@krischoichoi/channel-dingtalk 0.6.0

package/README.md

@@ -0,0 +1,139 @@
+# @krischoichoi/channel-dingtalk
+
+DingTalk / 钉钉 channel adapter for DeepSeek Harness.
+
+Maps DingTalk to the stable Channel Contract with two selectable upstream
+drivers:
+
+- **`sdk`** — inbound via the official `dingtalk-stream` SDK (WebSocket stream
+  mode); outbound via `sessionWebhook` and DingTalk AI Card OpenAPI.
+- **`gateway`** — self-hosted HTTP gateway long-poll driver (legacy).
+
+## Install
+
+```bash
+pnpm add @krischoichoi/channel-dingtalk
+```
+
+Or install the whole bundle:
+
+```bash
+npx @deepseek-ai/dsh plugin --profile web add -w @krischoichoi/dsh-channels@latest
+```
+
+## Configuration
+
+SDK mode:
+
+```yaml
+- id: channels-dingtalk
+  name: '@krischoichoi/channel-dingtalk'
+  inject: [channels, credentials, channelControl]
+  config:
+    enabled: true
+    accountId: main
+    upstream:
+      mode: sdk
+      clientId: "ding-xxx"             # AppKey（非机密）
+      # clientSecretRef 默认 DSH_CHANNEL_DINGTALK_MAIN_CLIENT_SECRET
+      # 真实 AppSecret 只存 ctx.credentials
+    card:
+      createOnFirstDelta: true
+      # 问答按钮是**可选**能力：必须填你自己卡片平台里已发布、且含 text/actions
+      # 变量的模板 ID。留空（默认）= 不声明 interactiveActions，问题走编号文字回复
+      # （与微信一致）。填了但模板未发布/无权限，Harness 会自动降级为文字回复。
+      # interactiveTemplateId: "dac1dbec-55af-40c3-be91-6d6882ef3b66.schema"
+      # 下面两个变量名必须与模板中的变量绑定一致
+      interactiveTextParam: text
+      interactiveActionsParam: actions
+```
+
+Gateway mode (legacy, self-hosted HTTP gateway):
+
+```yaml
+- id: channels-dingtalk
+  name: '@krischoichoi/channel-dingtalk'
+  inject: [channels, credentials, channelControl]
+  config:
+    enabled: true
+    accountId: main
+    upstream:
+      mode: gateway
+    baseUrl: http://127.0.0.1:9100
+    longPollTimeoutMs: 25000
+```
+
+The AppSecret is resolved through `ctx.credentials` at startup and injected as
+`deps.clientSecret`. A legacy plaintext `upstream.clientSecret` is migrated into
+the credentials seam once and then deleted.
+
+## Streaming
+
+DingTalk uses `edit` streaming: the adapter creates an AI Card, updates it with
+each delta, and finalizes (or marks it failed) at turn end.
+
+## Interactive buttons (opt-in)
+
+`OutboundMessage.actions` uses the official interactive-card APIs:
+
+- `POST /v1.0/im/interactiveCards/send`
+- `PUT /v1.0/im/interactiveCards`
+- Stream callback topic `/v1.0/card/instances/callback` (the `TOPIC_CARD`
+  constant of `dingtalk-stream`)
+
+This is not the legacy webhook `actionCard` API, whose buttons only open URLs
+and cannot return a selection to the Harness.
+
+Buttons are **opt-in and off by default**. A card only renders interactive
+components when its template is published in *your* organization's Card
+Platform, exposes the configured `text`/`actions` variables, and its buttons
+return `cardPrivateData.params.action` (the action id). A built-in third-party
+template id cannot satisfy that, so `card.interactiveTemplateId` has no default:
+without it the adapter reports `interactiveActions: false` and Harness questions
+use the numbered-text reply path (same as Weixin). When the template *is*
+configured but the send still fails (unpublished template, missing permission),
+`channel-harness` degrades that question to numbered text instead of cancelling
+it.
+
+LIVE-REQUIRED before advertising buttons as verified: a real-account round trip
+that the card renders, that a click arrives on the STREAM callback topic, and
+that the answer returns to the agent. The official troubleshooting note
+requires `callbackType="STREAM"` at card creation *and* the registered callback
+topic ([钉钉卡片示例 · 注意事项](https://github.com/open-dingtalk/dingtalk-card-examples));
+whether `POST /v1.0/im/interactiveCards/send` honors `callbackType` is still
+unverified here and is the first item to check in that gate.
