@aigne/afs-dingtalk 1.11.0-beta.12

package/LICENSE.md

@@ -0,0 +1,26 @@
+# Proprietary License
+
+Copyright (c) 2024-2025 ArcBlock, Inc. All Rights Reserved.
+
+This software and associated documentation files (the "Software") are proprietary
+and confidential. Unauthorized copying, modification, distribution, or use of
+this Software, via any medium, is strictly prohibited.
+
+The Software is provided for internal use only within ArcBlock, Inc. and its
+authorized affiliates.
+
+## No License Granted
+
+No license, express or implied, is granted to any party for any purpose.
+All rights are reserved by ArcBlock, Inc.
+
+## Public Artifact Distribution
+
+Portions of this Software may be released publicly under separate open-source
+licenses (such as MIT License) through designated public repositories. Such
+public releases are governed by their respective licenses and do not affect
+the proprietary nature of this repository.
+
+## Contact
+
+For licensing inquiries, contact: legal@arcblock.io

package/dist/_virtual/_@oxc-project_runtime@0.108.0/helpers/decorate.cjs

@@ -0,0 +1,11 @@
+
+//#region \0@oxc-project+runtime@0.108.0/helpers/decorate.js
+function __decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+//#endregion
+exports.__decorate = __decorate;

package/dist/_virtual/_@oxc-project_runtime@0.108.0/helpers/decorate.mjs

@@ -0,0 +1,10 @@
+//#region \0@oxc-project+runtime@0.108.0/helpers/decorate.js
+function __decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+//#endregion
+export { __decorate };

