@krischoichoi/channel-dingtalk 0.6.0

package/lib/image-hydrator.js

@@ -0,0 +1,244 @@
+import { applyHydrationResult, SecureRemoteMediaFetcher, toIngressFailureCode, } from '@krischoichoi/channel-core';
+/** Default hard byte cap for a downloaded image (20 MiB). */
+export const IMAGE_MAX_BYTES = 20 * 1024 * 1024;
+/** Default read-idle timeout (no body chunk for N ms -> fail). */
+export const IMAGE_IDLE_TIMEOUT_MS = 15_000;
+function classifyLocator(url) {
+    if (url === undefined || url === '')
+        return 'none';
+    return /^https?:\/\//i.test(url) ? 'http-url' : 'opaque';
+}
+/**
+ * Identify the http(s)-fetchable image parts in a message content. Opaque
+ * (non-http) locators are surfaced separately so the ingestion policy can
+ * route them to `resourceRef`.
+ */
+export function findFetchableImages(parts) {
+    const out = [];
+    parts.forEach((part, index) => {
+        if (part.type !== 'image')
+            return;
+        const kind = classifyLocator(part.url);
+        if (kind === 'none')
+            return;
+        out.push({ kind, index, locator: part.url });
+    });
+    return out;
+}
+/**
+ * Hydrate image parts in place: mutate `parts` so every image with a genuine
+ * http(s) URL carries `localData` + `mimeType` (preferring the fetcher MIME
+ * type) on success, and `ingressFailure` on failure. Opaque locators are
+ * moved to `resourceRef` and left unresolved (OpenAPI milestone).
+ *
+ * This never throws and never blocks text delivery — any image failure only
+ * annotates the part.
+ */
+export async function hydrateImages(parts, options = {}) {
+    const fetcher = options.secureFetch ?? new SecureRemoteMediaFetcher();
+    const resolver = options.resolveMedia;
+    const maxBytes = options.maxBytes ?? IMAGE_MAX_BYTES;
+    const idleTimeoutMs = options.idleTimeoutMs ?? IMAGE_IDLE_TIMEOUT_MS;
+    for (const part of parts) {
+        if (part.type !== 'image')
+            continue;
+        // Opaque handle: either the mapper already placed it in resourceRef, or a
+        // non-http url needs moving there first. Resolve via the DingTalk OpenAPI
+        // port (official downloadCode flow) when a resolver is wired — never via a
+        // generic fetch.
+        let opaque = part.resourceRef;
+        if (!opaque) {
+            const kind = classifyLocator(part.url);
+            if (kind === 'none')
+                continue;
+            if (kind === 'opaque') {
+                opaque = part.url;
+                part.resourceRef = opaque;
+                delete part.url;
+            }
+        }
+        if (opaque) {
+            if (!resolver)
+                continue;
+            try {
+                const resolved = await resolver.resolveMedia(opaque, {
+                    signal: options.signal,
+                    name: part.alt,
+                    downloadCode: options.downloadContext?.downloadCode,
+                    robotCode: options.downloadContext?.robotCode,
+                });
+                applyResolvedImage(part, resolved);
+            }
+            catch (error) {
+                part.ingressFailure = toIngressFailureCode(error);
+                options.onFailure?.(error, part);
+            }
+            continue;
+        }
+        const url = part.url;
+        try {
+            const result = await fetcher.fetchBounded(url, {
+                maxBytes,
+                idleTimeoutMs,
+                signal: options.signal,
+            });
+            // Prefer the fetcher declared MIME type; fall back to any existing hint.
+            part.localData = result.data;
+            if (result.mimeType)
+                part.mimeType = result.mimeType;
+            if (part.size === undefined)
+                part.size = result.data.byteLength;
+        }
+        catch (error) {
+            // Keep the locator and annotate the failure; never throw into the caller.
+            part.ingressFailure = toIngressFailureCode(error);
+            options.onFailure?.(error, part);
+        }
+    }
+}
+/** Default hard byte cap for a downloaded generic file (50 MiB). */
+export const FILE_MAX_BYTES = 50 * 1024 * 1024;
+/**
+ * Hydrate generic file parts in place:
+ *   - http(s) url  -> SecureRemoteMediaFetcher -> `localData` + `mimeType` + `size`
+ *   - opaque mediaId -> move to `resourceRef` -> `resolveMedia` -> `localData`
+ * On failure the original locator is kept and a stable `ingressFailure` is
+ * stamped — this never throws and never blocks text delivery.
