ylib-wecom-openclaw-plugin 2026.4.29

package/dist/src/agent/handler.js

@@ -0,0 +1,731 @@
+"use strict";
+/**
+ * WeCom Agent Webhook 处理器
+ * 处理 XML 格式回调
+ */
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __spreadArrays = (this && this.__spreadArrays) || function () {
+    for (var s = 0, i = 0, il = arguments.length; i < il; i++) s += arguments[i].length;
+    for (var r = Array(s), k = 0, i = 0; i < il; i++)
+        for (var a = arguments[i], j = 0, jl = a.length; j < jl; j++, k++)
+            r[k] = a[j];
+    return r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+exports.__esModule = true;
+exports.handleAgentWebhook = exports.shouldProcessAgentInboundMessage = void 0;
+var node_url_1 = require("node:url");
+var node_os_1 = __importDefault(require("node:os"));
+var node_path_1 = __importDefault(require("node:path"));
+var xml_parser_js_1 = require("../shared/xml-parser.js");
+var api_client_js_1 = require("./api-client.js");
+var command_auth_js_1 = require("../shared/command-auth.js");
+var dynamic_routing_js_1 = require("../dynamic-routing.js");
+var const_js_1 = require("../const.js");
+var endpoint_event_adapter_js_1 = require("../endpoint-event-adapter.js");
+var utils_js_1 = require("../utils.js");
+function resolveWecomMediaMaxBytes(config) {
+    var _a, _b, _c, _d;
+    return (_d = (_c = (_b = (_a = config.channels) === null || _a === void 0 ? void 0 : _a.wecom) === null || _b === void 0 ? void 0 : _b.media) === null || _c === void 0 ? void 0 : _c.maxBytes) !== null && _d !== void 0 ? _d : const_js_1.DEFAULT_MEDIA_MAX_MB * 1024 * 1024;
+}
+/** 错误提示信息 */
+var ERROR_HELP = "";
+// Agent webhook 幂等去重池（防止企微回调重试导致重复回复）
+// 注意：这是进程内内存去重，重启会清空；但足以覆盖企微的短周期重试。
+var RECENT_MSGID_TTL_MS = 10 * 60 * 1000;
+var recentAgentMsgIds = new Map();
+function rememberAgentMsgId(msgId) {
+    var now = Date.now();
+    var existing = recentAgentMsgIds.get(msgId);
+    if (existing && now - existing < RECENT_MSGID_TTL_MS)
+        return false;
+    recentAgentMsgIds.set(msgId, now);
+    // 简单清理：只在写入时做一次线性 prune，避免无界增长
+    for (var _i = 0, recentAgentMsgIds_1 = recentAgentMsgIds; _i < recentAgentMsgIds_1.length; _i++) {
+        var _a = recentAgentMsgIds_1[_i], k = _a[0], ts = _a[1];
+        if (now - ts >= RECENT_MSGID_TTL_MS)
+            recentAgentMsgIds["delete"](k);
+    }
+    return true;
+}
+function looksLikeTextFile(buffer) {
+    var sampleSize = Math.min(buffer.length, 4096);
+    if (sampleSize === 0)
+        return true;
+    var bad = 0;
+    for (var i = 0; i < sampleSize; i++) {
+        var b = buffer[i];
+        var isWhitespace = b === 0x09 || b === 0x0a || b === 0x0d; // \t \n \r
+        var isPrintable = b >= 0x20 && b !== 0x7f;
+        if (!isWhitespace && !isPrintable)
+            bad++;
+    }
+    // 非可打印字符占比太高，基本可判断为二进制
+    return bad / sampleSize <= 0.02;
+}
+function analyzeTextHeuristic(buffer) {
+    var sampleSize = Math.min(buffer.length, 4096);
+    if (sampleSize === 0)
+        return { sampleSize: 0, badCount: 0, badRatio: 0 };
+    var badCount = 0;
+    for (var i = 0; i < sampleSize; i++) {
+        var b = buffer[i];
+        var isWhitespace = b === 0x09 || b === 0x0a || b === 0x0d;
+        var isPrintable = b >= 0x20 && b !== 0x7f;
+        if (!isWhitespace && !isPrintable)
+            badCount++;
+    }
+    return { sampleSize: sampleSize, badCount: badCount, badRatio: badCount / sampleSize };
+}
+function previewHex(buffer, maxBytes) {
+    if (maxBytes === void 0) { maxBytes = 32; }
+    var n = Math.min(buffer.length, maxBytes);
+    if (n <= 0)
+        return "";
+    return buffer
+        .subarray(0, n)
+        .toString("hex")
+        .replace(/(..)/g, "$1 ")
+        .trim();
+}
+function buildTextFilePreview(buffer, maxChars) {
+    if (!looksLikeTextFile(buffer))
+        return undefined;
+    var text = buffer.toString("utf8");
+    if (!text.trim())
+        return undefined;
+    var truncated = text.length > maxChars ? text.slice(0, maxChars) + "\n\u2026(\u5DF2\u622A\u65AD)" : text;
+    return truncated;
+}
+/**
+ * 仅允许“用户意图消息”进入 AI 会话。
+ * - event 回调（如 enter_agent/subscribe）不应触发会话与自动回复
+ * - 系统发送者（sys）不应触发会话与自动回复
+ * - 缺失发送者时默认丢弃，避免写入异常会话
+ */
+function shouldProcessAgentInboundMessage(params) {
+    var _a, _b, _c;
+    var msgType = String((_a = params.msgType) !== null && _a !== void 0 ? _a : "").trim().toLowerCase();
+    var fromUser = String((_b = params.fromUser) !== null && _b !== void 0 ? _b : "").trim();
+    var normalizedFromUser = fromUser.toLowerCase();
+    var eventType = String((_c = params.eventType) !== null && _c !== void 0 ? _c : "").trim().toLowerCase();
+    if (msgType === "event") {
+        return {
+            shouldProcess: false,
+            reason: "event:" + (eventType || "unknown")
+        };
+    }
+    if (!fromUser) {
+        return {
+            shouldProcess: false,
+            reason: "missing_sender"
+        };
+    }
+    if (normalizedFromUser === "sys") {
+        return {
+            shouldProcess: false,
+            reason: "system_sender"
+        };
+    }
+    return {
+        shouldProcess: true,
+        reason: "user_message"
+    };
+}
+exports.shouldProcessAgentInboundMessage = shouldProcessAgentInboundMessage;
