@dsh-enhanced/lark-channel 0.1.3

package/lib/launchd.js

@@ -0,0 +1,205 @@
+import { accessSync, constants } from 'node:fs';
+import { access, chmod, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+function xml(value) {
+    return value
+        .replaceAll('&', '&')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&apos;');
+}
+function requireAbsolute(value, label) {
+    if (!isAbsolute(value))
+        throw new Error(`lark-channel setup: ${label} must be absolute`);
+    return value;
+}
+export function launchAgentPaths(input) {
+    if (!profilePattern.test(input.profile))
+        throw new Error('lark-channel setup: invalid profile');
+    const home = requireAbsolute(input.home ?? homedir(), 'home');
+    const dshHome = requireAbsolute(input.dshHome, 'DSH_HOME');
+    const label = `ai.deepseek.dsh.profile.${input.profile}`;
+    return {
+        label,
+        plistPath: join(home, 'Library', 'LaunchAgents', `${label}.plist`),
+        stdoutPath: join(dshHome, 'logs', `${input.profile}-host.log`),
+        stderrPath: join(dshHome, 'logs', `${input.profile}-host.error.log`),
+    };
+}
+export function createLaunchAgent(input) {
+    const strings = [input.dshHome, input.profileDirectory, input.nodePath, input.dshPath,
+        input.stdoutPath, input.stderrPath];
+    if (strings.some(value => !isAbsolute(value))) {
+        throw new Error('lark-channel setup: LaunchAgent paths must be absolute');
+    }
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${xml(input.label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${xml(input.nodePath)}</string>
+    <string>--disable-warning=ExperimentalWarning</string>
+    <string>${xml(input.dshPath)}</string>
+    <string>--profile</string>
+    <string>${xml(input.profile)}</string>
+    <string>--no-open</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>DSH_HOME</key>
+      <string>${xml(input.dshHome)}</string>
+    <key>PATH</key>
+      <string>${xml(input.path)}</string>
+  </dict>
+  <key>WorkingDirectory</key>
+  <string>${xml(input.profileDirectory)}</string>
+  <key>StandardOutPath</key>
+  <string>${xml(input.stdoutPath)}</string>
+  <key>StandardErrorPath</key>
+  <string>${xml(input.stderrPath)}</string>
+  <key>LimitLoadToSessionType</key>
+  <string>Aqua</string>
+  <key>ProcessType</key>
+  <string>Background</string>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>ExitTimeOut</key>
+  <integer>30</integer>
+  <key>Umask</key>
+  <integer>63</integer>
+</dict>
+</plist>
+`;
+}
+function findExecutable(name, pathValue) {
+    for (const directory of (pathValue ?? '').split(':')) {
+        if (!isAbsolute(directory))
+            continue;
+        const candidate = join(directory, name);
+        try {
+            // Synchronous resolution happens once during setup and avoids invoking a shell.
+            accessSync(candidate, constants.X_OK);
+            return candidate;
+        }
+        catch { }
+    }
+    throw new Error(`lark-channel setup: cannot find ${name} in PATH`);
+}
+function servicePath(nodePath, dshPath, current) {
+    const values = [dirname(nodePath), dirname(dshPath), ...(current ?? '').split(':'),
+        '/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin', '/usr/sbin', '/sbin'];
+    return [...new Set(values.filter(value => isAbsolute(value)))].join(':');
+}
+function defaultRun(command, args) {
+    return spawnSync(command, [...args], {
+        encoding: 'utf8',
+        env: { PATH: '/usr/bin:/bin' },
+        maxBuffer: 256 * 1024,
+        stdio: ['ignore', 'ignore', 'pipe'],
+    });
+}
+function commandError(action, result) {
+    const stderr = typeof result.stderr === 'string' ? result.stderr : result.stderr?.toString('utf8');
+    const detail = stderr?.trim().slice(0, 1_000);
+    return new Error(`lark-channel setup: ${action} failed${detail ? `: ${detail}` : ''}`);
+}
+function isBootstrapEio(result) {
+    const stderr = typeof result.stderr === 'string' ? result.stderr : result.stderr?.toString('utf8');
+    return result.status === 5 || /Bootstrap failed:\s*5:\s*Input\/output error/iu.test(stderr ?? '');
+}
+function defaultWait(milliseconds) {
+    return new Promise(resolve => setTimeout(resolve, milliseconds));
+}
+async function writePlist(path, value, run) {
+    const temporary = `${path}.tmp-${process.pid}`;
+    const file = await open(temporary, 'w', 0o600);
+    try {
+        await file.writeFile(value, 'utf8');
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+    const validation = run('/usr/bin/plutil', ['-lint', temporary]);
+    if (validation.status !== 0) {
+        await unlink(temporary).catch(() => { });
+        throw commandError('LaunchAgent plist validation', validation);
+    }
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+}
+export async function installDshLaunchAgent(input, options = {}) {
+    if ((options.platform ?? process.platform) !== 'darwin') {
+        throw new Error('lark-channel setup: automatic resident service currently requires macOS launchd');
+    }
+    const uid = options.uid ?? process.getuid?.();
+    if (!Number.isSafeInteger(uid) || uid === undefined || uid < 1) {
+        throw new Error('lark-channel setup: cannot resolve the launchd user domain');
+    }
+    const paths = launchAgentPaths({
+        ...(options.home === undefined ? {} : { home: options.home }),
+        dshHome: input.dshHome,
+        profile: input.profile,
+    });
+    const profileDirectory = join(input.dshHome, 'profiles', input.profile);
+    await access(profileDirectory, constants.R_OK);
+    const currentPath = options.path ?? process.env.PATH;
+    const nodePath = options.nodePath ?? findExecutable('node', currentPath);
+    const dshPath = options.dshPath ?? findExecutable('dsh', currentPath);
+    const path = servicePath(nodePath, dshPath, currentPath);
+    const run = options.run ?? defaultRun;
+    const wait = options.wait ?? defaultWait;
+    await mkdir(dirname(paths.plistPath), { recursive: true, mode: 0o700 });
+    await mkdir(dirname(paths.stdoutPath), { recursive: true, mode: 0o700 });
+    await writePlist(paths.plistPath, createLaunchAgent({
+        ...paths,
+        dshHome: input.dshHome,
+        profile: input.profile,
+        profileDirectory,
+        nodePath,
+        dshPath,
+        path,
+    }), run);
+    const domain = `gui/${uid}`;
+    const target = `${domain}/${paths.label}`;
+    run('/bin/launchctl', ['bootout', target]);
+    const enable = run('/bin/launchctl', ['enable', target]);
+    if (enable.status !== 0)
+        throw commandError('launchd enable', enable);
+    const retryDelays = [250, 750];
+    let bootstrap = { status: null };
+    for (let attempt = 0; attempt <= retryDelays.length; attempt += 1) {
+        bootstrap = run('/bin/launchctl', ['bootstrap', domain, paths.plistPath]);
+        if (bootstrap.status !== 0 && !isBootstrapEio(bootstrap)) {
+            throw commandError('launchd bootstrap', bootstrap);
+        }
+        // `bootstrap` may return EIO after committing the job, or even return zero
+        // while an earlier bootout is still removing it. The job registry is the
+        // source of truth; require it to remain visible across a short settle window.
+        if (run('/bin/launchctl', ['print', target]).status === 0) {
+            await wait(250);
+            if (run('/bin/launchctl', ['print', target]).status === 0) {
+                return { ...paths, target };
+            }
+            continue;
+        }
+        const delayMs = retryDelays[attempt];
+        if (delayMs !== undefined)
+            await wait(delayMs);
+    }
+    if (bootstrap.status !== 0)
+        throw commandError('launchd bootstrap', bootstrap);
+    throw new Error('lark-channel setup: launchd bootstrap succeeded but the service was not registered');
+}
+//# sourceMappingURL=launchd.js.map