+ */
+export async function hydrateFiles(parts, options = {}) {
+    const fetcher = options.secureFetch ?? new SecureRemoteMediaFetcher();
+    const resolver = options.resolveMedia;
+    const maxBytes = options.maxBytes ?? FILE_MAX_BYTES;
+    const idleTimeoutMs = options.idleTimeoutMs ?? IMAGE_IDLE_TIMEOUT_MS;
+    for (const part of parts) {
+        if (part.type !== 'file')
+            continue;
+        const file = part;
+        // Opaque handle: either the mapper already placed it in resourceRef, or a
+        // non-http url needs moving there first. Resolve via the port (official
+        // downloadCode flow) when a resolver is wired — never via a generic fetch.
+        let opaque = file.resourceRef;
+        if (!opaque) {
+            const kind = classifyPartLocator(file.url);
+            if (kind === 'none')
+                continue;
+            if (kind === 'opaque') {
+                opaque = file.url;
+                file.resourceRef = opaque;
+                delete file.url;
+            }
+        }
+        if (opaque) {
+            if (resolver) {
+                try {
+                    const resolved = await resolver.resolveMedia(opaque, {
+                        signal: options.signal,
+                        name: file.name,
+                        downloadCode: options.downloadContext?.downloadCode,
+                        robotCode: options.downloadContext?.robotCode,
+                    });
+                    applyResolved(file, resolved);
+                }
+                catch (error) {
+                    file.ingressFailure = toIngressFailureCode(error);
+                }
+            }
+            continue;
+        }
+        const url = file.url;
+        try {
+            const result = await fetcher.fetchBounded(url, { maxBytes, idleTimeoutMs, signal: options.signal });
+            file.localData = result.data;
+            if (result.mimeType)
+                file.mimeType = result.mimeType;
+            if (file.size === undefined)
+                file.size = result.data.byteLength;
+        }
+        catch (error) {
+            file.ingressFailure = toIngressFailureCode(error);
+        }
+    }
+}
+function classifyPartLocator(url) {
+    if (url === undefined || url === '')
+        return 'none';
+    return /^https?:\/\//i.test(url) ? 'http-url' : 'opaque';
+}
+/** Default hard byte cap for a downloaded audio/video resource (100 MiB). */
+export const MEDIA_MAX_BYTES = 100 * 1024 * 1024;
+/**
+ * Hydrate audio/video parts in place. Audio/video follow the
+ * exact same URL-or-opaque resolution as image/file:
+ *   - http(s) url  -> SecureRemoteMediaFetcher -> `localData` + `mimeType` + `size`
+ *   - opaque handle -> move to `resourceRef` -> `resolveMedia` (official
+ *     `messageFiles/download` seam) -> `localData`
+ * The apply step delegates to core `applyHydrationResult`, so success clears
+ * `ingressFailure`, failures write ONLY a stable `ingressFailure` (never
+ * fabricating bytes), and this never throws / never blocks text delivery.
+ */
+export async function hydrateMedia(parts, options = {}) {
+    const fetcher = options.secureFetch ?? new SecureRemoteMediaFetcher();
+    const resolver = options.resolveMedia;
+    const maxBytes = options.maxBytes ?? MEDIA_MAX_BYTES;
+    const idleTimeoutMs = options.idleTimeoutMs ?? IMAGE_IDLE_TIMEOUT_MS;
+    for (const part of parts) {
+        if (part.type !== 'audio' && part.type !== 'video')
+            continue;
+        const media = part;
+        // Opaque handle: either the mapper already placed it in resourceRef, or a
+        // non-http url needs moving there first. Resolve via the port (official
+        // downloadCode flow) when a resolver is wired — never via a generic fetch.
