feat: gate WeChat media analysis by user

wechat-mp.mjs

@@ -1170,6 +1170,23 @@ function normalizeNumber(value) {
   return Number.isFinite(num) ? num : null;
 }
 
+function isWechatMediaGrayUser(user, configuredUsers = []) {
+  const allowlist = Array.isArray(configuredUsers)
+    ? configuredUsers.map((value) => String(value ?? '').trim().toLowerCase()).filter(Boolean)
+    : [];
+  if (allowlist.length === 0) return false;
+  const identities = [
+    user?.userId,
+    user?.username,
+    user?.slug,
+    user?.displayName,
+    user?.nickname,
+  ]
+    .map((value) => String(value ?? '').trim().toLowerCase())
+    .filter(Boolean);
+  return identities.some((identity) => allowlist.includes(identity));
+}
+
 function normalizeWechatInboundIntent(inbound) {
   const msgType = String(inbound?.msgType ?? '').toLowerCase();
   const base = {
@@ -1462,6 +1479,9 @@ export function createWechatMpService({
     acceptFile: config.acceptFile !== false,
     acceptLocation: config.acceptLocation !== false,
     acceptLink: config.acceptLink !== false,
+    mediaAnalysisGrayUsers: Array.isArray(config.mediaAnalysisGrayUsers)
+      ? config.mediaAnalysisGrayUsers
+      : [],
     asrTarget: config.asrTarget || DEFAULT_ASR_TARGET,
   };
 
@@ -1896,7 +1916,7 @@ export function createWechatMpService({
     }
   };
 
-  const buildIntentMetadata = (intent) => {
+  const buildIntentMetadata = (intent, { mediaAnalysisEnabled = false } = {}) => {
     const mediaPublicUrl = intent.media?.publicUrl || null;
     const fileAttachment =
       intent.msgType === 'file' && mediaPublicUrl && intent.attachment?.filename
@@ -1913,8 +1933,10 @@ export function createWechatMpService({
       originalMsgId: intent.msgId || null,
       displayText: intent.displayText || '',
       mediaPublicUrl,
-      ...(intent.msgType === 'image' && mediaPublicUrl ? { imageUrls: [mediaPublicUrl] } : {}),
-      ...(fileAttachment ? { fileAttachments: [fileAttachment] } : {}),
+      ...(mediaAnalysisEnabled && intent.msgType === 'image' && mediaPublicUrl
+        ? { imageUrls: [mediaPublicUrl] }
+        : {}),
+      ...(mediaAnalysisEnabled && fileAttachment ? { fileAttachments: [fileAttachment] } : {}),
       recognition: intent.msgType === 'voice' ? intent.agentText || null : null,
       location: intent.location || null,
       link: intent.link || null,
@@ -1959,6 +1981,7 @@ export function createWechatMpService({
 
   const runIntentMessage = async ({ inbound, intent, user }) => {
     const wechatIntent = classifyWechatIntent(intent);
+    const mediaAnalysisEnabled = isWechatMediaGrayUser(user, config.mediaAnalysisGrayUsers);
     const resetCandidate =
       intent.msgType === 'text' || intent.msgType === 'voice' ? intent.agentText : '';
     // Page Data delivery owns persistent files, datasets and two publication
@@ -2008,7 +2031,7 @@ export function createWechatMpService({
         sessionId,
         requestId,
         agentPrompt,
-        buildIntentMetadata(intent),
+        buildIntentMetadata(intent, { mediaAnalysisEnabled }),
       );
       const workingDir = publishLayout?.publishDir ?? (await userAuth.resolveWorkingDir(user.userId));
       const linkExistsForRequest = resolveLinkExistsForWorkingDir(workingDir, linkExists);
@@ -2167,7 +2190,7 @@ export function createWechatMpService({
           sessionId,
           retryId,
           retryPrompt,
-          buildIntentMetadata(intent),
+          buildIntentMetadata(intent, { mediaAnalysisEnabled }),
         );
         const workingDir = publishLayout?.publishDir ?? (await userAuth.resolveWorkingDir(user.userId));
         const linkExistsForRequest = resolveLinkExistsForWorkingDir(workingDir, linkExists);
@@ -2389,6 +2412,25 @@ export function createWechatMpService({
       };
     }
 
+    const mediaAnalysisEnabled = isWechatMediaGrayUser(
+      boundUser,
+      config.mediaAnalysisGrayUsers,
+    );
+
+    if (intent.msgType === 'file' && !mediaAnalysisEnabled) {
+      await persistIntentDetail({ intent, userId: boundUser.userId, rawXmlHash });
+      return {
+        ok: true,
+        status: 200,
+        contentType: 'application/xml; charset=utf-8',
+        body: buildWechatTextReply({
+          toUserName: inbound.fromUserName,
+          fromUserName: inbound.toUserName,
+          content: '当前账号尚未开启服务号文件分析灰度，请先通过 H5 上传文件。',
+        }),
+      };
+    }
+
     if (intent.msgType === 'voice' && !intent.agentText.trim() && intent.media?.mediaId) {
       try {
         const fallbackText = await transcribeWechatVoiceMedia(intent.media.mediaId, intent.media.format);