@aluria/wechat-ai-api 1.0.0 → 1.0.1

package/dist/index.js

@@ -1,7 +1,1075 @@
-import{EventEmitter as re}from"events";import{createCipheriv as q,createDecipheriv as H,createHash as V,randomBytes as O}from"crypto";var $="https://ilinkai.weixin.qq.com",G="https://cdn.weixin.qq.com";var b="aes-128-ecb";var g={AUTH_TYPE:"AuthorizationType",UIN:"X-WECHAT-UIN",APP_ID:"iLink-App-Id",CLIENT_VERSION:"iLink-App-ClientVersion",CONTENT_TYPE:"Content-Type",AUTHORIZATION:"Authorization",ERROR_MSG:"x-error-message",ENCRYPTED_PARAM:"x-encrypted-param"},w={AUTH_TYPE_VALUE:"ilink_bot_token",CONTENT_TYPE_JSON:"application/json",DEFAULT_TIMEOUT_MS:3e4},_={appId:"bot",version:"2.1.1",baseUrl:$,botType:"3",autoDownloadMedia:!0},M={maxRetry:3,cdnBaseUrl:G,apiTimeoutMs:15e3,backoffBaseMs:1e3},R={maxRetries:3,pollTimeoutMs:35e3,onQrCode:a=>{console.log(`
-==========================================`),console.log("\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\uFF0C\u5E76\u4F7F\u7528\u5FAE\u4FE1\u626B\u7801\uFF1A"),console.log(a.qrcodeUrl),console.log(`==========================================
-`)},onStatusChange:a=>{switch(a.status){case"wait":console.log("\u7B49\u5F85\u767B\u5F55...");break;case"scaned":console.log(`
-\u{1F440} \u5DF2\u626B\u7801\uFF0C\u8BF7\u5728\u624B\u673A\u5FAE\u4FE1\u4E0A\u70B9\u51FB\u786E\u8BA4\u767B\u5F55...`);break;case"confirmed":console.log(`
-\u5DF2\u94FE\u63A5, \u4F46\u9700\u624B\u52A8\u5728\u5FAE\u4FE1\u53D1\u9001\u7B2C\u4E00\u6761\u6D88\u606F\u540E, bot \u624D\u80FD\u6B63\u5E38\u56DE\u590D`);break;case"scaned_but_redirect":console.log(`
-[\u7CFB\u7EDF] ${a.message}`);break}}},f={contextToken:void 0,userId:void 0,caption:void 0};var d=class{static md5(e){return V("md5").update(e).digest("hex")}static generateRandomKey(e=16){return O(e)}static getPaddedSize(e){return Math.ceil((e+1)/16)*16}static aesEcbEncrypt(e,t){if(t.length!==16)throw new Error(`[CryptoUtils] AES-128 \u5BC6\u94A5\u957F\u5EA6\u5FC5\u987B\u4E3A ${16} \u5B57\u8282\uFF0C\u5F53\u524D\u4E3A ${t.length} \u5B57\u8282`);let r=q(b,t,null);return Buffer.concat([r.update(e),r.final()])}static aesEcbDecrypt(e,t){if(t.length!==16)throw new Error(`[CryptoUtils] AES-128 \u5BC6\u94A5\u957F\u5EA6\u5FC5\u987B\u4E3A ${16} \u5B57\u8282\uFF0C\u5F53\u524D\u4E3A ${t.length} \u5B57\u8282`);let r=H(b,t,null);return Buffer.concat([r.update(e),r.final()])}static generateClientId(){let e=O(4).toString("hex");return`wechat-bot:${Date.now()}-${e}`}static randomWechatUin(){let e=O(4).readUInt32BE(0);return Buffer.from(String(e),"utf-8").toString("base64")}};var S=(s=>(s.WAIT="wait",s.SCANNED="scaned",s.REDIRECT="scaned_but_redirect",s.CONFIRMED="confirmed",s.EXPIRED="expired",s))(S||{});function m(a,...e){let t={...a};for(let r of e)for(let n in r)r[n]!==void 0&&(t[n]=r[n]);return t}function L(a){switch(a){case 1:return"text";case 2:return"image";case 5:return"video";case 4:return"file";case 3:return"voice";default:return"unknown"}}function k(a){let e=a.split(".").map(s=>parseInt(s,10)),t=e[0]||0,r=e[1]||0,n=e[2]||0;return(t&255)<<16|(r&255)<<8|n&255}function B(a){if("file_item"in a)return a.file_item;if("image_item"in a)return a.image_item;if("voice_item"in a)return a.voice_item;if("video_item"in a)return a.video_item}function N(a){switch(a){case 2:case 3:case 4:case 5:return!0;case 0:case 1:default:return!1}}var h=class{config;clientVersionInt;constructor(e){this.config=m(_,e),this.clientVersionInt=k(e.version)}setToken(e){this.config.token=e}setBaseUrl(e){this.config.baseUrl=e}setUserId(e){this.config.userId=e}getBaseUrl(){return this.config.baseUrl}getBotType(){return this.config.botType}getUserId(){return this.config.userId}async request(e,t){let r=this.config.baseUrl.endsWith("/")?this.config.baseUrl:`${this.config.baseUrl}/`,n=new URL(e,r),s;if(t.method==="POST"&&t.body){let u={...t.body};u.base_info={channel_version:this.config.version},s=JSON.stringify(u)}else t.method==="POST"&&!t.body&&(s=JSON.stringify({base_info:{channel_version:this.config.version}}));let i=this.buildHeaders(s),o=new AbortController,c=setTimeout(()=>o.abort(),t.timeoutMs);try{let u=await fetch(n.toString(),{method:t.method,headers:i,body:s,signal:o.signal});clearTimeout(c);let l=await u.text();if(!u.ok)throw new Error(`WeChat API Error [${t.method} ${e}] HTTP ${u.status}: ${l}`);return l?JSON.parse(l):{}}catch(u){throw clearTimeout(c),u}}buildHeaders(e){let t={[g.CONTENT_TYPE]:w.CONTENT_TYPE_JSON,[g.AUTH_TYPE]:w.AUTH_TYPE_VALUE,[g.UIN]:d.randomWechatUin(),[g.APP_ID]:this.config.appId,[g.CLIENT_VERSION]:String(this.clientVersionInt)};return e&&(t["Content-Length"]=String(Buffer.byteLength(e,"utf-8"))),this.config.token?.trim()&&(t.Authorization=`Bearer ${this.config.token.trim()}`),t}};var C=class{core;constructor(e){this.core=e}async getQrCode(){this.core.setBaseUrl(this.core.getBaseUrl());let e=await this.core.request(`ilink/bot/get_bot_qrcode?bot_type=${this.core.getBotType()}`,{method:"GET",timeoutMs:1e4});return{qrcodeId:e.qrcode,qrcodeUrl:e.qrcode_img_content}}async pollLoginStatus(e,t=35e3){try{let r=await this.core.request(`ilink/bot/get_qrcode_status?qrcode=${encodeURIComponent(e)}`,{method:"GET",timeoutMs:t});return{status:r.status,data:r}}catch(r){if(r.name==="AbortError")return{status:"wait"};throw r}}async login(e){let t=e.maxRetries??3,r=0;for(;r<=t;){let n=await this.getQrCode();e.onQrCode(n);let s=Date.now()+3e5;for(;Date.now()<s;){let{status:i,data:o}=await this.pollLoginStatus(n.qrcodeId,e.pollTimeoutMs);switch(i){case"wait":e.onStatusChange?.({status:"wait",message:"\u7B49\u5F85\u626B\u7801..."});break;case"scaned":e.onStatusChange?.({status:"scaned",message:"\u5DF2\u626B\u7801\uFF0C\u8BF7\u5728\u624B\u673A\u7AEF\u786E\u8BA4..."});break;case"scaned_but_redirect":if(o.redirect_host){let c=`https://${o.redirect_host}`;this.core.setBaseUrl(c),e.onStatusChange?.({status:"scaned_but_redirect",message:`\u670D\u52A1\u5668\u8981\u6C42\u91CD\u5B9A\u5411\u81F3: ${c}`,redirect_host:o.redirect_host})}break;case"confirmed":return e.onStatusChange?.({status:"confirmed",message:"\u767B\u5F55\u6210\u529F\uFF01",bot_token:o.bot_token,baseurl:o.baseurl,ilink_bot_id:o.ilink_bot_id,ilink_user_id:o.ilink_user_id}),this.core.setToken(o.bot_token),this.core.setUserId(o.ilink_user_id),o.baseurl&&this.core.setBaseUrl(o.baseurl),{token:o.bot_token,baseUrl:o.baseurl||this.core.getBaseUrl(),accountId:o.ilink_bot_id,userId:o.ilink_user_id};case"expired":e.onStatusChange?.