+
+## Capabilities
+
+| Capability | Value |
+| --- | --- |
+| text / image / file / audio | ✅ |
+| markdown / cards | ✅ (AI Card streaming replies) |
+| interactive actions | ⚙️ opt-in: SDK mode **and** `card.interactiveTemplateId` set |
+| video / reactions / threads | ❌ |
+| streaming | `edit` (AI Card) |
+
+## Upstream
+
+| Field | Value |
+| --- | --- |
+| SDK | `dingtalk-stream` |
+| Tested version | `2.1.5` |
+| Status | `tested` (offline contract + fixture + SDK-mode E2E suites) |
+
+## Development
+
+```bash
+pnpm --filter @krischoichoi/channel-dingtalk build
+pnpm --filter @krischoichoi/channel-dingtalk typecheck
+pnpm --filter @krischoichoi/channel-dingtalk test
+```
+
+## Related
+
+- [Repository root](../../README.md)
+- [Adapter authoring guide](../../docs/adapter-authoring.md)
+
+## License
+
+[MIT](../../LICENSE)

package/lib/adapter.d.ts

@@ -0,0 +1,123 @@
+/**
+ * DingTalk channel adapter.
+ *
+ * Maps the DingTalk platform (through the upstream driver) to the Channel
+ * Contract. All network/lifecycle resources live behind the upstream driver
+ * and are aborted via the adapter context signal. The adapter never touches
+ * Harness Agent APIs.
+ *
+ * The upstream driver is selected by `config.upstream.mode`:
+ * - 'sdk'     → `DingTalkStreamUpstream`: inbound via the official
+ *   `dingtalk-stream` SDK, outbound via DingTalk's official HTTP APIs. The stream
+ *   client comes from `deps.sdkClient` / `deps.sdkClientFactory`, defaulting
+ *   to a real `DWClient` built from `upstream.clientId` (AppKey) and the
+ *   resolved AppSecret at start time (missing credentials fail start loudly).
+ *   The AppSecret is resolved via `ctx.credentials` and injected as
+ *   `deps.clientSecret` — it never lives in config and is never read from
+ *   `config.upstream` (mirrors how channel-qq injects `deps.appSecret`).
+ * - 'gateway' → `HttpDingTalkUpstream` over the transport (legacy).
+ *
+ * Auth is connection-state driven: the upstream driver owns the platform
+ * credentials, so the adapter derives its auth state from the connection
+ * (connected → authenticated). `beginAuth`/`pollAuth` are intentionally not
+ * implemented in M2 — a real QR/token flow can slot in later.
+ */
+import type { ChannelAdapter, ChannelAdapterContext, ChannelCapabilities, ChannelHealth, ChannelTarget, CreateReplyOptions, OutboundMessage, ReplyHandle, SendResult } from '@krischoichoi/channel-core';
+import type { RemoteMediaFetchLike } from './image-hydrator.js';
+import type { DingTalkConfig } from './config.js';
+import { type HttpTransport } from './transport.js';
+import type { MediaResolverLike, OutboxCapabilities } from './openapi-port.js';
+import { type DingTalkStreamClient } from './stream-upstream.js';
+import { type DingTalkManifest } from './manifest.js';
+export interface DingTalkAdapterDeps {
+    transport?: HttpTransport;
+    /**
+     * Resolved DingTalk AppSecret (SDK mode). Never from config — the plugin
+     * resolves it via `ctx.credentials` (`upstream.clientSecretRef`) and
+     * injects it here. Used only to build the default `DWClient`.
+     */
+    clientSecret?: string;
+    /**
+     * Pre-built stream client for SDK mode (offline tests). Overrides
+     * `sdkClientFactory`; when neither is given a real `DWClient` is built
+     * from `config.upstream.clientId` and `deps.clientSecret` at start time.
