@clowder-ai/connector-weixin 0.0.0-stage → 0.1.0-alpha.5

package/dist/runtime.js

@@ -0,0 +1,142 @@
+import { WeixinAdapter, } from './WeixinAdapter.js';
+function hostMessage(message) {
+    const attachments = message.attachments?.map((attachment) => ({
+        type: attachment.type,
+        platformKey: attachment.mediaUrl,
+        ...(attachment.fileName === undefined ? {} : { fileName: attachment.fileName }),
+    }));
+    return {
+        externalConversationId: message.chatId,
+        externalSenderId: message.senderId,
+        providerMessageId: message.messageId,
+        text: message.text,
+        ...(attachments === undefined ? {} : { attachments }),
+    };
+}
+export function createWeixinConnectorRuntime(options) {
+    const initialToken = options.config.botToken.trim();
+    const { botToken: _botToken, ...runtimeOptions } = options.config;
+    const createAdapter = options.createAdapter ?? ((token, logger, state, value) => new WeixinAdapter(token, logger, state, value));
+    // The Host starts the runtime healthy BEFORE credentials exist: without a token
+    // the runtime stays idle (no connect, no polling) until QR login adopts one.
+    let outbound = initialToken.length > 0
+        ? createAdapter(initialToken, options.logger, options.state, runtimeOptions)
+        : undefined;
+    let state = 'idle';
+    // Armed = start() ran and stop() has not. Unlike startPromise, disconnect()
+    // never clears it: a reconnect after an owner disconnect must still begin
+    // polling (Host write-back does not restart the plugin).
+    let armed = false;
+    let startPromise;
+    let stopPromise;
+    // Bumped by every connect()/disconnect() that supersedes in-flight work: a
+    // polling chain captured an older generation must not start polling on a
+    // stale adapter or publish state after the connection it belongs to was
+    // dropped or replaced.
+    let generation = 0;
+    const deliverIfRunning = async (message) => {
+        if (state !== 'running')
+            return;
+        await options.host.deliver(hostMessage(message));
+    };
+    const requireOutbound = () => {
+        if (outbound === undefined) {
+            throw new Error('WeChat connector is not connected — complete QR code login (weixin_qr_login) first');
+        }
+        return outbound;
+    };
+    const beginPolling = () => {
+        const adapter = requireOutbound();
+        const generationAtStart = generation;
+        state = 'starting';
+        startPromise = Promise.resolve()
+            .then(() => adapter.restoreSessionState())
+            .then(() => {
+            // disconnect() or a newer connect() superseded this chain while the
+            // session state was restoring: polling must not start on the stale
+            // adapter (it may already be disconnected, with an empty token).
+            if (generationAtStart !== generation)
+                return;
+            return adapter.startPolling(deliverIfRunning);
+        })
+            .then(() => {
+            if (state !== 'stopped' && generationAtStart === generation) {
+                state = 'running';
+                options.logger.info('[WeixinRuntime] Provider polling started');
+            }
+        })
+            .catch((error) => {
+            if (state !== 'stopped' && generationAtStart === generation) {
+                state = 'idle';
+                startPromise = undefined;
+            }
+            throw error;
+        });
+        return startPromise;
+    };
+    return {
+        get outbound() {
+            return requireOutbound();
+        },
+        start() {
+            if (state === 'stopped')
+                return Promise.reject(new Error('Weixin connector runtime has been stopped'));
+            if (startPromise !== undefined)
+                return startPromise;
+            armed = true;
+            if (outbound === undefined) {
+                // Armed but idle: no provider I/O until connect() adopts a token.
+                startPromise = Promise.resolve();
+                return startPromise;
+            }
+            return beginPolling();
+        },
+        connect(botToken) {
+            const token = botToken.trim();
+            if (token.length === 0)
+                return Promise.reject(new TypeError('botToken must be a non-empty value'));
+            if (state === 'stopped')
+                return Promise.reject(new Error('Weixin connector runtime has been stopped'));
+            if (outbound === undefined) {
+                outbound = createAdapter(token, options.logger, options.state, runtimeOptions);
