@krischoichoi/channel-weixin 0.6.0

package/lib/media/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/media/download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAqB7C,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,UAAkB;IACzE,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,mBAAmB;QAAE,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAoB,EAAE,IAA0B;IAClF,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAA0B,EAAE,KAAoB;IACpE,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC"}

package/lib/media/encrypt.d.ts

@@ -0,0 +1,3 @@
+/** AES-128-ECB encrypt (PKCS#7 padding). `key` may be 16 raw bytes or hex. */
+export declare function aes128Encrypt(plaintext: Buffer, key: Buffer | string): Buffer;
+//# sourceMappingURL=encrypt.d.ts.map

package/lib/media/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/media/encrypt.ts"],"names":[],"mappings":"AAQA,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAK7E"}

package/lib/media/encrypt.js

@@ -0,0 +1,16 @@
+/**
+ * WX5 media — AES-128-ECB encrypt.
+ *
+ * Tencent's published plugin is OpenClaw-coupled and cannot be used as a DSH
+ * runtime dependency. This small source-port intentionally uses Node crypto.
+ */
+import { createCipheriv } from 'node:crypto';
+/** AES-128-ECB encrypt (PKCS#7 padding). `key` may be 16 raw bytes or hex. */
+export function aes128Encrypt(plaintext, key) {
+    const keyBuf = typeof key === 'string' ? Buffer.from(key, 'hex') : key;
+    if (keyBuf.length !== 16)
+        throw new Error('aes128Encrypt: AES-128 key must be 16 bytes');
+    const cipher = createCipheriv('aes-128-ecb', keyBuf, null);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+}
+//# sourceMappingURL=encrypt.js.map

package/lib/media/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../src/media/encrypt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,GAAoB;IACnE,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/lib/media/send-media.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Classification: C — duplicate send-media payload [@deprecated upstream-gap].
+ *
+ * Builds an iLink sendmessage image item + dispatches. The official composed
+ * messaging/send.js (sendImageMessageWeixin) is OpenClaw coupled (imports
+ * api/api + util/logger). Kept behind the facade as an upstream-gap; send
+ * routing now lives in upstream/tencent-upstream.ts sendImage().
+ */
+/**
+ * WX5 media — send a media sendmessage (WX5.1 Image outbound).
+ *
+ * Embeds a CDN media reference (encrypt_query_param / aes_key) into a real
+ * iLink sendmessage item. `sendMedia` builds the full request and `dispatch`
+ * performs the send through the client; the split keeps payload construction
+ * pure for tests.
+ */
+import type { ILinkClient } from '../ilink/client.js';
+export interface SendMediaOptions {
+    kind?: 'image' | 'file' | 'video';
+    to: string;
+    media: {
+        encrypt_query_param?: string;
+        aes_key?: string;
+        full_url?: string;
+    };
+    /** Plaintext length, required by the file wire shape. */
+    fileSize?: number;
+    /** Ciphertext length, required by the image/video wire shapes. */
+    fileSizeCiphertext?: number;
+    /** Original file name, required for a file item. */
+    fileName?: string;
+    contextToken?: string;
+    runId?: string;
+}
+/** Build the iLink sendmessage payload for an image, file, or video item. */
+export declare function buildSendMediaPayload(options: SendMediaOptions): Record<string, unknown>;
+/** Send a media message through the client; returns the client_id. */
+export declare function sendMedia(client: ILinkClient, options: SendMediaOptions): Promise<{
+    messageId: string;
+}>;
+//# sourceMappingURL=send-media.d.ts.map

package/lib/media/send-media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-media.d.ts","sourceRoot":"","sources":["../../src/media/send-media.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUtD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE;QACL,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsCxF;AAED,sEAAsE;AACtE,wBAAsB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAI9G"}

