@appthen/sdk-node 0.0.0

package/README.md

@@ -0,0 +1,48 @@
+# @appthen/chat-hub-node
+
+Node.js 服务端集成方适配包。
+
+它复用 `@appthen/chat-hub-core` 的业务 API，并提供：
+
+- Node `fetch` HTTP adapter
+- 内存 token provider
+- AK/SK 自动换取并缓存 tenant app token
+- `createChatHubNodeClient`
+- `createChatHubNodeRuntime`
+
+## Usage
+
+```ts
+import { createChatHubNodeClient } from '@appthen/chat-hub-node';
+
+const client = createChatHubNodeClient({
+  baseUrl: 'http://127.0.0.1:1626',
+  tenantApp: {
+    accessKey: process.env.APPTHEN_ACCESS_KEY!,
+    accessSecret: process.env.APPTHEN_ACCESS_SECRET!,
+    actingMode: 'subject',
+    actingSubjectId: 'subject_customer_1',
+    requestedScopes: ['conversation.write'],
+  },
+});
+
+await client.conversationTypes.create({
+  typeId: 'support_room',
+  label: 'Support Room',
+  status: 'active',
+});
+```
+
+## Verification
+
+```bash
+pnpm --filter @appthen/chat-hub-node test
+pnpm --filter @appthen/chat-hub-node typecheck
+```
+
+当前 smoke tests 覆盖：
+
+- `NodeFetchHttpAdapter` 的 base URL、query、headers、JSON body 拼接。
+- HTTP 非 2xx 时抛错并保留响应 payload。
+- `TenantAppAuthProvider` 通过 AK/SK 换取 tenant app token，并在过期前复用缓存。
+- `createChatHubNodeClient()` 能把 tenant app auth provider 接入 `ChatHubClient`。

package/dist/index.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @appthen/sdk-node
+ *
+ * Node.js server adapter for AppThen Conversation Hub SDK.
+ */
+import { ChatHubAppRuntime, ChatHubClient, type AuthProvider, type ChatHubAppConfig, type HttpAdapter, type HttpRequestOptions, type HttpResponse, type IssueAppTokenInput } from '@appthen/sdk-core';
+export { SDK_VERSION } from '@appthen/sdk-core';
+export * from '@appthen/sdk-core';
+export interface NodeHttpAdapterOptions {
+    baseUrl: string;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+export interface NodeTenantAppAuthOptions extends IssueAppTokenInput {
+    refreshSkewMs?: number;
+}
+export interface CreateChatHubNodeClientOptions {
+    baseUrl: string;
+    token?: string | null;
+    tenantApp?: NodeTenantAppAuthOptions;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+export interface CreateChatHubNodeRuntimeOptions extends CreateChatHubNodeClientOptions {
+    appConfig: ChatHubAppConfig;
+}
+export declare class NodeFetchHttpAdapter implements HttpAdapter {
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    private readonly defaultHeaders;
+    constructor(options: NodeHttpAdapterOptions);
+    request<T>(options: HttpRequestOptions): Promise<HttpResponse<T>>;
+}
+export declare class NodeMemoryAuthProvider implements AuthProvider {
+    private token;
+    constructor(token?: string | null);
+    getToken(): Promise<string | null>;
+    setToken(token: string | null): Promise<void>;
+}
+export declare class TenantAppAuthProvider implements AuthProvider {
+    private readonly http;
+    private readonly input;
+    private token;
+    private expiresAt;
+    private refreshPromise;
+    constructor(http: HttpAdapter, input: NodeTenantAppAuthOptions);
+    getToken(): Promise<string | null>;
+    setToken(token: string | null): Promise<void>;
+    refreshToken(): Promise<string | null>;
+    private get refreshSkewMs();
+}
+export declare function createChatHubNodeClient(options: CreateChatHubNodeClientOptions): ChatHubClient;
+export declare function createChatHubNodeRuntime(options: CreateChatHubNodeRuntimeOptions): ChatHubAppRuntime;
+import { PlatformApi, type PlatformProvisionTenantInput, type PlatformProvisionTenantResult, type PlatformResolveTenantResult, type PlatformSyncSubjectInput, type PlatformSyncSubjectResult } from '@appthen/sdk-core';
+export { PlatformApi, type PlatformProvisionTenantInput, type PlatformProvisionTenantResult, type PlatformResolveTenantResult, type PlatformSyncSubjectInput, type PlatformSyncSubjectResult, } from '@appthen/sdk-core';
+export interface CreateAppThenSdkOptions {
+    baseUrl: string;
+    accessKey: string;