+            }
+            else {
+                outbound.setBotToken(token);
+            }
+            if (!armed || state === 'running')
+                return Promise.resolve();
+            generation += 1;
+            return beginPolling();
+        },
+        async disconnect() {
+            // Supersede any polling chain still restoring session state: it belongs
+            // to the connection being dropped and must not publish state afterwards.
+            generation += 1;
+            const adapter = outbound;
+            outbound = undefined;
+            state = 'idle';
+            startPromise = undefined;
+            if (adapter !== undefined)
+                await adapter.disconnect();
+        },
+        isConnected() {
+            return outbound !== undefined && outbound.hasBotToken() && outbound.isPolling();
+        },
+        stop() {
+            if (stopPromise !== undefined)
+                return stopPromise;
+            armed = false;
+            if (state === 'idle') {
+                state = 'stopped';
+                return Promise.resolve();
+            }
+            state = 'stopped';
+            stopPromise = (async () => {
+                await startPromise?.catch(() => undefined);
+                await outbound?.stopPolling();
+            })();
+            return stopPromise;
+        },
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAId,MAAM,oBAAoB,CAAC;AA6D5B,SAAS,WAAW,CAAC,OAA6B;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,QAAQ;QAChC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;KAChF,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,sBAAsB,EAAE,OAAO,CAAC,MAAM;QACtC,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAClC,iBAAiB,EAAE,OAAO,CAAC,SAAS;QACpC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA+C;IAE/C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAC9C,KAAa,EACb,MAAuB,EACvB,KAA8B,EAC9B,KAA2B,EAC3B,EAAE,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAuB,CAAC,CAAC;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,IAAI,QAAQ,GAAwB,YAAY,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,KAAK,GAAgD,MAAM,CAAC;IAChE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,YAAuC,CAAC;IAC5C,IAAI,WAAsC,CAAC;IAC3C,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,uBAAuB;IACvB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC/D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,GAAY,EAAE;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAkB,EAAE;QACvC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,iBAAiB,GAAG,UAAU,CAAC;QACrC,KAAK,GAAG,UAAU,CAAC;QACnB,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE;aAC7B,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;aACzC,IAAI,CAAC,GAAG,EAAE;YACT,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,IAAI,iBAAiB,KAAK,UAAU;gBAAE,OAAO;YAC7C,OAAO,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,KAAK,UAAU,EAAE,CAAC;gBAC5D,KAAK,GAAG,SAAS,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,KAAK,UAAU,EAAE,CAAC;gBAC5D,KAAK,GAAG,MAAM,CAAC;gBACf,YAAY,GAAG,SAAS,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACL,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,QAAQ;YACV,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK;YACH,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;YACvG,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,YAAY,CAAC;YACpD,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,kEAAkE;gBAClE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,QAAgB;YACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC,CAAC;YACnG,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;YACvG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,UAAU;YACd,wEAAwE;YACxE,yEAAyE;YACzE,UAAU,IAAI,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,QAAQ,CAAC;YACzB,QAAQ,GAAG,SAAS,CAAC;YACrB,KAAK,GAAG,MAAM,CAAC;YACf,YAAY,GAAG,SAAS,CAAC;YACzB,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACxD,CAAC;QACD,WAAW;YACT,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAClF,CAAC;QACD,IAAI;YACF,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC;YAClD,KAAK,GAAG,KAAK,CAAC;YACd,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,KAAK,GAAG,SAAS,CAAC;gBAClB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,KAAK,GAAG,SAAS,CAAC;YAClB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;gBACxB,MAAM,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,QAAQ,EAAE,WAAW,EAAE,CAAC;YAChC,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,WAAW,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/settings.d.ts