+        let opaque = media.resourceRef;
+        if (!opaque) {
+            const kind = classifyPartLocator(media.url);
+            if (kind === 'none')
+                continue;
+            if (kind === 'opaque') {
+                opaque = media.url;
+                media.resourceRef = opaque;
+                delete media.url;
+            }
+        }
+        if (opaque) {
+            if (!resolver)
+                continue;
+            await applyHydrationResult(media, () => resolver.resolveMedia(opaque, {
+                signal: options.signal,
+                name: media.name,
+                downloadCode: options.downloadContext?.downloadCode,
+                robotCode: options.downloadContext?.robotCode,
+            }), { maxBytes, signal: options.signal });
+            continue;
+        }
+        const url = media.url;
+        await applyHydrationResult(media, async () => {
+            const result = await fetcher.fetchBounded(url, { maxBytes, idleTimeoutMs, signal: options.signal });
+            return { data: result.data, mimeType: result.mimeType };
+        }, { maxBytes, signal: options.signal });
+    }
+}
+/** Apply a successful resolution to a file part. */
+function applyResolved(part, resolved) {
+    part.localData = resolved.data;
+    if (resolved.mimeType)
+        part.mimeType = resolved.mimeType;
+    if (resolved.size !== undefined)
+        part.size = resolved.size;
+    if (part.size === undefined)
+        part.size = resolved.data.byteLength;
+}
+/** Apply a successful resolution to an image part. */
+function applyResolvedImage(part, resolved) {
+    part.localData = resolved.data;
+    if (resolved.mimeType)
+        part.mimeType = resolved.mimeType;
+    if (resolved.size !== undefined)
+        part.size = resolved.size;
+    if (part.size === undefined)
+        part.size = resolved.data.byteLength;
+}
+/** Convenience factory returning a real secure fetcher bound to global fetch. */
+export function defaultSecureFetcher() {
+    return new SecureRemoteMediaFetcher();
+}
+//# sourceMappingURL=image-hydrator.js.map

package/lib/image-hydrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-hydrator.js","sourceRoot":"","sources":["../src/image-hydrator.ts"],"names":[],"mappings":"AA0CA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,GAGrB,MAAM,4BAA4B,CAAC;AAGpC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAG5C,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACnD,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAA6B;IAC/D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AA+CD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAoB,EAAE,UAAgC,EAAE;IAC1F,MAAM,OAAO,GAAyB,OAAO,CAAC,WAAW,IAAI,IAAI,wBAAwB,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QAEpC,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,iBAAiB;QACjB,IAAI,MAAM,GAAuB,IAAI,CAAC,WAAW,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;gBAClB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;gBAC1B,OAAO,IAAI,CAAC,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;oBACnD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE,IAAI,CAAC,GAAG;oBACd,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY;oBACnD,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,SAAS;iBAC9C,CAAC,CAAC;gBACH,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAClD,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE;gBAC7C,QAAQ;gBACR,aAAa;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,yEAAyE;YACzE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,MAAM,CAAC,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAgC/C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAoB,EAAE,UAA+B,EAAE;IACxF,MAAM,OAAO,GAAyB,OAAO,CAAC,WAAW,IAAI,IAAI,wBAAwB,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IACpD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,IAAgB,CAAC;QAE9B,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,MAAM,GAAuB,IAAI,CAAC,WAAW,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;gBAClB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;gBAC1B,OAAO,IAAI,CAAC,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;wBACnD,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY;wBACnD,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,SAAS;qBAC9C,CAAC,CAAC;oBACH,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,MAAM,CAAC,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAuB;IAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACnD,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAgCjD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAoB,EAAE,UAA+B,EAAE;IACxF,MAAM,OAAO,GAAyB,OAAO,CAAC,WAAW,IAAI,IAAI,wBAAwB,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QAC7D,MAAM,KAAK,GAAG,IAA6B,CAAC;QAE5C,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,MAAM,GAAuB,KAAK,CAAC,WAAW,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;gBACnB,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;gBAC3B,OAAO,KAAK,CAAC,GAAG,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,oBAAoB,CACxB,KAAK,EACL,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY;gBACnD,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,SAAS;aAC9C,CAAC,EACF,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACrC,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;QACvB,MAAM,oBAAoB,CACxB,KAAK,EACL,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1D,CAAC,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,SAAS,aAAa,CAAC,IAAc,EAAE,QAAuB;IAC5D,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,IAAI,QAAQ,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;AACpE,CAAC;AAED,sDAAsD;AACtD,SAAS,kBAAkB,CAAC,IAA6C,EAAE,QAAuB;IAChG,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,IAAI,QAAQ,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,wBAAwB,EAAE,CAAC;AACxC,CAAC"}

package/lib/inbound.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Inbound processing: dedup window + structured mapping + media hydration (image/file/audio/video) + emit.