package/lib/media/send-media.js

@@ -0,0 +1,52 @@
+import { MESSAGE_ITEM_TYPE_FILE, MESSAGE_ITEM_TYPE_IMAGE, MESSAGE_ITEM_TYPE_VIDEO, MESSAGE_STATE_FINISH, MESSAGE_TYPE_BOT, } from '../ilink/types.js';
+import { randomUUID } from 'node:crypto';
+/** Build the iLink sendmessage payload for an image, file, or video item. */
+export function buildSendMediaPayload(options) {
+    const media = {};
+    if (options.media.encrypt_query_param)
+        media.encrypt_query_param = options.media.encrypt_query_param;
+    if (options.media.aes_key)
+        media.aes_key = options.media.aes_key;
+    if (options.media.full_url)
+        media.full_url = options.media.full_url;
+    // Tencent's media send items mark the encrypted media envelope explicitly.
+    media.encrypt_type = 1;
+    const kind = options.kind ?? 'image';
+    const item = kind === 'file'
+        ? {
+            type: MESSAGE_ITEM_TYPE_FILE,
+            file_item: {
+                media,
+                file_name: options.fileName ?? 'attachment',
+                len: String(options.fileSize ?? 0),
+            },
+        }
+        : kind === 'video'
+            ? {
+                type: MESSAGE_ITEM_TYPE_VIDEO,
+                video_item: { media, video_size: options.fileSizeCiphertext ?? 0 },
+            }
+            : {
+                type: MESSAGE_ITEM_TYPE_IMAGE,
+                image_item: { media, mid_size: options.fileSizeCiphertext ?? 0 },
+            };
+    return {
+        msg: {
+            from_user_id: '',
+            to_user_id: options.to,
+            client_id: randomUUID(),
+            message_type: MESSAGE_TYPE_BOT,
+            message_state: MESSAGE_STATE_FINISH,
+            item_list: [item],
+            context_token: options.contextToken ?? undefined,
+            run_id: options.runId ?? undefined,
+        },
+    };
+}
+/** Send a media message through the client; returns the client_id. */
+export async function sendMedia(client, options) {
+    const payload = buildSendMediaPayload(options);
+    await client.sendMessage(payload);
+    return { messageId: payload.msg.client_id };
+}
+//# sourceMappingURL=send-media.js.map

package/lib/media/send-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-media.js","sourceRoot":"","sources":["../../src/media/send-media.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoBzC,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,OAAyB;IAC7D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,mBAAmB;QAAE,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACrG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IACjE,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IACpE,2EAA2E;IAC3E,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM;QAC1B,CAAC,CAAC;YACE,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE;gBACT,KAAK;gBACL,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,YAAY;gBAC3C,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;aACnC;SACF;QACH,CAAC,CAAC,IAAI,KAAK,OAAO;YAChB,CAAC,CAAC;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC,EAAE;aACnE;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC,EAAE;aACjE,CAAC;IACR,OAAO;QACL,GAAG,EAAE;YACH,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,SAAS,EAAE,UAAU,EAAE;YACvB,YAAY,EAAE,gBAAgB;YAC9B,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,CAAC,IAAI,CAAC;YACjB,aAAa,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAChD,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;SACnC;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAmB,EAAE,OAAyB;IAC5E,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,SAAS,EAAG,OAAO,CAAC,GAA6B,CAAC,SAAS,EAAE,CAAC;AACzE,CAAC"}

