@krischoichoi/channel-weixin 0.6.0

package/lib/upstream/compat.d.ts

@@ -0,0 +1,54 @@
+/**
+ * compat.ts — glue that maps between the official upstream shapes and the
+ * `WeixinUpstream` port.
+ *
+ * THIS FILE CONTAINS SHAPE MAPPING ONLY — no protocol logic, no AES, no token /
+ * retry / reconnect / upload-algorithm implementation. Those rules live behind
+ * `upstream-gap` markers in tencent-upstream.ts. If a mapping needs real
+ * protocol behavior, it delegates to that implementation — it never
+ * reimplements a wire rule here.
+ */
+import type { WeixinMediaRef, WeixinDownloadResult } from './port.js';
+import type { ILinkCDNMedia } from '../ilink/types.js';
+/**
+ * Standardize a media download reference into the neutral `WeixinMediaRef`.
+ * Accepts both the port shape (from the adapter) and a raw iLink CDN media
+ * reference (from the monitor's mapped item) so callers stay shape-agnostic.
+ */
+export interface NormalizedMediaRef {
+    cdnBaseUrl?: string;
+    fullUrl?: string;
+    encryptQueryParam?: string;
+    /** 16-byte raw AES key (already decoded hex → bytes). */
+    aesKey?: Buffer | string;
+    /** base64 AES key as carried on the wire. */
+    aesKeyBase64?: string;
+    mimeType?: string;
+}
+/** Convert a raw iLink CDN media reference + item aeskey into a normalized ref. */
+export declare function normalizeMediaRef(media: ILinkCDNMedia | undefined, aesKeyHex: string | undefined, opts?: {
+    cdnBaseUrl?: string;
+    mimeType?: string;
+}): NormalizedMediaRef | undefined;
+/** Map a normalized ref back to the port `WeixinMediaRef`. */
+export declare function toPortMediaRef(ref: NormalizedMediaRef): WeixinMediaRef;
+/**
+ * Normalize a decoded download into the port result, preferring the supplied
+ * MIME hint when the underlying fetch had none.
+ */
+export declare function toDownloadResult(data: Buffer, mimeHint: string | undefined): WeixinDownloadResult;
+/**
+ * Build the CDN media reference embedded into an iLink sendmessage item from an
+ * uploaded file's returned fields. Pure shape mapping of the wire reference
+ * (Tencent 2.4.6 carries base64 of the ASCII hex key on outbound).
+ */
+export declare function toSendMediaRef(uploaded: {
+    downloadEncryptedQueryParam?: string;
+    aeskey?: string;
+    fullUrl?: string;
+}): {
+    encrypt_query_param?: string;
+    aes_key?: string;
+    full_url?: string;
+};
+//# sourceMappingURL=compat.d.ts.map

package/lib/upstream/compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.d.ts","sourceRoot":"","sources":["../../src/upstream/compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACpD,kBAAkB,GAAG,SAAS,CAchC;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,GAAG,EAAE,kBAAkB,GAAG,cAAc,CAStE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,oBAAoB,CAEtB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE;IACvC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAUxE"}

package/lib/upstream/compat.js

@@ -0,0 +1,54 @@
+/** Convert a raw iLink CDN media reference + item aeskey into a normalized ref. */
+export function normalizeMediaRef(media, aesKeyHex, opts = {}) {
+    if (!media)
+        return undefined;
+    const encryptQueryParam = media.encrypt_query_param;
+    const fullUrl = media.full_url;
+    if (!fullUrl && !encryptQueryParam)
+        return undefined;
+    return {
+        cdnBaseUrl: opts.cdnBaseUrl,
+        fullUrl,
+        encryptQueryParam,
+        // item aeskey (hex, preferred) beats media aes_key (base64).
+        aesKey: aesKeyHex,
+        aesKeyBase64: media.aes_key,
+        mimeType: opts.mimeType,
+    };
+}
+/** Map a normalized ref back to the port `WeixinMediaRef`. */
+export function toPortMediaRef(ref) {
+    return {
+        cdnBaseUrl: ref.cdnBaseUrl,
+        fullUrl: ref.fullUrl,
+        encryptQueryParam: ref.encryptQueryParam,
+        aesKeyHex: typeof ref.aesKey === 'string' ? ref.aesKey : undefined,
+        aesKeyBase64: ref.aesKeyBase64,
+        mimeType: ref.mimeType,
+    };
+}
+/**
+ * Normalize a decoded download into the port result, preferring the supplied
+ * MIME hint when the underlying fetch had none.
+ */
+export function toDownloadResult(data, mimeHint) {
+    return { data: new Uint8Array(data), mimeType: mimeHint };
+}
+/**
+ * Build the CDN media reference embedded into an iLink sendmessage item from an
+ * uploaded file's returned fields. Pure shape mapping of the wire reference
+ * (Tencent 2.4.6 carries base64 of the ASCII hex key on outbound).
+ */
+export function toSendMediaRef(uploaded) {
+    const ref = {};
+    if (uploaded.downloadEncryptedQueryParam) {
+        ref.encrypt_query_param = uploaded.downloadEncryptedQueryParam;
+    }
+    if (uploaded.aeskey) {
+        ref.aes_key = Buffer.from(uploaded.aeskey, 'ascii').toString('base64');
+    }
+    if (uploaded.fullUrl)
+        ref.full_url = uploaded.fullUrl;
+    return ref;
+}
+//# sourceMappingURL=compat.js.map

package/lib/upstream/compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.js","sourceRoot":"","sources":["../../src/upstream/compat.ts"],"names":[],"mappings":"AA6BA,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAC/B,KAAgC,EAChC,SAA6B,EAC7B,OAAmD,EAAE;IAErD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO;QACP,iBAAiB;QACjB,6DAA6D;QAC7D,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAClE,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,QAA4B;IAE5B,OAAO,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAI9B;IACC,MAAM,GAAG,GAA0E,EAAE,CAAC;IACtF,IAAI,QAAQ,CAAC,2BAA2B,EAAE,CAAC;QACzC,GAAG,CAAC,mBAAmB,GAAG,QAAQ,CAAC,2BAA2B,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/lib/upstream/config-manager.d.ts