+ */
+import type { ChannelAdapterContext } from '@krischoichoi/channel-core';
+import { type DingTalkInboundMeta } from './mapper.js';
+import { type RemoteMediaFetchLike } from './image-hydrator.js';
+import type { MediaResolverLike } from './openapi-port.js';
+export interface InboundProcessorOptions {
+    ctx: ChannelAdapterContext;
+    meta: DingTalkInboundMeta;
+    dedupEnabled: boolean;
+    dedupWindowMs: number;
+    /** Injectable clock (tests). */
+    now?: () => number;
+    /**
+     * Secure remote media fetcher used to hydrate inbound image URLs into
+     * `localData`. Injectable for offline tests; defaults to a real
+     * `SecureRemoteMediaFetcher` bound to the global fetch.
+     */
+    secureFetch?: RemoteMediaFetchLike;
+    /**
+     * DingTalk OpenAPI media resolver used to turn opaque file mediaIds into
+     * trusted bytes during file ingress. Injectable for offline
+     * tests; when absent, opaque file handles are deferred to `resourceRef`.
+     */
+    resolveMedia?: MediaResolverLike;
+}
+export declare class InboundProcessor {
+    private readonly options;
+    private readonly now;
+    /** dedup key -> last-seen timestamp, pruned on every handle. */
+    private readonly seen;
+    constructor(options: InboundProcessorOptions);
+    /** Process one raw payload from the upstream; dedup, hydrate, then emit. */
+    handle(raw: unknown): Promise<void>;
+    private prune;
+}
+//# sourceMappingURL=inbound.d.ts.map

package/lib/inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../src/inbound.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAgC,MAAM,4BAA4B,CAAC;AAEtG,OAAO,EAAwC,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAwD7F,OAAO,EAA6C,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,qBAAqB,CAAC;IAC3B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,qBAAa,gBAAgB;IAKf,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;gBAErB,OAAO,EAAE,uBAAuB;IAI7D,4EAA4E;IACtE,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAkFzC,OAAO,CAAC,KAAK;CAKd"}

package/lib/inbound.js

@@ -0,0 +1,158 @@
+import { z } from 'zod';
+import { dedupKey, mapInbound, mapInteraction } from './mapper.js';
+const downloadContextSchema = z.object({
+    type: z.string().optional(),
+    picDownloadCode: z.string().min(1).optional(),
+    downloadCode: z.string().min(1).optional(),
+    robotCode: z.string().min(1).optional(),
+});
+/** Compact per-part summary for inbound message logs (debug diagnostics). */
+function summarizeParts(parts) {
+    return parts.map((part) => {
+        switch (part.type) {
+            case 'text':
+                return { type: 'text', text: part.text.slice(0, 80) };
+            case 'image':
+                return {
+                    type: 'image',
+                    hasUrl: Boolean(part.url),
+                    resourceRef: part.resourceRef ? '[redacted]' : undefined,
+                    mimeType: part.mimeType,
+                    localDataBytes: part.localData?.byteLength,
+                    ingressFailure: part.ingressFailure,
+                };
+            case 'file':
+                return {
+                    type: 'file',
+                    name: part.name,
+                    size: part.size,
+                    mimeType: part.mimeType,
+                    localDataBytes: part.localData?.byteLength,
+                    ingressFailure: part.ingressFailure,
+                };
+            case 'audio':
+                return {
+                    type: 'audio',
+                    durationMs: part.durationMs,
+                    mimeType: part.mimeType,
+                    size: part.size,
+                    localDataBytes: part.localData?.byteLength,
+                    ingressFailure: part.ingressFailure,
+                };
+            case 'video':
+                return {
+                    type: 'video',
+                    durationMs: part.durationMs,
+                    mimeType: part.mimeType,
+                    size: part.size,
+                    localDataBytes: part.localData?.byteLength,
+                    ingressFailure: part.ingressFailure,
+                };
+            default:
+                return { type: part.type };
+        }
+    });
+}
+import { hydrateFiles, hydrateImages, hydrateMedia } from './image-hydrator.js';
+export class InboundProcessor {
+    options;
+    now;
+    /** dedup key -> last-seen timestamp, pruned on every handle. */
+    seen = new Map();
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? Date.now;
+    }
+    /** Process one raw payload from the upstream; dedup, hydrate, then emit. */
+    async handle(raw) {
+        const key = dedupKey(raw);
+        if (this.options.dedupEnabled) {
+            const now = this.now();
+            const last = this.seen.get(key);
+            if (last !== undefined && now - last < this.options.dedupWindowMs) {
+                this.options.ctx.logger.debug(`[channel-dingtalk] dropped duplicate message '${key}'`);
+                return;
+            }
+            this.seen.set(key, now);
+            this.prune(now);
+        }
+        const kind = z.object({ type: z.string().optional() }).passthrough().safeParse(raw);
+        if (kind.success && kind.data.type === 'interaction') {
+            const interaction = mapInteraction(raw, this.options.meta);
+            this.options.ctx.logger.info('[channel-dingtalk] inbound interaction', {
+                interactionId: interaction.interactionId,
+                conversationId: interaction.conversation.id,
+                senderId: interaction.sender.id,
+                action: interaction.action,
+            });
+            await this.options.ctx.emit(interaction);
+            return;
+        }
+        const event = mapInbound(raw, this.options.meta);
+        // Per-message download context (official robot schema): the callback's
+        // downloadCode + robotCode are transient upstream state the official
+        // /v1.0/robot/messageFiles/download API needs. Read from the raw payload
+        // and passed to hydration — never persisted onto core parts.