({status:"expired",message:"\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\uFF0C\u6B63\u5728\u91CD\u65B0\u83B7\u53D6..."});break;default:await new Promise(c=>setTimeout(c,1e3))}if(i==="expired")break;await new Promise(c=>setTimeout(c,1e3))}r++}throw new Error(`\u767B\u5F55\u5931\u8D25\uFF1A\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\u5E76\u8D85\u8FC7\u6700\u5927\u91CD\u8BD5\u6B21\u6570 (${t}\u6B21)\u3002`)}};import{readFile as K}from"fs/promises";import{basename as j}from"path";var I=class{core;cdn;constructor(e,t){this.core=e,this.cdn=t}async sendText(e,t=f){let r={type:1,text_item:{text:e}},n=m(f,{userId:this.core.getUserId()},t);return this._sendRawItem(r,n.userId,n.contextToken)}async sendImage(e,t=f){let r=m(f,{userId:this.core.getUserId()},t);return this._sendMediaWorkflow(e,1,r)}async sendVideo(e,t=f){let r=m(f,{userId:this.core.getUserId()},t);return this._sendMediaWorkflow(e,2,r)}async sendFile(e,t=f){let r=m(f,{userId:this.core.getUserId()},t);return this._sendMediaWorkflow(e,3,r)}async _sendMediaWorkflow(e,t,r){let n=await K(e),s=j(e),i=await this.cdn.uploadBuffer(n,r.userId,t);r.caption&&await this.sendText(r.caption,{contextToken:r.contextToken});let o={encrypt_query_param:i.encryptedQueryParam,aes_key:Buffer.from(i.aeskeyHex).toString("base64"),encrypt_type:1},c={};switch(t){case 1:c={type:2,image_item:{media:o,mid_size:i.fileSizeCipher}};break;case 2:c={type:5,video_item:{media:o,video_size:i.fileSizeCipher}};break;case 3:c={type:4,file_item:{media:o,file_name:s,len:String(i.fileSizePlain)}};break;default:throw new Error(`[MessageManager] \u4E0D\u652F\u6301\u7684\u5A92\u4F53\u7C7B\u578B: ${t}`)}return this._sendRawItem(c,r.userId,r.contextToken)}async _sendRawItem(e,t,r){let n=d.generateClientId(),s={msg:{from_user_id:"",to_user_id:t,client_id:n,message_type:2,message_state:2,context_token:r,item_list:[e]}},i=await this.core.request("ilink/bot/sendmessage",{method:"POST",body:s,timeoutMs:15e3});return{clientId:n,response:i}}};var E=class{core;config;constructor(e,t=M){this.core=e,this.config=m(M,t)}async uploadBuffer(e,t,r){let n=e.length,s=d.md5(e),i=d.getPaddedSize(n),o=d.generateRandomKey(16).toString("hex"),c=d.generateRandomKey(16),u=c.toString("hex"),l=await this.core.request("ilink/bot/getuploadurl",{method:"POST",body:{filekey:o,media_type:r,to_user_id:t,rawsize:n,rawfilemd5:s,filesize:i,no_need_thumb:!0,aeskey:u},timeoutMs:this.config.apiTimeoutMs}),y="";if(l.upload_full_url?.trim())y=l.upload_full_url.trim();else if(l.upload_param)y=`${this.config.cdnBaseUrl}/upload?encrypted_query_param=${encodeURIComponent(l.upload_param)}&filekey=${encodeURIComponent(o)}`;else throw new Error("[CdnManager] \u83B7\u53D6\u4E0A\u4F20\u5730\u5740\u5931\u8D25\uFF0CAPI \u54CD\u5E94\u7F3A\u5C11 full_url \u6216 upload_param");let F=d.aesEcbEncrypt(e,c),v=await this.postToCdn(F,y);return{filekey:o,aeskeyHex:u,aeskeyBuffer:c,fileSizePlain:n,fileSizeCipher:i,encryptedQueryParam:v}}async postToCdn(e,t){let r=this.config.maxRetry,n;for(let s=1;s<=r;s++)try{let i=await fetch(t,{method:"POST",headers:{"Content-Type":"application/octet-stream"},body:new Uint8Array(e)});if(i.status>=400&&i.status<500){let c=i.headers.get(g.ERROR_MSG)??await i.text();throw new Error(`[CdnClientError] HTTP ${i.status}: ${c}`)}if(i.status!==200){let c=i.headers.get(g.ERROR_MSG)??`HTTP ${i.status}`;throw new Error(`[CdnServerError]: ${c}`)}let o=i.headers.get(g.ENCRYPTED_PARAM);if(!o)throw new Error(`[CdnManager] \u4E0A\u4F20\u6210\u529F\uFF0C\u4F46\u54CD\u5E94\u5934\u4E2D\u7F3A\u5C11 ${g.ENCRYPTED_PARAM}`);return o}catch(i){if(n=i,i.message&&i.message.includes("[CdnClientError]"))throw i;s<r&&await new Promise(o=>setTimeout(o,this.config.backoffBaseMs*s))}throw new Error(`[CdnManager] CDN \u4E0A\u4F20\u5931\u8D25\uFF0C\u5DF2\u91CD\u8BD5 ${r} \u6B21\u3002\u6700\u540E\u9519\u8BEF: ${n?.message}`)}async downloadBuffer(e){let t="";if(e.fullUrl)t=e.fullUrl;else if(e.encryptedQueryParam)t=`${this.config.cdnBaseUrl}/download?encrypted_query_param=${encodeURIComponent(e.encryptedQueryParam)}`;else throw new Error("[CdnManager] \u4E0B\u8F7D\u5931\u8D25\uFF1A\u7F3A\u5C11 fullUrl \u548C encryptedQueryParam");let r=await this.fetchCdnBytes(t);if(e.isPlain||!e.aesKeyBase64)return r;let n=this.parseWechatAesKey(e.aesKeyBase64);return d.aesEcbDecrypt(r,n)}parseWechatAesKey(e){let t=Buffer.from(e,"base64");if(t.length===16)return t;if(t.length===32&&/^[0-9a-fA-F]{32}$/i.test(t.toString("ascii")))return Buffer.from(t.toString("ascii"),"hex");throw new Error(`[CdnManager] \u65E0\u6CD5\u89E3\u6790\u7684 AES \u5BC6\u94A5\u683C\u5F0F (Base64="${e}")`)}async fetchCdnBytes(e){let t=await fetch(e);if(!t.ok){let r=await t.text().catch(()=>"(unreadable)");throw new Error(`[CdnManager] CDN \u4E0B\u8F7D\u7F51\u7EDC\u9519\u8BEF HTTP ${t.status}: ${r}`)}return Buffer.from(await t.arrayBuffer())}};function Z(a,e){let t=a.byteLength,r=44+t,n=Buffer.allocUnsafe(r),s=0;return n.write("RIFF",s),s+=4,n.writeUInt32LE(r-8,s),s+=4,n.write("WAVE",s),s+=4,n.write("fmt ",s),s+=4,n.writeUInt32LE(16,s),s+=4,n.writeUInt16LE(1,s),s+=2,n.writeUInt16LE(1,s),s+=2,n.writeUInt32LE(e,s),s+=4,n.writeUInt32LE(e*2,s),s+=4,n.writeUInt16LE(2,s),s+=2,n.writeUInt16LE(16,s),s+=2,n.write("data",s),s+=4,n.writeUInt32LE(t,s),s+=4,Buffer.from(a.buffer,a.byteOffset,a.byteLength).copy(n,s),n}async function W(a,e=24e3){try{let{decode:t}=await import("silk-wasm"),r=await t(a,e);return Z(r.data,e)}catch{return null}}import{writeFile as ee}from"fs/promises";var T=class{cdn;config;constructor(e,t){this.cdn=e,this.config=t}async parse(e){if(!e.item_list||e.item_list.length===0)return[];let t=[],r={messageId:String(e.message_id),seq:e.seq,fromUserId:e.from_user_id,toUserId:e.to_user_id,timestamp:e.create_time_ms,contextToken:e.context_token,msgType:1,msgTypeStr:"unknown",index:0,raw:e};for(let n=0;n<e.item_list.length;n++){let s=e.item_list[n],i=m(r,{index:n,msgType:s.type,msgTypeStr:L(s.type)});if(s.type===1&&(i.text=s.text_item.text),!N(s.type)){t.push(i);continue}let o=null,c=this._extractDownloadTicket(s);if(i.fileName=c?.originalFileName,i.mediaTicket=c,i.getBuffer=async()=>o||(c?(o=await this.cdn.downloadBuffer(c),o):null),i.saveToFile=async u=>{let l=await i.getBuffer();if(!l)throw new Error("\u65E0\u5A92\u4F53\u5185\u5BB9\u53EF\u4FDD\u5B58");return await ee(u,l),u},i.msgType===3){i.getVoiceBuffer=i.getBuffer;let u=null;i.getBuffer=async()=>{if(u)return u;let l=await i.getVoiceBuffer();return l?