package/lib/launchd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,cAAc,GAAG,oCAAoC,CAAA;AA4C3D,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,mBAAmB,CAAC,CAAA;IACxF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAA;IACxD,OAAO;QACL,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;QAClE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,WAAW,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,iBAAiB,CAAC;KACrE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO;QACnF,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;;;;;YAKG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;cAGd,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;;cAEnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;cAElB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;;;;;gBAMhB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;;gBAElB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;YAGnB,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;;YAE3B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;YAErB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;CAiBhC,CAAA;AACD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAA6B;IACjE,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC;YACH,gFAAgF;YAChF,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,UAAU,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,OAA2B;IACjF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAChF,mBAAmB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAClF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAuB;IAC1D,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;QAC9B,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAqB;IACzD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,CAAC,uBAAuB,MAAM,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB;IACvC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,GAAkD;IACvG,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACnC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvC,MAAM,YAAY,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA2C,EAC3C,UAAqC,EAAE;IAEvC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;IACpG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAA;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IAExC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACvE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxE,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAClD,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB;QAChB,QAAQ;QACR,OAAO;QACP,IAAI;KACL,CAAC,EAAE,GAAG,CAAC,CAAA;IAER,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAA;IACzC,GAAG,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAA;IACvC,IAAI,SAAS,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClE,SAAS,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACzE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACpD,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,8EAA8E;QAC9E,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YACf,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAA;YAC7B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAC9E,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;AACvG,CAAC"}