+        const parsedDownloadContext = downloadContextSchema.safeParse(raw);
+        const rawValue = parsedDownloadContext.success ? parsedDownloadContext.data : undefined;
+        const downloadContext = {
+            downloadCode: rawValue?.picDownloadCode ?? rawValue?.downloadCode,
+            robotCode: rawValue?.robotCode,
+        };
+        // Hydrate image parts (never throws / never blocks text delivery). The
+        // adapter context signal lets the owning scope abort in-flight downloads.
+        await hydrateImages(event.message.content, {
+            secureFetch: this.options.secureFetch,
+            resolveMedia: this.options.resolveMedia,
+            downloadContext,
+            signal: this.options.ctx.signal,
+            onFailure: (error, part) => {
+                this.options.ctx.logger.warn('[channel-dingtalk] inbound image hydration failed', {
+                    hasResourceRef: part.type === 'image' && Boolean(part.resourceRef),
+                    hasUrl: part.type === 'image' && Boolean(part.url),
+                    error: summarizeError(error),
+                });
+            },
+        });
+        // Hydrate generic file parts: genuine http(s) urls via the secure fetcher;
+        // opaque mediaIds via the DingTalk OpenAPI media resolver.
+        await hydrateFiles(event.message.content, {
+            secureFetch: this.options.secureFetch,
+            resolveMedia: this.options.resolveMedia,
+            downloadContext,
+            signal: this.options.ctx.signal,
+        });
+        // Hydrate audio/video parts: audio/video follow the exact
+        // same URL-or-opaque resolution as image/file — genuine http(s) urls via
+        // the secure fetcher, opaque downloadCodes via the official
+        // messageFiles/download seam (the connector oracle downloads voice/video
+        // bytes through the identical downloadCode -> downloadUrl -> raw bytes
+        // flow). Failures only annotate the part; text still delivers.
+        await hydrateMedia(event.message.content, {
+            secureFetch: this.options.secureFetch,
+            resolveMedia: this.options.resolveMedia,
+            downloadContext,
+            signal: this.options.ctx.signal,
+        });
+        // Inbound message log: expose hydration state without platform locators.
+        // Signed URLs and download codes must never enter logs at any level.
+        this.options.ctx.logger.info(`[channel-dingtalk] inbound message ${event.message.id} from ${event.sender.id} in ${event.conversation.id}`, {
+            msgtype: rawValue?.type,
+            parts: summarizeParts(event.message.content),
+        });
+        await this.options.ctx.emit(event);
+    }
+    prune(now) {
+        for (const [key, ts] of this.seen) {
+            if (now - ts >= this.options.dedupWindowMs)
+                this.seen.delete(key);
+        }
+    }
+}
+function summarizeError(error) {
+    if (!(error instanceof Error))
+        return { name: 'UnknownError' };
+    const code = 'code' in error && typeof error.code === 'string' ? error.code : undefined;
+    return { name: error.name, ...(code !== undefined ? { code } : {}) };
+}
+//# sourceMappingURL=inbound.js.map

package/lib/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../src/inbound.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAA4B,MAAM,aAAa,CAAC;AAE7F,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,SAAS,cAAc,CAAC,KAA6B;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACxD,KAAK,OAAO;gBACV,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;oBACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU;oBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;YACJ,KAAK,MAAM;gBACT,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU;oBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;YACJ,KAAK,OAAO;gBACV,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU;oBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;YACJ,KAAK,OAAO;gBACV,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU;oBAC1C,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;YACJ;gBACE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AACD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAA6B,MAAM,qBAAqB,CAAC;AAwB3G,MAAM,OAAO,gBAAgB;IAKE;IAJZ,GAAG,CAAe;IACnC,gEAAgE;IAC/C,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAA6B,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;QAC3D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,GAAY;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,GAAG,GAAG,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACrE,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,cAAc,EAAE,WAAW,CAAC,YAAY,CAAC,EAAE;gBAC3C,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE;gBAC/B,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAoB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,6DAA6D;QAC7D,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,eAAe,GAAG;YACtB,YAAY,EAAE,QAAQ,EAAE,eAAe,IAAI,QAAQ,EAAE,YAAY;YACjE,SAAS,EAAE,QAAQ,EAAE,SAAS;SAC/B,CAAC;QACF,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACzC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,eAAe;YACf,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM;YAC/B,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;oBAChF,cAAc,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;oBAClE,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClD,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACxC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,eAAe;YACf,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,0DAA0D;QAC1D,yEAAyE;QACzE,4DAA4D;QAC5D,yEAAyE;QACzE,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACxC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,eAAe;YACf,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAC1B,sCAAsC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,EAC5G;YACE,OAAO,EAAE,QAAQ,EAAE,IAAI;YACvB,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;SAC7C,CACF,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @krischoichoi/channel-dingtalk — DingTalk channel adapter for DeepSeek Harness.