(u=await W(l),u):null}}if(this.config.autoDownloadMedia!==!1&&c)try{i.getBuffer()}catch(u){console.error(`\u81EA\u52A8\u4E0B\u8F7D\u5A92\u4F53\u5931\u8D25: ${u.message}`)}t.push(i)}return t}_extractDownloadTicket(e){let t=B(e);if(!t||!t.media)return;let r=t.media;if(!r.encrypt_query_param&&!r.full_url)return;let n=r.aes_key;e.type===2&&"aeskey"in t&&t.aeskey&&(n=Buffer.from(t.aeskey,"hex").toString("base64"));let s=!n;return{fullUrl:r.full_url,encryptedQueryParam:r.encrypt_query_param,aesKeyBase64:n,isPlain:s,originalFileName:"file_name"in t?t.file_name:void 0}}};var P=class extends re{core;auth;messages;parser;cdn;currentCredentials=null;isPolling=!1;syncBuf="";constructor(e=_){super();let t=m(_,e);this.core=new h(t),this.auth=new C(this.core),this.cdn=new E(this.core),this.messages=new I(this.core,this.cdn),this.parser=new T(this.cdn,t),t.token&&(this.currentCredentials={token:t.token,baseUrl:t.baseUrl,accountId:"",userId:""})}async login(e=R){let t=m(R,e),r=await this.auth.login(t);return this.currentCredentials=r,this.emit("login",this.currentCredentials),this.currentCredentials}exportCredentials(){return!this.currentCredentials||!this.currentCredentials.token?null:{...this.currentCredentials}}loadCredentials(e){this.currentCredentials={...e},this.core.setToken(e.token),this.core.setBaseUrl(e.baseUrl),this.core.setUserId(e.userId),console.log(`[WeChatApi] \u6210\u529F\u52A0\u8F7D\u51ED\u8BC1 (AccountID: ${e.accountId})`)}async verifyCredentials(){if(!this.currentCredentials||!this.currentCredentials.token)return!1;try{let e=await this.core.request("ilink/bot/getconfig",{method:"POST",body:{ilink_user_id:this.currentCredentials.userId},timeoutMs:1e4});return e.ret!==void 0&&e.ret!==0?(console.warn(`[WeChatApi] \u51ED\u8BC1\u5DF2\u5931\u6548 (Server returned: ${e.errcode||e.ret})`),!1):e.errcode!==void 0&&e.errcode!==0?(console.warn(`[WeChatApi] \u51ED\u8BC1\u5DF2\u5931\u6548 (Server returned errcode: ${e.errcode}): ${e.errmsg}`),!1):!0}catch(e){return console.error("[WeChatApi] \u51ED\u8BC1\u9A8C\u8BC1\u5931\u8D25\uFF0C\u7F51\u7EDC\u5F02\u5E38\u6216\u5DF2\u8FC7\u671F:",e.message),!1}}async startPolling(){if(this.isPolling){console.warn("[WeChatApi] \u8F6E\u8BE2\u5DF2\u7ECF\u5728\u8FD0\u884C\u4E2D\uFF0C\u8BF7\u52FF\u91CD\u590D\u542F\u52A8");return}if(!this.currentCredentials?.token)throw new Error("[WeChatApi] \u65E0\u6CD5\u542F\u52A8\u8F6E\u8BE2\uFF1A\u5C1A\u672A\u767B\u5F55\u6216\u672A\u52A0\u8F7D\u51ED\u8BC1");for(this.isPolling=!0,console.log("[WeChatApi] \u{1F680} \u8F6E\u8BE2\u5B88\u62A4\u8FDB\u7A0B\u5DF2\u542F\u52A8\uFF0C\u6B63\u5728\u76D1\u542C\u65B0\u6D88\u606F...");this.isPolling;)try{let e=await this.core.request("ilink/bot/getupdates",{method:"POST",body:{get_updates_buf:this.syncBuf},timeoutMs:35e3}),t=e.ret!==void 0&&e.ret!==0,r=e.errcode!==void 0&&e.errcode!==0;if(t||r){this.isPolling=!1,console.log(e),this.emit("error",new Error(`\u4F1A\u8BDD\u5DF2\u5931\u6548\u6216\u670D\u52A1\u7AEF\u62A5\u9519 (errcode: ${e.errcode})`)),console.error(`[WeChatApi] \u274C \u8F6E\u8BE2\u5F02\u5E38\u4E2D\u6B62\uFF1A${e.errmsg}`);break}if(e.get_updates_buf&&(this.syncBuf=e.get_updates_buf),e.msgs&&e.msgs.length>0)for(let n of e.msgs){let s=await this.parser.parse(n);if(!(!s||s.length===0))for(let i of s)this.emit("message",i),i.msgTypeStr!=="unknown"&&this.emit(i.msgTypeStr,i)}}catch(e){if(e.name==="AbortError"||e.message.includes("timeout"))continue;console.error(`[WeChatApi] \u26A0\uFE0F \u8F6E\u8BE2\u9047\u5230\u7F51\u7EDC\u5F02\u5E38\uFF0C3\u79D2\u540E\u91CD\u8BD5: ${e.message}`),await new Promise(t=>setTimeout(t,3e3))}console.log("[WeChatApi] \u{1F6D1} \u8F6E\u8BE2\u5B88\u62A4\u8FDB\u7A0B\u5DF2\u505C\u6B62\u3002")}stopPolling(){this.isPolling=!1}};export{S as LoginStatus,P as WeChatApi};
+// src/WechatAiApi.ts
+import { EventEmitter } from "events";
+
+// src/core/CryptoUtils.ts
+import {
+  createCipheriv,
+  createDecipheriv,
+  createHash,
+  randomBytes
+} from "crypto";
+
+// src/constants.ts
+var WECHAT_DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com";
+var WECHAT_DEFAULT_CDN_URL = "https://cdn.weixin.qq.com";
+var DEFAULT_REQUEST_TIMEOUT_MS = 1e4;
+var LONG_POLLING_TIMEOUT_MS = 35e3;
+var POLLING_ERROR_RETRY_DELAY_MS = 3e3;
+var DEFAULT_API_TIMEOUT_MS = 15e3;
+var QR_CODE_EXPIRATION_MS = 5 * 60 * 1e3;
+var BACKOFF_BASE_MS = 1e3;
+var DEFAULT_LOGIN_MAX_RETRIES = 3;
+var AES_BLOCK_SIZE = 16;
+var WECHAT_AES_ALGO = "aes-128-ecb";
+var WECHAT_CDN_ENCRYPT_TYPE = 1;
+var WECHAT_SILK_SAMPLE_RATE = 24e3;
+var WECHAT_HTTP_HEADERS = {
+  AUTH_TYPE: "AuthorizationType",
+  UIN: "X-WECHAT-UIN",
+  APP_ID: "iLink-App-Id",
+  CLIENT_VERSION: "iLink-App-ClientVersion",
+  CONTENT_TYPE: "Content-Type",
+  AUTHORIZATION: "Authorization",
+  ERROR_MSG: "x-error-message",
+  ENCRYPTED_PARAM: "x-encrypted-param"
+};
+var WECHAT_PROTOCOL = {
+  AUTH_TYPE_VALUE: "ilink_bot_token",
+  CONTENT_TYPE_JSON: "application/json",
+  DEFAULT_TIMEOUT_MS: 3e4
+};
+var DEFAULT_CLIENT_CONFIG = {
+  appId: "bot",
+  version: "2.1.1",
+  baseUrl: WECHAT_DEFAULT_BASE_URL,
+  botType: "3",
+  autoDownloadMedia: true
+};
+var DEFAULT_CDN_CONFIG = {
+  maxRetry: 3,
+  cdnBaseUrl: WECHAT_DEFAULT_CDN_URL,
+  apiTimeoutMs: DEFAULT_API_TIMEOUT_MS,
+  backoffBaseMs: BACKOFF_BASE_MS
+};
+var DEFAULT_LOGIN_OPTIONS = {
+  maxRetries: DEFAULT_LOGIN_MAX_RETRIES,
+  pollTimeoutMs: LONG_POLLING_TIMEOUT_MS,
+  onQrCode: (qrInfo) => {
+    console.log("\n==========================================");
+    console.log("\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\uFF0C\u5E76\u4F7F\u7528\u5FAE\u4FE1\u626B\u7801\uFF1A");
+    console.log(qrInfo.qrcodeUrl);
+    console.log("==========================================\n");
+  },
+  onStatusChange: (payload) => {
+    switch (payload.status) {
+      case "wait":
+        console.log("\u7B49\u5F85\u767B\u5F55...");
+        break;
+      case "scaned":
+        console.log("\n\u{1F440} \u5DF2\u626B\u7801\uFF0C\u8BF7\u5728\u624B\u673A\u5FAE\u4FE1\u4E0A\u70B9\u51FB\u786E\u8BA4\u767B\u5F55...");
+        break;
+      case "confirmed":
+        console.log(
+          "\n\u5DF2\u94FE\u63A5, \u4F46\u9700\u624B\u52A8\u5728\u5FAE\u4FE1\u53D1\u9001\u7B2C\u4E00\u6761\u6D88\u606F\u540E, bot \u624D\u80FD\u6B63\u5E38\u56DE\u590D"