package/lib/model-picker.d.ts

@@ -0,0 +1,24 @@
+export interface LarkModelPickerActionPayload {
+    version: 3;
+    operationId: string;
+    bindingId: string;
+    expiresAt: number;
+    chatId: string;
+    provider: string;
+    model: string;
+    effort: string | null;
+    action: LarkModelPickerCallbackAction;
+    revision: number;
+}
+export type LarkModelPickerCallbackAction = 'confirm' | 'effort' | 'model' | 'provider';
+export interface LarkModelPickerCallbackValue {
+    modelPicker: string;
+}
+export declare class LarkModelPickerError extends Error {
+    readonly code: 'expired' | 'invalid';
+    constructor(code: 'expired' | 'invalid', message: string);
+}
+export declare function parseLarkModelPickerCallback(value: unknown): LarkModelPickerCallbackValue;
+export declare function signLarkModelPickerAction(secret: string, input: LarkModelPickerActionPayload): string;
+export declare function verifyLarkModelPickerAction(secret: string, token: string, now: number): LarkModelPickerActionPayload;
+//# sourceMappingURL=model-picker.d.ts.map

package/lib/model-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-picker.d.ts","sourceRoot":"","sources":["../src/model-picker.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,CAAC,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,6BAA6B,CAAA;IACrC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,6BAA6B,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;AAGvF,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS;gBAA3B,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM;CAIlE;AAyCD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,CAWzF;AAMD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAIrG;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,4BAA4B,CAyB9B"}

package/lib/model-picker.js

@@ -0,0 +1,95 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+const callbackActions = ['confirm', 'effort', 'model', 'provider'];
+export class LarkModelPickerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'LarkModelPickerError';
+    }
+}
+const identifierPattern = /^[A-Za-z0-9][A-Za-z0-9._@:-]{0,255}$/u;
+const providerPattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,255}$/u;
+const base64urlPattern = /^[A-Za-z0-9_-]+$/u;
+function routePart(value, maxLength) {
+    return typeof value === 'string' && value.length >= 1 && value.length <= maxLength
+        && !/[\s\p{Cc}]/u.test(value);
+}
+function validateSecret(secret) {
+    if (typeof secret !== 'string' || Buffer.byteLength(secret, 'utf8') < 16) {
+        throw new LarkModelPickerError('invalid', 'model picker signing key is invalid');
+    }
+}
+function canonical(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)
+        || Object.keys(input).some(field => ![
+            'version', 'operationId', 'bindingId', 'expiresAt', 'chatId', 'provider', 'model', 'effort', 'action', 'revision',
+        ].includes(field))
+        || Object.keys(input).length !== 10
+        || input.version !== 3
+        || typeof input.operationId !== 'string' || !identifierPattern.test(input.operationId)
+        || typeof input.bindingId !== 'string' || !identifierPattern.test(input.bindingId)
+        || typeof input.chatId !== 'string' || !identifierPattern.test(input.chatId)
+        || typeof input.provider !== 'string' || !providerPattern.test(input.provider)
+        || !routePart(input.model, 512)
+        || (input.effort !== null && !routePart(input.effort, 128))
+        || !callbackActions.includes(input.action)
+        || !Number.isSafeInteger(input.revision) || input.revision < 0
+        || !Number.isSafeInteger(input.expiresAt) || input.expiresAt < 1) {
+        throw new LarkModelPickerError('invalid', 'model picker action payload is invalid');
+    }
+    return { version: 3, operationId: input.operationId, bindingId: input.bindingId,
+        expiresAt: input.expiresAt, chatId: input.chatId,
+        provider: input.provider, model: input.model, effort: input.effort, action: input.action,
+        revision: input.revision };
+}
+export function parseLarkModelPickerCallback(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)
+        || Object.keys(value).length !== 1
+        || Object.keys(value)[0] !== 'modelPicker') {
+        throw new LarkModelPickerError('invalid', 'model picker callback value is invalid');
+    }
+    const callback = value;
+    if (typeof callback.modelPicker !== 'string') {
+        throw new LarkModelPickerError('invalid', 'model picker callback value is invalid');
+    }
+    return { modelPicker: callback.modelPicker };
+}
+function signature(secret, encoded) {
+    return createHmac('sha256', secret).update(encoded).digest();
+}
+export function signLarkModelPickerAction(secret, input) {
+    validateSecret(secret);
+    const encoded = Buffer.from(JSON.stringify(canonical(input)), 'utf8').toString('base64url');
+    return `${encoded}.${signature(secret, encoded).toString('base64url')}`;
+}
+export function verifyLarkModelPickerAction(secret, token, now) {
+    validateSecret(secret);
+    if (typeof token !== 'string' || token.length < 40 || token.length > 8_192 || !Number.isSafeInteger(now)) {
+        throw new LarkModelPickerError('invalid', 'model picker action token is invalid');
+    }
+    const parts = token.split('.');
+    if (parts.length !== 2 || !base64urlPattern.test(parts[0]) || !base64urlPattern.test(parts[1])) {
+        throw new LarkModelPickerError('invalid', 'model picker action token is invalid');
+    }
+    const supplied = Buffer.from(parts[1], 'base64url');
+    const decoded = Buffer.from(parts[0], 'base64url');
+    const expected = signature(secret, parts[0]);
+    if (supplied.toString('base64url') !== parts[1] || decoded.toString('base64url') !== parts[0]
+        || supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) {
+        throw new LarkModelPickerError('invalid', 'model picker action signature is invalid');
+    }
+    let payload;
+    try {
+        payload = canonical(JSON.parse(decoded.toString('utf8')));
+    }
+    catch (error) {
+        if (error instanceof LarkModelPickerError)
+            throw error;
+        throw new LarkModelPickerError('invalid', 'model picker action payload is invalid');
+    }
+    if (now >= payload.expiresAt)
+        throw new LarkModelPickerError('expired', 'model picker action expired');
+    return payload;
+}
+//# sourceMappingURL=model-picker.js.map

