"}`);
+});
+server.registerTool("ask_user", {
+    title: "Ask user via WeCom button card",
+    description: "Push a yes/no/options button card to the user, block until they click, return the selected key. Useful for in-task confirmation that needs human input.",
+    inputSchema: {
+        chat: z.string(),
+        title: z.string(),
+        detail: z.string().optional(),
+        options: z
+            .array(z.object({ key: z.string(), label: z.string(), style: z.number().int().optional() }))
+            .min(1)
+            .max(6),
+        timeoutSec: z.number().int().positive().default(600),
+    },
+}, async ({ chat, title, detail, options, timeoutSec }) => {
+    const r = await post("/ask", { chat, title, detail, options, timeoutSec });
+    if (r.ok)
+        return ok({ choice: r.choice });
+    return fail(`ask failed: ${r.error ?? "unknown"}`);
+});
+server.registerTool("daemon_status", {
+    title: "WeCom daemon status",
+    description: "Return health / connection state of the local cc-wecom daemon.",
+    inputSchema: {},
+}, async () => {
+    try {
+        const r = await fetch(`${DAEMON_BASE}/status`);
+        const j = await r.json();
+        return ok(j);
+    }
+    catch (e) {
+        return fail(`daemon unreachable: ${e.message}`);
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../mcp/server.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,wBAAwB,CAAC;AAQjF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,IAAa,EAAuB,EAAE;IACtE,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAe,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;CACjE,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EACnC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;IACE,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,sEAAsE;IACnF,WAAW,EAAE;QACX,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CAAC,4EAA4E,CAAC;QACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAClD;CACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;AAChF,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;IACE,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,0KAA0K;IAC5K,WAAW,EAAE;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAC/E;CACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;IACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;AACrG,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;IACE,KAAK,EAAE,gCAAgC;IACvC,WAAW,EACT,yJAAyJ;IAC3J,WAAW,EAAE;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC3F,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;QACT,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;KACrD;CACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE;IACrD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;IACE,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,gEAAgE;IAC7E,WAAW,EAAE,EAAE;CAChB,EACD,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,uBAAwB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/shared/config-writer.js

@@ -0,0 +1,39 @@
+// Surgical edits to ~/.cc-wecom/config.jsonc and secrets.json — preserves
+// comments + formatting via jsonc-parser's `modify` patches.
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { applyEdits, modify, parse as parseJsonc } from "jsonc-parser";
+import { expandHome } from "./paths.js";
+const FORMAT = { tabSize: 2, insertSpaces: true, eol: "\n" };
+const readText = (abs) => existsSync(abs) ? readFileSync(abs, "utf8") : "{}\n";
+const writeText = (abs, txt) => {
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, txt.endsWith("\n") ? txt : `${txt}\n`, "utf8");
+};
+/** Apply a sequence of (path, value) patches to a JSONC file. value=undefined deletes. */
+export const patchJsonc = (filePath, patches) => {
+    const abs = expandHome(filePath);
+    let txt = readText(abs);
+    for (const { path, value } of patches) {
+        const edits = modify(txt, path, value, { formattingOptions: FORMAT });
+        txt = applyEdits(txt, edits);
+    }
+    writeText(abs, txt);
+};
+/** Append `value` into a string array at `path`, deduped. No-op if already present. */
+export const appendUnique = (filePath, path, value) => {
+    const abs = expandHome(filePath);
+    const txt = readText(abs);
+    const tree = (parseJsonc(txt) ?? {});
+    const cur = path.reduce((acc, key) => {
+        if (acc && typeof acc === "object")
+            return acc[String(key)];
+        return undefined;
+    }, tree);
+    const arr = Array.isArray(cur) ? cur.slice() : [];
+    if (arr.includes(value))
+        return;
+    arr.push(value);
+    patchJsonc(filePath, [{ path, value: arr }]);
+};
+//# sourceMappingURL=config-writer.js.map

package/dist/shared/config-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-writer.js","sourceRoot":"","sources":["../../shared/config-writer.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,IAAI,UAAU,EAAiB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAE7D,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CACvC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAEvD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,GAAW,EAAQ,EAAE;IACnD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,QAAgB,EAChB,OAAkD,EAC5C,EAAE;IACR,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,IAAc,EAAE,KAAa,EAAQ,EAAE;IACpF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAQ,GAA+B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzF,OAAO,SAAS,CAAC;IACnB,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC"}