+        );
+        break;
+      case "scaned_but_redirect":
+        console.log(`
+[\u7CFB\u7EDF] ${payload.message}`);
+        break;
+    }
+  }
+};
+var DEFAULT_SEND_OPTIONS = {
+  contextToken: void 0,
+  userId: void 0,
+  caption: void 0
+};
+
+// src/core/CryptoUtils.ts
+var CryptoUtils = class {
+  static md5(buffer) {
+    return createHash("md5").update(buffer).digest("hex");
+  }
+  static generateRandomKey(length = 16) {
+    return randomBytes(length);
+  }
+  static getPaddedSize(plaintextSize) {
+    return Math.ceil((plaintextSize + 1) / AES_BLOCK_SIZE) * AES_BLOCK_SIZE;
+  }
+  static aesEcbEncrypt(plaintext, key) {
+    if (key.length !== AES_BLOCK_SIZE) {
+      throw new Error(
+        `[CryptoUtils] AES-128 \u5BC6\u94A5\u957F\u5EA6\u5FC5\u987B\u4E3A ${AES_BLOCK_SIZE} \u5B57\u8282\uFF0C\u5F53\u524D\u4E3A ${key.length} \u5B57\u8282`
+      );
+    }
+    const cipher = createCipheriv(WECHAT_AES_ALGO, key, null);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+  }
+  static aesEcbDecrypt(ciphertext, key) {
+    if (key.length !== AES_BLOCK_SIZE) {
+      throw new Error(
+        `[CryptoUtils] AES-128 \u5BC6\u94A5\u957F\u5EA6\u5FC5\u987B\u4E3A ${AES_BLOCK_SIZE} \u5B57\u8282\uFF0C\u5F53\u524D\u4E3A ${key.length} \u5B57\u8282`
+      );
+    }
+    const decipher = createDecipheriv(WECHAT_AES_ALGO, key, null);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+  }
+  /**
+   * 生成去重的客户端消息 ID
+   * 格式: prefix:timestamp-randomHex
+   */
+  static generateClientId() {
+    const randomHex = randomBytes(4).toString("hex");
+    return `wechat-bot:${Date.now()}-${randomHex}`;
+  }
+  /** 生成随机的 X-WECHAT-UIN (4字节随机数 -> uint32 -> base64) */
+  static randomWechatUin() {
+    const uint32 = randomBytes(4).readUInt32BE(0);
+    return Buffer.from(String(uint32), "utf-8").toString("base64");
+  }
+};
+
+// src/types.ts
+var LoginStatus = /* @__PURE__ */ ((LoginStatus2) => {
+  LoginStatus2["WAIT"] = "wait";
+  LoginStatus2["SCANNED"] = "scaned";
+  LoginStatus2["REDIRECT"] = "scaned_but_redirect";
+  LoginStatus2["CONFIRMED"] = "confirmed";
+  LoginStatus2["EXPIRED"] = "expired";
+  return LoginStatus2;
+})(LoginStatus || {});
+
+// src/core/utils.ts
+function mergeObjects(ref, ...sources) {
+  const target = { ...ref };
+  for (const source of sources) {
+    for (const key in source) {
+      if (source[key] !== void 0) {
+        target[key] = source[key];
+      }
+    }
+  }
+  return target;
+}
+function getItemType(item) {
+  switch (item) {
+    case 1 /* TEXT */:
+      return "text";
+    case 2 /* IMAGE */:
+      return "image";
+    case 5 /* VIDEO */:
+      return "video";
+    case 4 /* FILE */:
+      return "file";
+    case 3 /* VOICE */:
+      return "voice";
+    default:
+      return "unknown";
+  }
+}
+function buildClientVersion(version) {
+  const parts = version.split(".").map((p) => parseInt(p, 10));
+  const major = parts[0] || 0;
+  const minor = parts[1] || 0;
+  const patch = parts[2] || 0;
+  return (major & 255) << 16 | (minor & 255) << 8 | patch & 255;
+}
+function getFileImageItem(item) {
+  if ("file_item" in item) return item.file_item;
+  if ("image_item" in item) return item.image_item;
+  if ("voice_item" in item) return item.voice_item;
+  if ("video_item" in item) return item.video_item;
+}
+function isItemWithMedia(item) {
+  switch (item) {
+    case 2 /* IMAGE */:
+    case 3 /* VOICE */:
+    case 4 /* FILE */:
+    case 5 /* VIDEO */:
+      return true;
+    case 0 /* NONE */:
+    case 1 /* TEXT */:
+    default:
+      return false;
+  }
+}
+
+// src/core/WeChatCore.ts
+var WeChatCore = class {
+  config;
+  clientVersionInt;
+  constructor(config) {
+    this.config = mergeObjects(DEFAULT_CLIENT_CONFIG, config);
+    this.clientVersionInt = buildClientVersion(config.version);
+  }
+  // ==========================================
+  // 状态修改器 (Mutators)
+  // ==========================================
+  /** 设置或更新登录凭证 */
+  setToken(token) {
+    this.config.token = token;
+  }
+  /** 更新基础网关 URL (用于处理 IDC 重定向) */
+  setBaseUrl(baseUrl) {
+    this.config.baseUrl = baseUrl;
+  }
+  setUserId(userId) {
+    this.config.userId = userId;
+  }
+  /** 获取当前的 BaseUrl (供某些需要拼接绝对路径的特殊场景使用) */
+  getBaseUrl() {
+    return this.config.baseUrl;
+  }
+  /** 获取当前的机器人类型 */
+  getBotType() {
+    return this.config.botType;
+  }
+  /** 获取当前的用户 ID */
+  getUserId() {
+    return this.config.userId;
+  }
+  // ==========================================
+  // 核心请求发射器
+  // ==========================================
+  /**
+   * 统一的 HTTP 请求方法
+   * @param endpoint 接口路径，例如 "ilink/bot/sendmessage"
+   * @param options 请求配置 (方法、请求体、超时设置)
+   */
+  async request(endpoint, options) {
+    const base = this.config.baseUrl.endsWith("/") ? this.config.baseUrl : `${this.config.baseUrl}/`;
+    const url = new URL(endpoint, base);
+    let finalBodyString = void 0;
+    if (options.method === "POST" && options.body) {
+      const payload = { ...options.body };
+      payload.base_info = { channel_version: this.config.version };
+      finalBodyString = JSON.stringify(payload);
+    } else if (options.method === "POST" && !options.body) {
+      finalBodyString = JSON.stringify({
+        base_info: { channel_version: this.config.version }
+      });
+    }
+    const headers = this.buildHeaders(finalBodyString);
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), options.timeoutMs);
+    try {
+      const response = await fetch(url.toString(), {
+        method: options.method,
+        headers,
+        body: finalBodyString,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      const rawText = await response.text();
+      if (!response.ok) {
+        throw new Error(
+          `WeChat API Error [${options.method} ${endpoint}] HTTP ${response.status}: ${rawText}`
+        );
+      }
+      return rawText ? JSON.parse(rawText) : {};
+    } catch (err) {
+      clearTimeout(timeoutId);
+      throw err;
+    }
+  }
+  // ==========================================
+  // 私有辅助方法
+  // ==========================================
+  /** 构造标准请求头 */
+  buildHeaders(bodyString) {
+    const headers = {
+      [WECHAT_HTTP_HEADERS.CONTENT_TYPE]: WECHAT_PROTOCOL.CONTENT_TYPE_JSON,
+      [WECHAT_HTTP_HEADERS.AUTH_TYPE]: WECHAT_PROTOCOL.AUTH_TYPE_VALUE,
+      [WECHAT_HTTP_HEADERS.UIN]: CryptoUtils.randomWechatUin(),