@@ -0,0 +1,19 @@
+import type { definePluginModule } from '@clowder-ai/plugin-sdk';
+import type { ModulePluginHostShape } from '@clowder-ai/plugin-sdk';
+export type SettingsHost = Pick<ModulePluginHostShape, 'config' | 'secrets' | 'storage' | 'log'>;
+interface SettingsCall {
+    readonly signal?: AbortSignal;
+    assertCurrent(): void | Promise<void>;
+}
+export interface SettingsDefinition {
+    readonly actions: Readonly<Record<string, (params: unknown, action?: unknown, call?: SettingsCall) => Promise<unknown>>>;
+    dispose?(): void | Promise<void>;
+}
+export interface SettingsEntrypoint {
+    create(manifest: unknown): ReturnType<ReturnType<typeof definePluginModule>['create']> & {
+        settings(host: SettingsHost): SettingsDefinition;
+    };
+}
+export declare function createWeixinSettings(host: SettingsHost): SettingsDefinition;
+export {};
+//# sourceMappingURL=settings.d.ts.map

package/dist/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC;AACjG,UAAU,YAAY;IAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,aAAa,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAAE;AAEhG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzH,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AACD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,QAAQ,EAAE,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,kBAAkB,CAAA;KAAE,CAAC;CAC/I;AAKD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG,kBAAkB,CAgC3E"}

package/dist/settings.js

@@ -0,0 +1,39 @@
+import { WeixinAdapter } from './WeixinAdapter.js';
+const current = async (call) => { call?.signal?.throwIfAborted(); await call?.assertCurrent(); call?.signal?.throwIfAborted(); };
+const QR_SESSION_KEY = 'weixin.qr-session.v1';
+export function createWeixinSettings(host) {
+    return { actions: {
+            'weixin.qr-generate': async (_params, _action, call) => {
+                await current(call);
+                const result = await WeixinAdapter.fetchQrCode();
+                const QRCode = await import('qrcode');
+                const url = await QRCode.toDataURL(result.qrUrl, { width: 384, margin: 2 });
+                await current(call);
+                await host.storage.set(QR_SESSION_KEY, { qrPayload: result.qrPayload });
+                return { render: 'img', data: { url } };
+            },
+            'weixin.qr-status': async (_params, _action, call) => {
+                await current(call);
+                const value = (await host.storage.get(QR_SESSION_KEY))?.value;
+                const qrPayload = typeof value?.qrPayload === 'string' ? value.qrPayload : undefined;
+                if (!qrPayload)
+                    return { render: 'polling', data: { status: 'error', message: 'No QR payload — generate first' }, advance: false };
+                const status = await WeixinAdapter.pollQrCodeStatus(qrPayload);
+                await current(call);
+                if (status.status === 'confirmed') {
+                    if (!status.botToken)
+                        return { render: 'polling', data: { status: 'error', message: 'confirmed but no bot_token' }, advance: false };
+                    await host.storage.set(QR_SESSION_KEY, null);
+                    return { render: 'status', data: { status: 'confirmed' }, label: '已连接', targetValues: { botToken: status.botToken } };
+                }
+                return { render: 'polling', data: { status: status.status, ...('message' in status ? { message: status.message } : {}) }, advance: false };
+            },
+            'weixin.disconnect': async (_params, _action, call) => {
+                await current(call);
+                await host.storage.set('provider-session', null);
+                await host.storage.set(QR_SESSION_KEY, null);
+                return { render: 'status', data: { status: 'disconnected' }, label: '已断开', targetValues: { botToken: '' } };
+            },
+        } };
+}
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAmB,EAAE,EAAE,GAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA,MAAM,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA,CAAC,CAAC;AAU5I,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,MAAM,UAAU,oBAAoB,CAAC,IAAkB;IACrD,OAAO,EAAE,OAAO,EAAE;YAChB,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBACrD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5E,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,EAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YAC1C,CAAC;YACD,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBACnD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,KAA0C,CAAC;gBACnG,MAAM,SAAS,GAAG,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,IAAI,CAAC,SAAS;oBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACnI,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC/D,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,IAAI,CAAC,MAAM,CAAC,QAAQ;wBAAE,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,IAAI,EAAC,EAAC,MAAM,EAAC,OAAO,EAAC,OAAO,EAAC,4BAA4B,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;oBACzH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAC,IAAI,CAAC,CAAC;oBAC5C,OAAO,EAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,EAAC,EAAC,MAAM,EAAC,WAAW,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ,EAAC,EAAC,CAAC;gBACzG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC1I,CAAC;YACD,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBACpD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBACjD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;YAC9G,CAAC;SACF,EAAE,CAAC;AACN,CAAC"}