+    accessSecret: string;
+    /** 缺省给全部 allowedScopes；建议显式声明所需 platform:* scope。 */
+    requestedScopes?: string[];
+    refreshSkewMs?: number;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+/** 单个被授权租户的操作客户端：调用自动携带 targetTenantId。 */
+export declare class PlatformTenantClient {
+    private readonly platform;
+    readonly tenantId: string;
+    constructor(platform: PlatformApi, tenantId: string);
+    /** 幂等代同步成员：重复推送只产生一个 Subject，可安全重试。 */
+    syncSubject(input: PlatformSyncSubjectInput): Promise<PlatformSyncSubjectResult>;
+}
+export declare class AppThenPlatformSdk {
+    private readonly http;
+    readonly platform: PlatformApi;
+    constructor(platform: PlatformApi, http: NodeFetchHttpAdapter);
+    /** 代开通租户（目标租户尚不存在，故在 sdk 根上而非 tenant client）。 */
+    provisionTenant(input: PlatformProvisionTenantInput): Promise<PlatformProvisionTenantResult>;
+    /** 对账：externalCorrelationId → tenantId + grants。未命中抛 CORRELATION_MISMATCH。 */
+    resolveTenant(externalCorrelationId: string): Promise<PlatformResolveTenantResult>;
+    /** 启停授权：active ↔ revoked。 */
+    toggleGrant(grantId: string, status: 'active' | 'revoked'): Promise<Record<string, unknown>>;
+    /**
+     * 认领激活：管理员凭 claimToken 首登认领（租户 pending → active，grant → active）。
+     * 走**用户 JWT**（非 platform token）——与微信"公众号管理员扫码授权"同构的信任锚。
+     */
+    claimTenant(tenantId: string, claimToken: string, userToken: string): Promise<Record<string, unknown>>;
+}
+export declare function createAppThenSdk(options: CreateAppThenSdkOptions): AppThenPlatformSdk;

package/dist/index.js

@@ -0,0 +1,229 @@
+/**
+ * @appthen/sdk-node
+ *
+ * Node.js server adapter for AppThen Conversation Hub SDK.
+ */
+import { ChatHubAppRuntime, ChatHubClient, } from '@appthen/sdk-core';
+export { SDK_VERSION } from '@appthen/sdk-core';
+export * from '@appthen/sdk-core';
+function joinUrl(baseUrl, path) {
+    if (/^https?:\/\//.test(path)) {
+        return path;
+    }
+    const normalizedBase = baseUrl.replace(/\/+$/, '');
+    const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+    return `${normalizedBase}${normalizedPath}`;
+}
+function appendQuery(url, query) {
+    if (!query) {
+        return url;
+    }
+    const params = new URLSearchParams();
+    Object.entries(query).forEach(([key, value]) => {
+        if (value === undefined) {
+            return;
+        }
+        params.set(key, String(value));
+    });
+    const serialized = params.toString();
+    return serialized ? `${url}?${serialized}` : url;
+}
+function isJsonResponse(contentType) {
+    return typeof contentType === 'string' && contentType.includes('application/json');
+}
+function normalizeIssueTokenResult(result) {
+    const accessToken = result
+        .accessToken;
+    return result.token || accessToken || null;
+}
+export class NodeFetchHttpAdapter {
+    constructor(options) {
+        if (!options.fetch && typeof globalThis.fetch !== 'function') {
+            throw new Error('NodeFetchHttpAdapter requires global fetch or an explicit fetch implementation');
+        }
+        this.fetchImpl = options.fetch || globalThis.fetch.bind(globalThis);
+        this.baseUrl = options.baseUrl;
+        this.defaultHeaders = options.defaultHeaders || {};
+    }
+    async request(options) {
+        const url = appendQuery(joinUrl(this.baseUrl, options.path), options.query);
+        const response = await this.fetchImpl(url, {
+            method: options.method,
+            headers: {
+                ...this.defaultHeaders,
+                ...(options.body ? { 'Content-Type': 'application/json' } : {}),
+                ...(options.headers || {}),
+            },
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+        });
+        const contentType = response.headers.get('content-type');
+        const data = isJsonResponse(contentType)
+            ? (await response.json())
+            : (await response.text());
+        if (!response.ok) {