+      [WECHAT_HTTP_HEADERS.APP_ID]: this.config.appId,
+      [WECHAT_HTTP_HEADERS.CLIENT_VERSION]: String(this.clientVersionInt)
+    };
+    if (bodyString) {
+      headers["Content-Length"] = String(
+        Buffer.byteLength(bodyString, "utf-8")
+      );
+    }
+    if (this.config.token?.trim()) {
+      headers["Authorization"] = `Bearer ${this.config.token.trim()}`;
+    }
+    return headers;
+  }
+};
+
+// src/managers/AuthManager.ts
+var AuthManager = class {
+  core;
+  constructor(core) {
+    this.core = core;
+  }
+  // ==========================================
+  // 细粒度 API: 第一步 - 获取二维码
+  // ==========================================
+  async getQrCode() {
+    this.core.setBaseUrl(this.core.getBaseUrl());
+    const response = await this.core.request(
+      `ilink/bot/get_bot_qrcode?bot_type=${this.core.getBotType()}`,
+      { method: "GET", timeoutMs: DEFAULT_REQUEST_TIMEOUT_MS }
+    );
+    return {
+      qrcodeId: response.qrcode,
+      qrcodeUrl: response.qrcode_img_content
+    };
+  }
+  // ==========================================
+  // 细粒度 API: 第二步 - 单次轮询状态
+  // ==========================================
+  async pollLoginStatus(qrcodeId, timeoutMs = LONG_POLLING_TIMEOUT_MS) {
+    try {
+      const response = await this.core.request(
+        `ilink/bot/get_qrcode_status?qrcode=${encodeURIComponent(qrcodeId)}`,
+        { method: "GET", timeoutMs }
+      );
+      return { status: response.status, data: response };
+    } catch (err) {
+      if (err.name === "AbortError") {
+        return { status: "wait" /* WAIT */ };
+      }
+      throw err;
+    }
+  }
+  // ==========================================
+  // 粗粒度 API: 一键自动托管登录
+  // ==========================================
+  async login(options) {
+    const maxRetries = options.maxRetries ?? DEFAULT_LOGIN_MAX_RETRIES;
+    let currentRetry = 0;
+    while (currentRetry <= maxRetries) {
+      const qrInfo = await this.getQrCode();
+      options.onQrCode(qrInfo);
+      const qrDeadline = Date.now() + QR_CODE_EXPIRATION_MS;
+      while (Date.now() < qrDeadline) {
+        const { status, data } = await this.pollLoginStatus(
+          qrInfo.qrcodeId,
+          options.pollTimeoutMs
+        );
+        switch (status) {
+          case "wait" /* WAIT */:
+            options.onStatusChange?.({
+              status: "wait" /* WAIT */,
+              message: "\u7B49\u5F85\u626B\u7801..."
+            });
+            break;
+          case "scaned" /* SCANNED */:
+            options.onStatusChange?.({
+              status: "scaned" /* SCANNED */,
+              message: "\u5DF2\u626B\u7801\uFF0C\u8BF7\u5728\u624B\u673A\u7AEF\u786E\u8BA4..."
+            });
+            break;
+          case "scaned_but_redirect" /* REDIRECT */:
+            if (data.redirect_host) {
+              const newBaseUrl = `https://${data.redirect_host}`;
+              this.core.setBaseUrl(newBaseUrl);
+              options.onStatusChange?.({
+                status: "scaned_but_redirect" /* REDIRECT */,
+                message: `\u670D\u52A1\u5668\u8981\u6C42\u91CD\u5B9A\u5411\u81F3: ${newBaseUrl}`,
+                redirect_host: data.redirect_host
+              });
+            }
+            break;
+          case "confirmed" /* CONFIRMED */:
+            options.onStatusChange?.({
+              status: "confirmed" /* CONFIRMED */,
+              message: "\u767B\u5F55\u6210\u529F\uFF01",
+              bot_token: data.bot_token,
+              baseurl: data.baseurl,
+              ilink_bot_id: data.ilink_bot_id,
+              ilink_user_id: data.ilink_user_id
+            });
+            this.core.setToken(data.bot_token);
+            this.core.setUserId(data.ilink_user_id);
+            if (data.baseurl) {
+              this.core.setBaseUrl(data.baseurl);
+            }
+            return {
+              token: data.bot_token,
+              baseUrl: data.baseurl || this.core.getBaseUrl(),
+              accountId: data.ilink_bot_id,
+              userId: data.ilink_user_id
+            };
+          case "expired" /* EXPIRED */:
+            options.onStatusChange?.({
+              status: "expired" /* EXPIRED */,
+              message: "\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\uFF0C\u6B63\u5728\u91CD\u65B0\u83B7\u53D6..."
+            });
+            break;
+          default:
+            await new Promise((res) => setTimeout(res, BACKOFF_BASE_MS));
+        }
+        if (status === "expired" /* EXPIRED */) {
+          break;
+        }
+        await new Promise((res) => setTimeout(res, BACKOFF_BASE_MS));
+      }
+      currentRetry++;
+    }
+    throw new Error(
+      `\u767B\u5F55\u5931\u8D25\uFF1A\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\u5E76\u8D85\u8FC7\u6700\u5927\u91CD\u8BD5\u6B21\u6570 (${maxRetries}\u6B21)\u3002`
+    );
+  }
+};
+
+// src/managers/MessageManager.ts
+import { readFile } from "fs/promises";
+import { basename } from "path";
+var MessageManager = class {
+  core;
+  cdn;
+  constructor(core, cdn) {
+    this.core = core;
+    this.cdn = cdn;
+  }
+  // ==========================================
+  // 公开 API: 发送纯文本
+  // ==========================================
+  async sendText(text, options = DEFAULT_SEND_OPTIONS) {
+    const textItem = {
+      type: 1 /* TEXT */,
+      text_item: { text }
+    };
+    const mergedOptions = mergeObjects(DEFAULT_SEND_OPTIONS, {
+      userId: this.core.getUserId()
+    }, options);
+    return this._sendRawItem(
+      textItem,
+      mergedOptions.userId,
+      mergedOptions.contextToken
+    );
+  }
+  // ==========================================
+  // 公开 API: 发送媒体文件
+  // ==========================================
+  async sendImage(filePath, options = DEFAULT_SEND_OPTIONS) {
+    const mergedOptions = mergeObjects(DEFAULT_SEND_OPTIONS, {
+      userId: this.core.getUserId()
+    }, options);
+    return this._sendMediaWorkflow(
+      filePath,
+      1 /* IMAGE */,
+      mergedOptions
+    );
+  }
+  async sendVideo(filePath, options = DEFAULT_SEND_OPTIONS) {
+    const mergedOptions = mergeObjects(DEFAULT_SEND_OPTIONS, {
+      userId: this.core.getUserId()
+    }, options);
+    return this._sendMediaWorkflow(
+      filePath,
+      2 /* VIDEO */,
+      mergedOptions
+    );
+  }
+  /** - 仅允许发送文件, 发送**图片或视频**会导致发送失败!