+function normalizeAgentId(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    var raw = String(value !== null && value !== void 0 ? value : "").trim();
+    if (!raw)
+        return undefined;
+    var parsed = Number(raw);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * **resolveQueryParams (解析查询参数)**
+ *
+ * 辅助函数：从 IncomingMessage 中解析 URL 查询字符串，用于获取签名、时间戳等参数。
+ */
+function resolveQueryParams(req) {
+    var _a;
+    var url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : "/", "http://localhost");
+    return url.searchParams;
+}
+/**
+ * 处理消息回调 (POST)
+ */
+function handleMessageCallback(params) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    return __awaiter(this, void 0, void 0, function () {
+        var req, res, verifiedPost, agent, config, core, log, error, query, querySignature, encrypted, decrypted, msg, timestamp, nonce, signature, inboundAgentId, msgType, fromUser, chatId, msgId, eventType, ok, content, preview, decision;
+        return __generator(this, function (_h) {
+            req = params.req, res = params.res, verifiedPost = params.verifiedPost, agent = params.agent, config = params.config, core = params.core, log = params.log, error = params.error;
+            try {
+                if (!verifiedPost) {
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] inbound: missing preverified envelope");
+                    res.statusCode = 400;
+                    res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                    res.end("invalid request - \u7F3A\u5C11\u4E0A\u6E38\u9A8C\u7B7E\u7ED3\u679C" + ERROR_HELP);
+                    return [2 /*return*/, true];
+                }
+                log === null || log === void 0 ? void 0 : log("[wecom-agent] inbound: method=" + ((_a = req.method) !== null && _a !== void 0 ? _a : "UNKNOWN") + " remote=" + ((_c = (_b = req.socket) === null || _b === void 0 ? void 0 : _b.remoteAddress) !== null && _c !== void 0 ? _c : "unknown"));
+                query = resolveQueryParams(req);
+                querySignature = (_d = query.get("msg_signature")) !== null && _d !== void 0 ? _d : "";
+                encrypted = verifiedPost.encrypted;
+                decrypted = verifiedPost.decrypted;
+                msg = verifiedPost.parsed;
+                timestamp = verifiedPost.timestamp;
+                nonce = verifiedPost.nonce;
+                signature = verifiedPost.signature || querySignature;
+                log === null || log === void 0 ? void 0 : log("[wecom-agent] inbound: using preverified envelope timestamp=" + (timestamp ? "yes" : "no") + " nonce=" + (nonce ? "yes" : "no") + " msg_signature=" + (signature ? "yes" : "no") + " encryptLen=" + encrypted.length);
+                log === null || log === void 0 ? void 0 : log("[wecom-agent] inbound: decryptedBytes=" + Buffer.byteLength(decrypted, "utf8"));
+                inboundAgentId = normalizeAgentId(xml_parser_js_1.extractAgentId(msg));
+                if (inboundAgentId !== undefined &&
+                    typeof agent.agentId === "number" &&
+                    Number.isFinite(agent.agentId) &&
+                    inboundAgentId !== agent.agentId) {
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] inbound: agentId mismatch ignored expectedAgentId=" + agent.agentId + " actualAgentId=" + String((_e = xml_parser_js_1.extractAgentId(msg)) !== null && _e !== void 0 ? _e : ""));
+                }
+                msgType = xml_parser_js_1.extractMsgType(msg);
+                fromUser = xml_parser_js_1.extractFromUser(msg);
+                chatId = xml_parser_js_1.extractChatId(msg);
+                msgId = xml_parser_js_1.extractMsgId(msg);
+                eventType = String((_f = msg.Event) !== null && _f !== void 0 ? _f : "").trim().toLowerCase();
+                if (msgId) {
+                    ok = rememberAgentMsgId(msgId);
+                    if (!ok) {
+                        log === null || log === void 0 ? void 0 : log("[wecom-agent] duplicate msgId=" + msgId + " from=" + fromUser + " chatId=" + (chatId !== null && chatId !== void 0 ? chatId : "N/A") + " type=" + msgType + "; skipped");
+                        res.statusCode = 200;
+                        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                        res.end("success");
+                        return [2 /*return*/, true];
+                    }
+                }
+                content = String((_g = xml_parser_js_1.extractContent(msg)) !== null && _g !== void 0 ? _g : "");
+                preview = content.length > 100 ? content.slice(0, 100) + "\u2026" : content;
+                log === null || log === void 0 ? void 0 : log("[wecom-agent] " + msgType + " from=" + fromUser + " chatId=" + (chatId !== null && chatId !== void 0 ? chatId : "N/A") + " msgId=" + (msgId !== null && msgId !== void 0 ? msgId : "N/A") + " content=" + preview);
+                // 先返回 success (Agent 模式使用 API 发送回复，不用被动回复)
+                res.statusCode = 200;
+                res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                res.end("success");
+                decision = shouldProcessAgentInboundMessage({
+                    msgType: msgType,
+                    fromUser: fromUser,