package/dist/client.cjs

@@ -0,0 +1,152 @@
+
+//#region src/client.ts
+/**
+* DingTalkClient — pure DingTalk API wrapper.
+*
+* Two modes:
+* - Webhook: outbound-only, POST to Custom Robot webhook URL
+* - Bot: bidirectional, Enterprise Internal Bot with token refresh
+*
+* Zero external dependencies (uses native fetch).
+* No AFS or application-specific concepts.
+*/
+const DEFAULT_LEGACY_API_BASE = "https://oapi.dingtalk.com";
+const DEFAULT_NEW_API_BASE = "https://api.dingtalk.com/v1.0";
+const DEFAULT_TIMEOUT = 3e4;
+/** Token refresh margin: refresh 5 minutes before expiry. */
+const TOKEN_REFRESH_MARGIN_MS = 300 * 1e3;
+var DingTalkClient = class DingTalkClient {
+	mode;
+	_webhookUrl;
+	_appKey;
+	_appSecret;
+	_legacyApiBase;
+	_newApiBase;
+	_timeout;
+	_accessToken = null;
+	_tokenExpiresAt = 0;
+	constructor(opts) {
+		this.mode = opts.mode;
+		this._webhookUrl = opts.webhookUrl ?? null;
+		this._appKey = opts.appKey ?? null;
+		this._appSecret = opts.appSecret ?? null;
+		this._legacyApiBase = opts.legacyApiBase ?? DEFAULT_LEGACY_API_BASE;
+		this._newApiBase = opts.newApiBase ?? DEFAULT_NEW_API_BASE;
+		this._timeout = opts.timeout ?? DEFAULT_TIMEOUT;
+	}
+	static webhook(accessToken, options) {
+		if (!accessToken) throw new Error("DingTalkClient.webhook requires an accessToken");
+		return new DingTalkClient({
+			mode: "webhook",
+			webhookUrl: `${DEFAULT_LEGACY_API_BASE}/robot/send?access_token=${accessToken}`,
+			timeout: options?.timeout
+		});
+	}
+	static bot(options) {
+		if (!options.appKey) throw new Error("DingTalkClient.bot requires an appKey");
+		if (!options.appSecret) throw new Error("DingTalkClient.bot requires an appSecret");
+		return new DingTalkClient({
+			mode: "bot",
+			appKey: options.appKey,
+			appSecret: options.appSecret,
+			legacyApiBase: options.legacyApiBase,
+			newApiBase: options.newApiBase,
+			timeout: options.timeout
+		});
+	}
+	async sendWebhook(text) {
+		if (!this._webhookUrl) throw new Error("sendWebhook requires webhook mode");
+		const data = await (await fetch(this._webhookUrl, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				msgtype: "text",
+				text: { content: text }
+			}),
+			signal: AbortSignal.timeout(this._timeout)
+		})).json();
+		if (data.errcode !== 0) throw new Error(`DingTalk webhook error ${data.errcode}: ${data.errmsg}`);
+	}
+	async sendGroupMessage(conversationId, text) {
+		await this._ensureToken();
+		const response = await fetch(`${this._newApiBase}/robot/groupMessages/send`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				"x-acs-dingtalk-access-token": this._accessToken
+			},
+			body: JSON.stringify({
+				msgParam: JSON.stringify({ content: text }),
+				msgKey: "sampleText",
+				openConversationId: conversationId
+			}),
+			signal: AbortSignal.timeout(this._timeout)
+		});
+		if (!response.ok) {
+			const errorText = await response.text().catch(() => "");
+			throw new Error(`DingTalk API error ${response.status}: ${errorText}`);
+		}
+	}
+	async _ensureToken() {
+		if (!this._appKey || !this._appSecret) throw new Error("_ensureToken requires bot mode (appKey + appSecret)");
+		if (this._accessToken && Date.now() < this._tokenExpiresAt - TOKEN_REFRESH_MARGIN_MS) return;
+		const url = `${this._legacyApiBase}/gettoken?appkey=${encodeURIComponent(this._appKey)}&appsecret=${encodeURIComponent(this._appSecret)}`;
+		const data = await (await fetch(url, {
+			method: "GET",
+			signal: AbortSignal.timeout(this._timeout)
+		})).json();
+		if (data.errcode && data.errcode !== 0) {
+			const desc = (data.errmsg || "Unknown error").replace(this._appKey, "***").replace(this._appSecret, "***");
+			throw new Error(`DingTalk token error ${data.errcode}: ${desc}`);
+		}
+		if (!data.access_token) throw new Error("DingTalk token response missing access_token");
+		this._accessToken = data.access_token;
+		this._tokenExpiresAt = Date.now() + (data.expires_in ?? 7200) * 1e3;
+	}
+	/**
+	* Parse a DingTalk outgoing webhook callback payload.
+	*
+	* DingTalk sends HTTP POST with:
+	* ```json
+	* {
+	*   "conversationId": "cidXXX",
+	*   "senderNick": "Alice",
+	*   "senderStaffId": "user123",
+	*   "text": { "content": "hello" },
+	*   "msgtype": "text",
+	*   "msgId": "msgXXX",
+	*   "createAt": 1700000000000,
+	*   "conversationType": "2"
+	* }
+	* ```
+	*/
+	static parseEvent(payload) {
+		if (!payload) return null;
+		if (payload.msgtype !== "text") return null;
+		const content = (payload.text?.content || "").trim();
+		if (!content) return null;
+		const msgId = payload.msgId;
+		const conversationId = payload.conversationId;
+		const senderStaffId = payload.senderStaffId || "";
+		const senderNick = payload.senderNick || "";
+		const conversationType = payload.conversationType || "1";
+		const createAt = payload.createAt || Date.now();
+		if (!msgId || !conversationId) return null;
+		return {
+			msgId,
+			content,
+			conversationId,
+			senderStaffId,
+			senderNick,
+			conversationType,
+			createAt
+		};
+	}
+	/** Escape special characters for DingTalk markdown. */
+	static escapeMarkdown(text) {
+		return text.replace(/([*_~`|\\#])/g, "\\$1");
+	}
+};
+
+//#endregion
+exports.DingTalkClient = DingTalkClient;

package/dist/client.d.cts

@@ -0,0 +1,72 @@
+//#region src/client.d.ts
+/**
+ * DingTalkClient — pure DingTalk API wrapper.
+ *
+ * Two modes:
+ * - Webhook: outbound-only, POST to Custom Robot webhook URL
+ * - Bot: bidirectional, Enterprise Internal Bot with token refresh
+ *
+ * Zero external dependencies (uses native fetch).
+ * No AFS or application-specific concepts.
+ */
+interface DingTalkBotOptions {
+  appKey: string;
+  appSecret: string;
+  /** Legacy API base (default: https://oapi.dingtalk.com) */
+  legacyApiBase?: string;
+  /** New API base (default: https://api.dingtalk.com/v1.0) */
+  newApiBase?: string;
+  timeout?: number;
+}
+/** Parsed DingTalk outgoing webhook event. */
+interface DingTalkEvent {
+  msgId: string;
+  content: string;
+  conversationId: string;
+  senderStaffId: string;
+  senderNick: string;
+  conversationType: string;
+  createAt: number;
+}
+declare class DingTalkClient {
+  readonly mode: "webhook" | "bot";
+  private readonly _webhookUrl;
+  private readonly _appKey;
+  private readonly _appSecret;
+  private readonly _legacyApiBase;
+  private readonly _newApiBase;
+  private readonly _timeout;
+  private _accessToken;
+  private _tokenExpiresAt;
+  private constructor();
+  static webhook(accessToken: string, options?: {
+    timeout?: number;
+  }): DingTalkClient;
+  static bot(options: DingTalkBotOptions): DingTalkClient;
+  sendWebhook(text: string): Promise<void>;
+  sendGroupMessage(conversationId: string, text: string): Promise<void>;
+  _ensureToken(): Promise<void>;
+  /**
+   * Parse a DingTalk outgoing webhook callback payload.
+   *
+   * DingTalk sends HTTP POST with:
+   * ```json
+   * {
+   *   "conversationId": "cidXXX",
+   *   "senderNick": "Alice",
+   *   "senderStaffId": "user123",
+   *   "text": { "content": "hello" },
+   *   "msgtype": "text",
+   *   "msgId": "msgXXX",
+   *   "createAt": 1700000000000,
+   *   "conversationType": "2"
+   * }
+   * ```
+   */
+  static parseEvent(payload: any): DingTalkEvent | null;
+  /** Escape special characters for DingTalk markdown. */
+  static escapeMarkdown(text: string): string;
+}
+//#endregion
+export { DingTalkClient, DingTalkEvent };
+//# sourceMappingURL=client.d.cts.map