+     */
+    sdkClient?: DingTalkStreamClient;
+    /** Lazy stream client factory for SDK mode; overrides the default DWClient. */
+    sdkClientFactory?: (config: DingTalkConfig) => DingTalkStreamClient;
+    /**
+     * Secure remote media fetcher used to hydrate inbound image URLs (plan
+     * §32A). Injectable for offline tests; defaults to a real
+     * `SecureRemoteMediaFetcher` bound to the global fetch.
+     */
+    secureFetch?: RemoteMediaFetchLike;
+    /**
+     * DingTalk OpenAPI media resolver used to hydrate opaque file mediaIds into
+     * trusted bytes during inbound file ingress. Injectable for
+     * offline tests; defaults to the running official port in sdk mode.
+     */
+    resolveMedia?: MediaResolverLike;
+    /** Injectable clock (tests). */
+    now?: () => number;
+}
+export declare class DingTalkAdapter implements ChannelAdapter {
+    private readonly config;
+    readonly id = "dingtalk";
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    readonly manifest: DingTalkManifest;
+    readonly capabilities: ChannelCapabilities;
+    private static readonly BASE_CAPABILITIES;
+    private ctx?;
+    /** Built in `start()` (driver selection needs the resolved deps/credentials). */
+    private upstream;
+    private readonly transport;
+    private readonly deps;
+    private readonly secureFetch;
+    private inbound;
+    private outbound;
+    /**
+     * Official OpenAPI port built in sdk mode (proactive path for the outbox).
+     * Undefined in gateway mode — proactive capabilities then fail CLOSED.
+     */
+    private officialPort?;
+    /**
+     * Proactive outbox capabilities. Read by the harness outbox;
+     * fails CLOSED (all-false) in gateway mode / when not wired.
+     */
+    private capProactive;
+    private started;
+    private stopped;
+    private receiveLoop?;
+    private connected;
+    /** Connection-state-driven auth; the upstream driver owns credentials. */
+    private authState;
+    private readonly now;
+    /** Internal stop signal merged with the context signal for prompt teardown. */
+    private stopController?;
+    private receiveSignal?;
+    constructor(config: DingTalkConfig, deps?: DingTalkAdapterDeps);
+    start(ctx: ChannelAdapterContext): Promise<void>;
+    stop(): Promise<void>;
+    send(target: ChannelTarget, message: OutboundMessage): Promise<SendResult>;
+    edit(target: ChannelTarget, messageId: string, message: OutboundMessage): Promise<SendResult>;
+    createReply(target: ChannelTarget, _options?: CreateReplyOptions): Promise<ReplyHandle>;
+    getHealth(): Promise<ChannelHealth>;
+    /** Long-poll receive loop with exponential backoff on failure. */
+    startReceiveLoop(): void;
+    /** Select and build the upstream driver for the configured mode. */
+    private buildUpstream;
+    /**
+     * Proactive outbox capabilities exposed for the harness outbox.
+     * Fails CLOSED: all-false in gateway mode / when not wired.
+     */
+    get outboxCapabilities(): OutboxCapabilities;
+    private resolveStreamClient;
+    private runReceiveLoop;
+    /** Flip connection/auth state once the upstream proves reachable. */
+    private markConnected;
+    private aborted;
+    private setAuth;
+    private emitAuth;
+    private emitConnection;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/lib/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAgC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEpF,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,oBAAoB,CAAC;IACpE;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,eAAgB,YAAW,cAAc;IAyExC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAxEnC,QAAQ,CAAC,EAAE,cAAc;IAEzB,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAoB;IAEvD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAmCvC;IAEF,OAAO,CAAC,GAAG,CAAC,CAAwB;IACpC,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAkB;IAClC;;;OAGG;IACH,OAAO,CAAC,YAAY,CAAC,CAA0B;IAC/C;;;OAGG;IACH,OAAO,CAAC,YAAY,CAAuE;IAC3F,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,SAAS,CAAS;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,SAAS,CAAqD;IACtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,+EAA+E;IAC/E,OAAO,CAAC,cAAc,CAAC,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAC,CAAc;gBAEP,MAAM,EAAE,cAAc,EAAE,IAAI,GAAE,mBAAwB;IAe7E,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmChD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO1E,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO7F,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;IAavF,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAezC,kEAAkE;IAClE,gBAAgB,IAAI,IAAI;IAKxB,oEAAoE;IACpE,OAAO,CAAC,aAAa;IAiCrB;;;OAGG;IACH,IAAI,kBAAkB,IAAI,kBAAkB,CAE3C;IAED,OAAO,CAAC,mBAAmB;YAMb,cAAc;IAuC5B,qEAAqE;IACrE,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,cAAc;CAWvB"}