package/dist/thread-mappings.d.ts

@@ -0,0 +1,46 @@
+import type { FeatureContext } from '@clowder-ai/plugin-sdk';
+type Mapping = {
+    readonly key: string;
+    readonly threadId: string;
+    readonly createdAt: number;
+};
+type Creation = {
+    readonly title: string;
+    readonly parentThreadId?: string;
+    readonly participants?: readonly string[];
+};
+export declare function threadMappings(context: FeatureContext): {
+    findByKey: (name: string) => Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary | null>;
+    bind: (name: string, threadId: string) => Promise<boolean | Mapping>;
+    unbind: (name: string) => Promise<boolean | Mapping>;
+    listBindings: () => Promise<Mapping[]>;
+    ensureByKey: (name: string, input: Creation) => Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary>;
+    ensureSystemThread: () => Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary>;
+    get(threadId: string): Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary | null>;
+    list(options?: {
+        readonly limit?: number;
+        readonly before?: {
+            readonly lastActiveAt: number;
+            readonly id: string;
+        };
+    }): Promise<readonly import("@clowder-ai/plugin-sdk").PluginThreadSummary[]>;
+    readMessages(threadId: string, options: {
+        readonly before?: {
+            readonly timestamp: number;
+            readonly id: string;
+        };
+        readonly limit: number;
+    }): Promise<readonly import("@clowder-ai/plugin-sdk").PluginThreadMessage[]>;
+    getCats(threadId: string): Promise<import("@clowder-ai/plugin-sdk").PluginThreadCats>;
+    addParticipants(input: {
+        readonly threadId: string;
+        readonly catIds: readonly string[];
+    }): Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary>;
+    create(input: import("@clowder-ai/plugin-sdk").PluginThreadCreateInput): Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary>;
+    update(threadId: string, patch: {
+        readonly title?: string;
+        readonly preferredCats?: readonly string[];
+    }): Promise<import("@clowder-ai/plugin-sdk").PluginThreadSummary>;
+};
+export {};
+//# sourceMappingURL=thread-mappings.d.ts.map

package/dist/thread-mappings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-mappings.d.ts","sourceRoot":"","sources":["../src/thread-mappings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,KAAK,OAAO,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAC/F,KAAK,QAAQ,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AA+CxH,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc;sBA/B1B,MAAM;iBAwBjB,MAAM,YAAY,MAAM;mBACtB,MAAM;;wBAVD,MAAM,SAAS,QAAQ;;;;sBAkBT,CAAC;uBAAiC,CAAC;;;;;;uBAG2M,CAAC;;;;;;;;;;;;;sBAA2f,CAAC;8BAAwC,CAAC;;EADzzB"}