+ *
+ * Maps the DingTalk platform to the stable Channel Contract. Two upstream
+ * drivers implement `DingTalkUpstream` behind `config.upstream.mode`:
+ * - 'sdk'     — inbound via the official `dingtalk-stream` SDK (WebSocket
+ *   stream mode); outbound via `sessionWebhook` and the AI Card OpenAPI.
+ * - 'gateway' — self-hosted HTTP gateway long-poll driver (legacy).
+ *
+ * Credential model: the DingTalk AppSecret never lives in config. Config only
+ * carries its credential reference (`upstream.clientSecretRef`, default
+ * `DSH_CHANNEL_DINGTALK_MAIN_CLIENT_SECRET`); the value is resolved via
+ * `ctx.credentials` and injected as `deps.clientSecret`. A legacy plaintext
+ * `upstream.clientSecret` is migrated to the credentials seam ONCE on startup
+ * and deleted. Streaming is `edit` (AI Card): create card → update with
+ * content → finalize → failure card. Auth is connection-state driven — the
+ * driver owns platform credentials (never logged).
+ */
+import { type Context } from '@deepseek-ai/cordis';
+import { Config, DINGTALK_CLIENT_SECRET_REF } from './config.js';
+import type { DingTalkConfig, DingTalkConfigLive } from './config.js';
+import { type DingTalkAdapterDeps } from './adapter.js';
+export declare const name = "channel-dingtalk";
+export declare const inject: string[];
+export { Config, DINGTALK_CLIENT_SECRET_REF };
+export type { DingTalkConfig, DingTalkConfigLive } from './config.js';
+export { createDingTalkDefinition } from './definition.js';
+export { beginDingTalkDeviceAuth, pollDingTalkDeviceAuth, type DingTalkDeviceAuthOptions, type DingTalkDevicePollResult, } from './auth/device-registration.js';
+export { DingTalkAdapter, type DingTalkAdapterDeps } from './adapter.js';
+export { DingTalkCardReply, type DingTalkCardStatus, type DingTalkCardUpdate } from './ai-card.js';
+export { InboundProcessor } from './inbound.js';
+export { IMAGE_IDLE_TIMEOUT_MS, IMAGE_MAX_BYTES, FILE_MAX_BYTES, MEDIA_MAX_BYTES, defaultSecureFetcher, findFetchableImages, hydrateFiles, hydrateImages, hydrateMedia, type BinaryIngressFailureCode, type HydrateFilesOptions, type HydrateImagesOptions, type HydrateMediaOptions, type RemoteMediaFetchLike, type ResolvedImageLocator, } from './image-hydrator.js';
+export { OutboundSender, type OutboundSenderOptions, } from './outbound.js';
+export { HttpDingTalkUpstream, type CardCreateResult, type DingTalkUpstream } from './upstream.js';
+export { DingTalkOfficialUpstream, DingTalkOpenApiPortImpl, OFFICIAL_BASIS, type DingTalkOfficialUpstreamOptions, } from './official-upstream.js';
+export { type AccessTokenResult, type DingTalkOpenApiCredentials, type DingTalkOpenApiPort, type MediaResolverLike, type MediaSendInput, type MediaUploadInput, type MediaUploadResult, type OutboxCapabilities, type ProactiveTextInput, type ResolvedMedia, type RobotMessageSendResult, } from './openapi-port.js';
+export { DingTalkStreamUpstream, ackRobotMessage, toCardInteractionRaw, toGatewayRaw, type DingTalkStreamClient, type DingTalkStreamMessage, type DingTalkStreamUpstreamOptions, } from './stream-upstream.js';
+export { FetchTransport, type HttpTransport } from './transport.js';
+export { mapInbound, toTextPayload, dedupKey, simpleHash, type DingTalkTextPayload, } from './mapper.js';
+export { manifest, type DingTalkManifest } from './manifest.js';
+/**
+ * Entry plugin apply. Accepts both the activation-time live shape (volatile
+ * fields resolve to `Volatile<T>` handles under Harness 0.2.0) and a plain
+ * snapshot (tests / programmatic mounting); plain fields pass through
+ * `resolveVolatileConfig` untouched. The shape is validated by Schemastery at
+ * the Loader boundary via the attached `Config` schema.