package/dist/client.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.cts","names":[],"sources":["../src/client.ts"],"mappings":";;AAkBA;;;;;;;;;UAAiB,kBAAA;EACf,MAAA;EACA,SAAA;EAS4B;EAP5B,aAAA;EAO4B;EAL5B,UAAA;EACA,OAAA;AAAA;;UAIe,aAAA;EACf,KAAA;EACA,OAAA;EACA,cAAA;EACA,aAAA;EACA,UAAA;EACA,gBAAA;EACA,QAAA;AAAA;AAAA,cAGW,cAAA;EAAA,SACF,IAAA;EAAA,iBACQ,WAAA;EAAA,iBACA,OAAA;EAAA,iBACA,UAAA;EAAA,iBACA,cAAA;EAAA,iBACA,WAAA;EAAA,iBACA,QAAA;EAAA,QAET,YAAA;EAAA,QACA,eAAA;EAAA,QAED,WAAA,CAAA;EAAA,OAoBA,OAAA,CAAQ,WAAA,UAAqB,OAAA;IAAY,OAAA;EAAA,IAAqB,cAAA;EAAA,OAW9D,GAAA,CAAI,OAAA,EAAS,kBAAA,GAAqB,cAAA;EAenC,WAAA,CAAY,IAAA,WAAe,OAAA;EAqB3B,gBAAA,CAAiB,cAAA,UAAwB,IAAA,WAAe,OAAA;EAyBxD,YAAA,CAAA,GAAgB,OAAA;EAxEf;;;;;;;;;;;;;;;;;EAAA,OAiIA,UAAA,CAAW,OAAA,QAAe,aAAA;EAA1B;EAAA,OA8BA,cAAA,CAAe,IAAA;AAAA"}

package/dist/client.d.mts

@@ -0,0 +1,72 @@
+//#region src/client.d.ts
+/**
+ * DingTalkClient — pure DingTalk API wrapper.
+ *
+ * Two modes:
+ * - Webhook: outbound-only, POST to Custom Robot webhook URL
+ * - Bot: bidirectional, Enterprise Internal Bot with token refresh
+ *
+ * Zero external dependencies (uses native fetch).
+ * No AFS or application-specific concepts.
+ */
+interface DingTalkBotOptions {
+  appKey: string;
+  appSecret: string;
+  /** Legacy API base (default: https://oapi.dingtalk.com) */
+  legacyApiBase?: string;
+  /** New API base (default: https://api.dingtalk.com/v1.0) */
+  newApiBase?: string;
+  timeout?: number;
+}
+/** Parsed DingTalk outgoing webhook event. */
+interface DingTalkEvent {
+  msgId: string;
+  content: string;
+  conversationId: string;
+  senderStaffId: string;
+  senderNick: string;
+  conversationType: string;
+  createAt: number;
+}
+declare class DingTalkClient {
+  readonly mode: "webhook" | "bot";
+  private readonly _webhookUrl;
+  private readonly _appKey;
+  private readonly _appSecret;
+  private readonly _legacyApiBase;
+  private readonly _newApiBase;
+  private readonly _timeout;
+  private _accessToken;
+  private _tokenExpiresAt;
+  private constructor();
+  static webhook(accessToken: string, options?: {
+    timeout?: number;
+  }): DingTalkClient;
+  static bot(options: DingTalkBotOptions): DingTalkClient;
+  sendWebhook(text: string): Promise<void>;
+  sendGroupMessage(conversationId: string, text: string): Promise<void>;
+  _ensureToken(): Promise<void>;
+  /**
+   * Parse a DingTalk outgoing webhook callback payload.
+   *
+   * DingTalk sends HTTP POST with:
+   * ```json
+   * {
+   *   "conversationId": "cidXXX",
+   *   "senderNick": "Alice",
+   *   "senderStaffId": "user123",
+   *   "text": { "content": "hello" },
+   *   "msgtype": "text",
+   *   "msgId": "msgXXX",
+   *   "createAt": 1700000000000,
+   *   "conversationType": "2"
+   * }
+   * ```
+   */
+  static parseEvent(payload: any): DingTalkEvent | null;
+  /** Escape special characters for DingTalk markdown. */
+  static escapeMarkdown(text: string): string;
+}
+//#endregion
+export { DingTalkClient, DingTalkEvent };
+//# sourceMappingURL=client.d.mts.map