+            const error = new Error(`HTTP ${response.status} for ${options.method} ${options.path}`);
+            error.response = data;
+            throw error;
+        }
+        const headers = {};
+        response.headers.forEach((value, key) => {
+            headers[key] = value;
+        });
+        return {
+            status: response.status,
+            data,
+            headers,
+        };
+    }
+}
+export class NodeMemoryAuthProvider {
+    constructor(token = null) {
+        this.token = token;
+    }
+    async getToken() {
+        return this.token;
+    }
+    async setToken(token) {
+        this.token = token;
+    }
+}
+export class TenantAppAuthProvider {
+    constructor(http, input) {
+        this.http = http;
+        this.input = input;
+        this.token = null;
+        this.expiresAt = 0;
+        this.refreshPromise = null;
+    }
+    async getToken() {
+        if (this.token && Date.now() < this.expiresAt - this.refreshSkewMs) {
+            return this.token;
+        }
+        return this.refreshToken();
+    }
+    async setToken(token) {
+        this.token = token;
+        this.expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;
+    }
+    async refreshToken() {
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        this.refreshPromise = (async () => {
+            const response = await this.http.request({
+                method: 'POST',
+                path: '/open-platform/token',
+                body: {
+                    accessKey: this.input.accessKey,
+                    accessSecret: this.input.accessSecret,
+                    actingSubjectId: this.input.actingSubjectId,
+                    actingMode: this.input.actingMode,
+                    requestedScopes: this.input.requestedScopes,
+                },
+            });
+            const token = normalizeIssueTokenResult(response.data);
+            this.token = token;
+            this.expiresAt = token
+                ? Date.now() + ((response.data.expiresIn || 7200) * 1000)
+                : 0;
+            return token;
+        })();
+        try {
+            return await this.refreshPromise;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    get refreshSkewMs() {
+        return this.input.refreshSkewMs ?? 60000;
+    }
+}
+export function createChatHubNodeClient(options) {
+    const http = new NodeFetchHttpAdapter({
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        defaultHeaders: options.defaultHeaders,
+    });
+    const auth = options.tenantApp
+        ? new TenantAppAuthProvider(http, options.tenantApp)
+        : new NodeMemoryAuthProvider(options.token || null);
+    return new ChatHubClient({
+        http,
+        auth,
+    });
+}
+export function createChatHubNodeRuntime(options) {
+    return new ChatHubAppRuntime(createChatHubNodeClient(options), options.appConfig);
+}
+// ── Platform（服务商 / 代运营）SDK ──
+//
+// 面向 LIMS 等 SaaS 后端：持 AK/SK（accessSecret 永不出后端），
+// token 2h 生命周期自动刷新，按租户组织调用（对齐微信第三方平台的心智）：
+//
+//   const sdk = createAppThenSdk({ baseUrl, accessKey, accessSecret });
+//   const provisioned = await sdk.provisionTenant({ name, externalCorrelationId });
+//   const lab = sdk.platformTenant(provisioned.tenantId);
+//   await lab.syncSubject({ classId, displayName, externalIdentity });
+//   await sdk.resolveTenant('lims_org_10086'); // 对账
+import { PlatformApi, } from '@appthen/sdk-core';
+export { PlatformApi, } from '@appthen/sdk-core';
+/** 单个被授权租户的操作客户端：调用自动携带 targetTenantId。 */
+export class PlatformTenantClient {
+    constructor(platform, tenantId) {
+        this.platform = platform;
+        this.tenantId = tenantId;
+    }
+    /** 幂等代同步成员：重复推送只产生一个 Subject，可安全重试。 */
+    async syncSubject(input) {
+        return this.platform.syncSubject(this.tenantId, input);
+    }
+}
+export class AppThenPlatformSdk {
+    constructor(platform, http) {
+        this.http = http;