package/dist/thread-mappings.js

@@ -0,0 +1,62 @@
+const contexts = new WeakMap();
+/** Package-owned external-conversation mapping. Host receives ordinary thread calls only. */
+function createMappings(context) {
+    const key = 'thread-mappings.v1';
+    let tail = Promise.resolve();
+    const serialize = (run) => {
+        const next = tail.then(run, run);
+        tail = next.catch(() => { });
+        return next;
+    };
+    const read = async () => {
+        const stored = await context.storage.get(key);
+        const rows = stored?.value ?? [];
+        if (!Array.isArray(rows) || rows.some(row => !row || typeof row.key !== 'string' || typeof row.threadId !== 'string' || typeof row.createdAt !== 'number'))
+            throw new Error('Invalid plugin thread mappings');
+        return { stored, rows: rows };
+    };
+    const find = async (name) => {
+        const { rows } = await read();
+        const row = rows.find(row => row.key === name);
+        return row ? context.threads.get(row.threadId) : null;
+    };
+    const save = async (name, threadId) => {
+        const { stored, rows } = await read();
+        const next = rows.filter(row => row.key !== name);
+        if (threadId !== null) {
+            if (!await context.threads.get(threadId))
+                throw new Error('Thread unavailable');
+            next.push({ key: name, threadId, createdAt: Date.now() });
+        }
+        const result = await context.storage.compareAndSet(key, stored?.revision ?? null, next);
+        if (!result.applied)
+            throw new Error('Plugin thread mappings changed concurrently');
+        return threadId === null ? rows.length !== next.length : next.find(row => row.key === name);
+    };
+    const ensure = (name, input) => serialize(async () => {
+        const existing = await find(name);
+        if (existing)
+            return existing;
+        const thread = await context.threads.create(input);
+        await save(name, thread.id);
+        return thread;
+    });
+    return {
+        ...context.threads,
+        findByKey: find,
+        bind: (name, threadId) => serialize(() => save(name, threadId)),
+        unbind: (name) => serialize(() => save(name, null)),
+        listBindings: async () => (await read()).rows,
+        ensureByKey: ensure,
+        ensureSystemThread: () => ensure('command-audit', { title: '连接器命令记录' }),
+    };
+}
+export function threadMappings(context) {
+    let value = contexts.get(context);
+    if (!value) {
+        value = createMappings(context);
+        contexts.set(context, value);
+    }
+    return value;
+}
+//# sourceMappingURL=thread-mappings.js.map

package/dist/thread-mappings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-mappings.js","sourceRoot":"","sources":["../src/thread-mappings.ts"],"names":[],"mappings":"AAGA,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAqD,CAAC;AAClF,6FAA6F;AAC7F,SAAS,cAAc,CAAC,OAAuB;IAC7C,MAAM,GAAG,GAAG,oBAAoB,CAAC;IACjC,IAAI,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAI,GAAqB,EAAc,EAAE;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAC7E,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC;YACxJ,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAiB,EAAE,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAClC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC9E,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,QAAuB,EAAE,EAAE;QAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACpF,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAE,CAAC;IAC/F,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,OAAO,CAAC,OAAO;QAClB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI;QAC7C,WAAW,EAAE,MAAM;QACnB,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,8 @@
+export type ConnectorLogMethod = (...args: readonly unknown[]) => void;
+export interface ConnectorLogger {
+    info: ConnectorLogMethod;
+    warn: ConnectorLogMethod;
+    error: ConnectorLogMethod;
+    debug: ConnectorLogMethod;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,EAAE,SAAS,OAAO,EAAE,KAAK,IAAI,CAAC;AACvE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,CAAC;IACzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,kBAAkB,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/weixin-cdn.d.ts

