Harden attachment access controls and stabilize the Weixin bridge.

This persists referenced media safely, adds explicit attachment ACL/backfill flows, and fixes the Weixin sidecar so official login state can bridge reliably into oclaw without duplicate replays or dropped replies.

Made-with: Cursor

runtime/operations/scripts/weixin_stop.ps1

@@ -4,17 +4,63 @@ param(
 )
 
 $ErrorActionPreference = "Stop"
+$systemNodeDir = "C:\\Program Files\\nodejs"
+if (Test-Path (Join-Path $systemNodeDir "node.exe")) {
+  $env:PATH = "$systemNodeDir;$env:PATH"
+}
 
 function Resolve-RepoRoot {
   $here = Split-Path -Parent $PSCommandPath
-  return (Resolve-Path (Join-Path $here "..")).Path
+  # runtime/operations/scripts -> repo root
+  return (Resolve-Path (Join-Path $here "..\\..\\..")).Path
 }
 
 $oclawRoot = Resolve-RepoRoot
 $sidecarRoot = Join-Path $oclawRoot "data\\channel_sidecar\\$ChannelId"
 $pidFile = Join-Path $sidecarRoot "pid.txt"
 
+function Get-SidecarProcesses {
+  $escapedSidecarRoot = $sidecarRoot.Replace("\", "\\")
+  $patterns = @(
+    "*$ChannelId*",
+    "*runner.ts*",
+    "*$escapedSidecarRoot*"
+  )
+  Get-CimInstance Win32_Process | Where-Object {
+    $cmd = [string]($_.CommandLine)
+    if (-not $cmd) { return $false }
+    foreach ($pattern in $patterns) {
+      if ($cmd -like $pattern) { return $true }
+    }
+    return $false
+  }
+}
+
+function Stop-SidecarProcesses {
+  param(
+    [switch]$ForceKill
+  )
+  $procs = @(Get-SidecarProcesses | Sort-Object ProcessId -Descending)
+  foreach ($proc in $procs) {
+    try {
+      if ($ForceKill) {
+        taskkill.exe /PID $proc.ProcessId /T /F | Out-Null
+      } else {
+        taskkill.exe /PID $proc.ProcessId /T | Out-Null
+      }
+    } catch {
+      # Ignore already-exited processes and continue best-effort cleanup.
+    }
+  }
+  return $procs.Count
+}
+
 if (-not (Test-Path $pidFile)) {
+  $killed = Stop-SidecarProcesses -ForceKill:$Force
+  if ($killed -gt 0) {
+    Write-Host "[ok] cleaned stale sidecar processes count=$killed"
+    exit 0
+  }
   Write-Host "[ok] not running (no pid file)"
   exit 0
 }
@@ -36,6 +82,11 @@ try {
   # Ignore if already dead.
 }
 
+$killed = Stop-SidecarProcesses -ForceKill:$Force
 Remove-Item -Force $pidFile -ErrorAction SilentlyContinue
-Write-Host "[ok] stopped pid=$procId"
+$openclawCmd = Get-Command openclaw -ErrorAction SilentlyContinue
+if ($openclawCmd) {
+  try { openclaw gateway stop | Out-Null } catch {}
+}
+Write-Host "[ok] stopped pid=$procId extra_cleaned=$killed"