+   * - 发送图片和视频应使用 `sendImage` 或 `sendVideo` */
+  async sendFile(filePath, options = DEFAULT_SEND_OPTIONS) {
+    const mergedOptions = mergeObjects(DEFAULT_SEND_OPTIONS, {
+      userId: this.core.getUserId()
+    }, options);
+    return this._sendMediaWorkflow(
+      filePath,
+      3 /* FILE */,
+      mergedOptions
+    );
+  }
+  // ==========================================
+  // 私有核心流水线
+  // ==========================================
+  /**
+   * 统一的媒体发送工作流：读取本地文件 -> 上传 CDN -> (可选发送 Caption) -> 发送媒体消息
+   */
+  async _sendMediaWorkflow(filePath, mediaType, options) {
+    const buffer = await readFile(filePath);
+    const fileName = basename(filePath);
+    const ticket = await this.cdn.uploadBuffer(
+      buffer,
+      options.userId,
+      mediaType
+    );
+    if (options.caption) {
+      await this.sendText(options.caption, {
+        contextToken: options.contextToken
+      });
+    }
+    const mediaObj = {
+      encrypt_query_param: ticket.encryptedQueryParam,
+      aes_key: Buffer.from(ticket.aeskeyHex).toString("base64"),
+      // JSON 中要求 base64 格式
+      encrypt_type: WECHAT_CDN_ENCRYPT_TYPE
+    };
+    let messageItem = {};
+    switch (mediaType) {
+      case 1 /* IMAGE */:
+        messageItem = {
+          type: 2 /* IMAGE */,
+          image_item: { media: mediaObj, mid_size: ticket.fileSizeCipher }
+        };
+        break;
+      case 2 /* VIDEO */:
+        messageItem = {
+          type: 5 /* VIDEO */,
+          video_item: { media: mediaObj, video_size: ticket.fileSizeCipher }
+        };
+        break;
+      case 3 /* FILE */:
+        messageItem = {
+          type: 4 /* FILE */,
+          file_item: {
+            media: mediaObj,
+            file_name: fileName,
+            len: String(ticket.fileSizePlain)
+          }
+          // 注意 len 是明文大小的字符串
+        };
+        break;
+      default:
+        throw new Error(`[MessageManager] \u4E0D\u652F\u6301\u7684\u5A92\u4F53\u7C7B\u578B: ${mediaType}`);
+    }
+    return this._sendRawItem(
+      messageItem,
+      options.userId,
+      options.contextToken
+    );
+  }
+  /**
+   * 最底层的发包函数，将组装好的 Item 包装成完整的微信请求体并 POST
+   */
+  async _sendRawItem(itemObj, userId, contextToken) {
+    const clientId = CryptoUtils.generateClientId();
+    const requestBody = {
+      msg: {
+        from_user_id: "",
+        // 留空，微信网关会自动通过 Bearer Token 识别机器人身份
+        to_user_id: userId,
+        client_id: clientId,
+        message_type: 2 /* BOT */,
+        message_state: 2 /* FINISH */,
+        context_token: contextToken,
+        item_list: [itemObj]
+      }
+    };
+    const response = await this.core.request("ilink/bot/sendmessage", {
+      method: "POST",
+      body: requestBody,
+      timeoutMs: DEFAULT_API_TIMEOUT_MS
+    });
+    return { clientId, response };
+  }
+};
+
+// src/managers/CdnManager.ts
+var CdnManager = class {
+  core;
+  config;
+  constructor(core, config = DEFAULT_CDN_CONFIG) {
+    this.core = core;
+    this.config = mergeObjects(DEFAULT_CDN_CONFIG, config);
+  }
+  // ==========================================
+  // 核心流水线：上传二进制流到 CDN
+  // ==========================================
+  /**
+   * 将任意 Buffer 上传至微信 CDN，并返回发送消息所需的凭证
+   * @param buffer 文件的二进制原始数据
+   * @param toUserId 接收人的微信 ID (CDN 强制要求绑定)
+   * @param mediaType 媒体类型 (IMAGE, VIDEO, FILE, VOICE)
+   */
+  async uploadBuffer(buffer, toUserId, mediaType) {
+    const rawsize = buffer.length;
+    const rawfilemd5 = CryptoUtils.md5(buffer);
+    const filesize = CryptoUtils.getPaddedSize(rawsize);
+    const filekey = CryptoUtils.generateRandomKey(AES_BLOCK_SIZE).toString(
+      "hex"
+    );
+    const aeskeyBuffer = CryptoUtils.generateRandomKey(AES_BLOCK_SIZE);
+    const aeskeyHex = aeskeyBuffer.toString("hex");
+    const uploadUrlResp = await this.core.request(
+      "ilink/bot/getuploadurl",
+      {
+        method: "POST",
+        body: {
+          filekey,
+          media_type: mediaType,
+          to_user_id: toUserId,
+          rawsize,
+          rawfilemd5,
+          filesize,
+          no_need_thumb: true,
+          // 📝 [待重构]: 暂时忽略缩略图逻辑，全部设为 true
+          aeskey: aeskeyHex
+        },
+        timeoutMs: this.config.apiTimeoutMs
+      }
+    );
+    let cdnUrl = "";
+    if (uploadUrlResp.upload_full_url?.trim()) {
+      cdnUrl = uploadUrlResp.upload_full_url.trim();
+    } else if (uploadUrlResp.upload_param) {
+      cdnUrl = `${this.config.cdnBaseUrl}/upload?encrypted_query_param=${encodeURIComponent(uploadUrlResp.upload_param)}&filekey=${encodeURIComponent(filekey)}`;
+    } else {
+      throw new Error(
+        `[CdnManager] \u83B7\u53D6\u4E0A\u4F20\u5730\u5740\u5931\u8D25\uFF0CAPI \u54CD\u5E94\u7F3A\u5C11 full_url \u6216 upload_param`
+      );
+    }
+    const ciphertextBuffer = CryptoUtils.aesEcbEncrypt(buffer, aeskeyBuffer);
+    const encryptedQueryParam = await this.postToCdn(ciphertextBuffer, cdnUrl);
+    return {
+      filekey,
+      aeskeyHex,
+      aeskeyBuffer,
+      fileSizePlain: rawsize,
+      fileSizeCipher: filesize,
+      encryptedQueryParam
+    };
+  }
+  // ==========================================
+  // 私有发包器：专门应对奇葩的 CDN 接口
+  // ==========================================
+  /**
+   * 将密文 POST 到 CDN，并从 Response Header 中抠出下载参数。
+   * 包含 4xx 直接报错、5xx 重试的逻辑。
+   */
+  async postToCdn(ciphertext, cdnUrl) {
+    const MAX_RETRIES = this.config.maxRetry;
+    let lastError;
+    for (let attempt = 1; attempt <= MAX_RETRIES; attempt++) {
+      try {
+        const res = await fetch(cdnUrl, {
+          method: "POST",
+          headers: { "Content-Type": "application/octet-stream" },
+          body: new Uint8Array(ciphertext)
+        });
+        if (res.status >= 400 && res.status < 500) {
+          const errMsg = res.headers.get(WECHAT_HTTP_HEADERS.ERROR_MSG) ?? await res.text();
+          throw new Error(`[CdnClientError] HTTP ${res.status}: ${errMsg}`);
+        }
+        if (res.status !== 200) {
+          const errMsg = res.headers.get(WECHAT_HTTP_HEADERS.ERROR_MSG) ?? `HTTP ${res.status}`;
+          throw new Error(`[CdnServerError]: ${errMsg}`);
+        }
+        const downloadParam = res.headers.get(
+          WECHAT_HTTP_HEADERS.ENCRYPTED_PARAM
+        );
+        if (!downloadParam) {
+          throw new Error(
+            `[CdnManager] \u4E0A\u4F20\u6210\u529F\uFF0C\u4F46\u54CD\u5E94\u5934\u4E2D\u7F3A\u5C11 ${WECHAT_HTTP_HEADERS.ENCRYPTED_PARAM}`
+          );
+        }
+        return downloadParam;
+      } catch (err) {
+        lastError = err;
+        if (err.message && err.message.includes("[CdnClientError]")) {
+          throw err;