+        this.platform = platform;
+    }
+    /** 代开通租户（目标租户尚不存在，故在 sdk 根上而非 tenant client）。 */
+    async provisionTenant(input) {
+        return this.platform.provisionTenant(input);
+    }
+    /** 对账：externalCorrelationId → tenantId + grants。未命中抛 CORRELATION_MISMATCH。 */
+    async resolveTenant(externalCorrelationId) {
+        return this.platform.resolveTenant(externalCorrelationId);
+    }
+    /** 启停授权：active ↔ revoked。 */
+    async toggleGrant(grantId, status) {
+        return this.platform.toggleGrant(grantId, status);
+    }
+    /**
+     * 认领激活：管理员凭 claimToken 首登认领（租户 pending → active，grant → active）。
+     * 走**用户 JWT**（非 platform token）——与微信"公众号管理员扫码授权"同构的信任锚。
+     */
+    async claimTenant(tenantId, claimToken, userToken) {
+        const response = await this.http.request({
+            method: 'POST',
+            path: `/open-platform/platform/tenants/${encodeURIComponent(tenantId)}/claim`,
+            body: { claimToken },
+            headers: { Authorization: `Bearer ${userToken}` },
+        });
+        return response.data;
+    }
+}
+export function createAppThenSdk(options) {
+    const http = new NodeFetchHttpAdapter({
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        defaultHeaders: options.defaultHeaders,
+    });
+    // 复用 TenantAppAuthProvider：actingMode='platform' 换 platform token，
+    // 2h 生命周期 + 60s skew + 并发刷新去重全部继承。
+    const auth = new TenantAppAuthProvider(http, {
+        accessKey: options.accessKey,
+        accessSecret: options.accessSecret,
+        actingMode: 'platform',
+        requestedScopes: options.requestedScopes,
+        refreshSkewMs: options.refreshSkewMs,
+    });
+    return new AppThenPlatformSdk(new PlatformApi(http, auth), http);
+}

package/dist-cjs/index.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @appthen/sdk-node
+ *
+ * Node.js server adapter for AppThen Conversation Hub SDK.
+ */
+import { ChatHubAppRuntime, ChatHubClient, type AuthProvider, type ChatHubAppConfig, type HttpAdapter, type HttpRequestOptions, type HttpResponse, type IssueAppTokenInput } from '@appthen/sdk-core';
+export { SDK_VERSION } from '@appthen/sdk-core';
+export * from '@appthen/sdk-core';
+export interface NodeHttpAdapterOptions {
+    baseUrl: string;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+export interface NodeTenantAppAuthOptions extends IssueAppTokenInput {
+    refreshSkewMs?: number;
+}
+export interface CreateChatHubNodeClientOptions {
+    baseUrl: string;
+    token?: string | null;
+    tenantApp?: NodeTenantAppAuthOptions;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+export interface CreateChatHubNodeRuntimeOptions extends CreateChatHubNodeClientOptions {
+    appConfig: ChatHubAppConfig;
+}
+export declare class NodeFetchHttpAdapter implements HttpAdapter {
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    private readonly defaultHeaders;
+    constructor(options: NodeHttpAdapterOptions);
+    request<T>(options: HttpRequestOptions): Promise<HttpResponse<T>>;
+}
+export declare class NodeMemoryAuthProvider implements AuthProvider {
+    private token;
+    constructor(token?: string | null);
+    getToken(): Promise<string | null>;
+    setToken(token: string | null): Promise<void>;
+}
+export declare class TenantAppAuthProvider implements AuthProvider {
+    private readonly http;
+    private readonly input;
+    private token;
+    private expiresAt;
+    private refreshPromise;
+    constructor(http: HttpAdapter, input: NodeTenantAppAuthOptions);
+    getToken(): Promise<string | null>;
+    setToken(token: string | null): Promise<void>;
+    refreshToken(): Promise<string | null>;
+    private get refreshSkewMs();
+}
+export declare function createChatHubNodeClient(options: CreateChatHubNodeClientOptions): ChatHubClient;
+export declare function createChatHubNodeRuntime(options: CreateChatHubNodeRuntimeOptions): ChatHubAppRuntime;