@@ -0,0 +1,43 @@
+import type { ConnectorLogger } from './types.js';
+export declare const UploadMediaType: {
+    readonly IMAGE: 1;
+    readonly VIDEO: 2;
+    readonly FILE: 3;
+    readonly VOICE: 4;
+};
+export interface UploadedFileInfo {
+    filekey: string;
+    downloadEncryptedQueryParam: string;
+    aeskey: string;
+    fileSize: number;
+    fileSizeCiphertext: number;
+}
+export declare function encryptAesEcb(plaintext: Buffer, key: Buffer): Buffer;
+export declare function decryptAesEcb(ciphertext: Buffer, key: Buffer): Buffer;
+/**
+ * Decode aesKey string from iLink protocol into a 16-byte Buffer.
+ * Handles: hex (32 chars), standard base64, base64url (- and _), and missing padding.
+ */
+export declare function decodeAesKey(aesKey: string, log?: ConnectorLogger): Buffer;
+/**
+ * Download encrypted media from WeChat CDN and decrypt.
+ * `platformKey` is a JSON-encoded string:
+ * - { encryptQueryParam, aesKey } for legacy CDN download API
+ * - { fullUrl, aesKey } for iLink full_url responses
+ */
+export declare function downloadMediaFromCdn(params: {
+    platformKey: string;
+    cdnBaseUrl: string;
+    log: ConnectorLogger;
+    fetchFn?: typeof fetch;
+}): Promise<Buffer>;
+export declare function uploadMediaToCdn(params: {
+    filePath: string;
+    toUserId: string;
+    mediaType: number;
+    botToken: string;
+    cdnBaseUrl: string;
+    log: ConnectorLogger;
+    fetchFn?: typeof fetch;
+}): Promise<UploadedFileInfo>;
+//# sourceMappingURL=weixin-cdn.d.ts.map

package/dist/weixin-cdn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"weixin-cdn.d.ts","sourceRoot":"","sources":["../src/weixin-cdn.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,eAAO,MAAM,eAAe;;;;;CAAqD,CAAC;AAElF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B,EAAE,MAAM,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAeD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGrE;AAQD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,eAAe,GAAG,MAAM,CA6B1E;AAuBD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkClB;AAID,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8C5B"}