package/dist/client.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"mappings":";;AAkBA;;;;;;;;;UAAiB,kBAAA;EACf,MAAA;EACA,SAAA;EAS4B;EAP5B,aAAA;EAO4B;EAL5B,UAAA;EACA,OAAA;AAAA;;UAIe,aAAA;EACf,KAAA;EACA,OAAA;EACA,cAAA;EACA,aAAA;EACA,UAAA;EACA,gBAAA;EACA,QAAA;AAAA;AAAA,cAGW,cAAA;EAAA,SACF,IAAA;EAAA,iBACQ,WAAA;EAAA,iBACA,OAAA;EAAA,iBACA,UAAA;EAAA,iBACA,cAAA;EAAA,iBACA,WAAA;EAAA,iBACA,QAAA;EAAA,QAET,YAAA;EAAA,QACA,eAAA;EAAA,QAED,WAAA,CAAA;EAAA,OAoBA,OAAA,CAAQ,WAAA,UAAqB,OAAA;IAAY,OAAA;EAAA,IAAqB,cAAA;EAAA,OAW9D,GAAA,CAAI,OAAA,EAAS,kBAAA,GAAqB,cAAA;EAenC,WAAA,CAAY,IAAA,WAAe,OAAA;EAqB3B,gBAAA,CAAiB,cAAA,UAAwB,IAAA,WAAe,OAAA;EAyBxD,YAAA,CAAA,GAAgB,OAAA;EAxEf;;;;;;;;;;;;;;;;;EAAA,OAiIA,UAAA,CAAW,OAAA,QAAe,aAAA;EAA1B;EAAA,OA8BA,cAAA,CAAe,IAAA;AAAA"}