package/lib/media/silk-transcode.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Best-effort SILK voice decoding.
+ *
+ * `silk-wasm` is intentionally loaded at runtime: voice conversion must not
+ * make the Weixin adapter unavailable when the optional codec is absent.
+ */
+export declare const SILK_ENCODE_TYPE = 6;
+export declare const DEFAULT_SILK_SAMPLE_RATE = 24000;
+export interface SilkWasmDecodedAudio {
+    data: Uint8Array;
+    duration?: number;
+}
+export type SilkDecoder = (input: Buffer, sampleRate: number) => Promise<SilkWasmDecodedAudio> | SilkWasmDecodedAudio;
+export type SilkModuleLoader = () => Promise<unknown>;
+export interface SilkTranscodeOptions {
+    /** iLink `voice_item.encode_type`; only `6` is SILK. */
+    encodeType?: number;
+    /** iLink's sample rate when available; invalid values use the iLink default. */
+    sampleRate?: number;
+    /** Test seam for the optional `silk-wasm` module. */
+    loadModule?: SilkModuleLoader;
+}
+export interface SilkTranscodeResult {
+    data: Buffer;
+    mimeType: 'audio/silk' | 'audio/wav';
+    /** True only when a WAV container was produced from decoded PCM. */
+    transcoded: boolean;
+}
+/**
+ * Decode a SILK iLink voice message where possible.
+ *
+ * The raw bytes are deliberately returned for every optional-codec failure,
+ * including a missing module or an unexpected decoder result. This keeps
+ * inbound voice media available to downstream consumers without turning a
+ * codec gap into an ingress failure.
+ */
+export declare function transcodeSilkVoice(input: Buffer, options?: SilkTranscodeOptions): Promise<SilkTranscodeResult>;
+//# sourceMappingURL=silk-transcode.d.ts.map

package/lib/media/silk-transcode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"silk-transcode.d.ts","sourceRoot":"","sources":["../../src/media/silk-transcode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,CACxB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;AAE1D,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,GAAG,WAAW,CAAC;IACrC,oEAAoE;IACpE,UAAU,EAAE,OAAO,CAAC;CACrB;AAID;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAmB9B"}

package/lib/media/silk-transcode.js

@@ -0,0 +1,88 @@
+/**
+ * Best-effort SILK voice decoding.
+ *
+ * `silk-wasm` is intentionally loaded at runtime: voice conversion must not
+ * make the Weixin adapter unavailable when the optional codec is absent.
+ */
+export const SILK_ENCODE_TYPE = 6;
+export const DEFAULT_SILK_SAMPLE_RATE = 24_000;
+/**
+ * Decode a SILK iLink voice message where possible.
+ *
+ * The raw bytes are deliberately returned for every optional-codec failure,
+ * including a missing module or an unexpected decoder result. This keeps
+ * inbound voice media available to downstream consumers without turning a
+ * codec gap into an ingress failure.
+ */
+export async function transcodeSilkVoice(input, options = {}) {
+    if (options.encodeType !== SILK_ENCODE_TYPE)
+        return rawSilk(input);
+    try {
+        const module = await (options.loadModule ?? loadSilkWasm)();
+        const decode = getDecoder(module);
+        if (!decode)
+            return rawSilk(input);
+        const decoded = await decode(input, normalizeSampleRate(options.sampleRate));
+        if (!isDecodedAudio(decoded))
+            return rawSilk(input);
+        return {
+            data: pcmS16LeToWav(decoded.data, normalizeSampleRate(options.sampleRate)),
+            mimeType: 'audio/wav',
+            transcoded: true,
+        };
+    }
+    catch {
+        return rawSilk(input);
+    }
+}
+/** Load the optional decoder without making TypeScript resolve it at build time. */
+function loadSilkWasm() {
+    const specifier = 'silk-wasm';
+    return import(specifier);
+}
+function getDecoder(module) {
+    if (!isSilkWasmModule(module) || typeof module.decode !== 'function')
+        return undefined;
+    return module.decode;
+}
+function isSilkWasmModule(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isDecodedAudio(value) {
+    return typeof value === 'object'
+        && value !== null
+        && 'data' in value
+        && value.data instanceof Uint8Array;
+}
+function normalizeSampleRate(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0
+        ? value
+        : DEFAULT_SILK_SAMPLE_RATE;
+}
+function rawSilk(data) {
+    return { data, mimeType: 'audio/silk', transcoded: false };
+}
+/** Wrap mono signed 16-bit little-endian PCM in a WAV container. */
+function pcmS16LeToWav(pcm, sampleRate) {
+    const pcmBytes = pcm.byteLength;
+    if (pcmBytes > 0xffff_ffff - 36) {
+        throw new Error('SILK PCM payload is too large for a WAV container');
+    }
+    const wav = Buffer.allocUnsafe(44 + pcmBytes);
+    wav.write('RIFF', 0, 'ascii');
+    wav.writeUInt32LE(wav.length - 8, 4);
+    wav.write('WAVE', 8, 'ascii');
+    wav.write('fmt ', 12, 'ascii');
+    wav.writeUInt32LE(16, 16);
+    wav.writeUInt16LE(1, 20); // PCM
+    wav.writeUInt16LE(1, 22); // mono
+    wav.writeUInt32LE(sampleRate, 24);
+    wav.writeUInt32LE(sampleRate * 2, 28); // 16-bit mono
+    wav.writeUInt16LE(2, 32);
+    wav.writeUInt16LE(16, 34);
+    wav.write('data', 36, 'ascii');
+    wav.writeUInt32LE(pcmBytes, 40);
+    Buffer.from(pcm.buffer, pcm.byteOffset, pcm.byteLength).copy(wav, 44);
+    return wav;
+}
+//# sourceMappingURL=silk-transcode.js.map