package/lib/model-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-picker.js","sourceRoot":"","sources":["../src/model-picker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAgBzD,MAAM,eAAe,GAA6C,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;AAM5G,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB;IAArB,YAAqB,IAA2B,EAAE,OAAe;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAAuB;QAE9C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,uCAAuC,CAAA;AACjE,MAAM,eAAe,GAAG,qCAAqC,CAAA;AAC7D,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAE5C,SAAS,SAAS,CAAC,KAAc,EAAE,SAAiB;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;WAC7E,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAA;IAClF,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAmC;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU;SAClH,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;WACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,EAAE;WAChC,KAAK,CAAC,OAAO,KAAK,CAAC;WACnB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WACnF,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;WAC/E,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;WACzE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC3E,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;WAC5B,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;WACxD,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;WACvC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;WAC3D,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC7E,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;QACxF,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC7C,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAkC,CAAA;IACnD,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,OAAe;IAChD,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,KAAmC;IAC3F,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC3F,OAAO,GAAG,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAc,EACd,KAAa,EACb,GAAW;IAEX,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAA;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAA;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;WACxF,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,0CAA0C,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,OAAqC,CAAA;IACzC,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiC,CAAC,CAAA;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAA;QACtD,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS;QAAE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAA;IACtG,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/lib/normalize.d.ts

@@ -0,0 +1,12 @@
+import type { InboundEnvelope } from '@dsh-enhanced/assistant-delivery';
+import type { LarkInboundConfig, LarkMessage } from './types.js';
+export type LarkIgnoreReason = 'bot-mention-required' | 'empty-content' | 'stale-event';
+export type LarkNormalizeResult = {
+    outcome: 'accept';
+    envelope: InboundEnvelope;
+} | {
+    outcome: 'ignore';
+    reason: LarkIgnoreReason;
+};
+export declare function normalizeLarkMessage(config: LarkInboundConfig, input: LarkMessage, now: number): LarkNormalizeResult;
+//# sourceMappingURL=normalize.d.ts.map