+import { PlatformApi, type PlatformProvisionTenantInput, type PlatformProvisionTenantResult, type PlatformResolveTenantResult, type PlatformSyncSubjectInput, type PlatformSyncSubjectResult } from '@appthen/sdk-core';
+export { PlatformApi, type PlatformProvisionTenantInput, type PlatformProvisionTenantResult, type PlatformResolveTenantResult, type PlatformSyncSubjectInput, type PlatformSyncSubjectResult, } from '@appthen/sdk-core';
+export interface CreateAppThenSdkOptions {
+    baseUrl: string;
+    accessKey: string;
+    accessSecret: string;
+    /** 缺省给全部 allowedScopes；建议显式声明所需 platform:* scope。 */
+    requestedScopes?: string[];
+    refreshSkewMs?: number;
+    fetch?: typeof fetch;
+    defaultHeaders?: Record<string, string>;
+}
+/** 单个被授权租户的操作客户端：调用自动携带 targetTenantId。 */
+export declare class PlatformTenantClient {
+    private readonly platform;
+    readonly tenantId: string;
+    constructor(platform: PlatformApi, tenantId: string);
+    /** 幂等代同步成员：重复推送只产生一个 Subject，可安全重试。 */
+    syncSubject(input: PlatformSyncSubjectInput): Promise<PlatformSyncSubjectResult>;
+}
+export declare class AppThenPlatformSdk {
+    private readonly http;
+    readonly platform: PlatformApi;
+    constructor(platform: PlatformApi, http: NodeFetchHttpAdapter);
+    /** 代开通租户（目标租户尚不存在，故在 sdk 根上而非 tenant client）。 */
+    provisionTenant(input: PlatformProvisionTenantInput): Promise<PlatformProvisionTenantResult>;
+    /** 对账：externalCorrelationId → tenantId + grants。未命中抛 CORRELATION_MISMATCH。 */
+    resolveTenant(externalCorrelationId: string): Promise<PlatformResolveTenantResult>;
+    /** 启停授权：active ↔ revoked。 */
+    toggleGrant(grantId: string, status: 'active' | 'revoked'): Promise<Record<string, unknown>>;
+    /**
+     * 认领激活：管理员凭 claimToken 首登认领（租户 pending → active，grant → active）。
+     * 走**用户 JWT**（非 platform token）——与微信"公众号管理员扫码授权"同构的信任锚。
+     */
+    claimTenant(tenantId: string, claimToken: string, userToken: string): Promise<Record<string, unknown>>;
+}
+export declare function createAppThenSdk(options: CreateAppThenSdkOptions): AppThenPlatformSdk;

package/dist-cjs/index.js

@@ -0,0 +1,256 @@
+"use strict";
+/**
+ * @appthen/sdk-node
+ *
+ * Node.js server adapter for AppThen Conversation Hub SDK.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppThenPlatformSdk = exports.PlatformTenantClient = exports.PlatformApi = exports.TenantAppAuthProvider = exports.NodeMemoryAuthProvider = exports.NodeFetchHttpAdapter = exports.SDK_VERSION = void 0;
+exports.createChatHubNodeClient = createChatHubNodeClient;
+exports.createChatHubNodeRuntime = createChatHubNodeRuntime;
+exports.createAppThenSdk = createAppThenSdk;
+const sdk_core_1 = require("@appthen/sdk-core");
+var sdk_core_2 = require("@appthen/sdk-core");
+Object.defineProperty(exports, "SDK_VERSION", { enumerable: true, get: function () { return sdk_core_2.SDK_VERSION; } });
+__exportStar(require("@appthen/sdk-core"), exports);
+function joinUrl(baseUrl, path) {
+    if (/^https?:\/\//.test(path)) {
+        return path;
+    }
+    const normalizedBase = baseUrl.replace(/\/+$/, '');
+    const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+    return `${normalizedBase}${normalizedPath}`;
+}
+function appendQuery(url, query) {
+    if (!query) {
+        return url;
+    }
+    const params = new URLSearchParams();
+    Object.entries(query).forEach(([key, value]) => {
+        if (value === undefined) {
+            return;
+        }
+        params.set(key, String(value));
+    });
+    const serialized = params.toString();
+    return serialized ? `${url}?${serialized}` : url;
+}
+function isJsonResponse(contentType) {
+    return typeof contentType === 'string' && contentType.includes('application/json');
+}
+function normalizeIssueTokenResult(result) {
+    const accessToken = result
+        .accessToken;
+    return result.token || accessToken || null;
+}
+class NodeFetchHttpAdapter {
+    constructor(options) {