package/lib/adapter.js

@@ -0,0 +1,355 @@
+import { ChannelError, SecureRemoteMediaFetcher } from '@krischoichoi/channel-core';
+import { DWClient } from 'dingtalk-stream';
+import { FetchTransport } from './transport.js';
+import { HttpDingTalkUpstream } from './upstream.js';
+import { DingTalkOpenApiPortImpl } from './official-upstream.js';
+import { DingTalkStreamUpstream, } from './stream-upstream.js';
+import { InboundProcessor } from './inbound.js';
+import { OutboundSender } from './outbound.js';
+import { DingTalkCardReply } from './ai-card.js';
+import { manifest as dingTalkManifest } from './manifest.js';
+export class DingTalkAdapter {
+    config;
+    id = 'dingtalk';
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    manifest = dingTalkManifest;
+    capabilities;
+    static BASE_CAPABILITIES = {
+        text: true,
+        image: true,
+        file: true,
+        audio: true,
+        video: false,
+        markdown: true,
+        cards: true,
+        reactions: false,
+        threads: false,
+        streaming: 'edit',
+        // Directional media precision. Inbound
+        // image/file have an established official download path. Audio/video are
+        // conservatively declared as locators until official callback/download
+        // documentation and a real-account live gate prove byte hydration; the
+        // inbound processor may still hydrate them as a best-effort enhancement.
+        // Outbound: only
+        // image/file bytes are actually sendable (proactive uploadMedia + sendMedia,
+        // msgKey sampleImageMsg/sampleFile); there is no robot audio/video send
+        // path, so outbound audio/video are 'unsupported' (the legacy coarse
+        // `audio: true` / `video: false` flags remain unchanged).
+        media: {
+            inbound: {
+                image: 'bytes',
+                file: 'bytes',
+                audio: 'locator',
+                video: 'locator',
+            },
+            outbound: {
+                image: 'bytes',
+                file: 'bytes',
+                audio: 'unsupported',
+                video: 'unsupported',
+            },
+        },
+    };
+    ctx;
+    /** Built in `start()` (driver selection needs the resolved deps/credentials). */
+    upstream;
+    transport;
+    deps;
+    secureFetch;
+    inbound;
+    outbound;
+    /**
+     * Official OpenAPI port built in sdk mode (proactive path for the outbox).
+     * Undefined in gateway mode — proactive capabilities then fail CLOSED.
+     */
+    officialPort;
+    /**
+     * Proactive outbox capabilities. Read by the harness outbox;
+     * fails CLOSED (all-false) in gateway mode / when not wired.
+     */
+    capProactive = { proactiveText: false, proactiveMedia: false };
+    started = false;
+    stopped = false;
+    receiveLoop;
+    connected = false;
+    /** Connection-state-driven auth; the upstream driver owns credentials. */
+    authState = 'unknown';
+    now;
+    /** Internal stop signal merged with the context signal for prompt teardown. */
+    stopController;
+    receiveSignal;
+    constructor(config, deps = {}) {
+        this.config = config;
+        this.capabilities = {
+            ...DingTalkAdapter.BASE_CAPABILITIES,
+            // Declared ONLY when the operator opted into a card template that must
+            // already be published in their own Card Platform with matching
+            // `text`/`actions` variables. A capability claimed without that
+            // precondition is a lie the question presenter pays for.
+            interactiveActions: config.upstream.mode === 'sdk' && Boolean(config.card.interactiveTemplateId?.trim()),
+        };
+        this.now = deps.now ?? Date.now;
+        this.deps = deps;
+        this.secureFetch = deps.secureFetch ?? new SecureRemoteMediaFetcher();
+        this.transport = deps.transport ?? new FetchTransport(config.baseUrl, { timeoutMs: config.timeoutMs });
+    }
+    async start(ctx) {
+        if (this.started)
+            return;
+        this.ctx = ctx;
+        this.stopped = false;
+        this.buildUpstream();
+        this.stopController = new AbortController();
+        this.receiveSignal = AbortSignal.any([ctx.signal, this.stopController.signal]);
+        this.inbound = new InboundProcessor({
+            ctx,
+            meta: { channel: this.id, accountId: this.config.accountId },
+            dedupEnabled: this.config.dedup.enabled,
+            dedupWindowMs: this.config.dedup.windowMs,
+            now: this.now,
+            secureFetch: this.secureFetch,
+            resolveMedia: this.deps.resolveMedia ?? this.officialPort,
+        });
+        // REPLY keeps the sessionWebhook upstream; PROACTIVE uses the official port.