package/dist/shared/config.js

@@ -0,0 +1,139 @@
+// Declarative config: schema (zod) + loader. Pure transforms, file IO at boundary.
+import { readFileSync, existsSync } from "node:fs";
+import { parse as parseJsonc } from "jsonc-parser";
+import { z } from "zod";
+import { expandHome } from "./paths.js";
+// ── Schema ──────────────────────────────────────────────────────────
+const Bot = z.object({
+    botId: z.string().min(1),
+    secret: z.string().min(1),
+    websocketUrl: z.string().url().default("wss://openws.work.weixin.qq.com"),
+});
+const Daemon = z.object({
+    host: z.string().default("127.0.0.1"),
+    port: z.number().int().min(1).max(65535).default(17890),
+    stateDir: z.string().default("~/.cc-wecom/state"),
+    logFile: z.string().default("~/.cc-wecom/daemon.log"),
+    logLevel: z.enum(["trace", "debug", "info", "warn", "error"]).default("info"),
+});
+const Mirror = z.object({
+    // Where Claude Code writes per-project transcripts. Forks like `claude-internal`
+    // use a parallel dir (e.g. `~/.claude-internal/projects`). The mirror tails
+    // `<projectsDir>/<encoded(wrc.cwd)>/<sid>.jsonl`.
+    projectsDir: z.string().default("~/.claude/projects"),
+    // Pin a specific Claude session to mirror. Empty → auto-pick latest .jsonl
+    // under `<projectsDir>/<encoded(wrc.cwd)>/` by mtime.
+    sessionId: z.string().default(""),
+    // Inbound (WeCom→CLI) inject target. Empty → spawn `claude --resume -p`
+    // (response lands in jsonl but NOT in the live TTY). Set to a tmux target
+    // (e.g. "_cc-wecom" or "_cc-wecom:0.0") to paste into the live interactive
+    // claude — the only way to make WeCom messages visible in the CLI window.
+    tmuxTarget: z.string().default(""),
+    // Where to push live assistant output. Empty → fall back to defaultChat.
+    pushChat: z.string().default(""),
+    // Cap a single push payload (WeCom markdown ~2048 limit). Long replies are split.
+    chunkChars: z.number().int().positive().default(1800),
+    // Mirror the user's CLI prompts (type:"user" with string content).
+    includeUser: z.boolean().default(true),
+    // Mirror assistant tool_use blocks (Bash/Edit/Read/...).
+    includeTools: z.boolean().default(true),
+    // Mirror tool_result blocks. Off by default — usually noisy.
+    includeToolResults: z.boolean().default(false),
+    // Truncate each tool_result body to this many chars.
+    toolResultMaxChars: z.number().int().positive().default(400),
+    // Where inbound images/files from WeCom get saved before being pasted into
+    // the live TTY. Files persist — claude reads them by absolute path.
+    inboxDir: z.string().default("~/.cc-wecom/inbox"),
+});
+const Wrc = z.object({
+    allowFrom: z.array(z.string()).default([]),
+    mode: z.enum(["headless", "mirror"]).default("headless"),
+    claudeBin: z.string().default("claude"),
+    cwd: z.string().default("~"),
+    sessionMapFile: z.string().default("~/.cc-wecom/sessions.json"),
+    extraArgs: z.array(z.string()).default([]),
+    mirror: Mirror.default({}),
+});
+const Approval = z.object({
+    enabled: z.boolean().default(true),
+    matcher: z.string().default(".*"),
+    approvers: z.array(z.string()).default([]),
+    hookTimeoutSec: z.number().int().positive().default(1810),
+    longPollSec: z.number().int().positive().default(1800),
+    sessionCacheMinutes: z.number().int().nonnegative().default(30),
+    windowMinutes: z.number().int().nonnegative().default(10),
+    sensitiveArgRedact: z.boolean().default(true),
+    fallbackOnError: z.enum(["ask", "allow", "deny"]).default("ask"),
+});
+const SyncTarget = z.object({
+    kind: z.literal("claude-internal"),
+    settingsPath: z.string(),
+    scope: z.enum(["user", "project", "local"]).default("user"),
+});
+const Sync = z.object({
+    targets: z.array(SyncTarget).default([]),
+});
+export const ConfigSchema = z.object({
+    bot: Bot,
+    defaultChat: z.string().default(""),
+    daemon: Daemon.default({}),
+    wrc: Wrc.default({}),
+    approval: Approval.default({}),
+    sync: Sync.default({ targets: [] }),
+});
+// ── Loader ──────────────────────────────────────────────────────────
+const DEFAULT_CONFIG_PATHS = [
+    "~/.cc-wecom/config.jsonc",
+    "~/.cc-wecom/config.json",
+];
+const SECRETS_PATH = "~/.cc-wecom/secrets.json";
+const readJsoncIfExists = (p) => {
+    const abs = expandHome(p);
+    if (!existsSync(abs))
+        return undefined;
+    const text = readFileSync(abs, "utf8");
+    return parseJsonc(text);
+};
+const deepMerge = (a, b) => {
+    const out = { ...a };
+    for (const [k, v] of Object.entries(b ?? {})) {
+        const av = out[k];
+        if (v && typeof v === "object" && !Array.isArray(v) && av && typeof av === "object" && !Array.isArray(av)) {
+            out[k] = deepMerge(av, v);
+        }
+        else if (v !== undefined && v !== "") {
+            out[k] = v;
+        }
+    }
+    return out;
+};
+/** Resolve config path: explicit > $CC_WECOM_CONFIG > defaults. */
+const resolveConfigPath = (explicit) => {
+    if (explicit)
+        return explicit;
+    if (process.env.CC_WECOM_CONFIG)
+        return process.env.CC_WECOM_CONFIG;
+    for (const p of DEFAULT_CONFIG_PATHS) {
+        if (existsSync(expandHome(p)))
+            return p;
+    }
+    return undefined;
+};
+export const loadConfig = (explicitPath) => {
+    const sourcePath = resolveConfigPath(explicitPath);
+    if (!sourcePath) {
+        throw new Error(`cc-wecom config not found. Create ~/.cc-wecom/config.jsonc (see config.example.jsonc) or set $CC_WECOM_CONFIG.`);
+    }
+    const base = (readJsoncIfExists(sourcePath) ?? {});
+    const secrets = (readJsoncIfExists(SECRETS_PATH) ?? {});
+    const merged = deepMerge(base, secrets);
+    const parsed = ConfigSchema.safeParse(merged);
+    if (!parsed.success) {
+        const issues = parsed.error.issues
+            .map((i) => `  - ${i.path.join(".") || "<root>"}: ${i.message}`)
+            .join("\n");
+        throw new Error(`cc-wecom config invalid (${sourcePath}):\n${issues}`);
+    }
+    return { config: parsed.data, sourcePath: expandHome(sourcePath) };
+};
+//# sourceMappingURL=config.js.map