+                    eventType: eventType
+                });
+                if (!decision.shouldProcess) {
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] skip processing: type=" + (msgType || "unknown") + " event=" + (eventType || "N/A") + " from=" + (fromUser || "N/A") + " reason=" + decision.reason);
+                    return [2 /*return*/, true];
+                }
+                // 异步处理消息
+                processAgentMessage({
+                    agent: agent,
+                    config: config,
+                    core: core,
+                    fromUser: fromUser,
+                    chatId: chatId,
+                    msgType: msgType,
+                    content: content,
+                    msg: msg,
+                    log: log,
+                    error: error
+                })["catch"](function (err) {
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] process failed: " + String(err));
+                });
+                return [2 /*return*/, true];
+            }
+            catch (err) {
+                error === null || error === void 0 ? void 0 : error("[wecom-agent] callback failed: " + String(err));
+                res.statusCode = 400;
+                res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                res.end("error - \u56DE\u8C03\u5904\u7406\u5931\u8D25" + ERROR_HELP);
+                return [2 /*return*/, true];
+            }
+            return [2 /*return*/];
+        });
+    });
+}
+/**
+ * **processAgentMessage (处理 Agent 消息)**
+ *
+ * 异步处理解密后的消息内容，并触发 OpenClaw Agent。
+ * 流程：
+ * 1. 路由解析：根据 userid或群ID 确定 Agent 路由。
+ * 2. 媒体处理：如果是图片/文件等，下载资源。
+ * 3. 上下文构建：创建 Inbound Context。
+ * 4. 会话记录：更新 Session 状态。
+ * 5. 调度回复：将 Agent 的响应通过 `api-client` 发送回企业微信。
+ */
+function processAgentMessage(params) {
+    var _a, _b, _c, _d;
+    return __awaiter(this, void 0, void 0, function () {
+        var agent, config, core, fromUser, chatId, content, msg, msgType, log, error, isGroup, rawChatId, peerId, mediaMaxBytes, attachments, finalContent, mediaPath, mediaType, mediaId, _e, buffer, contentType, headerFileName, xmlFileName, originalFileName, heuristic, extMap, textPreview, looksText, originalExt, normalizedContentType, ext, filename, saved, err_1, keys, route, routingResult, fromLabel, storePath, envelopeOptions, previousTimestamp, body, authz, prompt, err_2, ctxPayload, handledConfirmationKeys, ignoredSubAgentRunIds;
+        var _this = this;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
+                case 0:
+                    agent = params.agent, config = params.config, core = params.core, fromUser = params.fromUser, chatId = params.chatId, content = params.content, msg = params.msg, msgType = params.msgType, log = params.log, error = params.error;
+                    isGroup = Boolean(chatId);
+                    rawChatId = isGroup ? chatId : fromUser;
+                    peerId = isGroup
+                        ? utils_js_1.resolveWecomSessionPeerId({
+                            chatType: "group",
+                            chatId: rawChatId,
+                            senderId: fromUser
+                        })
+                        : fromUser;
+                    mediaMaxBytes = resolveWecomMediaMaxBytes(config);
+                    attachments = [];
+                    finalContent = content;
+                    if (!["image", "voice", "video", "file"].includes(msgType)) return [3 /*break*/, 7];
+                    mediaId = xml_parser_js_1.extractMediaId(msg);
+                    if (!mediaId) return [3 /*break*/, 6];
+                    _f.label = 1;
+                case 1:
+                    _f.trys.push([1, 4, , 5]);
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] downloading media: " + mediaId + " (" + msgType + ")");
+                    return [4 /*yield*/, api_client_js_1.downloadMedia({ agent: agent, mediaId: mediaId, maxBytes: mediaMaxBytes })];
+                case 2:
+                    _e = _f.sent(), buffer = _e.buffer, contentType = _e.contentType, headerFileName = _e.filename;
+                    xmlFileName = xml_parser_js_1.extractFileName(msg);
+                    originalFileName = (xmlFileName || headerFileName || mediaId + ".bin").trim();
+                    heuristic = analyzeTextHeuristic(buffer);
+                    extMap = {
+                        "image/jpeg": "jpg", "image/png": "png", "image/gif": "gif",
+                        "audio/amr": "amr", "audio/speex": "speex", "video/mp4": "mp4"
+                    };
+                    textPreview = msgType === "file" ? buildTextFilePreview(buffer, 12000) : undefined;
+                    looksText = Boolean(textPreview);
+                    originalExt = node_path_1["default"].extname(originalFileName).toLowerCase();
+                    normalizedContentType = looksText && originalExt === ".md" ? "text/markdown" :
+                        looksText && (!contentType || contentType === "application/octet-stream")
+                            ? "text/plain; charset=utf-8"
+                            : contentType;
+                    ext = extMap[normalizedContentType] || (looksText ? "txt" : "bin");
+                    filename = mediaId + "." + ext;