package/dist/weixin-cdn.js

@@ -0,0 +1,226 @@
+/**
+ * WeChat CDN upload/download with AES-128-ECB encryption.
+ * Aligned with @tencent-weixin/openclaw-weixin@2.0.1 cdn/ module.
+ *
+ * Flow: readFile → md5 → genKey → getUploadUrl → AES encrypt → POST to CDN → get downloadParam
+ */
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { basename } from 'node:path';
+import { fetchBoundedInboundMedia } from './inbound-download.js';
+const ILINK_BASE_URL = 'https://ilinkai.weixin.qq.com';
+const UPLOAD_MAX_RETRIES = 3;
+export const UploadMediaType = { IMAGE: 1, VIDEO: 2, FILE: 3, VOICE: 4 };
+// ── AES-128-ECB ──
+export function encryptAesEcb(plaintext, key) {
+    const cipher = createCipheriv('aes-128-ecb', key, null);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+}
+export function decryptAesEcb(ciphertext, key) {
+    const decipher = createDecipheriv('aes-128-ecb', key, null);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+}
+function aesEcbPaddedSize(plaintextSize) {
+    return Math.ceil((plaintextSize + 1) / 16) * 16;
+}
+// ── AES Key Decode ──
+/**
+ * Decode aesKey string from iLink protocol into a 16-byte Buffer.
+ * Handles: hex (32 chars), standard base64, base64url (- and _), and missing padding.
+ */
+export function decodeAesKey(aesKey, log) {
+    // 1. Hex: exactly 32 hex chars → 16 bytes
+    if (/^[0-9a-f]{32}$/i.test(aesKey)) {
+        return Buffer.from(aesKey, 'hex');
+    }
+    // 2. Normalize base64url → standard base64 (replace - with +, _ with /)
+    let normalized = aesKey.replace(/-/g, '+').replace(/_/g, '/');
+    // 3. Restore padding if missing
+    const pad = normalized.length % 4;
+    if (pad === 2)
+        normalized += '==';
+    else if (pad === 3)
+        normalized += '=';
+    const key = Buffer.from(normalized, 'base64');
+    if (key.length === 16)
+        return key;
+    // 4. Official iLink compat: base64(hex-string) — 32 ASCII hex chars → 16 bytes
+    if (key.length === 32) {
+        const hexStr = key.toString('ascii');
+        if (/^[0-9a-f]{32}$/i.test(hexStr)) {
+            return Buffer.from(hexStr, 'hex');
+        }
+    }
+    log?.warn({ aesKeyLen: aesKey.length, decodedLen: key.length }, '[weixin-cdn] Invalid AES key length after decode');
+    throw new Error(`Invalid AES key: decoded ${key.length} bytes from ${aesKey.length}-char string (expected 16)`);
+}
+// ── CDN Download Pipeline ──
+function resolveWeChatCdnFullUrl(fullUrl, fieldName) {
+    let parsed;
+    try {
+        parsed = new URL(fullUrl);
+    }
+    catch {
+        throw new Error(`[weixin-cdn] Invalid ${fieldName}`);
+    }
+    const host = parsed.hostname.toLowerCase();
+    const isWeChatCdnHost = host === 'cdn.weixin.qq.com' ? true : host.endsWith('.cdn.weixin.qq.com');
+    if (parsed.protocol !== 'https:') {
+        throw new Error(`[weixin-cdn] Refusing ${fieldName} from non-WeChat CDN host: ${host}`);
+    }
+    if (!isWeChatCdnHost) {
+        throw new Error(`[weixin-cdn] Refusing ${fieldName} from non-WeChat CDN host: ${host}`);
+    }
+    return parsed.toString();
+}
+/**
+ * Download encrypted media from WeChat CDN and decrypt.
+ * `platformKey` is a JSON-encoded string:
+ * - { encryptQueryParam, aesKey } for legacy CDN download API
+ * - { fullUrl, aesKey } for iLink full_url responses
+ */
+export async function downloadMediaFromCdn(params) {
+    const { platformKey, cdnBaseUrl, log, fetchFn = globalThis.fetch } = params;
+    const { encryptQueryParam, fullUrl, aesKey } = JSON.parse(platformKey);
+    if (!aesKey) {
+        throw new Error('[weixin-cdn] CDN platformKey missing aesKey');
+    }
+    const cdnUrl = fullUrl
+        ? resolveWeChatCdnFullUrl(fullUrl, 'full_url')
+        : encryptQueryParam
+            ? `${cdnBaseUrl}/download?encrypted_query_param=${encodeURIComponent(encryptQueryParam)}`
+            : '';
+    if (!cdnUrl) {
+        throw new Error('[weixin-cdn] CDN platformKey missing encryptQueryParam or fullUrl');
+    }
+    log.info({ source: fullUrl ? 'full_url' : 'encrypted_query_param' }, '[weixin-cdn] Downloading media from CDN');
+    const { response: res, bytes: ciphertext } = await fetchBoundedInboundMedia(fetchFn, cdnUrl, {
+        method: 'GET',
+    });
+    if (!res.ok) {
+        throw new Error(`CDN download HTTP ${res.status}`);
+    }
+    const key = decodeAesKey(aesKey, log);
+    const plaintext = decryptAesEcb(ciphertext, key);
+    log.info({ ciphertextLen: ciphertext.length, plaintextLen: plaintext.length }, '[weixin-cdn] Media decrypted');
+    return plaintext;