package/dist/shared/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../shared/config.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,uEAAuE;AACvE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,iFAAiF;IACjF,4EAA4E;IAC5E,kDAAkD;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrD,2EAA2E;IAC3E,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,kFAAkF;IAClF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrD,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,yDAAyD;IACzD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,6DAA6D;IAC7D,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,qDAAqD;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5D,2EAA2E;IAC3E,oEAAoE;IACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7C,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC5D,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,GAAG;IACR,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CACpC,CAAC,CAAC;AAIH,uEAAuE;AACvE,MAAM,oBAAoB,GAAG;IAC3B,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC;AACF,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,MAAM,iBAAiB,GAAG,CAAC,CAAS,EAAuB,EAAE;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAoC,CAAI,EAAE,CAAa,EAAK,EAAE;IAC9E,MAAM,GAAG,GAA4B,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,EAA6B,EAAE,CAA4B,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACvC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,CAAC,QAAiB,EAAsB,EAAE;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,YAAqB,EAAc,EAAE;IAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC9E,MAAM,OAAO,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;IACnF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,OAAO,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;AACrE,CAAC,CAAC"}

package/dist/shared/log.js

@@ -0,0 +1,18 @@
+// Logger: pino, dual sink (stdout pretty in TTY, file always).
+import { existsSync, mkdirSync, createWriteStream } from "node:fs";
+import { dirname } from "node:path";
+import pino from "pino";
+import { expandHome } from "./paths.js";
+const ensureDir = (filePath) => {
+    const d = dirname(filePath);
+    if (!existsSync(d))
+        mkdirSync(d, { recursive: true });
+};
+export const makeLogger = ({ logFile, logLevel, name }) => {
+    const abs = expandHome(logFile);
+    ensureDir(abs);
+    const fileStream = createWriteStream(abs, { flags: "a" });
+    const opts = { name, level: logLevel, base: { pid: process.pid } };
+    return pino(opts, fileStream);
+};
+//# sourceMappingURL=log.js.map

package/dist/shared/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../shared/log.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAyC,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAQ,EAAE;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAkB,EAAU,EAAE;IAChF,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChC,CAAC,CAAC"}

package/dist/shared/paths.js

@@ -0,0 +1,6 @@
+// Path utilities — kept tiny and pure.
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+/** Expand leading `~` and normalize. */
+export const expandHome = (p) => p.startsWith("~") ? resolve(homedir(), p.slice(p.startsWith("~/") ? 2 : 1)) : resolve(p);
+//# sourceMappingURL=paths.js.map

package/dist/shared/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../shared/paths.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wCAAwC;AACxC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAC9C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC"}