+        if (!options.fetch && typeof globalThis.fetch !== 'function') {
+            throw new Error('NodeFetchHttpAdapter requires global fetch or an explicit fetch implementation');
+        }
+        this.fetchImpl = options.fetch || globalThis.fetch.bind(globalThis);
+        this.baseUrl = options.baseUrl;
+        this.defaultHeaders = options.defaultHeaders || {};
+    }
+    async request(options) {
+        const url = appendQuery(joinUrl(this.baseUrl, options.path), options.query);
+        const response = await this.fetchImpl(url, {
+            method: options.method,
+            headers: {
+                ...this.defaultHeaders,
+                ...(options.body ? { 'Content-Type': 'application/json' } : {}),
+                ...(options.headers || {}),
+            },
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+        });
+        const contentType = response.headers.get('content-type');
+        const data = isJsonResponse(contentType)
+            ? (await response.json())
+            : (await response.text());
+        if (!response.ok) {
+            const error = new Error(`HTTP ${response.status} for ${options.method} ${options.path}`);
+            error.response = data;
+            throw error;
+        }
+        const headers = {};
+        response.headers.forEach((value, key) => {
+            headers[key] = value;
+        });
+        return {
+            status: response.status,
+            data,
+            headers,
+        };
+    }
+}
+exports.NodeFetchHttpAdapter = NodeFetchHttpAdapter;
+class NodeMemoryAuthProvider {
+    constructor(token = null) {
+        this.token = token;
+    }
+    async getToken() {
+        return this.token;
+    }
+    async setToken(token) {
+        this.token = token;
+    }
+}
+exports.NodeMemoryAuthProvider = NodeMemoryAuthProvider;
+class TenantAppAuthProvider {
+    constructor(http, input) {
+        this.http = http;
+        this.input = input;
+        this.token = null;
+        this.expiresAt = 0;
+        this.refreshPromise = null;
+    }
+    async getToken() {
+        if (this.token && Date.now() < this.expiresAt - this.refreshSkewMs) {
+            return this.token;
+        }
+        return this.refreshToken();
+    }
+    async setToken(token) {
+        this.token = token;
+        this.expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;
+    }
+    async refreshToken() {
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        this.refreshPromise = (async () => {
+            const response = await this.http.request({
+                method: 'POST',
+                path: '/open-platform/token',
+                body: {
+                    accessKey: this.input.accessKey,
+                    accessSecret: this.input.accessSecret,
+                    actingSubjectId: this.input.actingSubjectId,
+                    actingMode: this.input.actingMode,
+                    requestedScopes: this.input.requestedScopes,
+                },
+            });
+            const token = normalizeIssueTokenResult(response.data);
+            this.token = token;
+            this.expiresAt = token
+                ? Date.now() + ((response.data.expiresIn || 7200) * 1000)
+                : 0;
+            return token;
+        })();
+        try {
+            return await this.refreshPromise;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    get refreshSkewMs() {
+        return this.input.refreshSkewMs ?? 60000;
+    }
+}
+exports.TenantAppAuthProvider = TenantAppAuthProvider;
+function createChatHubNodeClient(options) {
+    const http = new NodeFetchHttpAdapter({
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        defaultHeaders: options.defaultHeaders,
+    });
+    const auth = options.tenantApp
+        ? new TenantAppAuthProvider(http, options.tenantApp)
+        : new NodeMemoryAuthProvider(options.token || null);
