feat(channels): add WeCom intelligent robot channel

docs/users/features/channels/_meta.ts

@@ -3,6 +3,7 @@ export default {
   telegram: 'Telegram',
   weixin: 'WeChat',
   dingtalk: 'DingTalk',
+  wecom: 'WeCom',
   feishu: 'Feishu',
   qqbot: 'QQ Bot',
   plugins: 'Plugins',

docs/users/features/channels/wecom.md

@@ -0,0 +1,111 @@
+# WeCom (Enterprise WeChat)
+
+This guide covers setting up Qwen Code with a WeCom intelligent robot (企业微信智能机器人).
+
+## Prerequisites
+
+- A WeCom organization account
+- A WeCom intelligent robot created in API mode
+- The robot's Bot ID and Secret
+
+## Creating the Robot
+
+1. Open the WeCom admin console and create an intelligent robot.
+2. Choose API mode.
+3. Copy the Bot ID and Secret.
+4. Add the robot to the direct chats or groups where it should be available.
+
+The intelligent robot uses a WebSocket connection from Qwen Code to WeCom. You do not need a public callback URL, Token, EncodingAESKey, Corp ID, or Agent ID.
+
+## Configuration
+
+Add the channel to `~/.qwen/settings.json`:
+
+```json
+{
+  "channels": {
+    "my-wecom": {
+      "type": "wecom",
+      "botId": "$WECOM_BOT_ID",
+      "secret": "$WECOM_SECRET",
+      "senderPolicy": "allowlist",
+      "allowedUsers": ["zhangsan"],
+      "sessionScope": "user",
+      "cwd": "/path/to/your/project",
+      "instructions": "You are a concise coding assistant responding via WeCom.",
+      "groupPolicy": "open",
+      "groups": {
+        "*": { "requireMention": true }
+      }
+    }
+  }
+}
+```
+
+Set the credentials as environment variables:
+
+```bash
+export WECOM_BOT_ID=<your-bot-id>
+export WECOM_SECRET=<your-secret>
+```
+
+Or define them in the `env` section of `settings.json`:
+
+```json
+{
+  "env": {
+    "WECOM_BOT_ID": "your-bot-id",
+    "WECOM_SECRET": "your-secret"
+  }
+}
+```
+
+## Running
+
+```bash
+qwen channel start my-wecom
+```
+
+Open WeCom and send a message to the intelligent robot.
+
+## Access Control
+
+`senderPolicy` works the same way as other IM channels:
+
+- `allowlist`: only users in `allowedUsers` can use the bot. This is the recommended enterprise default.
+- `pairing`: users must pair before using the bot.
+- `open`: anyone who can message the robot can use it.
+
+For groups, set `groupPolicy` to `"allowlist"` or `"open"`. By default, group messages require a mention through `"requireMention": true`.
+
+When the WeCom SDK includes explicit mention metadata, Qwen Code uses it for this gate. If no mention metadata is present, the channel treats delivered group messages as mentioned, matching WeCom intelligent robot API mode where group delivery is expected to be scoped by WeCom.
+
+## Images and Files
+
+Users can send text, voice messages with transcription, images, mixed text plus images, files, and videos. Images are passed to the agent as image attachments. Files and videos are downloaded to temporary local paths so the agent can read them with file tools.
+
+Assistant responses are sent as WeCom markdown. To send a local image generated by the agent, include one marker outside code blocks:
+
+```text
+[IMAGE: /absolute/path/to/image.png]
+```
+
+For safety, local image paths must be inside the channel file directory under the system temporary directory, such as `/tmp/channel-files/...`. Generic file, video, and voice upload markers are ignored because model-produced file paths could otherwise upload arbitrary workspace files.
+
+## Troubleshooting
+
+### Bot does not connect
+
+- Verify the Bot ID and Secret.
+- Make sure the robot is created in API mode.
+- Check that the environment variables are available in the shell running `qwen channel start`.
+
+### Bot does not respond in groups
+
+- Check `groupPolicy`.
+- Mention the bot unless the group config sets `"requireMention": false`.
+- Confirm the robot has been added to the group.
+
+### Self-built application credentials do not work
+
+This channel is for WeCom intelligent robots. Self-built application callback credentials such as Corp ID, Agent ID, Token, and EncodingAESKey are not used by this channel.

package.json

@@ -11,6 +11,7 @@
     "packages/channels/telegram",
     "packages/channels/weixin",
     "packages/channels/dingtalk",
+    "packages/channels/wecom",
     "packages/channels/feishu",
     "packages/channels/qqbot",
     "packages/channels/plugin-example",

packages/channels/base/src/ChannelBase.ts

@@ -2146,25 +2146,33 @@ export abstract class ChannelBase {
     return `${GROUP_HISTORY_CONTEXT_MARKER}\n${formatted.join('\n')}\n\n${CURRENT_MESSAGE_MARKER}\n${promptText}`;
   }
 
-  async handleInbound(envelope: Envelope): Promise<void> {
-    // 1. Group gate: policy + allowlist + mention gating
+  protected async preflightInbound(envelope: Envelope): Promise<boolean> {
     const groupResult = this.groupGate.check(envelope);
     if (!groupResult.allowed) {
       if (groupResult.reason === 'mention_required') {
         this.recordPendingGroupHistory(envelope);
       }
-      return; // silently drop — no pairing, no reply
+      return false;
     }
 
-    // 2. Sender gate: allowlist / pairing / open
     const result = this.gate.check(envelope.senderId, envelope.senderName);
     if (!result.allowed) {
       if (result.pairingCode !== undefined) {
         await this.onPairingRequired(envelope.chatId, result.pairingCode);
       }
-      return;
+      return false;
     }
 
+    return true;
+  }
+
+  async handleInbound(envelope: Envelope): Promise<void> {
+    if (!(await this.preflightInbound(envelope))) return;
+
+    await this.processInbound(envelope);
+  }
+
+  protected async processInbound(envelope: Envelope): Promise<void> {
     // 3. Slash command handling — before session/agent routing
     const parsed = this.parseCommand(envelope.text);
     if (parsed) {

packages/channels/wecom/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@qwen-code/channel-wecom",
+  "version": "0.19.5",
+  "description": "WeCom channel adapter for Qwen Code",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "test": "vitest run",
+    "test:ci": "vitest run"
+  },
+  "dependencies": {
+    "@qwen-code/channel-base": "file:../base",
+    "@wecom/aibot-node-sdk": "^1.0.7"
+  },
+  "devDependencies": {
+    "typescript": "^5.0.0"
+  }
+}