ylib-wecom-openclaw-plugin 2026.4.29

package/dist/src/mcp/interceptors/doc-auth-error.js

@@ -0,0 +1,235 @@
+"use strict";
+/**
+ * 文档授权错误拦截器
+ *
+ * 当 category=doc 的 MCP 调用返回 errcode=851013/851014/851008（文档授权错误）时：
+ * 1. 通过 aibot_send_biz_msg 命令向用户发送授权引导卡片
+ * 2. 拦截 help_message 内容，不将其传递给 LLM
+ * 3. 返回简化响应，告知 LLM 授权卡片已发送、无需再做处理
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.docAuthErrorInterceptor = void 0;
+var aibot_node_sdk_1 = require("@wecom/aibot-node-sdk");
+var state_manager_js_1 = require("../../state-manager.js");
+var transport_js_1 = require("../transport.js");
+var timeout_js_1 = require("../../timeout.js");
+var const_js_1 = require("../../const.js");
+// ============================================================================
+// 常量
+// ============================================================================
+/** 需要拦截的文档授权错误码集合 */
+/* https://doc.weixin.qq.com/sheet/e3_AFcARgbdAFwCNU0pwubawRtGzcd6z?scode=AJEAIQdfAAoEpqtRfRAMEA4QYkACk&tab=BB08J2 */
+var DOC_AUTH_ERROR_CODES = new Set([851013, 851014, 851008]);
+/**
+ * 业务消息类型枚举（对应 AiBotBizMsgType）
+ * - 1: 文档权限
+ */
+var AIBOT_BIZ_MSG_TYPE_DOC_READ_AUTH = 1;
+/**
+ * 聊天类型枚举（对应 AiBotBizMsgChatType）
+ * - 1: 单聊
+ * - 2: 群聊
+ */
+var AIBOT_BIZ_MSG_CHAT_TYPE_SINGLE = 1;
+var AIBOT_BIZ_MSG_CHAT_TYPE_GROUP = 2;
+// ============================================================================
+// 拦截器实现
+// ============================================================================
+exports.docAuthErrorInterceptor = {
+    name: "doc-auth-error",
+    /** 仅对 doc 品类生效 */
+    match: function (ctx) { return ctx.category === "doc"; },
+    /** 检测文档授权错误，发送授权引导卡片并拦截原始响应 */
+    afterCall: function (ctx, result) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, interceptDocAuthError(ctx, result)];
+            });
+        });
+    }
+};
+// ============================================================================
+// 内部实现
+// ============================================================================
+/**
+ * 从 MCP 返回结果中解析业务 JSON
+ */
+function parseBizData(result) {
+    if (!result || typeof result !== "object")
+        return null;
+    var content = result.content;
+    if (!Array.isArray(content))
+        return null;
+    var textItem = content.find(function (c) { return c.type === "text" && typeof c.text === "string"; });
+    if (!textItem)
+        return null;
+    try {
+        return JSON.parse(textItem.text);
+    }
+    catch (_a) {
+        return null;
+    }
+}
+/**
+ * 通过 WSClient 发送 aibot_send_biz_msg 命令
+ *
+ * 按照 WwOpenWsSendAiBotBizMsgReq proto 定义构造请求体：
+ *   - chat_id:   会话标识
+ *   - userid:    发送者 userid
+ *   - biz_type:  业务消息类型（AiBotBizMsgType）
+ *   - chat_type: 聊天类型（AiBotBizMsgChatType，1=单聊，2=群聊）
+ */
+function sendBizMsg(params) {
+    return __awaiter(this, void 0, void 0, function () {
+        var accountId, wsClient, reqId, body, err_1;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    accountId = params.accountId || transport_js_1.resolveCurrentAccountId();
+                    wsClient = state_manager_js_1.getWeComWebSocket(accountId);
+                    if (!wsClient) {
+                        console.warn("[mcp] doc-auth-error: WSClient \u672A\u8FDE\u63A5 (accountId=\"" + accountId + "\")\uFF0C\u65E0\u6CD5\u53D1\u9001\u6388\u6743\u5361\u7247");
+                        return [2 /*return*/];
+                    }
+                    reqId = aibot_node_sdk_1.generateReqId("biz_msg");
+                    body = {
+                        biz_type: AIBOT_BIZ_MSG_TYPE_DOC_READ_AUTH
+                    };
+                    if (params.chatId) {
+                        body.chat_id = params.chatId;
+                    }
+                    if (params.userid) {
+                        body.userid = params.userid;
+                    }