+ */
+export declare function apply(ctx: Context, rawConfig: DingTalkConfig | DingTalkConfigLive, deps?: DingTalkAdapterDeps): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAA0B,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGzE,eAAO,MAAM,IAAI,qBAAqB,CAAC;AACvC,eAAO,MAAM,MAAM,EAAE,MAAM,EAAgC,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,KAAK,+BAA+B,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EACL,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,QAAQ,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAoBhE;;;;;;GAMG;AACH,wBAAgB,KAAK,CACnB,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,cAAc,GAAG,kBAAkB,EAC9C,IAAI,GAAE,mBAAwB,GAC7B,IAAI,CAoFN"}

package/lib/index.js

@@ -0,0 +1,123 @@
+/**
+ * @krischoichoi/channel-dingtalk — DingTalk channel adapter for DeepSeek Harness.
+ *
+ * Maps the DingTalk platform to the stable Channel Contract. Two upstream
+ * drivers implement `DingTalkUpstream` behind `config.upstream.mode`:
+ * - 'sdk'     — inbound via the official `dingtalk-stream` SDK (WebSocket
+ *   stream mode); outbound via `sessionWebhook` and the AI Card OpenAPI.
+ * - 'gateway' — self-hosted HTTP gateway long-poll driver (legacy).
+ *
+ * Credential model: the DingTalk AppSecret never lives in config. Config only
+ * carries its credential reference (`upstream.clientSecretRef`, default
+ * `DSH_CHANNEL_DINGTALK_MAIN_CLIENT_SECRET`); the value is resolved via
+ * `ctx.credentials` and injected as `deps.clientSecret`. A legacy plaintext
+ * `upstream.clientSecret` is migrated to the credentials seam ONCE on startup
+ * and deleted. Streaming is `edit` (AI Card): create card → update with
+ * content → finalize → failure card. Auth is connection-state driven — the
+ * driver owns platform credentials (never logged).
+ */
+import {} from '@deepseek-ai/cordis';
+import { credentialRef } from '@deepseek-ai/dsh-credentials';
+import { mountChannelAdapter, resolveVolatileConfig, resolveVolatileValue } from '@krischoichoi/channel-core';
+import { Config, DINGTALK_CLIENT_SECRET_REF } from './config.js';
+import { DingTalkAdapter } from './adapter.js';
+import { createDingTalkDefinition } from './definition.js';
+export const name = 'channel-dingtalk';
+export const inject = ['channels', 'credentials'];
+export { Config, DINGTALK_CLIENT_SECRET_REF };
+export { createDingTalkDefinition } from './definition.js';
+export { beginDingTalkDeviceAuth, pollDingTalkDeviceAuth, } from './auth/device-registration.js';
+export { DingTalkAdapter } from './adapter.js';
+export { DingTalkCardReply } from './ai-card.js';
+export { InboundProcessor } from './inbound.js';
+export { IMAGE_IDLE_TIMEOUT_MS, IMAGE_MAX_BYTES, FILE_MAX_BYTES, MEDIA_MAX_BYTES, defaultSecureFetcher, findFetchableImages, hydrateFiles, hydrateImages, hydrateMedia, } from './image-hydrator.js';
+export { OutboundSender, } from './outbound.js';
+export { HttpDingTalkUpstream } from './upstream.js';
+export { DingTalkOfficialUpstream, DingTalkOpenApiPortImpl, OFFICIAL_BASIS, } from './official-upstream.js';
+export {} from './openapi-port.js';
+export { DingTalkStreamUpstream, ackRobotMessage, toCardInteractionRaw, toGatewayRaw, } from './stream-upstream.js';
+export { FetchTransport } from './transport.js';
+export { mapInbound, toTextPayload, dedupKey, simpleHash, } from './mapper.js';
+export { manifest } from './manifest.js';
+/**
+ * Entry plugin apply. Accepts both the activation-time live shape (volatile
+ * fields resolve to `Volatile<T>` handles under Harness 0.2.0) and a plain
+ * snapshot (tests / programmatic mounting); plain fields pass through
+ * `resolveVolatileConfig` untouched. The shape is validated by Schemastery at
+ * the Loader boundary via the attached `Config` schema.