+        }
+        if (attempt < MAX_RETRIES) {
+          await new Promise(
+            (resolve) => setTimeout(resolve, this.config.backoffBaseMs * attempt)
+          );
+        }
+      }
+    }
+    throw new Error(
+      `[CdnManager] CDN \u4E0A\u4F20\u5931\u8D25\uFF0C\u5DF2\u91CD\u8BD5 ${MAX_RETRIES} \u6B21\u3002\u6700\u540E\u9519\u8BEF: ${lastError?.message}`
+    );
+  }
+  // ==========================================
+  // 核心流水线：从 CDN 下载并解密
+  // ==========================================
+  /**
+   * 唯一对内暴露的下载引擎
+   * 负责拉取字节流并根据协议规范进行解密
+   */
+  async downloadBuffer(ticket) {
+    let url = "";
+    if (ticket.fullUrl) {
+      url = ticket.fullUrl;
+    } else if (ticket.encryptedQueryParam) {
+      url = `${this.config.cdnBaseUrl}/download?encrypted_query_param=${encodeURIComponent(ticket.encryptedQueryParam)}`;
+    } else {
+      throw new Error(
+        "[CdnManager] \u4E0B\u8F7D\u5931\u8D25\uFF1A\u7F3A\u5C11 fullUrl \u548C encryptedQueryParam"
+      );
+    }
+    const encryptedBuffer = await this.fetchCdnBytes(url);
+    if (ticket.isPlain || !ticket.aesKeyBase64) {
+      return encryptedBuffer;
+    }
+    const aesKey = this.parseWechatAesKey(ticket.aesKeyBase64);
+    return CryptoUtils.aesEcbDecrypt(encryptedBuffer, aesKey);
+  }
+  // ==========================================
+  // 私有辅助方法
+  // ==========================================
+  /**
+   * 处理微信极其不一致的密钥编码：
+   * 情况A: base64( raw 16 bytes )
+   * 情况B: base64( hex string of 16 bytes )
+   */
+  parseWechatAesKey(aesKeyBase64) {
+    const decoded = Buffer.from(aesKeyBase64, "base64");
+    if (decoded.length === 16) {
+      return decoded;
+    }
+    if (decoded.length === 32 && /^[0-9a-fA-F]{32}$/i.test(decoded.toString("ascii"))) {
+      return Buffer.from(decoded.toString("ascii"), "hex");
+    }
+    throw new Error(
+      `[CdnManager] \u65E0\u6CD5\u89E3\u6790\u7684 AES \u5BC6\u94A5\u683C\u5F0F (Base64="${aesKeyBase64}")`
+    );
+  }
+  /**
+   * 原生 fetch 拉取二进制字节流
+   */
+  async fetchCdnBytes(url) {
+    const res = await fetch(url);
+    if (!res.ok) {
+      const body = await res.text().catch(() => "(unreadable)");
+      throw new Error(
+        `[CdnManager] CDN \u4E0B\u8F7D\u7F51\u7EDC\u9519\u8BEF HTTP ${res.status}: ${body}`
+      );
+    }
+    return Buffer.from(await res.arrayBuffer());
+  }
+};
+
+// src/core/SilkConverter.ts
+function pcmBytesToWav(pcm, sampleRate) {
+  const pcmBytes = pcm.byteLength;
+  const totalSize = 44 + pcmBytes;
+  const buf = Buffer.allocUnsafe(totalSize);
+  let offset = 0;
+  buf.write("RIFF", offset);
+  offset += 4;
+  buf.writeUInt32LE(totalSize - 8, offset);
+  offset += 4;
+  buf.write("WAVE", offset);
+  offset += 4;
+  buf.write("fmt ", offset);
+  offset += 4;
+  buf.writeUInt32LE(16, offset);
+  offset += 4;
+  buf.writeUInt16LE(1, offset);
+  offset += 2;
+  buf.writeUInt16LE(1, offset);
+  offset += 2;
+  buf.writeUInt32LE(sampleRate, offset);
+  offset += 4;
+  buf.writeUInt32LE(sampleRate * 2, offset);
+  offset += 4;
+  buf.writeUInt16LE(2, offset);
+  offset += 2;
+  buf.writeUInt16LE(16, offset);
+  offset += 2;
+  buf.write("data", offset);
+  offset += 4;
+  buf.writeUInt32LE(pcmBytes, offset);
+  offset += 4;
+  Buffer.from(pcm.buffer, pcm.byteOffset, pcm.byteLength).copy(buf, offset);
+  return buf;
+}
+async function silkToWav(silkBuffer, sampleRate = WECHAT_SILK_SAMPLE_RATE) {
+  try {
+    const { decode } = await import("silk-wasm");
+    const result = await decode(silkBuffer, sampleRate);
+    const wav = pcmBytesToWav(result.data, sampleRate);
+    return wav;
+  } catch (err) {
+    return null;
+  }
+}
+
+// src/managers/MessageParser.ts
+import { writeFile } from "fs/promises";
+var MessageParser = class {
+  cdn;
+  config;
+  constructor(cdn, config) {
+    this.cdn = cdn;
+    this.config = config;
+  }
+  /**
+   * 将微信底层的复杂 JSON 扁平化为开发者友好的对象
+   */
+  async parse(raw) {
+    if (!raw.item_list || raw.item_list.length === 0) return [];
+    const results = [];
+    const shared_data = {
+      messageId: String(raw.message_id),
+      seq: raw.seq,
+      fromUserId: raw.from_user_id,
+      toUserId: raw.to_user_id,
+      timestamp: raw.create_time_ms,
+      contextToken: raw.context_token,
+      msgType: 1 /* TEXT */,
+      msgTypeStr: "unknown",
+      index: 0,
+      raw
+    };
+    for (let i = 0; i < raw.item_list.length; i++) {
+      const item = raw.item_list[i];
+      const msgCopy = mergeObjects(shared_data, {
+        index: i,
+        msgType: item.type,
+        msgTypeStr: getItemType(item.type)
+      });
+      if (item.type === 1 /* TEXT */) {
+        msgCopy.text = item.text_item.text;
+      }
+      if (!isItemWithMedia(item.type)) {
+        results.push(msgCopy);
+        continue;
+      }
+      let cachedBuffer = null;
+      const ticket = this._extractDownloadTicket(item);
+      msgCopy.fileName = ticket?.originalFileName;
+      msgCopy.mediaTicket = ticket;
+      msgCopy.getBuffer = async () => {
+        if (cachedBuffer) return cachedBuffer;
+        if (!ticket) return null;
+        cachedBuffer = await this.cdn.downloadBuffer(ticket);
+        return cachedBuffer;
+      };
+      msgCopy.saveToFile = async (savePath) => {
+        const buf = await msgCopy.getBuffer();
+        if (!buf) throw new Error("\u65E0\u5A92\u4F53\u5185\u5BB9\u53EF\u4FDD\u5B58");
+        await writeFile(savePath, buf);
+        return savePath;
+      };
+      if (msgCopy.msgType === 3 /* VOICE */) {
+        msgCopy.getVoiceBuffer = msgCopy.getBuffer;
+        let pcmCachedBuffer = null;
+        msgCopy.getBuffer = async () => {
+          if (pcmCachedBuffer) return pcmCachedBuffer;
+          const silk_buffer = await msgCopy.getVoiceBuffer();
+          if (!silk_buffer) return null;
+          pcmCachedBuffer = await silkToWav(silk_buffer);
+          return pcmCachedBuffer;
+        };
+      }
+      if (this.config.autoDownloadMedia !== false && ticket) {
+        try {
+          msgCopy.getBuffer();
+        } catch (err) {
+          console.error(`\u81EA\u52A8\u4E0B\u8F7D\u5A92\u4F53\u5931\u8D25: ${err.message}`);
+        }
+      }
+      results.push(msgCopy);
+    }
+    return results;
+  }
+  /**
+   * 从原始 JSON 中提取标准化的 CDN 下载票据
+   */
+  _extractDownloadTicket(item) {
+    const file_item = getFileImageItem(item);
+    if (!file_item || !file_item.media) return void 0;
+    const media = file_item.media;
+    if (!media.encrypt_query_param && !media.full_url) return void 0;
+    let aesKeyBase64 = media.aes_key;
+    if (item.type === 2 /* IMAGE */ && "aeskey" in file_item && file_item.aeskey) {