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] file meta: msgType=" + msgType + " mediaId=" + mediaId + " size=" + buffer.length + " maxBytes=" + mediaMaxBytes + " " +
+                        ("contentType=" + contentType + " normalizedContentType=" + normalizedContentType + " originalFileName=" + originalFileName + " ") +
+                        ("xmlFileName=" + (xmlFileName !== null && xmlFileName !== void 0 ? xmlFileName : "N/A") + " headerFileName=" + (headerFileName !== null && headerFileName !== void 0 ? headerFileName : "N/A") + " ") +
+                        ("textHeuristic(sample=" + heuristic.sampleSize + ", bad=" + heuristic.badCount + ", ratio=" + heuristic.badRatio.toFixed(4) + ") ") +
+                        ("headHex=\"" + previewHex(buffer) + "\""));
+                    return [4 /*yield*/, core.channel.media.saveMediaBuffer(buffer, normalizedContentType, "inbound", // context/scope
+                        mediaMaxBytes, // limit
+                        originalFileName)];
+                case 3:
+                    saved = _f.sent();
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] media saved to: " + saved.path);
+                    mediaPath = saved.path;
+                    mediaType = normalizedContentType;
+                    // 构建附件
+                    attachments.push({
+                        name: originalFileName,
+                        mimeType: normalizedContentType,
+                        url: node_url_1.pathToFileURL(saved.path).href
+                    });
+                    // 更新文本提示
+                    if (textPreview) {
+                        finalContent = [
+                            content,
+                            "",
+                            "文件内容预览：",
+                            "```",
+                            textPreview,
+                            "```",
+                            "(\u5DF2\u4E0B\u8F7D " + buffer.length + " \u5B57\u8282)",
+                        ].join("\n");
+                    }
+                    else {
+                        if (msgType === "file") {
+                            finalContent = [
+                                content,
+                                "",
+                                "\u5DF2\u6536\u5230\u6587\u4EF6\uFF1A" + originalFileName,
+                                "\u6587\u4EF6\u7C7B\u578B\uFF1A" + (normalizedContentType || contentType || "未知"),
+                                "提示：当前仅对文本/Markdown/JSON/CSV/HTML/PDF（可选）做内容抽取；其他二进制格式请转为 PDF 或复制文本内容。",
+                                "(\u5DF2\u4E0B\u8F7D " + buffer.length + " \u5B57\u8282)",
+                            ].join("\n");
+                        }
+                        else {
+                            finalContent = content + " (\u5DF2\u4E0B\u8F7D " + buffer.length + " \u5B57\u8282)";
+                        }
+                    }
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] file preview: enabled=" + looksText + " finalContentLen=" + finalContent.length + " attachments=" + attachments.length);
+                    return [3 /*break*/, 5];
+                case 4:
+                    err_1 = _f.sent();
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] media processing failed: " + String(err_1));
+                    finalContent = [
+                        content,
+                        "",
+                        "\u5A92\u4F53\u5904\u7406\u5931\u8D25\uFF1A" + String(err_1),
+                        "\u63D0\u793A\uFF1A\u53EF\u5728 OpenClaw \u914D\u7F6E\u4E2D\u63D0\u9AD8 channels.wecom.media.maxBytes\uFF08\u5F53\u524D=" + mediaMaxBytes + "\uFF09",
+                        "\u4F8B\u5982\uFF1Aopenclaw config set channels.wecom.media.maxBytes " + 50 * 1024 * 1024,
+                    ].join("\n");
+                    return [3 /*break*/, 5];
+                case 5: return [3 /*break*/, 7];
+                case 6:
+                    keys = Object.keys((_a = msg) !== null && _a !== void 0 ? _a : {}).slice(0, 50).join(",");
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] mediaId not found for " + msgType + "; keys=" + keys);
+                    _f.label = 7;
+                case 7:
+                    route = core.channel.routing.resolveAgentRoute({
+                        cfg: config,
+                        channel: "wecom",
+                        accountId: agent.accountId,
+                        peer: { kind: isGroup ? "group" : "direct", id: peerId }
+                    });
+                    routingResult = dynamic_routing_js_1.processDynamicRouting({
+                        route: route,
+                        config: config,
+                        core: core,
+                        accountId: agent.accountId,
+                        chatType: isGroup ? "group" : "dm",
+                        chatId: rawChatId,
+                        senderId: fromUser,
+                        log: function (msg) { return log === null || log === void 0 ? void 0 : log(msg.replace(/^\[dynamic-routing\]/, "[wecom-agent]")); },
+                        error: function (msg) { return error === null || error === void 0 ? void 0 : error(msg.replace(/^\[dynamic-routing\]/, "[wecom-agent]")); }