package/dist/client.mjs

@@ -0,0 +1,152 @@
+//#region src/client.ts
+/**
+* DingTalkClient — pure DingTalk API wrapper.
+*
+* Two modes:
+* - Webhook: outbound-only, POST to Custom Robot webhook URL
+* - Bot: bidirectional, Enterprise Internal Bot with token refresh
+*
+* Zero external dependencies (uses native fetch).
+* No AFS or application-specific concepts.
+*/
+const DEFAULT_LEGACY_API_BASE = "https://oapi.dingtalk.com";
+const DEFAULT_NEW_API_BASE = "https://api.dingtalk.com/v1.0";
+const DEFAULT_TIMEOUT = 3e4;
+/** Token refresh margin: refresh 5 minutes before expiry. */
+const TOKEN_REFRESH_MARGIN_MS = 300 * 1e3;
+var DingTalkClient = class DingTalkClient {
+	mode;
+	_webhookUrl;
+	_appKey;
+	_appSecret;
+	_legacyApiBase;
+	_newApiBase;
+	_timeout;
+	_accessToken = null;
+	_tokenExpiresAt = 0;
+	constructor(opts) {
+		this.mode = opts.mode;
+		this._webhookUrl = opts.webhookUrl ?? null;
+		this._appKey = opts.appKey ?? null;
+		this._appSecret = opts.appSecret ?? null;
+		this._legacyApiBase = opts.legacyApiBase ?? DEFAULT_LEGACY_API_BASE;
+		this._newApiBase = opts.newApiBase ?? DEFAULT_NEW_API_BASE;
+		this._timeout = opts.timeout ?? DEFAULT_TIMEOUT;
+	}
+	static webhook(accessToken, options) {
+		if (!accessToken) throw new Error("DingTalkClient.webhook requires an accessToken");
+		return new DingTalkClient({
+			mode: "webhook",
+			webhookUrl: `${DEFAULT_LEGACY_API_BASE}/robot/send?access_token=${accessToken}`,
+			timeout: options?.timeout
+		});
+	}
+	static bot(options) {
+		if (!options.appKey) throw new Error("DingTalkClient.bot requires an appKey");
+		if (!options.appSecret) throw new Error("DingTalkClient.bot requires an appSecret");
+		return new DingTalkClient({
+			mode: "bot",
+			appKey: options.appKey,
+			appSecret: options.appSecret,
+			legacyApiBase: options.legacyApiBase,
+			newApiBase: options.newApiBase,
+			timeout: options.timeout
+		});
+	}
+	async sendWebhook(text) {
+		if (!this._webhookUrl) throw new Error("sendWebhook requires webhook mode");
+		const data = await (await fetch(this._webhookUrl, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				msgtype: "text",
+				text: { content: text }
+			}),
+			signal: AbortSignal.timeout(this._timeout)
+		})).json();
+		if (data.errcode !== 0) throw new Error(`DingTalk webhook error ${data.errcode}: ${data.errmsg}`);
+	}
+	async sendGroupMessage(conversationId, text) {
+		await this._ensureToken();
+		const response = await fetch(`${this._newApiBase}/robot/groupMessages/send`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				"x-acs-dingtalk-access-token": this._accessToken
+			},
+			body: JSON.stringify({
+				msgParam: JSON.stringify({ content: text }),
+				msgKey: "sampleText",
+				openConversationId: conversationId
+			}),
+			signal: AbortSignal.timeout(this._timeout)
+		});
+		if (!response.ok) {
+			const errorText = await response.text().catch(() => "");
+			throw new Error(`DingTalk API error ${response.status}: ${errorText}`);
+		}
+	}
+	async _ensureToken() {
+		if (!this._appKey || !this._appSecret) throw new Error("_ensureToken requires bot mode (appKey + appSecret)");
+		if (this._accessToken && Date.now() < this._tokenExpiresAt - TOKEN_REFRESH_MARGIN_MS) return;
+		const url = `${this._legacyApiBase}/gettoken?appkey=${encodeURIComponent(this._appKey)}&appsecret=${encodeURIComponent(this._appSecret)}`;
+		const data = await (await fetch(url, {
+			method: "GET",
+			signal: AbortSignal.timeout(this._timeout)
+		})).json();
+		if (data.errcode && data.errcode !== 0) {
+			const desc = (data.errmsg || "Unknown error").replace(this._appKey, "***").replace(this._appSecret, "***");
+			throw new Error(`DingTalk token error ${data.errcode}: ${desc}`);
+		}
+		if (!data.access_token) throw new Error("DingTalk token response missing access_token");
+		this._accessToken = data.access_token;
+		this._tokenExpiresAt = Date.now() + (data.expires_in ?? 7200) * 1e3;
+	}
+	/**
+	* Parse a DingTalk outgoing webhook callback payload.
+	*
+	* DingTalk sends HTTP POST with:
+	* ```json
+	* {
+	*   "conversationId": "cidXXX",
+	*   "senderNick": "Alice",
+	*   "senderStaffId": "user123",
+	*   "text": { "content": "hello" },
+	*   "msgtype": "text",
+	*   "msgId": "msgXXX",
+	*   "createAt": 1700000000000,
+	*   "conversationType": "2"
+	* }
+	* ```
+	*/
+	static parseEvent(payload) {
+		if (!payload) return null;
+		if (payload.msgtype !== "text") return null;
+		const content = (payload.text?.content || "").trim();
+		if (!content) return null;
+		const msgId = payload.msgId;
+		const conversationId = payload.conversationId;
+		const senderStaffId = payload.senderStaffId || "";
+		const senderNick = payload.senderNick || "";
+		const conversationType = payload.conversationType || "1";
+		const createAt = payload.createAt || Date.now();
+		if (!msgId || !conversationId) return null;
+		return {
+			msgId,
+			content,
+			conversationId,
+			senderStaffId,
+			senderNick,
+			conversationType,
+			createAt
+		};
+	}
+	/** Escape special characters for DingTalk markdown. */
+	static escapeMarkdown(text) {
+		return text.replace(/([*_~`|\\#])/g, "\\$1");
+	}
+};
+
+//#endregion
+export { DingTalkClient };
+//# sourceMappingURL=client.mjs.map