+    return new sdk_core_1.ChatHubClient({
+        http,
+        auth,
+    });
+}
+function createChatHubNodeRuntime(options) {
+    return new sdk_core_1.ChatHubAppRuntime(createChatHubNodeClient(options), options.appConfig);
+}
+// ── Platform（服务商 / 代运营）SDK ──
+//
+// 面向 LIMS 等 SaaS 后端：持 AK/SK（accessSecret 永不出后端），
+// token 2h 生命周期自动刷新，按租户组织调用（对齐微信第三方平台的心智）：
+//
+//   const sdk = createAppThenSdk({ baseUrl, accessKey, accessSecret });
+//   const provisioned = await sdk.provisionTenant({ name, externalCorrelationId });
+//   const lab = sdk.platformTenant(provisioned.tenantId);
+//   await lab.syncSubject({ classId, displayName, externalIdentity });
+//   await sdk.resolveTenant('lims_org_10086'); // 对账
+const sdk_core_3 = require("@appthen/sdk-core");
+var sdk_core_4 = require("@appthen/sdk-core");
+Object.defineProperty(exports, "PlatformApi", { enumerable: true, get: function () { return sdk_core_4.PlatformApi; } });
+/** 单个被授权租户的操作客户端：调用自动携带 targetTenantId。 */
+class PlatformTenantClient {
+    constructor(platform, tenantId) {
+        this.platform = platform;
+        this.tenantId = tenantId;
+    }
+    /** 幂等代同步成员：重复推送只产生一个 Subject，可安全重试。 */
+    async syncSubject(input) {
+        return this.platform.syncSubject(this.tenantId, input);
+    }
+}
+exports.PlatformTenantClient = PlatformTenantClient;
+class AppThenPlatformSdk {
+    constructor(platform, http) {
+        this.http = http;
+        this.platform = platform;
+    }
+    /** 代开通租户（目标租户尚不存在，故在 sdk 根上而非 tenant client）。 */
+    async provisionTenant(input) {
+        return this.platform.provisionTenant(input);
+    }
+    /** 对账：externalCorrelationId → tenantId + grants。未命中抛 CORRELATION_MISMATCH。 */
+    async resolveTenant(externalCorrelationId) {
+        return this.platform.resolveTenant(externalCorrelationId);
+    }
+    /** 启停授权：active ↔ revoked。 */
+    async toggleGrant(grantId, status) {
+        return this.platform.toggleGrant(grantId, status);
+    }
+    /**
+     * 认领激活：管理员凭 claimToken 首登认领（租户 pending → active，grant → active）。
+     * 走**用户 JWT**（非 platform token）——与微信"公众号管理员扫码授权"同构的信任锚。
+     */
+    async claimTenant(tenantId, claimToken, userToken) {
+        const response = await this.http.request({
+            method: 'POST',
+            path: `/open-platform/platform/tenants/${encodeURIComponent(tenantId)}/claim`,
+            body: { claimToken },
+            headers: { Authorization: `Bearer ${userToken}` },
+        });
+        return response.data;
+    }
+}
+exports.AppThenPlatformSdk = AppThenPlatformSdk;
+function createAppThenSdk(options) {
+    const http = new NodeFetchHttpAdapter({
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        defaultHeaders: options.defaultHeaders,
+    });
+    // 复用 TenantAppAuthProvider：actingMode='platform' 换 platform token，
+    // 2h 生命周期 + 60s skew + 并发刷新去重全部继承。
+    const auth = new TenantAppAuthProvider(http, {
+        accessKey: options.accessKey,
+        accessSecret: options.accessSecret,
+        actingMode: 'platform',
+        requestedScopes: options.requestedScopes,
+        refreshSkewMs: options.refreshSkewMs,
+    });
+    return new AppThenPlatformSdk(new sdk_core_3.PlatformApi(http, auth), http);
+}

package/dist-cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@appthen/sdk-node",
+  "version": "0.0.0",
+  "description": "AppThen Conversation Hub SDK - Node.js server adapter",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist-cjs/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "dist-cjs"
+  ],
+  "dependencies": {
+    "@appthen/sdk-core": "0.0.0"
+  },
+  "sideEffects": false,
+  "license": "UNLICENSED",
+  "scripts": {
+    "build": "tsc -p tsconfig.json && tsc -p tsconfig.cjs.json && echo '{\"type\":\"commonjs\"}' > dist-cjs/package.json",
+    "dev": "tsc -p tsconfig.json --watch",
+    "test": "pnpm build && node --test test/*.test.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  }
+}