+                    });
+                    // 应用动态路由结果
+                    if (routingResult.routeModified) {
+                        route.agentId = routingResult.finalAgentId;
+                        route.sessionKey = routingResult.finalSessionKey;
+                    }
+                    fromLabel = isGroup ? "group:" + rawChatId : "user:" + fromUser;
+                    storePath = core.channel.session.resolveStorePath((_b = config.session) === null || _b === void 0 ? void 0 : _b.store, {
+                        agentId: route.agentId
+                    });
+                    envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(config);
+                    previousTimestamp = core.channel.session.readSessionUpdatedAt({
+                        storePath: storePath,
+                        sessionKey: route.sessionKey
+                    });
+                    body = core.channel.reply.formatAgentEnvelope({
+                        channel: "WeCom",
+                        from: fromLabel,
+                        previousTimestamp: previousTimestamp,
+                        envelope: envelopeOptions,
+                        body: finalContent
+                    });
+                    return [4 /*yield*/, command_auth_js_1.resolveWecomCommandAuthorization({
+                            core: core,
+                            cfg: config,
+                            // Agent 门禁应读取 channels.wecom.agent.dm（即 agent.config.dm），而不是 channels.wecom.dm（不存在）
+                            accountConfig: agent.config,
+                            rawBody: finalContent,
+                            senderUserId: fromUser
+                        })];
+                case 8:
+                    authz = _f.sent();
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] authz: dmPolicy=" + authz.dmPolicy + " shouldCompute=" + authz.shouldComputeAuth + " sender=" + fromUser.toLowerCase() + " senderAllowed=" + authz.senderAllowed + " authorizerConfigured=" + authz.authorizerConfigured + " commandAuthorized=" + String(authz.commandAuthorized));
+                    if (!(authz.shouldComputeAuth && authz.commandAuthorized !== true)) return [3 /*break*/, 13];
+                    prompt = command_auth_js_1.buildWecomUnauthorizedCommandPrompt({ senderUserId: fromUser, dmPolicy: authz.dmPolicy, scope: "agent" });
+                    _f.label = 9;
+                case 9:
+                    _f.trys.push([9, 11, , 12]);
+                    return [4 /*yield*/, api_client_js_1.sendText({ agent: agent, toUser: fromUser, chatId: undefined, text: prompt })];
+                case 10:
+                    _f.sent();
+                    log === null || log === void 0 ? void 0 : log("[wecom-agent] unauthorized command: replied via DM to " + fromUser);
+                    return [3 /*break*/, 12];
+                case 11:
+                    err_2 = _f.sent();
+                    error === null || error === void 0 ? void 0 : error("[wecom-agent] unauthorized command reply failed: " + String(err_2));
+                    return [3 /*break*/, 12];
+                case 12: return [2 /*return*/];
+                case 13:
+                    ctxPayload = core.channel.reply.finalizeInboundContext({
+                        Body: body,
+                        RawBody: finalContent,
+                        CommandBody: finalContent,
+                        Attachments: attachments.length > 0 ? attachments : undefined,
+                        From: isGroup ? "wecom:group:" + rawChatId : "wecom:" + fromUser,
+                        // 使用 wecom-agent: 前缀标记 Agent 会话，确保 outbound 路由不会混入 Bot WS 发送路径。
+                        // resolveWecomTarget 已支持剥离 wecom-agent: 前缀（target.ts L41），解析结果不变。
+                        To: "wecom-agent:" + fromUser,
+                        SessionKey: route.sessionKey,
+                        AccountId: route.accountId,
+                        ChatType: isGroup ? "group" : "direct",
+                        ConversationLabel: fromLabel,
+                        SenderName: fromUser,
+                        SenderId: fromUser,
+                        Provider: const_js_1.CHANNEL_ID,
+                        Surface: "webchat",
+                        OriginatingChannel: const_js_1.CHANNEL_ID,
+                        // 标记为 Agent 会话的回复路由目标，避免与 Bot 会话混淆：
+                        // - 用于让 /new /reset 这类命令回执不被 Bot 侧策略拦截
+                        // - 群聊场景也统一路由为私信触发者（与 deliver 策略一致）
+                        OriginatingTo: "wecom-agent:" + fromUser,
+                        CommandAuthorized: (_c = authz.commandAuthorized) !== null && _c !== void 0 ? _c : true,
+                        MediaPath: mediaPath,
+                        MediaType: mediaType,
+                        MediaUrl: mediaPath
+                    });
+                    // 记录会话
+                    return [4 /*yield*/, core.channel.session.recordInboundSession({
+                            storePath: storePath,
+                            sessionKey: (_d = ctxPayload.SessionKey) !== null && _d !== void 0 ? _d : route.sessionKey,
+                            ctx: ctxPayload,
+                            onRecordError: function (err) {