package/dist/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["/**\n * DingTalkClient — pure DingTalk API wrapper.\n *\n * Two modes:\n * - Webhook: outbound-only, POST to Custom Robot webhook URL\n * - Bot: bidirectional, Enterprise Internal Bot with token refresh\n *\n * Zero external dependencies (uses native fetch).\n * No AFS or application-specific concepts.\n */\n\nconst DEFAULT_LEGACY_API_BASE = \"https://oapi.dingtalk.com\";\nconst DEFAULT_NEW_API_BASE = \"https://api.dingtalk.com/v1.0\";\nconst DEFAULT_TIMEOUT = 30_000;\n\n/** Token refresh margin: refresh 5 minutes before expiry. */\nconst TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;\n\nexport interface DingTalkBotOptions {\n  appKey: string;\n  appSecret: string;\n  /** Legacy API base (default: https://oapi.dingtalk.com) */\n  legacyApiBase?: string;\n  /** New API base (default: https://api.dingtalk.com/v1.0) */\n  newApiBase?: string;\n  timeout?: number;\n}\n\n/** Parsed DingTalk outgoing webhook event. */\nexport interface DingTalkEvent {\n  msgId: string;\n  content: string;\n  conversationId: string;\n  senderStaffId: string;\n  senderNick: string;\n  conversationType: string;\n  createAt: number;\n}\n\nexport class DingTalkClient {\n  readonly mode: \"webhook\" | \"bot\";\n  private readonly _webhookUrl: string | null;\n  private readonly _appKey: string | null;\n  private readonly _appSecret: string | null;\n  private readonly _legacyApiBase: string;\n  private readonly _newApiBase: string;\n  private readonly _timeout: number;\n\n  private _accessToken: string | null = null;\n  private _tokenExpiresAt = 0;\n\n  private constructor(opts: {\n    mode: \"webhook\" | \"bot\";\n    webhookUrl?: string;\n    appKey?: string;\n    appSecret?: string;\n    legacyApiBase?: string;\n    newApiBase?: string;\n    timeout?: number;\n  }) {\n    this.mode = opts.mode;\n    this._webhookUrl = opts.webhookUrl ?? null;\n    this._appKey = opts.appKey ?? null;\n    this._appSecret = opts.appSecret ?? null;\n    this._legacyApiBase = opts.legacyApiBase ?? DEFAULT_LEGACY_API_BASE;\n    this._newApiBase = opts.newApiBase ?? DEFAULT_NEW_API_BASE;\n    this._timeout = opts.timeout ?? DEFAULT_TIMEOUT;\n  }\n\n  // ─── Factory Methods ──────────────────────────────────────\n\n  static webhook(accessToken: string, options?: { timeout?: number }): DingTalkClient {\n    if (!accessToken) throw new Error(\"DingTalkClient.webhook requires an accessToken\");\n\n    const webhookUrl = `${DEFAULT_LEGACY_API_BASE}/robot/send?access_token=${accessToken}`;\n    return new DingTalkClient({\n      mode: \"webhook\",\n      webhookUrl,\n      timeout: options?.timeout,\n    });\n  }\n\n  static bot(options: DingTalkBotOptions): DingTalkClient {\n    if (!options.appKey) throw new Error(\"DingTalkClient.bot requires an appKey\");\n    if (!options.appSecret) throw new Error(\"DingTalkClient.bot requires an appSecret\");\n    return new DingTalkClient({\n      mode: \"bot\",\n      appKey: options.appKey,\n      appSecret: options.appSecret,\n      legacyApiBase: options.legacyApiBase,\n      newApiBase: options.newApiBase,\n      timeout: options.timeout,\n    });\n  }\n\n  // ─── Webhook Mode ─────────────────────────────────────────\n\n  async sendWebhook(text: string): Promise<void> {\n    if (!this._webhookUrl) throw new Error(\"sendWebhook requires webhook mode\");\n\n    const response = await fetch(this._webhookUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({\n        msgtype: \"text\",\n        text: { content: text },\n      }),\n      signal: AbortSignal.timeout(this._timeout),\n    });\n\n    const data = (await response.json()) as { errcode: number; errmsg: string };\n    if (data.errcode !