+                    if (params.chatType) {
+                        body.chat_type = params.chatType === "group"
+                            ? AIBOT_BIZ_MSG_CHAT_TYPE_GROUP
+                            : AIBOT_BIZ_MSG_CHAT_TYPE_SINGLE;
+                    }
+                    console.log("[mcp] doc-auth-error: \u53D1\u9001 aibot_send_biz_msg, body=" + JSON.stringify(body));
+                    _a.label = 1;
+                case 1:
+                    _a.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, timeout_js_1.withTimeout(wsClient.reply({ headers: { req_id: reqId } }, body, const_js_1.AIBOT_SEND_BIZ_MSG_CMD), const_js_1.BIZ_MSG_SEND_TIMEOUT_MS, "aibot_send_biz_msg timed out after " + const_js_1.BIZ_MSG_SEND_TIMEOUT_MS + "ms")];
+                case 2:
+                    _a.sent();
+                    console.log("[mcp] doc-auth-error: \u6388\u6743\u5361\u7247\u53D1\u9001\u6210\u529F (chatId=\"" + params.chatId + "\", userid=\"" + params.userid + "\", chatType=\"" + params.chatType + "\")");
+                    return [3 /*break*/, 4];
+                case 3:
+                    err_1 = _a.sent();
+                    console.error("[mcp] doc-auth-error: \u6388\u6743\u5361\u7247\u53D1\u9001\u5931\u8D25: " + (err_1 instanceof Error ? err_1.message : JSON.stringify(err_1)));
+                    return [3 /*break*/, 4];
+                case 4: return [2 /*return*/];
+            }
+        });
+    });
+}
+/**
+ * 拦截文档授权错误
+ *
+ * 检测 errcode=851013/851014/851008 时：
+ * 1. 通过 aibot_send_biz_msg 发送授权引导卡片（携带 chat_id、userid、chat_type）
+ * 2. 返回简化响应，告知 LLM 授权卡片已直接发送给用户
+ *
+ * 数据来源链路（chatId 全程保留原始大小写，单一事实来源）：
+ *
+ *   aibot_msg_callback.body.chatid  (原始大小写)
+ *     ↓
+ *   monitor.ts:processWeComMessageNow
+ *     → setSessionChatInfo(route.sessionKey, { chatId, chatType })  ← 以 sessionKey 为键
+ *     ↓
+ *   OpenClaw core 调用工具工厂，传入 ctx.sessionKey
+ *     ↓
+ *   index.ts:registerTool
+ *     → getSessionChatInfo(ctx.sessionKey) 精确取回 { chatId, chatType }
+ *     → createWeComMcpTool({ chatId, chatType })
+ *     ↓
+ *   tool.ts:handleCall 将其注入 CallContext
+ *     ↓
+ *   本拦截器直接使用 ctx.chatId / ctx.chatType （无需反解 sessionKey、无需兜底）
+ *
+ * ⚠️ 切勿使用 parseSessionKeyChat(ctx.sessionKey) 反向解析 chatId：
+ *    OpenClaw core 构建 sessionKey 时会将 peer.id 强制小写化，
+ *    企业微信 aibot_send_biz_msg 的 chat_id 是大小写敏感的，
+ *    小写后会收到 errcode=93006 (invalid chatid)。
+ */
+function interceptDocAuthError(ctx, result) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function () {
+        var bizData, errcode, userid, chatId, chatType, accountId, simplifiedResult;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    bizData = parseBizData(result);
+                    if (!bizData)
+                        return [2 /*return*/, result];
+                    errcode = bizData.errcode;
+                    if (typeof errcode !== "number" || !DOC_AUTH_ERROR_CODES.has(errcode)) {
+                        return [2 /*return*/, result];
+                    }
+                    console.log("[mcp] doc-auth-error: \u68C0\u6D4B\u5230\u6587\u6863\u6388\u6743\u9519\u8BEF errcode=" + errcode + ", " +
+                        ("method=" + ctx.method + ", category=" + ctx.category));
+                    userid = ctx.requesterUserId, chatId = ctx.chatId, chatType = ctx.chatType, accountId = ctx.accountId;
+                    if (!(!chatId || !chatType)) return [3 /*break*/, 1];
+                    console.warn("[mcp] doc-auth-error: ctx \u7F3A\u5C11 chatId/chatType\uFF08\u53EF\u80FD\u4F1A\u8BDD\u4FE1\u606F\u672A\u8BB0\u5F55\uFF09\uFF0C" +
+                        ("userid=\"" + userid + "\", chatId=\"" + chatId + "\", chatType=\"" + chatType + "\"\uFF0C\u8DF3\u8FC7\u53D1\u9001\u6388\u6743\u5361\u7247"));
+                    return [3 /*break*/, 3];
+                case 1:
+                    console.log("[mcp] doc-auth-error: \u53D1\u9001\u6388\u6743\u5361\u7247\u53C2\u6570: userid=\"" + userid + "\", chatId=\"" + chatId + "\", chatType=\"" + chatType + "\"");
+                    return [4 /*yield*/, sendBizMsg({ chatId: chatId, userid: userid, chatType: chatType, accountId: accountId })];
+                case 2:
+                    _b.sent();
+                    _b.label = 3;
+                case 3:
+                    simplifiedResult = {
+                        errcode: errcode,
+                        errmsg: (_a = bizData.errmsg) !== null && _a !== void 0 ? _a : "authorization error",
+                        _biz_msg_sent: true,
+                        _user_hint: "文档授权提示卡片已直接发送给用户，无需再向用户转述任何授权相关的信息。请告知用户：已发送授权引导，请按照提示完成授权后重试。"
+                    };
+                    return [2 /*return*/, {
+                            content: [{
+                                    type: "text",
+                                    text: JSON.stringify(simplifiedResult)
+                                }]
+                        }];
+            }
+        });
+    });
+}

package/dist/src/mcp/interceptors/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * MCP call 拦截器注册表与调度入口
+ *
+ * 所有 call 拦截器在此注册，按注册顺序执行。
+ * 新增拦截器只需：
+ *   1. 在 interceptors/ 目录下新建文件，实现 CallInterceptor 接口
+ *   2. 在下方 interceptors 数组中注册
+ *
+ * tool.ts 的 handleCall 无需任何改动。
+ */
+import type { CallContext } from "./types.js";
+import type { SendJsonRpcOptions } from "../transport.js";
+export type { CallContext, CallInterceptor, BeforeCallOptions } from "./types.js";
+/** resolveBeforeCall 的返回值 */
+export interface ResolvedBeforeCall {
+    /** 合并后的 sendJsonRpc 选项（如超时时间） */
+    options?: SendJsonRpcOptions;
+    /** 替换后的 args（如从本地文件读取的请求体） */
+    args?: Record<string, unknown>;
+}
+/**
+ * 收集匹配的 beforeCall 配置，合并后返回
+ *
+ * 合并策略：
+ * - timeoutMs: 取所有拦截器返回值中的最大值
+ * - args: 后注册的拦截器覆盖前者（一般同一调用只有一个拦截器会返回 args）
+ */
+export declare function resolveBeforeCall(ctx: CallContext): Promise<ResolvedBeforeCall>;
+/**
+ * 依次执行匹配的 afterCall 拦截器，管道式传递 result
+ *
+ * 前一个拦截器的返回值作为下一个拦截器的输入。
+ * 拦截器若不需要修改 result，应原样返回。
+ */
+export declare function runAfterCall(ctx: CallContext, result: unknown): Promise<unknown>;

package/dist/src/mcp/interceptors/index.js

@@ -0,0 +1,143 @@
+"use strict";
+/**
+ * MCP call 拦截器注册表与调度入口
+ *
+ * 所有 call 拦截器在此注册，按注册顺序执行。
+ * 新增拦截器只需：
+ *   1. 在 interceptors/ 目录下新建文件，实现 CallInterceptor 接口
+ *   2. 在下方 interceptors 数组中注册
+ *
+ * tool.ts 的 handleCall 无需任何改动。
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.runAfterCall = exports.resolveBeforeCall = void 0;
+var biz_error_js_1 = require("./biz-error.js");
+var doc_auth_error_js_1 = require("./doc-auth-error.js");
+var msg_media_js_1 = require("./msg-media.js");
+var smartpage_create_js_1 = require("./smartpage-create.js");
+var smartpage_export_js_1 = require("./smartpage-export.js");
+var smartsheet_upload_js_1 = require("./smartsheet-upload.js");
+// ============================================================================
+// 拦截器注册表（按注册顺序执行）
+// ============================================================================
+var interceptors = [
+    biz_error_js_1.bizErrorInterceptor,
+    doc_auth_error_js_1.docAuthErrorInterceptor,
+    msg_media_js_1.mediaInterceptor,
+    smartpage_create_js_1.smartpageCreateInterceptor,
+    smartpage_export_js_1.smartpageExportInterceptor,
+    smartsheet_upload_js_1.smartsheetUploadInterceptor,
+];
+/**
+ * 收集匹配的 beforeCall 配置，合并后返回
+ *
+ * 合并策略：
+ * - timeoutMs: 取所有拦截器返回值中的最大值
+ * - args: 后注册的拦截器覆盖前者（一般同一调用只有一个拦截器会返回 args）
+ */
+function resolveBeforeCall(ctx) {
+    return __awaiter(this, void 0, void 0, function () {
+        var mergedTimeoutMs, mergedArgs, _i, interceptors_1, interceptor, opts;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    _i = 0, interceptors_1 = interceptors;