+ */
+export function apply(ctx, rawConfig, deps = {}) {
+    const config = resolveVolatileConfig(rawConfig);
+    // --- One-time legacy plaintext -> credential-reference migration (§52 Task 4).
+    // The value is written to the credentials seam exactly once, then the
+    // plaintext is deleted from the in-memory config. Never double-written.
+    const legacySecret = config.upstream.clientSecret;
+    const ref = config.upstream.clientSecretRef ?? DINGTALK_CLIENT_SECRET_REF;
+    if (typeof legacySecret === 'string' && legacySecret.length > 0) {
+        void ctx.credentials.set(credentialRef(ref), legacySecret);
+        // Strip the plaintext from BOTH the unwrapped snapshot and the caller's
+        // raw config so it is never read or written again. Schemastery 3.18
+        // freezes parsed sub-objects, so swap in a fresh shallow copy; the raw
+        // config top level may be frozen too (host-provided), hence the guard.
+        const stripped = { ...config.upstream, clientSecret: undefined };
+        config.upstream = stripped;
+        try {
+            rawConfig.upstream = stripped;
+        }
+        catch {
+            // Frozen live config: the swap above already sanitized our snapshot.
+        }
+        ctx.logger('channel-dingtalk').info('migrated legacy dingtalk clientSecret to credentials');
+    }
+    const control = ctx.get('channelControl');
+    if (control) {
+        // The control plane owns lifecycle: register EVEN when disabled so the Web
+        // control plane can re-enable the channel later (doc §19/§20); runtime
+        // auto-starts.
+        const settings = ctx.get('settings');
+        control.definitions.register(createDingTalkDefinition({
+            config,
+            deps,
+            credentials: ctx.credentials,
+            persistSetup: (patch) => settings?.update('channels-dingtalk', patch) ?? Promise.resolve(),
+            persistEnabled: (enabled) => settings?.update('channels-dingtalk', { enabled }) ?? Promise.resolve(),
+            onAuthCompleted: control.runtime
+                ? async () => {
+                    try {
+                        await control.runtime.restart('dingtalk', config.accountId);
+                    }
+                    catch (error) {
+                        // Provider authorization is complete even if adapter startup
+                        // needs attention; keep the public auth session terminal and
+                        // expose the startup failure through runtime status.
+                        ctx.logger('channel-dingtalk').error('dingtalk credentials saved but runtime restart failed', error);
+                    }
+                }
+                : undefined,
+        }));
+        return;
+    }
+    // --- Legacy standalone mount (channel-control absent). No directory/control
+    // surface exists to re-enable a disabled channel, so the config `enabled`
+    // gate still applies (doc §20).
+    if (!resolveVolatileValue(config.enabled))
+        return;
+    const credentialsCtx = ctx;
+    ctx.effect(async () => {
+        // SDK mode requires a resolved credential; gateway mode owns its own.
+        let clientSecret;
+        if (config.upstream.mode === 'sdk') {
+            const resolved = await credentialsCtx.credentials.resolve(credentialRef(ref));
+            clientSecret = resolved?.value;
+            if (!clientSecret) {
+                ctx.logger('channel-dingtalk').warn(`dingtalk upstream mode "sdk" credential "${ref}" is not configured; not mounting`);
+                return () => { };
+            }
+        }
+        mountChannelAdapter(ctx, new DingTalkAdapter(config, clientSecret ? { ...deps, clientSecret } : deps), (signal) => ctx.channels.createAdapterContext({ channelId: 'dingtalk', signal }));
+        // The mount owns the adapter lifecycle; this outer effect only scopes the
+        // async credential resolution, so its disposer is a no-op.
+        return () => { };
+    });
+}
+//# sourceMappingURL=index.js.map