WeCom Chat CLI
Smart-bot conversations · v0.4.0 ↗

Built for agents.
Designed for humans.

A clear boundary between your agent and the conversation. Receive WeCom messages live. Give each task its own scope. Review a reply before it leaves.

Install the CLI ↗Explore the interface

Go + JSON · Self-hosted · Linux and macOS targets

One conversation. One task.ILLUSTRATION
A Alex WeCom user
Can you explain how to contact our service desk?
External content · No operator authority
task.get
scope     Alex / private conversation
epoch     1
reply     draft → independent review
◷
A helpful answer, awaiting approval.

The worker proposes. The operator authorizes the send.

Bot credentials stay with the broker. Task grants stay with their worker.
01 Long-lived WebSocket intake
02 One event per worker grant
03 Independent reply approval
SMALL INTERFACE. EXPLICIT AUTHORITY.

Let the agent answer.
Keep the boundary in code.

Explore three worker requests. A task token selects one event; it never grants access to the inbox or operator actions.

Task explorerLocal illustration · No live connection
WORKER REQUEST / RESPONSEreview mode
wecom-chat-cli task get
Enable JavaScript to explore the examples. The complete protocol is available in the host integration guide.
Simplified example output. Worker token and common flags omitted.Every command and flag ↗
WHEN THE MODEL GETS IT WRONG

Limit what can happen next.

Safety must not depend on the worker recognizing every malicious instruction.

01 / SCOPE

A grant, not an inbox.

Bind a short-lived task to one event, sender, session epoch and connection. Revoke it or reset the session to invalidate stale work.

Session routing ↗
02 / REVIEW

A draft, not a send.

Free text needs independent approval of its immutable digest. Unattended replies require explicitly configured literal templates.

Reply policies ↗
03 / MEMORY

A report, not a ban.

A worker can decline a risky task. It cannot silence a person in future conversations or change their permissions.

Risk reports ↗

Host isolation still matters. Keep privileged tools, private data and other workers’ tokens outside the conversation worker. Read the security model ↗

START WITH YOUR BOT

Your smart bot.
Your review policy.

Install the CLI, provision the broker and isolated workers, then connect a trusted host through pending-event watches or durable webhook delivery.

Operator setup ↗
INSTALL / NODE.JS 20+
npm install -g @angelmsger/wecom-chat-cli@0.4.0
wecom-chat-cli auth guide
wecom-chat-cli config example