WeCom Customer Service Configuration

wecom-kf.customer_service:
  corp_id: ww1234567890abcdef
  corp_secret: your_wecom_customer_service_secret
  token: your_callback_token
  encoding_aes_key: your_43_character_key
  open_kfid: wkxxxxxxxxxxxxxxxx
  webhook_path: /wecom-kf/customer_service/webhook
  cursor_store_path: ./data/wecom-kf-cursor.json
  deduplicate_messages: true
  message_deduplication_limit: 10000
  enable_sync_poll: false
  sync_poll_interval_ms: 30000
  api_base_url: https://qyapi.weixin.qq.com

The callback credentials are required because only signed encrypted XML is accepted. corp_secret is the WeCom Customer Service API secret. open_kfid is optional unless compensating polling is enabled. Cursors are persisted with asynchronous atomic replacement when cursor_store_path is set.

Temporary media upload does not require agent_id; that legacy field is no longer read.

The initial credential request, compensating synchronization, and subsequent protocol outlets share the global OneBots timeout. A startup timeout, manual stop, or configuration reload aborts pending API work and clears polling. The startup signal remains attached after the account becomes ready, allowing a failed protocol startup to roll back the complete WeCom Customer Service lifecycle.