+        this.outbound = new OutboundSender({
+            reply: this.upstream,
+            logger: ctx.logger,
+            proactive: this.officialPort,
+            capabilities: this.capProactive,
+            interactiveTemplateId: this.config.card.interactiveTemplateId,
+            interactiveTextParam: this.config.card.interactiveTextParam,
+            interactiveActionsParam: this.config.card.interactiveActionsParam,
+        });
+        this.connected = false;
+        this.authState = 'unknown';
+        this.emitAuth(this.authState);
+        this.emitConnection('connecting');
+        this.startReceiveLoop();
+        this.started = true;
+    }
+    async stop() {
+        if (!this.started || this.stopped)
+            return;
+        this.stopped = true;
+        this.started = false;
+        this.connected = false;
+        // The owning fiber aborts the context signal first; the loop also exits
+        // on our internal stop signal so stop() never depends on an external
+        // abort (contract tests stop without disposing the context).
+        this.stopController?.abort();
+        const loop = this.receiveLoop;
+        this.receiveLoop = undefined;
+        if (loop)
+            await loop.catch(() => undefined);
+        this.emitConnection('closed');
+    }
+    async send(target, message) {
+        if (!this.started || !this.outbound) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'dingtalk adapter is not started');
+        }
+        return this.outbound.send(target, message);
+    }
+    async edit(target, messageId, message) {
+        if (!this.started || !this.outbound) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'dingtalk adapter is not started');
+        }
+        return this.outbound.edit(target, messageId, message);
+    }
+    async createReply(target, _options) {
+        if (!this.started || !this.ctx) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'dingtalk adapter is not started');
+        }
+        return new DingTalkCardReply({
+            upstream: this.upstream,
+            target,
+            logger: this.ctx.logger,
+            createOnFirstDelta: this.config.card.createOnFirstDelta,
+            now: this.now,
+        });
+    }
+    async getHealth() {
+        if (!this.started) {
+            return { status: 'down', detail: 'dingtalk adapter is not started', authenticated: false };
+        }
+        if (this.connected) {
+            return { status: 'ok', detail: 'connected', connection: 'connected', authenticated: true };
+        }
+        return {
+            status: 'degraded',
+            detail: 'receive loop down',
+            connection: 'disconnected',
+            authenticated: false,
+        };
+    }
+    /** Long-poll receive loop with exponential backoff on failure. */
+    startReceiveLoop() {
+        if (this.receiveLoop)
+            return;
+        this.receiveLoop = this.runReceiveLoop();
+    }
+    /** Select and build the upstream driver for the configured mode. */
+    buildUpstream() {
+        const httpUpstream = new HttpDingTalkUpstream({
+            transport: this.transport,
+            longPollTimeoutMs: this.config.longPollTimeoutMs,
+        });
+        if (this.config.upstream.mode !== 'sdk') {
+            this.upstream = httpUpstream;
+            // Gateway mode has no official proactive path — capabilities fail CLOSED.
+            this.officialPort = undefined;
+            this.capProactive = { proactiveText: false, proactiveMedia: false };
+            return;
+        }
+        // The official OpenAPI port implements BOTH the `DingTalkUpstream` outbound
+        // surface (sessionWebhook reply) and the `DingTalkOpenApiPort`
+        // proactive/media surface. Proactive is implemented in sdk mode,
+        // so the outbox capabilities are enabled (capability true only when
+        // actually implemented — never faked).