package/lib/media/silk-transcode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"silk-transcode.js","sourceRoot":"","sources":["../../src/media/silk-transcode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAgC/C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,UAAgC,EAAE;IAElC,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QAEpD,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1E,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY;IACnB,MAAM,SAAS,GAAG,WAAW,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,MAAe;IACjC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACvF,OAAO,MAAM,CAAC,MAAqB,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,KAAK,KAAK,IAAI;WACd,MAAM,IAAI,KAAK;WACf,KAAK,CAAC,IAAI,YAAY,UAAU,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC1E,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,wBAAwB,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,GAAe,EAAE,UAAkB;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;IAChC,IAAI,QAAQ,GAAG,WAAW,GAAG,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM;IAChC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO;IACjC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,aAAa,CAAC,UAAU,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IACrD,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/lib/media/upload.d.ts

@@ -0,0 +1,38 @@
+import type { ILinkGetUploadUrlResponse } from '../ilink/types.js';
+export interface UploadMediaOptions {
+    cdnBaseUrl: string;
+    /** Base URL for the getuploadurl CGI. */
+    apiBaseUrl: string;
+    token?: string;
+    toUserId?: string;
+    filekey?: string;
+    mediaType?: number;
+    getUploadUrl?: (request: Record<string, unknown>) => Promise<ILinkGetUploadUrlResponse>;
+    upload?: (url: string, form: FormData) => Promise<Response>;
+    now?: () => number;
+}
+export interface UploadedMedia {
+    filekey: string;
+    uploadFullUrl?: string;
+    downloadEncryptedQueryParam: string;
+    /** AES-128 key encoded as 32 lowercase hex characters. */
+    aeskey: string;
+    /** Plaintext file size in bytes. */
+    fileSize: number;
+    /** AES-128-ECB PKCS#7 ciphertext size in bytes. */
+    fileSizeCiphertext: number;
+}
+export declare const WX5_MEDIA_TYPE_IMAGE = 1;
+export declare const WX5_MEDIA_TYPE_VIDEO = 2;
+export declare const WX5_MEDIA_TYPE_FILE = 3;
+export declare const WX5_MEDIA_TYPE_VOICE = 4;
+interface PreparedUpload {
+    aeskey: Buffer;
+    ciphertext: Buffer;
+}
+/** AES-128-ECB always emits one PKCS#7 block, including for block-aligned input. */
+export declare function aesEcbPaddedSize(size: number): number;
+export declare function buildUploadUrlRequest(file: Buffer, opts: UploadMediaOptions, prepared?: PreparedUpload): Record<string, unknown>;
+export declare function uploadMedia(file: Buffer, opts: UploadMediaOptions): Promise<UploadedMedia>;
+export {};
+//# sourceMappingURL=upload.d.ts.map

package/lib/media/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/media/upload.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxF,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;IACpC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,kBAAkB,EACxB,QAAQ,GAAE,cAAoC,GAC7C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CA4DhG"}

