fix: WeChat session persistence - auto-reconnect after gateway restart

- config.yaml: add weixin platform (enabled, dm_policy: open)
- start.sh: auto-discover WEIXIN_ACCOUNT_ID from persisted accounts dir
- entry.py: add weixin to _ensure_persistent_storage()
- Dockerfile: install aiohttp + cryptography (weixin deps)

Dockerfile

@@ -15,7 +15,8 @@ RUN python3 -m venv /app/venv
 ENV PATH="/app/venv/bin:$PATH"
 RUN pip install --quiet --upgrade pip && \
     pip install --quiet psutil networkx && \
-    pip install --quiet -e "/app/hermes-agent[feishu,mcp,cron,pty]" 2>&1 | tail -10
+    pip install --quiet -e "/app/hermes-agent[feishu,mcp,cron,pty]" && \
+    pip install --quiet aiohttp cryptography 2>&1 | tail -10
 
 # Patch: add document file extensions to auto-detection for native delivery
 COPY scripts/patch_file_delivery.py /tmp/patch_file_delivery.py

config.yaml

@@ -10,6 +10,11 @@ platforms:
     extra:
       domain: feishu
       connection_mode: websocket
+  weixin:
+    enabled: true
+    extra:
+      dm_policy: open
+      group_policy: disabled
   api_server:
     enabled: true
     extra:

entry.py

@@ -265,13 +265,13 @@ def _log_tailer():
 # ---------------------------------------------------------------------------
 
 def _ensure_persistent_storage():
-    for d in ("sessions", "memories", "uploads", "logs", "palace", "skills"):
+    for d in ("sessions", "memories", "uploads", "logs", "palace", "skills", "weixin"):
         os.makedirs(os.path.join(DATA_DIR, d), exist_ok=True)
 
     hermes = Path(HERMES_HOME)
     hermes.mkdir(parents=True, exist_ok=True)
 
-    for d in ("sessions", "memories", "uploads", "logs", "palace", "skills"):
+    for d in ("sessions", "memories", "uploads", "logs", "palace", "skills", "weixin"):
         target = hermes / d
         if not target.exists():
             try:

start.sh

@@ -33,6 +33,25 @@ if [ ! -L "$WEIXIN_DIR" ]; then
     echo "Symlink: weixin -> /data/hermes/weixin"
 fi
 
+# Auto-discover WeChat account_id from persisted session files
+# The QR login flow saves credentials to ~/.hermes/weixin/accounts/<account_id>.json
+# We export it as WEIXIN_ACCOUNT_ID so the gateway picks it up without manual config
+if [ -z "$WEIXIN_ACCOUNT_ID" ]; then
+    ACCOUNTS_DIR="/data/hermes/weixin/accounts"
+    if [ -d "$ACCOUNTS_DIR" ]; then
+        LATEST=$(find "$ACCOUNTS_DIR" -name "*.json" ! -name "*.context-tokens.json" ! -name "*.sync.json" -type f -printf '%T@ %p\n' 2>/dev/null | sort -rn | head -1 | awk '{print $2}')
+        if [ -n "$LATEST" ]; then
+            DISCOVERED_ID=$(basename "$LATEST" .json)
+            export WEIXIN_ACCOUNT_ID="$DISCOVERED_ID"
+            echo "Auto-discovered WEIXIN_ACCOUNT_ID=$DISCOVERED_ID"
+        else
+            echo "No WeChat account files found in $ACCOUNTS_DIR"
+        fi
+    else
+        echo "WeChat accounts directory not found (first-time QR login needed)"
+    fi
+fi
+
 echo "Persistent storage ready."
 
 # ── Persist WebUI credentials across rebuilds ──