+}
+// ── CDN Upload Pipeline ──
+export async function uploadMediaToCdn(params) {
+    const { filePath, toUserId, mediaType, botToken, cdnBaseUrl, log, fetchFn = globalThis.fetch } = params;
+    const plaintext = await readFile(filePath);
+    const rawsize = plaintext.length;
+    const rawfilemd5 = createHash('md5').update(plaintext).digest('hex');
+    const filesize = aesEcbPaddedSize(rawsize);
+    const filekey = randomBytes(16).toString('hex');
+    const aeskey = randomBytes(16);
+    log.info({ filePath: basename(filePath), rawsize, filesize, mediaType }, '[weixin-cdn] Uploading media');
+    const uploadUrlResp = await callGetUploadUrl({
+        filekey,
+        mediaType,
+        toUserId,
+        rawsize,
+        rawfilemd5,
+        filesize,
+        aeskey: aeskey.toString('hex'),
+        botToken,
+        fetchFn,
+    });
+    if (!uploadUrlResp.upload_param && !uploadUrlResp.upload_full_url) {
+        throw new Error('[weixin-cdn] getUploadUrl returned no upload_param/upload_full_url');
+    }
+    const downloadParam = await uploadBufferToCdn({
+        buf: plaintext,
+        uploadParam: uploadUrlResp.upload_param,
+        uploadFullUrl: uploadUrlResp.upload_full_url,
+        filekey,
+        cdnBaseUrl,
+        aeskey,
+        log,
+        fetchFn,
+    });
+    return {
+        filekey,
+        downloadEncryptedQueryParam: downloadParam,
+        aeskey: aeskey.toString('hex'),
+        fileSize: rawsize,
+        fileSizeCiphertext: filesize,
+    };
+}
+// ── Internal API calls ──
+function getHeaders(botToken) {
+    const uin = Buffer.from(String(Math.floor(Math.random() * 0xffffffff))).toString('base64');
+    return {
+        'Content-Type': 'application/json',
+        AuthorizationType: 'ilink_bot_token',
+        Authorization: `Bearer ${botToken}`,
+        'X-WECHAT-UIN': uin,
+    };
+}
+async function callGetUploadUrl(params) {
+    const body = JSON.stringify({
+        filekey: params.filekey,
+        media_type: params.mediaType,
+        to_user_id: params.toUserId,
+        rawsize: params.rawsize,
+        rawfilemd5: params.rawfilemd5,
+        filesize: params.filesize,
+        no_need_thumb: true,
+        aeskey: params.aeskey,
+        base_info: { channel_version: '1.0.0' },
+    });
+    const res = await params.fetchFn(`${ILINK_BASE_URL}/ilink/bot/getuploadurl`, {
+        method: 'POST',
+        headers: getHeaders(params.botToken),
+        body,
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`getuploadurl HTTP ${res.status}: ${text}`);
+    }
+    return (await res.json());
+}
+async function uploadBufferToCdn(params) {
+    const { buf, uploadParam, uploadFullUrl, filekey, cdnBaseUrl, aeskey, log, fetchFn } = params;
+    const ciphertext = encryptAesEcb(buf, aeskey);
+    const cdnUrl = uploadFullUrl
+        ? resolveWeChatCdnFullUrl(uploadFullUrl, 'upload_full_url')
+        : uploadParam
+            ? `${cdnBaseUrl}/upload?encrypted_query_param=${encodeURIComponent(uploadParam)}&filekey=${encodeURIComponent(filekey)}`
+            : '';
+    if (!cdnUrl) {
+        throw new Error('[weixin-cdn] Missing upload_param/upload_full_url for CDN upload');
+    }
+    for (let attempt = 1; attempt <= UPLOAD_MAX_RETRIES; attempt++) {
+        try {
+            const res = await fetchFn(cdnUrl, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/octet-stream' },
+                body: new Uint8Array(ciphertext),
+            });
+            if (res.status >= 400 && res.status < 500) {
+                const msg = res.headers.get('x-error-message') ?? (await res.text());
+                throw new Error(`CDN client error ${res.status}: ${msg}`);
+            }
+            if (res.status !== 200) {
+                throw new Error(`CDN server error ${res.status}`);
+            }
+            const downloadParam = res.headers.get('x-encrypted-param');
+            if (!downloadParam) {
+                throw new Error('CDN response missing x-encrypted-param header');
+            }
+            log.info({ attempt, filekey }, '[weixin-cdn] CDN upload success');
+            return downloadParam;
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.includes('client error'))
+                throw err;
+            if (attempt === UPLOAD_MAX_RETRIES)
+                throw err;
+            log.warn({ attempt, err: String(err) }, '[weixin-cdn] CDN upload retry');
+        }
+    }
+    throw new Error(`CDN upload failed after ${UPLOAD_MAX_RETRIES} attempts`);
+}
+//# sourceMappingURL=weixin-cdn.js.map