package/lib/media/upload.js

@@ -0,0 +1,122 @@
+/**
+ * Classification: C — duplicate media upload pipeline [@deprecated upstream-gap].
+ *
+ * getuploadurl → AES-128-ECB encrypt → CDN POST. The official composed flow
+ * cdn/upload.js + cdn/cdn-upload.js is OpenClaw coupled (imports api/api +
+ * util/logger). The crypto step is a local source-port. NOTE: the official
+ * media_type values and upload sizing follow Tencent/openclaw-weixin v2.4.6:
+ * IMAGE=1 and `filesize` is the AES-128-ECB PKCS#7 ciphertext length. Marked
+ * upstream-gap because the Tencent package itself remains OpenClaw-coupled.
+ */
+/**
+ * WX5 media — CDN upload (WX5.1 Image outbound).
+ *
+ * 1. Ask the getuploadurl CGI for an upload slot (upload_full_url + upload_param).
+ * 2. AES-128-ECB encrypt the file body with a fresh random 16-byte key.
+ * 3. Upload the ciphertext to the slot; the encrypted size is recorded.
+ * 4. Return the reference fields the sendmessage item embeds.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { ChannelError } from '@krischoichoi/channel-core';
+import { aes128Encrypt } from './encrypt.js';
+import { getUploadUrlResponseSchema, responseEnvelopeSchema } from '../ilink/schema.js';
+import { buildHeaders } from '../ilink/headers.js';
+export const WX5_MEDIA_TYPE_IMAGE = 1;
+export const WX5_MEDIA_TYPE_VIDEO = 2;
+export const WX5_MEDIA_TYPE_FILE = 3;
+export const WX5_MEDIA_TYPE_VOICE = 4;
+/** AES-128-ECB always emits one PKCS#7 block, including for block-aligned input. */
+export function aesEcbPaddedSize(size) {
+    if (!Number.isSafeInteger(size) || size < 0) {
+        throw new RangeError('aesEcbPaddedSize: size must be a non-negative safe integer');
+    }
+    return (Math.floor(size / 16) + 1) * 16;
+}
+export function buildUploadUrlRequest(file, opts, prepared = prepareUpload(file)) {
+    const md5 = createHash('md5').update(file).digest('hex');
+    const ts = opts.now ? opts.now() : Date.now();
+    return {
+        filekey: opts.filekey ?? ('wx5-' + md5 + '-' + ts),
+        media_type: opts.mediaType ?? WX5_MEDIA_TYPE_IMAGE,
+        to_user_id: opts.toUserId,
+        rawsize: file.length,
+        rawfilemd5: md5,
+        filesize: prepared.ciphertext.length,
+        no_need_thumb: true,
+        aeskey: prepared.aeskey.toString('hex'),
+        base_info: {},
+    };
+}
+export async function uploadMedia(file, opts) {
+    if (file.length === 0) {
+        throw new ChannelError('CHANNEL_UNSUPPORTED', 'uploadMedia: cannot upload an empty file');
+    }
+    // The upload slot is bound to the exact AES key and padded ciphertext size.
+    const prepared = prepareUpload(file);
+    const request = buildUploadUrlRequest(file, opts, prepared);
+    const getUploadUrl = opts.getUploadUrl ?? (async (req) => {
+        const url = opts.apiBaseUrl.replace(/\/$/, '') + '/ilink/bot/getuploadurl';
+        const response = await globalThis.fetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', ...buildHeaders({ token: opts.token }) },
+            body: JSON.stringify(req),
+        });