package/lib/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../src/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAEvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEhE,MAAM,MAAM,gBAAgB,GAAG,sBAAsB,GAAG,eAAe,GAAG,aAAa,CAAA;AAEvF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GAChD;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAA;AA4BnD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,MAAM,GACV,mBAAmB,CA+CrB"}

package/lib/normalize.js

@@ -0,0 +1,77 @@
+import { larkProviderReplyThread, larkTopLevelSenderThread } from './group-thread.js';
+const keyPattern = /^[A-Za-z0-9][A-Za-z0-9._@/-]{0,255}$/u;
+const providerCapabilityPattern = /^[A-Za-z0-9][A-Za-z0-9._@-]{0,255}$/u;
+function key(value, field) {
+    const normalized = value.trim();
+    if (!keyPattern.test(normalized))
+        throw new Error(`lark-channel: ${field} is invalid`);
+    return normalized;
+}
+function providerCapability(value, field) {
+    const normalized = value.trim();
+    if (!providerCapabilityPattern.test(normalized))
+        throw new Error(`lark-channel: ${field} is invalid`);
+    return normalized;
+}
+function content(value, maxTextBytes) {
+    if (/\p{Cc}/u.test(value.replaceAll('\n', '').replaceAll('\r', '').replaceAll('\t', ''))) {
+        throw new Error('lark-channel: message contains a forbidden control character');
+    }
+    const normalized = value.replaceAll('\r\n', '\n').trim();
+    if (Buffer.byteLength(normalized, 'utf8') > maxTextBytes) {
+        throw new Error('lark-channel: message exceeds maxTextBytes');
+    }
+    return normalized;
+}
+export function normalizeLarkMessage(config, input, now) {
+    if (!Number.isSafeInteger(input.createTime) || input.createTime < 0) {
+        throw new Error('lark-channel: createTime is invalid');
+    }
+    if (now - input.createTime > config.staleAfterMs)
+        return { outcome: 'ignore', reason: 'stale-event' };
+    if (input.chatType === 'group' && config.requireMentionInGroups && !input.mentionedBot) {
+        return { outcome: 'ignore', reason: 'bot-mention-required' };
+    }
+    if (input.resources.length > 10)
+        throw new Error('lark-channel: message has too many attachment descriptors');
+    const normalizedText = content(input.content, config.maxTextBytes);
+    if (normalizedText.length === 0 && input.resources.length === 0)
+        return { outcome: 'ignore', reason: 'empty-content' };
+    const text = normalizedText;
+    const account = key(config.account, 'account');
+    const tenant = key(config.tenant, 'tenant');
+    const eventId = providerCapability(input.messageId, 'messageId');
+    const chat = key(input.chatId, 'chatId');
+    const user = key(input.senderId, 'senderId');
+    const principal = { channel: 'lark', account, tenant, user };
+    const conversation = input.chatType === 'p2p'
+        ? { channel: 'lark', account, tenant, kind: 'dm', chat }
+        : { channel: 'lark', account, tenant, kind: 'group', chat,
+            thread: input.rootId === undefined
+                ? larkTopLevelSenderThread(user)
+                : larkProviderReplyThread(key(input.rootId, 'rootId')) };
+    return {
+        outcome: 'accept',
+        envelope: {
+            channel: 'lark',
+            account,
+            eventId,
+            occurredAt: input.createTime,
+            principal,
+            conversation,
+            kind: text.startsWith('/') ? 'command' : 'text',
+            text,
+            metadata: {
+                providerMessageId: eventId,
+                rawContentType: key(input.rawContentType, 'rawContentType'),
+                resourceCount: String(Math.min(input.resources.length, 999)),
+            },
+            ...(input.resources.length === 0 ? {} : { attachments: input.resources.map(resource => ({
+                    resourceType: resource.type,
+                    providerRef: providerCapability(resource.fileKey, 'resource.fileKey'),
+                    ...(resource.fileName === undefined ? {} : { fileName: resource.fileName }),
+                })) }),
+        },
+    };
+}
+//# sourceMappingURL=normalize.js.map