+                                error === null || error === void 0 ? void 0 : error("[wecom-agent] session record failed: " + String(err));
+                            }
+                        })];
+                case 14:
+                    // 记录会话
+                    _f.sent();
+                    handledConfirmationKeys = new Set();
+                    ignoredSubAgentRunIds = new Set();
+                    return [4 /*yield*/, core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+                            ctx: ctxPayload,
+                            cfg: config,
+                            dispatcherOptions: {
+                                deliver: function (payload, info) { return __awaiter(_this, void 0, void 0, function () {
+                                    var text, adapted, mediaDirectivePaths, mediaDirectiveRe, _mdMatch, p, home, mediaUrls, err_3, message, _i, mediaUrls_1, mediaPath_1, isRemoteUrl, buf, contentType, filename, res, _a, _b, fs, pathModule, ext, MIME_MAP, mediaType_1, mediaId, err_4, message, _c;
+                                    var _d, _e, _f;
+                                    return __generator(this, function (_g) {
+                                        switch (_g.label) {
+                                            case 0:
+                                                text = (_d = payload.text) !== null && _d !== void 0 ? _d : "";
+                                                adapted = endpoint_event_adapter_js_1.adaptEndpointEvent({
+                                                    rawText: text,
+                                                    currentEventType: info.kind
+                                                });
+                                                if (adapted.subAgentStartLine) {
+                                                    if (adapted.subAgentRunId)
+                                                        ignoredSubAgentRunIds.add(adapted.subAgentRunId);
+                                                    text = adapted.subAgentStartLine.trim();
+                                                }
+                                                else if (adapted.subAgentRunId && ignoredSubAgentRunIds.has(adapted.subAgentRunId)) {
+                                                    log === null || log === void 0 ? void 0 : log("[wecom-agent] ignore sub-agent event: agent_run_id=" + adapted.subAgentRunId + " event=" + (adapted.eventType || info.kind));
+                                                    return [2 /*return*/];
+                                                }
+                                                if (adapted.confirmationText) {
+                                                    if (adapted.confirmationDedupKey && handledConfirmationKeys.has(adapted.confirmationDedupKey)) {
+                                                        log === null || log === void 0 ? void 0 : log("[wecom-agent] confirmation duplicate skipped: " + adapted.confirmationDedupKey);
+                                                        return [2 /*return*/];
+                                                    }
+                                                    if (adapted.confirmationDedupKey)
+                                                        handledConfirmationKeys.add(adapted.confirmationDedupKey);
+                                                    text = adapted.confirmationText.trim();
+                                                }
+                                                else if (adapted.ignoreAsNoise) {
+                                                    log === null || log === void 0 ? void 0 : log("[wecom-agent] passthrough event ignored for outbound: " + (adapted.eventType || info.kind));
+                                                    return [2 /*return*/];
+                                                }
+                                                mediaDirectivePaths = [];
+                                                mediaDirectiveRe = /^MEDIA:\s*`?([^\n`]+?)`?\s*$/gm;
+                                                while ((_mdMatch = mediaDirectiveRe.exec(text)) !== null) {
+                                                    p = ((_e = _mdMatch[1]) !== null && _e !== void 0 ? _e : "").trim();
+                                                    if (!p)
+                                                        continue;
+                                                    if (p.startsWith("~/") || p === "~") {
+                                                        home = node_os_1["default"].homedir() || "/root";
+                                                        p = p.replace(/^~/, home);
+                                                    }
+                                                    if (!mediaDirectivePaths.includes(p))
+                                                        mediaDirectivePaths.push(p);
+                                                }
+                                                // 从回复文本中移除 MEDIA: 指令行
+                                                if (mediaDirectivePaths.length > 0) {