+                    _a.label = 1;
+                case 1:
+                    if (!(_i < interceptors_1.length)) return [3 /*break*/, 4];
+                    interceptor = interceptors_1[_i];
+                    if (!interceptor.match(ctx) || !interceptor.beforeCall)
+                        return [3 /*break*/, 3];
+                    return [4 /*yield*/, interceptor.beforeCall(ctx)];
+                case 2:
+                    opts = _a.sent();
+                    if ((opts === null || opts === void 0 ? void 0 : opts.timeoutMs) !== undefined) {
+                        mergedTimeoutMs = mergedTimeoutMs === undefined
+                            ? opts.timeoutMs
+                            : Math.max(mergedTimeoutMs, opts.timeoutMs);
+                    }
+                    if ((opts === null || opts === void 0 ? void 0 : opts.args) !== undefined) {
+                        mergedArgs = opts.args;
+                    }
+                    _a.label = 3;
+                case 3:
+                    _i++;
+                    return [3 /*break*/, 1];
+                case 4: return [2 /*return*/, {
+                        options: mergedTimeoutMs !== undefined ? { timeoutMs: mergedTimeoutMs } : undefined,
+                        args: mergedArgs
+                    }];
+            }
+        });
+    });
+}
+exports.resolveBeforeCall = resolveBeforeCall;
+/**
+ * 依次执行匹配的 afterCall 拦截器，管道式传递 result
+ *
+ * 前一个拦截器的返回值作为下一个拦截器的输入。
+ * 拦截器若不需要修改 result，应原样返回。
+ */
+function runAfterCall(ctx, result) {
+    return __awaiter(this, void 0, void 0, function () {
+        var current, _i, interceptors_2, interceptor;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    current = result;
+                    _i = 0, interceptors_2 = interceptors;
+                    _a.label = 1;
+                case 1:
+                    if (!(_i < interceptors_2.length)) return [3 /*break*/, 4];
+                    interceptor = interceptors_2[_i];
+                    if (!interceptor.match(ctx) || !interceptor.afterCall)
+                        return [3 /*break*/, 3];
+                    return [4 /*yield*/, interceptor.afterCall(ctx, current)];
+                case 2:
+                    current = _a.sent();
+                    _a.label = 3;
+                case 3:
+                    _i++;
+                    return [3 /*break*/, 1];
+                case 4: return [2 /*return*/, current];
+            }
+        });
+    });
+}
+exports.runAfterCall = runAfterCall;

package/dist/src/mcp/interceptors/msg-media.d.ts

@@ -0,0 +1,11 @@
+/**
+ * get_msg_media 响应拦截器
+ *
+ * 核心逻辑：
+ * 1. beforeCall: 设置延长的超时时间（120s），因为 base64 数据可达 ~27MB
+ * 2. afterCall: 从 MCP result 的 content[].text 中提取 base64_data，
+ *    解码为 Buffer 并通过 saveMediaBuffer 保存到本地媒体目录，
+ *    替换响应中的 base64_data 为 local_path，避免大模型被 base64 数据消耗 token
+ */
+import type { CallInterceptor } from "./types.js";
+export declare const mediaInterceptor: CallInterceptor;

package/dist/src/mcp/interceptors/msg-media.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * get_msg_media 响应拦截器
+ *
+ * 核心逻辑：
+ * 1. beforeCall: 设置延长的超时时间（120s），因为 base64 数据可达 ~27MB
+ * 2. afterCall: 从 MCP result 的 content[].text 中提取 base64_data，
+ *    解码为 Buffer 并通过 saveMediaBuffer 保存到本地媒体目录，
+ *    替换响应中的 base64_data 为 local_path，避免大模型被 base64 数据消耗 token
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.mediaInterceptor = void 0;
+var fs = __importStar(require("node:fs/promises"));
+var path = __importStar(require("node:path"));
+var transport_js_1 = require("../transport.js");
+var runtime_js_1 = require("../../runtime.js");
+var openclaw_compat_js_1 = require("../../openclaw-compat.js");
+// ============================================================================
