ylib-wecom-openclaw-plugin 2026.4.29

package/dist/src/agent/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * WeCom Agent 模块导出
+ */
+export { handleAgentWebhook, type, AgentWebhookParams } from "./handler.js";
+export { getAccessToken, sendText, uploadMedia, sendMedia, downloadMedia, } from "./api-client.js";

package/dist/src/agent/index.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * WeCom Agent 模块导出
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+exports.__esModule = true;
+var handler_js_1 = require("./handler.js");
+__createBinding(exports, handler_js_1, "handleAgentWebhook");
+__createBinding(exports, handler_js_1, "type");
+var api_client_js_1 = require("./api-client.js");
+__createBinding(exports, api_client_js_1, "getAccessToken");
+__createBinding(exports, api_client_js_1, "sendText");
+__createBinding(exports, api_client_js_1, "uploadMedia");
+__createBinding(exports, api_client_js_1, "sendMedia");
+__createBinding(exports, api_client_js_1, "downloadMedia");

package/dist/src/agent/webhook.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Agent Webhook HTTP 入口
+ *
+ * 职责：
+ * 1. 管理 AgentWebhookTarget 注册表（多账号共用同一 path 时按签名选中）
+ * 2. GET  → echostr URL 验证
+ * 3. POST → XML body 解密 → 调用 handleAgentWebhook
+ */
+/// <reference types="node" />
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { OpenClawConfig, PluginRuntime } from "ylib-openclaw/plugin-sdk";
+import type { ResolvedAgentAccount } from "../types/index.js";
+export declare type AgentWebhookTarget = {
+    agent: ResolvedAgentAccount;
+    config: OpenClawConfig;
+    runtime: {
+        log?: (msg: string) => void;
+        error?: (msg: string) => void;
+    };
+    path: string;
+};
+export declare function registerAgentWebhookTarget(target: AgentWebhookTarget): void;
+export declare function deregisterAgentWebhookTarget(accountId: string): void;
+export declare function createWecomAgentWebhookHandler(runtime: PluginRuntime): (req: IncomingMessage, res: ServerResponse) => Promise<boolean | void>;
+export declare function handleWecomAgentWebhookRequest(req: IncomingMessage, res: ServerResponse, runtime: PluginRuntime): Promise<boolean | void>;