+                                                    text = text.replace(/^MEDIA:\s*`?[^\n`]+?`?\s*$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+                                                }
+                                                mediaUrls = Array.from(new Set(__spreadArrays((payload.mediaUrls || []), (payload.mediaUrl ? [payload.mediaUrl] : []), mediaDirectivePaths)));
+                                                if (!text.trim()) return [3 /*break*/, 4];
+                                                _g.label = 1;
+                                            case 1:
+                                                _g.trys.push([1, 3, , 4]);
+                                                return [4 /*yield*/, api_client_js_1.sendText({ agent: agent, toUser: fromUser, chatId: undefined, text: text })];
+                                            case 2:
+                                                _g.sent();
+                                                log === null || log === void 0 ? void 0 : log("[wecom-agent] reply delivered (" + info.kind + ") to " + fromUser + " (textLen=" + text.length + ")");
+                                                return [3 /*break*/, 4];
+                                            case 3:
+                                                err_3 = _g.sent();
+                                                message = err_3 instanceof Error ? "" + err_3.message + (err_3.cause ? " (cause: " + String(err_3.cause) + ")" : "") : String(err_3);
+                                                error === null || error === void 0 ? void 0 : error("[wecom-agent] reply failed: " + message);
+                                                return [3 /*break*/, 4];
+                                            case 4:
+                                                _i = 0, mediaUrls_1 = mediaUrls;
+                                                _g.label = 5;
+                                            case 5:
+                                                if (!(_i < mediaUrls_1.length)) return [3 /*break*/, 22];
+                                                mediaPath_1 = mediaUrls_1[_i];
+                                                _g.label = 6;
+                                            case 6:
+                                                _g.trys.push([6, 16, , 21]);
+                                                isRemoteUrl = /^https?:\/\//i.test(mediaPath_1);
+                                                buf = void 0;
+                                                contentType = void 0;
+                                                filename = void 0;
+                                                if (!isRemoteUrl) return [3 /*break*/, 9];
+                                                return [4 /*yield*/, fetch(mediaPath_1, { signal: AbortSignal.timeout(30000) })];
+                                            case 7:
+                                                res = _g.sent();
+                                                if (!res.ok)
+                                                    throw new Error("download failed: " + res.status);
+                                                _b = (_a = Buffer).from;
+                                                return [4 /*yield*/, res.arrayBuffer()];
+                                            case 8:
+                                                buf = _b.apply(_a, [_g.sent()]);
+                                                contentType = res.headers.get("content-type") || "application/octet-stream";
+                                                filename = new URL(mediaPath_1).pathname.split("/").pop() || "media";
+                                                return [3 /*break*/, 13];
+                                            case 9: return [4 /*yield*/, Promise.resolve().then(function () { return __importStar(require("node:fs/promises")); })];
+                                            case 10:
+                                                fs = _g.sent();
+                                                return [4 /*yield*/, Promise.resolve().then(function () { return __importStar(require("node:path")); })];
+                                            case 11:
+                                                pathModule = _g.sent();
+                                                return [4 /*yield*/, fs.readFile(mediaPath_1)];
+                                            case 12:
+                                                buf = _g.sent();
+                                                filename = pathModule.basename(mediaPath_1);
+                                                ext = pathModule.extname(mediaPath_1).slice(1).toLowerCase();
+                                                MIME_MAP = {
+                                                    jpg: "image/jpeg", jpeg: "image/jpeg", png: "image/png", gif: "image/gif",
+                                                    webp: "image/webp", mp3: "audio/mpeg", wav: "audio/wav", amr: "audio/amr",
+                                                    mp4: "video/mp4", mov: "video/quicktime", pdf: "application/pdf",