+        if (!response.ok)
+            throw new ChannelError('CHANNEL_ERROR', 'getuploadurl http ' + response.status);
+        return response.json();
+    });
+    const rawUploadSlot = await getUploadUrl(request);
+    const envelope = responseEnvelopeSchema.safeParse(rawUploadSlot);
+    if (envelope.success &&
+        ((envelope.data.ret !== undefined && envelope.data.ret !== 0) ||
+            (envelope.data.errcode !== undefined && envelope.data.errcode !== 0))) {
+        const code = envelope.data.ret !== undefined && envelope.data.ret !== 0
+            ? `ret=${envelope.data.ret}`
+            : `errcode=${envelope.data.errcode}`;
+        throw new ChannelError('CHANNEL_ERROR', `uploadMedia: getuploadurl returned ${code}`);
+    }
+    const parsedUploadSlot = getUploadUrlResponseSchema.safeParse(rawUploadSlot);
+    if (!parsedUploadSlot.success) {
+        throw new ChannelError('CHANNEL_ERROR', 'uploadMedia: getuploadurl returned an invalid response shape');
+    }
+    const uploadSlot = parsedUploadSlot.data;
+    if (!uploadSlot.upload_full_url && !uploadSlot.upload_param) {
+        throw new ChannelError('CHANNEL_UNSUPPORTED', 'uploadMedia: getuploadurl returned no upload slot');
+    }
+    const form = new FormData();
+    if (uploadSlot.thumb_upload_param)
+        form.append('thumb_upload_param', uploadSlot.thumb_upload_param);
+    if (uploadSlot.upload_param)
+        form.append('upload_param', uploadSlot.upload_param);
+    form.append('file', new Blob([prepared.ciphertext]));
+    const upload = opts.upload ?? ((url, body) => globalThis.fetch(url, { method: 'POST', body }));
+    const uploadUrl = uploadSlot.upload_full_url ?? buildCdnUploadUrl(opts.cdnBaseUrl, uploadSlot.upload_param, String(request.filekey));
+    const response = await upload(uploadUrl, form);
+    if (!response.ok)
+        throw new ChannelError('CHANNEL_ERROR', 'cdn upload http ' + response.status);
+    const downloadEncryptedQueryParam = response.headers.get('x-encrypted-param');
+    if (!downloadEncryptedQueryParam) {
+        throw new ChannelError('CHANNEL_ERROR', 'cdn upload response missing x-encrypted-param header');
+    }
+    return {
+        filekey: String(request.filekey),
+        uploadFullUrl: uploadSlot.upload_full_url,
+        downloadEncryptedQueryParam,
+        aeskey: prepared.aeskey.toString('hex'),
+        fileSize: file.length,
+        fileSizeCiphertext: prepared.ciphertext.length,
+    };
+}
+function prepareUpload(file) {
+    const aeskey = randomBytes(16);
+    const ciphertext = aes128Encrypt(file, aeskey);
+    if (ciphertext.length !== aesEcbPaddedSize(file.length)) {
+        throw new Error('uploadMedia: unexpected AES-128-ECB ciphertext size');
+    }
+    return { aeskey, ciphertext };
+}
+function buildCdnUploadUrl(cdnBaseUrl, uploadParam, filekey) {
+    const base = cdnBaseUrl.replace(/\/+$/, '');
+    return `${base}/upload?encrypted_query_param=${encodeURIComponent(uploadParam)}&filekey=${encodeURIComponent(filekey)}`;
+}
+//# sourceMappingURL=upload.js.map