package/dist/src/agent/webhook.js

@@ -0,0 +1,294 @@
+"use strict";
+/**
+ * Agent Webhook HTTP 入口
+ *
+ * 职责：
+ * 1. 管理 AgentWebhookTarget 注册表（多账号共用同一 path 时按签名选中）
+ * 2. GET  → echostr URL 验证
+ * 3. POST → XML body 解密 → 调用 handleAgentWebhook
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+exports.__esModule = true;
+exports.handleWecomAgentWebhookRequest = exports.createWecomAgentWebhookHandler = exports.deregisterAgentWebhookTarget = exports.registerAgentWebhookTarget = void 0;
+var node_crypto_1 = __importDefault(require("node:crypto"));
+var aibot_node_sdk_1 = require("@wecom/aibot-node-sdk");
+var xml_js_1 = require("./xml.js");
+var xml_parser_js_1 = require("../shared/xml-parser.js");
+var index_js_1 = require("./index.js");
+var const_js_1 = require("../const.js");
+// ============================================================================
+// Target Registry
+// ============================================================================
+var agentTargets = new Map();
+function registerAgentWebhookTarget(target) {
+    var _a;
+    var list = (_a = agentTargets.get(target.path)) !== null && _a !== void 0 ? _a : [];
+    list.push(target);
+    agentTargets.set(target.path, list);
+}
+exports.registerAgentWebhookTarget = registerAgentWebhookTarget;
+function deregisterAgentWebhookTarget(accountId) {
+    for (var _i = 0, agentTargets_1 = agentTargets; _i < agentTargets_1.length; _i++) {
+        var _a = agentTargets_1[_i], path = _a[0], list = _a[1];
+        var filtered = list.filter(function (t) { return t.agent.accountId !== accountId; });
+        if (filtered.length === 0) {
+            agentTargets["delete"](path);
+        }
+        else {
+            agentTargets.set(path, filtered);
+        }
+    }
+}
+exports.deregisterAgentWebhookTarget = deregisterAgentWebhookTarget;
+// ============================================================================
+// Helpers
+// ============================================================================
+function normalizeWebhookPath(raw) {
+    var trimmed = raw.trim();
+    if (!trimmed)
+        return "/";
+    var withSlash = trimmed.startsWith("/") ? trimmed : "/" + trimmed;
+    if (withSlash.length > 1 && withSlash.endsWith("/"))
+        return withSlash.slice(0, -1);
+    return withSlash;
+}
+function resolvePath(req) {
+    var _a;
+    var url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : "/", "http://localhost");
+    return normalizeWebhookPath(url.pathname || "/");
+}
+function resolveQueryParams(req) {
+    var _a;
+    var url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : "/", "http://localhost");
+    return url.searchParams;
+}
+function resolveSignatureParam(params) {
+    var _a, _b, _c;
+    return ((_c = (_b = (_a = params.get("msg_signature")) !== null && _a !== void 0 ? _a : params.get("msgsignature")) !== null && _b !== void 0 ? _b : params.get("signature")) !== null && _c !== void 0 ? _c : "");
+}
+function readTextBody(req, maxBytes) {
+    return __awaiter(this, void 0, void 0, function () {
+        var chunks, total;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    chunks = [];
+                    total = 0;
+                    return [4 /*yield*/, new Promise(function (resolve) {
+                            req.on("data", function (chunk) {
+                                total += chunk.length;
+                                if (total > maxBytes) {
+                                    resolve({ ok: false, error: "payload too large" });
+                                    req.destroy();
+                                    return;
+                                }
+                                chunks.push(chunk);
+                            });
+                            req.on("end", function () {
+                                resolve({ ok: true, value: Buffer.concat(chunks).toString("utf8") });
+                            });
+                            req.on("error", function (err) {
+                                resolve({ ok: false, error: err instanceof Error ? err.message : String(err) });
+                            });
+                        })];
+                case 1: return [2 /*return*/, _a.sent()];
+            }
+        });
+    });
+}
+function normalizeAgentIdValue(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    var raw = String(value !== null && value !== void 0 ? value : "").trim();
+    if (!raw)
+        return undefined;
+    var parsed = Number(raw);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+// ============================================================================
+// Main HTTP handler
+// ============================================================================
+function createWecomAgentWebhookHandler(runtime) {
+    return function (req, res) {
+        return handleWecomAgentWebhookRequest(req, res, runtime);
+    };
+}
+exports.createWecomAgentWebhookHandler = createWecomAgentWebhookHandler;
+function handleWecomAgentWebhookRequest(req, res, runtime) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+    return __awaiter(this, void 0, void 0, function () {
+        var path, reqId, isAgentPath, targets, query, timestamp, nonce, signature, echostr_1, matched_1, reason, selected_1, wc, plain, rawBody, encrypted, matched, reason, selected, decrypted, parsed, wc, inboundAgentId, core;
+        return __generator(this, function (_l) {
+            switch (_l.label) {
+                case 0:
+                    path = resolvePath(req);
+                    reqId = node_crypto_1["default"].randomUUID().slice(0, 8);
+                    isAgentPath = path === const_js_1.WEBHOOK_PATHS.AGENT ||
+                        path === const_js_1.WEBHOOK_PATHS.AGENT_PLUGIN ||
+                        path.startsWith(const_js_1.WEBHOOK_PATHS.AGENT + "/") ||
+                        path.startsWith(const_js_1.WEBHOOK_PATHS.AGENT_PLUGIN + "/");
+                    targets = (_a = agentTargets.get(path)) !== null && _a !== void 0 ? _a : [];
+                    if (targets.length === 0) {
+                        if (isAgentPath) {
+                            res.statusCode = 404;
+                            res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                            res.end("agent not configured - Agent 模式未配置");
+                            return [2 /*return*/, true];
+                        }
+                        return [2 /*return*/, false];
+                    }
+                    query = resolveQueryParams(req);
+                    timestamp = (_b = query.get("timestamp")) !== null && _b !== void 0 ? _b : "";
+                    nonce = (_c = query.get("nonce")) !== null && _c !== void 0 ? _c : "";
+                    signature = resolveSignatureParam(query);
+                    // ── GET: echostr URL 验证 ──────────────────────────────────────────