+        this.officialPort = new DingTalkOpenApiPortImpl({
+            transport: this.transport,
+            clientId: this.config.upstream.clientId,
+            clientSecret: this.deps.clientSecret,
+            secureFetch: this.secureFetch,
+            now: this.now,
+        });
+        this.capProactive = { proactiveText: true, proactiveMedia: true };
+        const options = {
+            client: this.resolveStreamClient(),
+            outbound: this.officialPort,
+            onConnected: () => this.markConnected(),
+        };
+        this.upstream = new DingTalkStreamUpstream(options);
+    }
+    /**
+     * Proactive outbox capabilities exposed for the harness outbox.
+     * Fails CLOSED: all-false in gateway mode / when not wired.
+     */
+    get outboxCapabilities() {
+        return { ...this.capProactive };
+    }
+    resolveStreamClient() {
+        if (this.deps.sdkClient)
+            return this.deps.sdkClient;
+        if (this.deps.sdkClientFactory)
+            return this.deps.sdkClientFactory(this.config);
+        return createDefaultDWClient(this.config, this.deps.clientSecret);
+    }
+    async runReceiveLoop() {
+        let attempt = 0;
+        while (!this.stopped && !this.aborted()) {
+            try {
+                await this.upstream.receive(this.receiveSignal, (raw) => {
+                    void this.inbound.handle(raw).catch((error) => {
+                        this.ctx.logger.error('[channel-dingtalk] inbound handling failed', error);
+                    });
+                });
+                attempt = 0;
+                // A completed receive cycle proves the upstream is reachable; auth
+                // follows the connection state (the driver owns credentials). In sdk
+                // mode the stream driver also reports connectivity via onConnected.
+                this.markConnected();
+            }
+            catch (error) {
+                if (this.stopped || this.aborted())
+                    break;
+                attempt += 1;
+                this.connected = false;
+                this.emitConnection('reconnecting');
+                if (this.config.reconnect.enabled && attempt > this.config.reconnect.maxRetries) {
+                    this.ctx.logger.warn('[channel-dingtalk] reconnect budget exhausted');
+                    this.setAuth('failed');
+                    this.emitConnection('disconnected');
+                    break;
+                }
+                const delay = Math.min(this.config.reconnect.baseDelayMs * 2 ** Math.min(attempt - 1, 8), this.config.reconnect.maxDelayMs);
+                this.ctx.logger.warn(`[channel-dingtalk] receive loop error; retry in ${delay}ms`, error);
+                await sleep(delay, this.receiveSignal);
+            }
+        }
+        this.connected = false;
+        if (!this.stopped && !this.aborted()) {
+            this.emitConnection('disconnected');
+        }
+    }
+    /** Flip connection/auth state once the upstream proves reachable. */
+    markConnected() {
+        // Never report connected while stopping; an external abort is not
+        // sufficient (a long-poll cycle may legitimately end on the abort while
+        // having already proven reachability — see the gateway lifecycle tests).
+        if (this.stopped)
+            return;
+        if (this.connected)
+            return;
+        this.connected = true;
+        this.setAuth('authenticated');
+        this.emitConnection('connected');
+    }
+    aborted() {
+        return this.receiveSignal?.aborted ?? true;
+    }
+    setAuth(state) {
+        if (this.authState === state)
+            return;
+        this.authState = state;
+        this.emitAuth(state);
+    }
+    emitAuth(state) {
+        if (!this.ctx)
+            return;
+        void this.ctx
+            .emit({
+            type: 'auth.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .catch(() => undefined);
+    }
+    emitConnection(state) {
+        if (!this.ctx)
+            return;
+        void this.ctx
+            .emit({
+            type: 'connection.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .catch(() => undefined);
+    }
+}
+/**
+ * Build the real SDK client from SDK-mode credentials; never logs them.
+ *
+ * Takes the RESOLVED AppSecret (injected by the plugin via ctx.credentials)
+ * rather than reading it from config. A missing secret fails start loudly.
+ */
+function createDefaultDWClient(config, clientSecret) {
+    const { clientId } = config.upstream;
+    if (!clientId || !clientSecret) {
+        throw new ChannelError('CHANNEL_ERROR', 'dingtalk upstream mode "sdk" requires resolved clientId and clientSecret credentials');
+    }
+    const client = new DWClient({ clientId, clientSecret, keepAlive: false });
+    // The adapter owns retry/backoff. The SDK otherwise swallows a failed
+    // connection and retries independently, which makes health unreliable.