+// 拦截器实现
+// ============================================================================
+exports.mediaInterceptor = {
+    name: "media",
+    /** 仅对 get_msg_media 方法生效 */
+    match: function (ctx) { return ctx.method === "get_msg_media"; },
+    /** 设置延长的超时时间 */
+    beforeCall: function () {
+        return { timeoutMs: transport_js_1.MEDIA_DOWNLOAD_TIMEOUT_MS };
+    },
+    /** 拦截响应：base64 → 本地文件 */
+    afterCall: function (ctx, result) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, interceptMediaResponse(result)];
+            });
+        });
+    }
+};
+// ============================================================================
+// 内部实现
+// ============================================================================
+/**
+ * 拦截 get_msg_media 的 MCP 响应
+ *
+ * 1. 从 MCP result 的 content[].text 中提取业务 JSON
+ * 2. 提取 media_item.base64_data，解码为 Buffer
+ * 3. 通过 openclaw SDK 的 saveMediaBuffer 保存到本地媒体目录
+ * 4. 替换响应：移除 base64_data，加入 local_path
+ *
+ * 这样大模型只看到轻量的文件路径信息，不会被 base64 数据消耗 token。
+ */
+function interceptMediaResponse(result) {
+    var _a, _b;
+    return __awaiter(this, void 0, void 0, function () {
+        var t0, content, textItem, bizData, mediaItem, base64Data, mediaName, mediaType, mediaId, tParsed, buffer, tDecoded, contentType, tMimeDetected, INBOUND_MAX_BYTES, core, saved, MIME_EXT_PATCH, patchExt, newPath, _c, tSaved, newBizData, tEnd;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    t0 = performance.now();
+                    content = (_a = result) === null || _a === void 0 ? void 0 : _a.content;
+                    if (!Array.isArray(content))
+                        return [2 /*return*/, result];
+                    textItem = content.find(function (c) { return c.type === "text" && typeof c.text === "string"; });
+                    if (!textItem)
+                        return [2 /*return*/, result];
+                    try {
+                        bizData = JSON.parse(textItem.text);
+                    }
+                    catch (_e) {
+                        // 非 JSON 格式，原样返回
+                        return [2 /*return*/, result];
+                    }
+                    // 3. 校验业务响应：errcode !== 0 或无 media_item 时原样返回
+                    if (bizData.errcode !== 0)
+                        return [2 /*return*/, result];
+                    mediaItem = bizData.media_item;
+                    if (!mediaItem || typeof mediaItem.base64_data !== "string")
+                        return [2 /*return*/, result];
+                    base64Data = mediaItem.base64_data;
+                    mediaName = mediaItem.name;
+                    mediaType = mediaItem.type;
+                    mediaId = mediaItem.media_id;
+                    tParsed = performance.now();
+                    buffer = Buffer.from(base64Data, "base64");
+                    tDecoded = performance.now();
+                    return [4 /*yield*/, openclaw_compat_js_1.detectMime({ buffer: buffer, filePath: mediaName })];
+                case 1:
+                    contentType = (_b = _d.sent()) !== null && _b !== void 0 ? _b : "application/octet-stream";
+                    tMimeDetected = performance.now();
+                    INBOUND_MAX_BYTES = 20 * 1024 * 1024;
+                    core = runtime_js_1.getWeComRuntime();
+                    return [4 /*yield*/, core.channel.media.saveMediaBuffer(buffer, contentType, "inbound", INBOUND_MAX_BYTES, // maxBytes: 放宽到 20MB，匹配企业微信文件消息上限
+                        mediaName)];
+                case 2:
+                    saved = _d.sent();
+                    MIME_EXT_PATCH = {
+                        "audio/amr": ".amr"
+                    };
+                    patchExt = MIME_EXT_PATCH[contentType];
+                    if (!(patchExt && !path.extname(saved.path))) return [3 /*break*/, 6];