+                    if (req.method === "GET") {
+                        echostr_1 = (_d = query.get("echostr")) !== null && _d !== void 0 ? _d : "";
+                        matched_1 = targets.filter(function (t) {
+                            var wc = new aibot_node_sdk_1.WecomCrypto(t.agent.token, t.agent.encodingAESKey, t.agent.corpId);
+                            return wc.verifySignature(signature, timestamp, nonce, echostr_1);
+                        });
+                        if (matched_1.length !== 1) {
+                            reason = matched_1.length === 0 ? "account_not_found" : "account_conflict";
+                            res.statusCode = 401;
+                            res.setHeader("Content-Type", "application/json; charset=utf-8");
+                            res.end(JSON.stringify({ error: reason, message: "Agent callback " + reason + ": signature verification failed." }));
+                            return [2 /*return*/, true];
+                        }
+                        selected_1 = matched_1[0];
+                        try {
+                            wc = new aibot_node_sdk_1.WecomCrypto(selected_1.agent.token, selected_1.agent.encodingAESKey, selected_1.agent.corpId);
+                            plain = wc.decrypt(echostr_1);
+                            res.statusCode = 200;
+                            res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                            res.end(plain);
+                            return [2 /*return*/, true];
+                        }
+                        catch (_m) {
+                            res.statusCode = 400;
+                            res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                            res.end("decrypt failed - 解密失败，请检查 EncodingAESKey");
+                            return [2 /*return*/, true];
+                        }
+                    }
+                    // ── POST: XML 消息回调 ─────────────────────────────────────────────
+                    if (req.method !== "POST")
+                        return [2 /*return*/, false];
+                    return [4 /*yield*/, readTextBody(req, const_js_1.LIMITS.MAX_REQUEST_BODY_SIZE)];
+                case 1:
+                    rawBody = _l.sent();
+                    if (!rawBody.ok) {
+                        res.statusCode = 400;
+                        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                        res.end(rawBody.error || "invalid payload");
+                        return [2 /*return*/, true];
+                    }
+                    encrypted = "";
+                    try {
+                        encrypted = xml_js_1.extractEncryptFromXml(rawBody.value);
+                    }
+                    catch (_o) {
+                        res.statusCode = 400;
+                        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                        res.end("invalid xml - 缺少 Encrypt 字段");
+                        return [2 /*return*/, true];
+                    }
+                    matched = targets.filter(function (t) {
+                        var wc = new aibot_node_sdk_1.WecomCrypto(t.agent.token, t.agent.encodingAESKey, t.agent.corpId);
+                        return wc.verifySignature(signature, timestamp, nonce, encrypted);
+                    });
+                    if (matched.length !== 1) {
+                        reason = matched.length === 0 ? "account_not_found" : "account_conflict";
+                        res.statusCode = 401;
+                        res.setHeader("Content-Type", "application/json; charset=utf-8");
+                        res.end(JSON.stringify({ error: reason, message: "Agent callback " + reason + ": signature verification failed." }));
+                        return [2 /*return*/, true];
+                    }
+                    selected = matched[0];
+                    decrypted = "";
+                    parsed = null;
+                    try {
+                        wc = new aibot_node_sdk_1.WecomCrypto(selected.agent.token, selected.agent.encodingAESKey, selected.agent.corpId);
+                        decrypted = wc.decrypt(encrypted);
+                        parsed = xml_parser_js_1.parseXml(decrypted);
+                    }
+                    catch (_p) {
+                        res.statusCode = 400;
+                        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                        res.end("decrypt failed - 解密失败，请检查 EncodingAESKey");
+                        return [2 /*return*/, true];
+                    }
+                    if (!parsed) {
+                        res.statusCode = 400;
+                        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+                        res.end("invalid xml - XML 解析失败");
+                        return [2 /*return*/, true];
+                    }
+                    inboundAgentId = normalizeAgentIdValue(xml_parser_js_1.extractAgentId(parsed));
+                    if (inboundAgentId !== undefined &&
+                        selected.agent.agentId !== undefined &&
+                        inboundAgentId !== selected.agent.agentId) {
+                        (_f = (_e = selected.runtime).error) === null || _f === void 0 ? void 0 : _f.call(_e, "[wecom] inbound(agent): reqId=" + reqId + " accountId=" + selected.agent.accountId + " agentId_mismatch expected=" + selected.agent.agentId + " actual=" + inboundAgentId);
+                    }
+                    core = runtime;
+                    (_h = (_g = selected.runtime).log) === null || _h === void 0 ? void 0 : _h.call(_g, "[wecom] inbound(agent): reqId=" + reqId + " method=POST remote=" + ((_k = (_j = req.socket) === null || _j === void 0 ? void 0 : _j.remoteAddress) !== null && _k !== void 0 ? _k : "unknown") + " accountId=" + selected.agent.accountId);
+                    return [2 /*return*/, index_js_1.handleAgentWebhook({
+                            req: req,
+                            res: res,
+                            verifiedPost: {
+                                timestamp: timestamp,
+                                nonce: nonce,
+                                signature: signature,
+                                encrypted: encrypted,
+                                decrypted: decrypted,
+                                parsed: parsed
+                            },
+                            agent: selected.agent,
+                            config: selected.config,
+                            core: core,
+                            log: selected.runtime.log,
+                            error: selected.runtime.error
+                        })];
+            }
+        });
+    });
+}
+exports.handleWecomAgentWebhookRequest = handleWecomAgentWebhookRequest;