+                                                    doc: "application/msword", docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+                                                    xls: "application/vnd.ms-excel", xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                                                    txt: "text/plain", csv: "text/csv", json: "application/json", zip: "application/zip"
+                                                };
+                                                contentType = (_f = MIME_MAP[ext]) !== null && _f !== void 0 ? _f : "application/octet-stream";
+                                                _g.label = 13;
+                                            case 13:
+                                                mediaType_1 = "file";
+                                                if (contentType.startsWith("image/"))
+                                                    mediaType_1 = "image";
+                                                else if (contentType.startsWith("audio/"))
+                                                    mediaType_1 = "voice";
+                                                else if (contentType.startsWith("video/"))
+                                                    mediaType_1 = "video";
+                                                log === null || log === void 0 ? void 0 : log("[wecom-agent] uploading media: " + filename + " (" + mediaType_1 + ", " + contentType + ", " + buf.length + " bytes)");
+                                                return [4 /*yield*/, api_client_js_1.uploadMedia({ agent: agent, type: mediaType_1, buffer: buf, filename: filename })];
+                                            case 14:
+                                                mediaId = _g.sent();
+                                                return [4 /*yield*/, api_client_js_1.sendMedia(__assign({ agent: agent, toUser: fromUser, mediaId: mediaId,
+                                                        mediaType: mediaType_1 }, (mediaType_1 === "video" ? { title: filename, description: "" } : {})))];
+                                            case 15:
+                                                _g.sent();
+                                                log === null || log === void 0 ? void 0 : log("[wecom-agent] media sent (" + info.kind + ") to " + fromUser + ": " + filename + " (" + mediaType_1 + ")");
+                                                return [3 /*break*/, 21];
+                                            case 16:
+                                                err_4 = _g.sent();
+                                                message = err_4 instanceof Error ? "" + err_4.message + (err_4.cause ? " (cause: " + String(err_4.cause) + ")" : "") : String(err_4);
+                                                error === null || error === void 0 ? void 0 : error("[wecom-agent] media send failed: " + mediaPath_1 + ": " + message);
+                                                _g.label = 17;
+                                            case 17:
+                                                _g.trys.push([17, 19, , 20]);
+                                                return [4 /*yield*/, api_client_js_1.sendText({ agent: agent, toUser: fromUser, chatId: undefined, text: "\u26A0\uFE0F \u6587\u4EF6\u53D1\u9001\u5931\u8D25: " + (mediaPath_1.split("/").pop() || mediaPath_1) + "\n" + message })];
+                                            case 18:
+                                                _g.sent();
+                                                return [3 /*break*/, 20];
+                                            case 19:
+                                                _c = _g.sent();
+                                                return [3 /*break*/, 20];
+                                            case 20: return [3 /*break*/, 21];
+                                            case 21:
+                                                _i++;
+                                                return [3 /*break*/, 5];
+                                            case 22: return [2 /*return*/];
+                                        }
+                                    });
+                                }); },
+                                onError: function (err, info) {
+                                    error === null || error === void 0 ? void 0 : error("[wecom-agent] " + info.kind + " reply error: " + String(err));
+                                }
+                            }
+                        })];
+                case 15:
+                    _f.sent();
+                    return [2 /*return*/];
+            }
+        });
+    });
+}
+/**
+ * **handleAgentWebhook (Agent Webhook 入口)**
+ *
+ * 统一处理 Agent 模式的 POST 消息回调请求。
+ * URL 验证与验签/解密由 monitor 层统一处理后再调用本函数。
+ */
+function handleAgentWebhook(params) {
+    return __awaiter(this, void 0, void 0, function () {
+        var req;
+        return __generator(this, function (_a) {
+            req = params.req;
+            if (req.method === "POST") {
+                return [2 /*return*/, handleMessageCallback(params)];
+            }
+            return [2 /*return*/, false];
+        });
+    });
+}
+exports.handleAgentWebhook = handleAgentWebhook;