+      aesKeyBase64 = Buffer.from(file_item.aeskey, "hex").toString("base64");
+    }
+    const isPlain = !aesKeyBase64;
+    return {
+      fullUrl: media.full_url,
+      encryptedQueryParam: media.encrypt_query_param,
+      aesKeyBase64,
+      isPlain,
+      originalFileName: "file_name" in file_item ? file_item.file_name : void 0
+    };
+  }
+};
+
+// src/WechatAiApi.ts
+var WeChatApi = class extends EventEmitter {
+  core;
+  auth;
+  messages;
+  parser;
+  cdn;
+  // 内部缓存当前的登录凭证
+  currentCredentials = null;
+  isPolling = false;
+  syncBuf = "";
+  // 极其重要：状态同步游标
+  constructor(config = DEFAULT_CLIENT_CONFIG) {
+    super();
+    const mergedConfig = mergeObjects(DEFAULT_CLIENT_CONFIG, config);
+    this.core = new WeChatCore(mergedConfig);
+    this.auth = new AuthManager(this.core);
+    this.cdn = new CdnManager(this.core);
+    this.messages = new MessageManager(this.core, this.cdn);
+    this.parser = new MessageParser(this.cdn, mergedConfig);
+    if (mergedConfig.token) {
+      this.currentCredentials = {
+        token: mergedConfig.token,
+        baseUrl: mergedConfig.baseUrl,
+        accountId: "",
+        // 初始化时可能未知
+        userId: ""
+        // 初始化时可能未知
+      };
+    }
+  }
+  // ==========================================
+  // 1. 登录模块 (支持无脑调用 & 深度定制)
+  // ==========================================
+  /**
+   * 启动扫码登录流程。
+   * @param options 可选。如果为空，将使用默认的控制台交互体验。
+   */
+  async login(options = DEFAULT_LOGIN_OPTIONS) {
+    const defaultOptions = mergeObjects(DEFAULT_LOGIN_OPTIONS, options);
+    const result = await this.auth.login(defaultOptions);
+    this.currentCredentials = result;
+    this.emit("login", this.currentCredentials);
+    return this.currentCredentials;
+  }
+  // ==========================================
+  // 2. 凭证管理模块 (导入 / 导出 / 验证)
+  // ==========================================
+  /**
+   * 导出当前的登录凭证。
+   * 开发者拿到后可以自行保存到本地文件或数据库中。
+   */
+  exportCredentials() {
+    if (!this.currentCredentials || !this.currentCredentials.token) {
+      return null;
+    }
+    return { ...this.currentCredentials };
+  }
+  /**
+   * 加载现有的登录凭证。
+   * 适用于程序重启后，免扫码直接恢复状态。
+   */
+  loadCredentials(credentials) {
+    this.currentCredentials = { ...credentials };
+    this.core.setToken(credentials.token);
+    this.core.setBaseUrl(credentials.baseUrl);
+    this.core.setUserId(credentials.userId);
+    console.log(
+      `[WeChatApi] \u6210\u529F\u52A0\u8F7D\u51ED\u8BC1 (AccountID: ${credentials.accountId})`
+    );
+  }
+  /**
+   * 验证当前加载的凭证是否仍然有效。
+   * @returns boolean 是否有效
+   */
+  async verifyCredentials() {
+    if (!this.currentCredentials || !this.currentCredentials.token) {
+      return false;
+    }
+    try {
+      const response = await this.core.request("ilink/bot/getconfig", {
+        method: "POST",
+        body: {
+          ilink_user_id: this.currentCredentials.userId
+        },
+        timeoutMs: DEFAULT_REQUEST_TIMEOUT_MS
+      });
+      if (response.ret !== void 0 && response.ret !== 0) {
+        console.warn(
+          `[WeChatApi] \u51ED\u8BC1\u5DF2\u5931\u6548 (Server returned: ${response.errcode || response.ret})`
+        );
+        return false;
+      }
+      if (response.errcode !== void 0 && response.errcode !== 0) {
+        console.warn(
+          `[WeChatApi] \u51ED\u8BC1\u5DF2\u5931\u6548 (Server returned errcode: ${response.errcode}): ${response.errmsg}`
+        );
+        return false;
+      }
+      return true;
+    } catch (error) {
+      console.error(
+        "[WeChatApi] \u51ED\u8BC1\u9A8C\u8BC1\u5931\u8D25\uFF0C\u7F51\u7EDC\u5F02\u5E38\u6216\u5DF2\u8FC7\u671F:",
+        error.message
+      );
+      return false;
+    }
+  }
+  // ==========================================
+  // 轮询守护进程 (Daemon Loop)
+  // ==========================================
+  /**
+   * 启动长轮询，监听新消息
+   */
+  async startPolling() {
+    if (this.isPolling) {
+      console.warn("[WeChatApi] \u8F6E\u8BE2\u5DF2\u7ECF\u5728\u8FD0\u884C\u4E2D\uFF0C\u8BF7\u52FF\u91CD\u590D\u542F\u52A8");
+      return;
+    }
+    if (!this.currentCredentials?.token) {
+      throw new Error("[WeChatApi] \u65E0\u6CD5\u542F\u52A8\u8F6E\u8BE2\uFF1A\u5C1A\u672A\u767B\u5F55\u6216\u672A\u52A0\u8F7D\u51ED\u8BC1");
+    }
+    this.isPolling = true;
+    console.log("[WeChatApi] \u{1F680} \u8F6E\u8BE2\u5B88\u62A4\u8FDB\u7A0B\u5DF2\u542F\u52A8\uFF0C\u6B63\u5728\u76D1\u542C\u65B0\u6D88\u606F...");
+    while (this.isPolling) {
+      try {
+        const response = await this.core.request(
+          "ilink/bot/getupdates",
+          {
+            method: "POST",
+            body: { get_updates_buf: this.syncBuf },
+            timeoutMs: LONG_POLLING_TIMEOUT_MS
+            // 长轮询标准超时时间
+          }
+        );
+        const hasErrorRet = response.ret !== void 0 && response.ret !== 0;
+        const hasErrcode = response.errcode !== void 0 && response.errcode !== 0;
+        if (hasErrorRet || hasErrcode) {
+          this.isPolling = false;
+          console.log(response);
+          this.emit(
+            "error",
+            new Error(`\u4F1A\u8BDD\u5DF2\u5931\u6548\u6216\u670D\u52A1\u7AEF\u62A5\u9519 (errcode: ${response.errcode})`)
+          );
+          console.error(`[WeChatApi] \u274C \u8F6E\u8BE2\u5F02\u5E38\u4E2D\u6B62\uFF1A${response.errmsg}`);
+          break;
+        }
+        if (response.get_updates_buf) {
+          this.syncBuf = response.get_updates_buf;
+        }
+        if (response.msgs && response.msgs.length > 0) {
+          for (const rawMsg of response.msgs) {
+            const parsedMsgs = await this.parser.parse(rawMsg);
+            if (!parsedMsgs || parsedMsgs.length === 0) continue;
+            for (const msg of parsedMsgs) {
+              this.emit("message", msg);
+              if (msg.msgTypeStr !== "unknown") {
+                this.emit(msg.msgTypeStr, msg);
+              }
+            }
+          }
+        }
+      } catch (error) {
+        if (error.name === "AbortError" || error.message.includes("timeout")) {
+          continue;
+        }
+        console.error(
+          `[WeChatApi] \u26A0\uFE0F \u8F6E\u8BE2\u9047\u5230\u7F51\u7EDC\u5F02\u5E38\uFF0C3\u79D2\u540E\u91CD\u8BD5: ${error.message}`
+        );
+        await new Promise(
+          (resolve) => setTimeout(resolve, POLLING_ERROR_RETRY_DELAY_MS)
+        );
+      }
+    }
+    console.log("[WeChatApi] \u{1F6D1} \u8F6E\u8BE2\u5B88\u62A4\u8FDB\u7A0B\u5DF2\u505C\u6B62\u3002");
+  }
+  /**
+   * 停止长轮询
+   */
+  stopPolling() {
+    this.isPolling = false;
+  }
+};
+export {
+  LoginStatus,
+  WeChatApi
+};
 //# sourceMappingURL=index.js.map