package/lib/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../src/normalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AASrF,MAAM,UAAU,GAAG,uCAAuC,CAAA;AAC1D,MAAM,yBAAyB,GAAG,sCAAsC,CAAA;AAExE,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,aAAa,CAAC,CAAA;IACtF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,aAAa,CAAC,CAAA;IACrG,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,YAAoB;IAClD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;IACxD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,KAAkB,EAClB,GAAW;IAEX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IACrG,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACvF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC7G,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;IAClE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IACtH,MAAM,IAAI,GAAG,cAAc,CAAA;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC5D,MAAM,YAAY,GAAoC,KAAK,CAAC,QAAQ,KAAK,KAAK;QAC5E,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QACxD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;gBAChC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAA;IAChE,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM;YACf,OAAO;YACP,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS;YACT,YAAY;YACZ,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAC/C,IAAI;YACJ,QAAQ,EAAE;gBACR,iBAAiB,EAAE,OAAO;gBAC1B,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;gBAC3D,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;aAC7D;YACD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACtF,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;oBACrE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;iBAC5E,CAAC,CAAC,EAAE,CAAC;SACP;KACF,CAAA;AACH,CAAC"}

package/lib/permission-picker.d.ts

@@ -0,0 +1,29 @@
+export type LarkPermissionLevel = 'ask' | 'auto' | 'full';
+export interface LarkPermissionPickerActionPayload {
+    version: 2;
+    channel: string;
+    account: string;
+    tenant: string;
+    operationId: string;
+    bindingId: string;
+    bindingVersion: number;
+    sessionId: string;
+    chatId: string;
+    ownerUser: string;
+    issuedAt: number;
+    expiresAt: number;
+    expectedStateHash: string;
+    emergencyStopVersion: number;
+    level: LarkPermissionLevel;
+}
+export interface LarkPermissionPickerCallbackValue {
+    permissionPicker: string;
+}
+export declare class LarkPermissionPickerError extends Error {
+    readonly code: 'expired' | 'invalid';
+    constructor(code: 'expired' | 'invalid', message: string);
+}
+export declare function parseLarkPermissionPickerCallback(value: unknown): LarkPermissionPickerCallbackValue;
+export declare function signLarkPermissionPickerAction(secret: string, input: LarkPermissionPickerActionPayload): string;
+export declare function verifyLarkPermissionPickerAction(secret: string, token: string, now: number): LarkPermissionPickerActionPayload;
+//# sourceMappingURL=permission-picker.d.ts.map

package/lib/permission-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-picker.d.ts","sourceRoot":"","sources":["../src/permission-picker.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;AAEzD,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,CAAC,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,EAAE,MAAM,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,MAAM,WAAW,iCAAiC;IAChD,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS;gBAA3B,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM;CAIlE;AAyFD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,iCAAiC,CAanG;AAMD,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iCAAiC,GACvC,MAAM,CAMR;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,iCAAiC,CA2BnC"}