== 0) {\n      throw new Error(`DingTalk webhook error ${data.errcode}: ${data.errmsg}`);\n    }\n  }\n\n  // ─── Bot Mode ─────────────────────────────────────────────\n\n  async sendGroupMessage(conversationId: string, text: string): Promise<void> {\n    await this._ensureToken();\n\n    const response = await fetch(`${this._newApiBase}/robot/groupMessages/send`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"x-acs-dingtalk-access-token\": this._accessToken!,\n      },\n      body: JSON.stringify({\n        msgParam: JSON.stringify({ content: text }),\n        msgKey: \"sampleText\",\n        openConversationId: conversationId,\n      }),\n      signal: AbortSignal.timeout(this._timeout),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text().catch(() => \"\");\n      throw new Error(`DingTalk API error ${response.status}: ${errorText}`);\n    }\n  }\n\n  // ─── Token Management ─────────────────────────────────────\n\n  async _ensureToken(): Promise<void> {\n    if (!this._appKey || !this._appSecret) {\n      throw new Error(\"_ensureToken requires bot mode (appKey + appSecret)\");\n    }\n\n    if (this._accessToken && Date.now() < this._tokenExpiresAt - TOKEN_REFRESH_MARGIN_MS) {\n      return;\n    }\n\n    const url = `${this._legacyApiBase}/gettoken?appkey=${encodeURIComponent(this._appKey)}&appsecret=${encodeURIComponent(this._appSecret)}`;\n\n    const response = await fetch(url, {\n      method: \"GET\",\n      signal: AbortSignal.timeout(this._timeout),\n    });\n\n    const data = (await response.json()) as {\n      errcode?: number;\n      errmsg?: string;\n      access_token?: string;\n      expires_in?: number;\n    };\n\n    if (data.errcode && data.errcode !== 0) {\n      const desc = (data.errmsg || \"Unknown error\")\n        .replace(this._appKey, \"***\")\n        .replace(this._appSecret, \"***\");\n      throw new Error(`DingTalk token error ${data.errcode}: ${desc}`);\n    }\n\n    if (!data.access_token) {\n      throw new Error(\"DingTalk token response missing access_token\");\n    }\n\n    this._accessToken = data.access_token;\n    this._tokenExpiresAt = Date.now() + (data.expires_in ?? 7200) * 1000;\n  }\n\n  // ─── Event Parsing ────────────────────────────────────────\n\n  /**\n   * Parse a DingTalk outgoing webhook callback payload.\n   *\n   * DingTalk sends HTTP POST with:\n   * ```json\n   * {\n   *   \"conversationId\": \"cidXXX\",\n   *   \"senderNick\": \"Alice\",\n   *   \"senderStaffId\": \"user123\",\n   *   \"text\": { \"content\": \"hello\" },\n   *   \"msgtype\": \"text\",\n   *   \"msgId\": \"msgXXX\",\n   *   \"createAt\": 1700000000000,\n   *   \"conversationType\": \"2\"\n   * }\n   * ```\n   */\n  static parseEvent(payload: any): DingTalkEvent | null {\n    if (!payload) return null;\n    if (payload.msgtype !