+    client.getConfig().autoReconnect = false;
+    return client;
+}
+function sleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal?.aborted) {
+            resolve();
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=adapter.js.map

package/lib/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAsB,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EACL,sBAAsB,GAGvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AAkCpF,MAAM,OAAO,eAAe;IAyEG;IAxEpB,EAAE,GAAG,UAAU,CAAC;IAEzB,gFAAgF;IACvE,QAAQ,GAAqB,gBAAgB,CAAC;IAE9C,YAAY,CAAsB;IACnC,MAAM,CAAU,iBAAiB,GAAoD;QAC3F,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,MAAM;QACjB,uCAAuC;QACvC,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,iBAAiB;QACjB,6EAA6E;QAC7E,wEAAwE;QACxE,qEAAqE;QACrE,0DAA0D;QAC1D,KAAK,EAAE;YACL,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,SAAS;aACjB;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,aAAa;gBACpB,KAAK,EAAE,aAAa;aACrB;SACF;KACF,CAAC;IAEM,GAAG,CAAyB;IACpC,iFAAiF;IACzE,QAAQ,CAAoB;IACnB,SAAS,CAAgB;IACzB,IAAI,CAAsB;IAC1B,WAAW,CAAuB;IAC3C,OAAO,CAAoB;IAC3B,QAAQ,CAAkB;IAClC;;;OAGG;IACK,YAAY,CAA2B;IAC/C;;;OAGG;IACK,YAAY,GAAuB,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnF,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,CAAiB;IAC5B,SAAS,GAAG,KAAK,CAAC;IAC1B,0EAA0E;IAClE,SAAS,GAA2C,SAAS,CAAC;IACrD,GAAG,CAAe;IACnC,+EAA+E;IACvE,cAAc,CAAmB;IACjC,aAAa,CAAe;IAEpC,YAA6B,MAAsB,EAAE,OAA4B,EAAE;QAAtD,WAAM,GAAN,MAAM,CAAgB;QACjD,IAAI,CAAC,YAAY,GAAG;YAClB,GAAG,eAAe,CAAC,iBAAiB;YACpC,uEAAuE;YACvE,gEAAgE;YAChE,gEAAgE;YAChE,yDAAyD;YACzD,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;SACzG,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,wBAAwB,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAA0B;QACpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC;YAClC,GAAG;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB,EAAE;YAC9E,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YACvC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YACzC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;SAC1D,CAAC,CAAC;QACH,6EAA6E;QAC7E,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,YAAY;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB;YAC7D,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB;YAC3D,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB;SAClE,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,wEAAwE;QACxE,qEAAqE;QACrE,6DAA6D;QAC7D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB,EAAE,OAAwB;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB,EAAE,SAAiB,EAAE,OAAwB;QAC3E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAqB,EAAE,QAA6B;QACpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB;YACvD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7F,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,gBAAgB;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IAC3C,CAAC;IAED,oEAAoE;IAC5D,aAAa;QACnB,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC;YAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACjD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;YAC7B,0EAA0E;YAC1E,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAC9B,IAAI,CAAC,YAAY,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QACD,4EAA4E;QAC5E,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,uCAAuC;QACvC,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;YACvC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAClE,MAAM,OAAO,GAAkC;YAC7C,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;YAClC,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE;SACxC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,IAAI,kBAAkB;QACpB,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,aAAc,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvD,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;wBAC5C,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;oBAC9E,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC,CAAC;gBACZ,mEAAmE;gBACnE,qEAAqE;gBACrE,oEAAoE;gBACpE,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM;gBAC1C,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;oBAChF,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;oBACvE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;oBACpC,MAAM;gBACR,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,EACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CACjC,CAAC;gBACF,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3F,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qEAAqE;IAC7D,aAAa;QACnB,kEAAkE;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,KAA6C;QAC3D,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO;QACrC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,KAA6C;QAC5D,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,KAAK,IAAI,CAAC,GAAG;aACV,IAAI,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,KAA8E;QACnG,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,KAAK,IAAI,CAAC,GAAG;aACV,IAAI,CAAC;YACJ,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;;AAGH;;;;;GAKG;AACH,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,YAAgC;IAEhC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,CAAC,SAAS,EAAE,CAAC,aAAa,GAAG,KAAK,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}