package/dist/src/agent/xml.d.ts

@@ -0,0 +1,21 @@
+/**
+ * WeCom XML 加解密辅助函数
+ * 用于 Agent 模式处理 XML 格式回调
+ */
+/**
+ * 从 XML 密文中提取 Encrypt 字段
+ */
+export declare function extractEncryptFromXml(xml: string): string;
+/**
+ * 从 XML 中提取 ToUserName (CorpID)
+ */
+export declare function extractToUserNameFromXml(xml: string): string;
+/**
+ * 构建加密 XML 响应
+ */
+export declare function buildEncryptedXmlResponse(params: {
+    encrypt: string;
+    signature: string;
+    timestamp: string;
+    nonce: string;
+}): string;

package/dist/src/agent/xml.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * WeCom XML 加解密辅助函数
+ * 用于 Agent 模式处理 XML 格式回调
+ */
+exports.__esModule = true;
+exports.buildEncryptedXmlResponse = exports.extractToUserNameFromXml = exports.extractEncryptFromXml = void 0;
+/**
+ * 从 XML 密文中提取 Encrypt 字段
+ */
+function extractEncryptFromXml(xml) {
+    var match = /<Encrypt><!\[CDATA\[(.*?)\]\]><\/Encrypt>/s.exec(xml);
+    if (!(match === null || match === void 0 ? void 0 : match[1])) {
+        // 尝试不带 CDATA 的格式
+        var altMatch = /<Encrypt>(.*?)<\/Encrypt>/s.exec(xml);
+        if (!(altMatch === null || altMatch === void 0 ? void 0 : altMatch[1])) {
+            throw new Error("Invalid XML: missing Encrypt field");
+        }
+        return altMatch[1];
+    }
+    return match[1];
+}
+exports.extractEncryptFromXml = extractEncryptFromXml;
+/**
+ * 从 XML 中提取 ToUserName (CorpID)
+ */
+function extractToUserNameFromXml(xml) {
+    var _a;
+    var match = /<ToUserName><!\[CDATA\[(.*?)\]\]><\/ToUserName>/s.exec(xml);
+    if (!(match === null || match === void 0 ? void 0 : match[1])) {
+        var altMatch = /<ToUserName>(.*?)<\/ToUserName>/s.exec(xml);
+        return (_a = altMatch === null || altMatch === void 0 ? void 0 : altMatch[1]) !== null && _a !== void 0 ? _a : "";
+    }
+    return match[1];
+}
+exports.extractToUserNameFromXml = extractToUserNameFromXml;
+/**
+ * 构建加密 XML 响应
+ */
+function buildEncryptedXmlResponse(params) {
+    return "<xml>\n<Encrypt><![CDATA[" + params.encrypt + "]]></Encrypt>\n<MsgSignature><![CDATA[" + params.signature + "]]></MsgSignature>\n<TimeStamp>" + params.timestamp + "</TimeStamp>\n<Nonce><![CDATA[" + params.nonce + "]]></Nonce>\n</xml>";
+}
+exports.buildEncryptedXmlResponse = buildEncryptedXmlResponse;

package/dist/src/channel.d.ts

@@ -0,0 +1,5 @@
+import { ChannelPlugin } from "ylib-openclaw/plugin-sdk";
+import type { ResolvedWeComAccount } from "./utils.js";
+export declare const wecomPlugin: ChannelPlugin<ResolvedWeComAccount> & {
+    setupWizard: any;
+};