== \"text\") return null;\n\n    const content = (payload.text?.content || \"\").trim();\n    if (!content) return null;\n\n    const msgId = payload.msgId;\n    const conversationId = payload.conversationId;\n    const senderStaffId = payload.senderStaffId || \"\";\n    const senderNick = payload.senderNick || \"\";\n    const conversationType = payload.conversationType || \"1\";\n    const createAt = payload.createAt || Date.now();\n\n    if (!msgId || !conversationId) return null;\n\n    return {\n      msgId,\n      content,\n      conversationId,\n      senderStaffId,\n      senderNick,\n      conversationType,\n      createAt,\n    };\n  }\n\n  // ─── Helpers ──────────────────────────────────────────────\n\n  /** Escape special characters for DingTalk markdown. */\n  static escapeMarkdown(text: string): string {\n    return text.replace(/([*_~`|\\\\#])/g, \"\\\\$1\");\n  }\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,0BAA0B;AAChC,MAAM,uBAAuB;AAC7B,MAAM,kBAAkB;;AAGxB,MAAM,0BAA0B,MAAS;AAuBzC,IAAa,iBAAb,MAAa,eAAe;CAC1B,AAAS;CACT,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,AAAQ,eAA8B;CACtC,AAAQ,kBAAkB;CAE1B,AAAQ,YAAY,MAQjB;AACD,OAAK,OAAO,KAAK;AACjB,OAAK,cAAc,KAAK,cAAc;AACtC,OAAK,UAAU,KAAK,UAAU;AAC9B,OAAK,aAAa,KAAK,aAAa;AACpC,OAAK,iBAAiB,KAAK,iBAAiB;AAC5C,OAAK,cAAc,KAAK,cAAc;AACtC,OAAK,WAAW,KAAK,WAAW;;CAKlC,OAAO,QAAQ,aAAqB,SAAgD;AAClF,MAAI,CAAC,YAAa,OAAM,IAAI,MAAM,iDAAiD;AAGnF,SAAO,IAAI,eAAe;GACxB,MAAM;GACN,YAHiB,GAAG,wBAAwB,2BAA2B;GAIvE,SAAS,SAAS;GACnB,CAAC;;CAGJ,OAAO,IAAI,SAA6C;AACtD,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,wCAAwC;AAC7E,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,2CAA2C;AACnF,SAAO,IAAI,eAAe;GACxB,MAAM;GACN,QAAQ,QAAQ;GAChB,WAAW,QAAQ;GACnB,eAAe,QAAQ;GACvB,YAAY,QAAQ;GACpB,SAAS,QAAQ;GAClB,CAAC;;CAKJ,MAAM,YAAY,MAA6B;AAC7C,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,oCAAoC;EAY3E,MAAM,OAAQ,OAVG,MAAM,MAAM,KAAK,aAAa;GAC7C,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IACnB,SAAS;IACT,MAAM,EAAE,SAAS,MAAM;IACxB,CAAC;GACF,QAAQ,YAAY,QAAQ,KAAK,SAAS;GAC3C,CAAC,EAE2B,MAAM;AACnC,MAAI,KAAK,YAAY,EACnB,OAAM,IAAI,MAAM,0BAA0B,KAAK,QAAQ,IAAI,KAAK,SAAS;;CAM7E,MAAM,iBAAiB,gBAAwB,MAA6B;AAC1E,QAAM,KAAK,cAAc;EAEzB,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,YAAY,4BAA4B;GAC3E,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,+BAA+B,KAAK;IACrC;GACD,MAAM,KAAK,UAAU;IACnB,UAAU,KAAK,UAAU,EAAE,SAAS,MAAM,CAAC;IAC3C,QAAQ;IACR,oBAAoB;IACrB,CAAC;GACF,QAAQ,YAAY,QAAQ,KAAK,SAAS;GAC3C,CAAC;AAEF,MAAI,CAAC,SAAS,IAAI;GAChB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;AACvD,SAAM,IAAI,MAAM,sBAAsB,SAAS,OAAO,IAAI,YAAY;;;CAM1E,MAAM,eAA8B;AAClC,MAAI,CAAC,KAAK,WAAW,CAAC,KAAK,WACzB,OAAM,IAAI,MAAM,sDAAsD;AAGxE,MAAI,KAAK,gBAAgB,KAAK,KAAK,GAAG,KAAK,kBAAkB,wBAC3D;EAGF,MAAM,MAAM,GAAG,KAAK,eAAe,mBAAmB,mBAAmB,KAAK,QAAQ,CAAC,aAAa,mBAAmB,KAAK,WAAW;EAOvI,MAAM,OAAQ,OALG,MAAM,MAAM,KAAK;GAChC,QAAQ;GACR,QAAQ,YAAY,QAAQ,KAAK,SAAS;GAC3C,CAAC,EAE2B,MAAM;AAOnC,MAAI,KAAK,WAAW,KAAK,YAAY,GAAG;GACtC,MAAM,QAAQ,KAAK,UAAU,iBAC1B,QAAQ,KAAK,SAAS,MAAM,CAC5B,QAAQ,KAAK,YAAY,MAAM;AAClC,SAAM,IAAI,MAAM,wBAAwB,KAAK,QAAQ,IAAI,OAAO;;AAGlE,MAAI,CAAC,KAAK,aACR,OAAM,IAAI,MAAM,+CAA+C;AAGjE,OAAK,eAAe,KAAK;AACzB,OAAK,kBAAkB,KAAK,KAAK,IAAI,KAAK,cAAc,QAAQ;;;;;;;;;;;;;;;;;;;CAsBlE,OAAO,WAAW,SAAoC;AACpD,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,YAAY,OAAQ,QAAO;EAEvC,MAAM,WAAW,QAAQ,MAAM,WAAW,IAAI,MAAM;AACpD,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,QAAQ,QAAQ;EACtB,MAAM,iBAAiB,QAAQ;EAC/B,MAAM,gBAAgB,QAAQ,iBAAiB;EAC/C,MAAM,aAAa,QAAQ,cAAc;EACzC,MAAM,mBAAmB,QAAQ,oBAAoB;EACrD,MAAM,WAAW,QAAQ,YAAY,KAAK,KAAK;AAE/C,MAAI,CAAC,SAAS,CAAC,eAAgB,QAAO;AAEtC,SAAO;GACL;GACA;GACA;GACA;GACA;GACA;GACA;GACD;;;CAMH,OAAO,eAAe,MAAsB;AAC1C,SAAO,KAAK,QAAQ,iBAAiB,OAAO"}