package/lib/permission-picker.js

@@ -0,0 +1,145 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+export class LarkPermissionPickerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'LarkPermissionPickerError';
+    }
+}
+const TOKEN_MIN_CHARS = 40;
+const TOKEN_MAX_CHARS = 4_096;
+const SIGNATURE_DOMAIN = 'dsh-lark-permission-picker:v2\0';
+const payloadFields = [
+    'version', 'channel', 'account', 'tenant', 'operationId', 'bindingId', 'bindingVersion',
+    'sessionId', 'chatId', 'ownerUser', 'issuedAt', 'expiresAt', 'expectedStateHash',
+    'emergencyStopVersion', 'level',
+];
+const identifierPattern = /^[A-Za-z0-9][A-Za-z0-9._@:-]{0,255}$/u;
+const routeComponentPattern = /^[A-Za-z0-9][A-Za-z0-9._@/-]{0,255}$/u;
+const stateHashPattern = /^[a-f0-9]{64}$/u;
+const base64urlPattern = /^[A-Za-z0-9_-]+$/u;
+function invalid(message) {
+    return new LarkPermissionPickerError('invalid', message);
+}
+function validateSecret(secret) {
+    if (typeof secret !== 'string' || Buffer.byteLength(secret, 'utf8') < 16) {
+        throw invalid('permission picker signing key is invalid');
+    }
+}
+function routeComponent(value) {
+    return typeof value === 'string' && routeComponentPattern.test(value);
+}
+function identifier(value) {
+    return typeof value === 'string' && identifierPattern.test(value);
+}
+function canonical(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        throw invalid('permission picker action payload is invalid');
+    }
+    const keys = Reflect.ownKeys(input);
+    if (keys.length !== payloadFields.length
+        || keys.some(field => typeof field !== 'string' || !payloadFields.includes(field))
+        || input.version !== 2
+        || !routeComponent(input.channel)
+        || !routeComponent(input.account)
+        || !routeComponent(input.tenant)
+        || !identifier(input.operationId)
+        || !identifier(input.bindingId)
+        || !Number.isSafeInteger(input.bindingVersion) || input.bindingVersion < 1
+        || !identifier(input.sessionId)
+        || !identifier(input.chatId)
+        || !identifier(input.ownerUser)
+        || !Number.isSafeInteger(input.issuedAt) || input.issuedAt < 1
+        || !Number.isSafeInteger(input.expiresAt) || input.expiresAt <= input.issuedAt
+        || typeof input.expectedStateHash !== 'string' || !stateHashPattern.test(input.expectedStateHash)
+        || !Number.isSafeInteger(input.emergencyStopVersion) || input.emergencyStopVersion < 0
+        || (input.level !== 'ask' && input.level !== 'auto' && input.level !== 'full')) {
+        throw invalid('permission picker action payload is invalid');
+    }
+    return {
+        version: 2,
+        channel: input.channel,
+        account: input.account,
+        tenant: input.tenant,
+        operationId: input.operationId,
+        bindingId: input.bindingId,
+        bindingVersion: input.bindingVersion,
+        sessionId: input.sessionId,
+        chatId: input.chatId,
+        ownerUser: input.ownerUser,
+        issuedAt: input.issuedAt,
+        expiresAt: input.expiresAt,
+        expectedStateHash: input.expectedStateHash,
+        emergencyStopVersion: input.emergencyStopVersion,
+        level: input.level,
+    };
+}
+function tokenParts(value) {
+    if (typeof value !== 'string' || value.length < TOKEN_MIN_CHARS || value.length > TOKEN_MAX_CHARS) {
+        return undefined;
+    }
+    const parts = value.split('.');
+    if (parts.length !== 2 || !base64urlPattern.test(parts[0]) || !base64urlPattern.test(parts[1])) {
+        return undefined;
+    }
+    return [parts[0], parts[1]];
+}
+export function parseLarkPermissionPickerCallback(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw invalid('permission picker callback value is invalid');
+    }
+    const keys = Reflect.ownKeys(value);
+    if (keys.length !== 1 || keys[0] !== 'permissionPicker') {
+        throw invalid('permission picker callback value is invalid');
+    }
+    const callback = value;
+    if (tokenParts(callback.permissionPicker) === undefined) {
+        throw invalid('permission picker callback value is invalid');
+    }
+    return { permissionPicker: callback.permissionPicker };
+}
+function signature(secret, encoded) {
+    return createHmac('sha256', secret).update(SIGNATURE_DOMAIN).update(encoded).digest();
+}
+export function signLarkPermissionPickerAction(secret, input) {
+    validateSecret(secret);
+    const encoded = Buffer.from(JSON.stringify(canonical(input)), 'utf8').toString('base64url');
+    const token = `${encoded}.${signature(secret, encoded).toString('base64url')}`;
+    if (token.length > TOKEN_MAX_CHARS)
+        throw invalid('permission picker action token is invalid');
+    return token;
+}
+export function verifyLarkPermissionPickerAction(secret, token, now) {
+    validateSecret(secret);
+    if (!Number.isSafeInteger(now))
+        throw invalid('permission picker action token is invalid');
+    const parts = tokenParts(token);
+    if (parts === undefined)
+        throw invalid('permission picker action token is invalid');
+    const supplied = Buffer.from(parts[1], 'base64url');
+    const decoded = Buffer.from(parts[0], 'base64url');
+    const expected = signature(secret, parts[0]);
+    if (supplied.toString('base64url') !== parts[1]
+        || decoded.toString('base64url') !== parts[0]
+        || supplied.length !== expected.length
+        || !timingSafeEqual(supplied, expected)) {
+        throw invalid('permission picker action signature is invalid');
+    }
+    let payload;
+    try {
+        payload = canonical(JSON.parse(decoded.toString('utf8')));
+    }
+    catch (error) {
+        if (error instanceof LarkPermissionPickerError)
+            throw error;
+        throw invalid('permission picker action payload is invalid');
+    }
+    const canonicalEncoded = Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url');
+    if (parts[0] !== canonicalEncoded)
+        throw invalid('permission picker action payload is not canonical');
+    if (now >= payload.expiresAt)
+        throw new LarkPermissionPickerError('expired', 'permission picker action expired');
+    return payload;
+}
+//# sourceMappingURL=permission-picker.js.map