+                    newPath = saved.path + patchExt;
+                    _d.label = 3;
+                case 3:
+                    _d.trys.push([3, 5, , 6]);
+                    return [4 /*yield*/, fs.rename(saved.path, newPath)];
+                case 4:
+                    _d.sent();
+                    saved.path = newPath;
+                    return [3 /*break*/, 6];
+                case 5:
+                    _c = _d.sent();
+                    return [3 /*break*/, 6];
+                case 6:
+                    tSaved = performance.now();
+                    newBizData = {
+                        errcode: 0,
+                        errmsg: "ok",
+                        media_item: {
+                            media_id: mediaId,
+                            name: mediaName !== null && mediaName !== void 0 ? mediaName : saved.path.split("/").pop(),
+                            type: mediaType,
+                            local_path: saved.path,
+                            size: buffer.length,
+                            content_type: saved.contentType
+                        }
+                    };
+                    tEnd = performance.now();
+                    // 耗时日志：各环节耗时（ms）
+                    console.log("[mcp] get_msg_media \u62E6\u622A\u6210\u529F: media_id=" + (mediaId !== null && mediaId !== void 0 ? mediaId : "unknown") + ", " +
+                        ("type=" + (mediaType !== null && mediaType !== void 0 ? mediaType : "unknown") + ", size=" + buffer.length + ", saved=" + saved.path + "\n") +
+                        ("  \u23F1 \u8017\u65F6\u660E\u7EC6 (\u603B " + (tEnd - t0).toFixed(1) + "ms):\n") +
+                        ("    \u89E3\u6790\u54CD\u5E94 JSON:   " + (tParsed - t0).toFixed(1) + "ms\n") +
+                        ("    base64 \u89E3\u7801:     " + (tDecoded - tParsed).toFixed(1) + "ms  (" + (base64Data.length / 1024).toFixed(0) + "KB base64 \u2192 " + (buffer.length / 1024).toFixed(0) + "KB buffer)\n") +
+                        ("    MIME \u68C0\u6D4B:       " + (tMimeDetected - tDecoded).toFixed(1) + "ms  (" + contentType + ")\n") +
+                        ("    saveMediaBuffer: " + (tSaved - tMimeDetected).toFixed(1) + "ms\n") +
+                        ("    \u6784\u9020\u54CD\u5E94:        " + (tEnd - tSaved).toFixed(1) + "ms"));
+                    // 7. 返回修改后的 MCP result 结构
+                    return [2 /*return*/, {
+                            content: [{
+                                    type: "text",
+                                    text: JSON.stringify(newBizData)
+                                }]
+                        }];
+            }
+        });
+    });
+}

package/dist/src/mcp/interceptors/smartpage-create.d.ts

@@ -0,0 +1,30 @@
+/**
+ * smartpage_create 请求拦截器
+ *
+ * 核心逻辑：
+ * smartpage_create 的 pages 数组中，每个 page 可能包含 page_filepath 字段
+ * （指向本地 markdown 文件），用于避免在命令行传递大段文本内容。
+ * 本拦截器在 beforeCall 阶段遍历 pages 数组，逐个读取 page_filepath
+ * 指向的本地文件内容，填入 page_content 字段，并移除 page_filepath。
+ *
+ * 入参约定：
+ *   wecom_mcp call doc smartpage_create '{
+ *     "title": "主页标题",
+ *     "pages": [
+ *       {"page_title": "页面1", "page_filepath": "/tmp/page1.md", "content_type": "markdown"},
+ *       {"page_title": "页面2", "page_filepath": "/tmp/page2.md", "content_type": "markdown"}
+ *     ]
+ *   }'
+ *
+ * 拦截器行为：
+ *   1. 检测 args.pages 数组
+ *   2. 校验文件大小：单文件不超过 10MB，所有文件总计不超过 20MB
+ *   3. 遍历每个 page，若存在 page_filepath 则读取本地文件内容
+ *   4. 将文件内容填入 page_content 字段，移除 page_filepath
+ *   5. 返回修改后的完整 args
+ *
+ * 传给 MCP Server 的格式：
+ *   { "title": "...", "pages": [{"page_title": "...", "page_content": "...", "content_type": "..."}] }
+ */
+import type { CallInterceptor } from "./types.js";
+export declare const smartpageCreateInterceptor: CallInterceptor;