package/lib/media/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/media/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA2BnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAOtC,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,4DAA4D,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,IAAwB,EACxB,WAA2B,aAAa,CAAC,IAAI,CAAC;IAE9C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,oBAAoB;QAClD,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;QACpC,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAwB;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;IAC5F,CAAC;IAED,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,EAAE,GAA4B,EAAE,EAAE;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE;YACvF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClG,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAY,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,OAAO;QAChB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YAC5D,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACrE,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YAC5B,CAAC,CAAC,WAAW,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7E,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,8DAA8D,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC;IAEzC,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,mDAAmD,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,kBAAkB;QAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACpG,IAAI,UAAU,CAAC,YAAY;QAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,UAAU,CAAC,eAAe,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,YAAa,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtI,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChG,MAAM,2BAA2B,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC9E,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,sDAAsD,CAAC,CAAC;IAClG,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAChC,aAAa,EAAE,UAAU,CAAC,eAAe;QACzC,2BAA2B;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAe;IACjF,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,GAAG,IAAI,iCAAiC,kBAAkB,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1H,CAAC"}

package/lib/messaging/dedup.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Classification: A — DSH glue [keep].
+ *
+ * Two-phase inbound dedup (message_id/seq/hash) + durable store + stable hash.
+ * DSH-specific receive reliability, not a platform protocol. Keep.
+ */
+/**
+ * Dedup identity for inbound iLink messages.
+ *
+ * Priority: message_id (first-class) -> seq -> stable hash of the raw payload.
+ * We NEVER primarily key on sender+content, so two identical 'hello' messages
+ * must not collide.
+ *
+ * The dedup store is TWO-PHASE (R1): a message only becomes a committed dedup
+ * entry AFTER it has successfully entered the Channel pipeline (emit resolved).
+ * This way a failed emit is replayed on the next round instead of being
+ * dropped, while a crash after emit but before cursor commit is still dropped
+ * on replay (no duplicate Agent trigger).
+ */
+import type { ChannelStorage } from '@krischoichoi/channel-core';
+/** Optional injectable clock for window pruning. */
+export interface DedupOptions {
+    /** Dedup window in ms. */
+    windowMs: number;
+    /** Injectable clock (tests). */
+    now?: () => number;
+}
+/** A committed dedup entry. */
+export interface DedupRecord {
+    key: string;
+    committedAt: number;
+}
+/**
+ * Stable hash (FNV-1a-ish) used as the final fallback for a missing
+ * message_id/seq. Never the primary identity.
+ */
+export declare function stableHash(input: string): string;
+/** Compute a dedup identity for a raw iLink message. */
+export declare function dedupKey(raw: unknown): string;
+/**
+ * Two-phase dedup boundary (R1). has() answers "already committed?" without
+ * recording anything; commit() records AFTER the caller has successfully
+ * processed the message.
+ */
+export interface DedupStore {
+    /** Whether the key was committed within the window. */
+    has(key: string): Promise<boolean>;
+    /** Persist the key as processed. */
+    commit(key: string): Promise<void>;
+}
+/** In-memory two-phase dedup (tests / no persistence). */
+export declare class MemoryDedupStore implements DedupStore {
+    private readonly seen;
+    private readonly windowMs;
+    private readonly now;
+    constructor(options: DedupOptions);
+    has(key: string): Promise<boolean>;
+    commit(key: string): Promise<void>;
+    private prune;
+}
+export interface PersistentDedupStoreOptions extends DedupOptions {
+    storage: ChannelStorage;
+    /** Local DSH account alias; defaults to 'main'. */
+    accountId?: string;
+    /** Max entries persisted (defaults to 5000). */
+    maxRecords?: number;
+}
+/**
+ * Durable two-phase dedup store. Committed records survive a restart so a
+ * cursor crash-replay window never re-triggers the Agent. State is a JSON
+ * array of DedupRecord under weixin:dedup:<accountId>, loaded lazily and
+ * rewritten (pruned + capped) on each commit.
+ */
+export declare class PersistentDedupStore implements DedupStore {
+    private readonly storage;
+    private readonly key;
+    private readonly windowMs;
+    private readonly now;
+    private readonly maxRecords;
+    private records?;
+    constructor(options: PersistentDedupStoreOptions);
+    private load;
+    private persist;
+    has(key: string): Promise<boolean>;
+    commit(key: string): Promise<void>;
+}
+//# sourceMappingURL=dedup.d.ts.map

package/lib/messaging/dedup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedup.d.ts","sourceRoot":"","sources":["../../src/messaging/dedup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAOD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED,wDAAwD;AACxD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAU7C;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,oCAAoC;IACpC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAKD,0DAA0D;AAC1D,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE,YAAY;IAK3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxC,OAAO,CAAC,KAAK;CAKd;AAED,MAAM,WAAW,2BAA4B,SAAQ,YAAY;IAC/D,OAAO,EAAE,cAAc,CAAC;IACxB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,UAAU;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,OAAO,CAAC,CAAsB;gBAE1B,OAAO,EAAE,2BAA2B;YAQlC,IAAI;YAoBJ,OAAO;IAcf,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKzC"}