WeChat Work OpenClaw Adapter

# 1. Deploy
bash /scripts/deploy.sh
2. Edit .env with your WeChat Work credentials
nano ~/wecom-adapter/.env
3. Start
cd ~/wecom-adapter && npm start
4. Expose publicly
cloudflared tunnel --url http://localhost:8090
5. Copy tunnel URL → WeChat Work admin → webhook URL

| Symptom | Cause | Fix | |---------|-------|-----| | signature=undefined | Using req.query.signature | Use req.query.msg_signature | | Signature mismatch | echostr/encrypt not in calculation | Include 4th element in sort array | | -30065 error | Returning encrypted echostr | Decrypt before returning | | bad decrypt | Wrong key or setAutoPadding(true) | Use setAutoPadding(false) + manual PKCS#7 | | body长度=undefined | Body parser doesn't match Content-Type | Accept */* in express.text() | | 60020 IP error | Server IP not whitelisted | Add public IP in WeChat Work console | | Timeout | 5s limit exceeded | Use async pattern: return success, send via API | | Account banned | Unverified + automated messages | Verify enterprise first |