@@ -0,0 +1,35 @@
+export interface WeixinConfigManagerOptions {
+    /** Fetches peer config from iLink. The response is untrusted. */
+    fetchConfig(peer: string): Promise<unknown>;
+    /** Injectable clock and entropy source for deterministic tests. */
+    now?: () => number;
+    rand?: () => number;
+    /** Defaults match Tencent's bounded refresh/backoff policy. */
+    minRefreshMs?: number;
+    refreshJitterMs?: number;
+    initialRetryDelayMs?: number;
+    maxRetryDelayMs?: number;
+}
+/**
+ * Per-peer iLink config cache. Typing remains best-effort: it uses a prior
+ * ticket during a failed refresh and retries unavailable config with backoff.
+ */
+export declare class WeixinConfigManager {
+    private readonly fetchConfig;
+    private readonly now;
+    private readonly rand;
+    private readonly minRefreshMs;
+    private readonly refreshJitterMs;
+    private readonly initialRetryDelayMs;
+    private readonly maxRetryDelayMs;
+    private readonly cache;
+    private readonly pending;
+    constructor(options: WeixinConfigManagerOptions);
+    /** Resolve a valid ticket, preserving a prior ticket while a refresh backs off. */
+    resolveTypingTicket(peer: string | undefined): Promise<string | undefined>;
+    /** Clear one peer or all entries after a credential or base URL transition. */
+    clear(peer?: string): void;
+    private refresh;
+    private nextRefreshDelay;
+}
+//# sourceMappingURL=config-manager.d.ts.map

package/lib/upstream/config-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.d.ts","sourceRoot":"","sources":["../../src/upstream/config-manager.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,0BAA0B;IACzC,iEAAiE;IACjE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC;IACpB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAcD;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;IACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;gBAE9D,OAAO,EAAE,0BAA0B;IAU/C,mFAAmF;IAC7E,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAiBhF,+EAA+E;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;YAWZ,OAAO;IA6BrB,OAAO,CAAC,gBAAgB;CAIzB"}

package/lib/upstream/config-manager.js

@@ -0,0 +1,91 @@
+import { z } from 'zod';
+const getConfigResponseSchema = z.object({
+    typing_ticket: z.string().trim().min(1).max(4096).optional(),
+}).passthrough();
+const DEFAULT_MIN_REFRESH_MS = 12 * 60 * 60 * 1000;
+const DEFAULT_REFRESH_JITTER_MS = 12 * 60 * 60 * 1000;
+const DEFAULT_INITIAL_RETRY_DELAY_MS = 2_000;
+const DEFAULT_MAX_RETRY_DELAY_MS = 60 * 60 * 1000;
+/**
+ * Per-peer iLink config cache. Typing remains best-effort: it uses a prior
+ * ticket during a failed refresh and retries unavailable config with backoff.
+ */
+export class WeixinConfigManager {
+    fetchConfig;
+    now;
+    rand;
+    minRefreshMs;
+    refreshJitterMs;
+    initialRetryDelayMs;
+    maxRetryDelayMs;
+    cache = new Map();
+    pending = new Map();
+    constructor(options) {
+        this.fetchConfig = options.fetchConfig;
+        this.now = options.now ?? Date.now;
+        this.rand = options.rand ?? Math.random;
+        this.minRefreshMs = options.minRefreshMs ?? DEFAULT_MIN_REFRESH_MS;
+        this.refreshJitterMs = options.refreshJitterMs ?? DEFAULT_REFRESH_JITTER_MS;
+        this.initialRetryDelayMs = options.initialRetryDelayMs ?? DEFAULT_INITIAL_RETRY_DELAY_MS;
+        this.maxRetryDelayMs = options.maxRetryDelayMs ?? DEFAULT_MAX_RETRY_DELAY_MS;
+    }
+    /** Resolve a valid ticket, preserving a prior ticket while a refresh backs off. */
+    async resolveTypingTicket(peer) {
+        const normalizedPeer = peer?.trim();
+        if (!normalizedPeer)
+            return undefined;
+        const current = this.cache.get(normalizedPeer);
+        if (current && this.now() < current.nextFetchAt)
+            return current.typingTicket;
+        const existing = this.pending.get(normalizedPeer);
+        if (existing)
+            return existing;
+        const request = this.refresh(normalizedPeer, current).finally(() => {
+            this.pending.delete(normalizedPeer);
+        });
+        this.pending.set(normalizedPeer, request);
+        return request;
+    }
+    /** Clear one peer or all entries after a credential or base URL transition. */
+    clear(peer) {
+        const normalizedPeer = peer?.trim();
+        if (normalizedPeer) {
+            this.cache.delete(normalizedPeer);
+            this.pending.delete(normalizedPeer);
+            return;
+        }
+        this.cache.clear();
+        this.pending.clear();
+    }
+    async refresh(peer, prior) {
+        const now = this.now();
+        try {
+            const parsed = getConfigResponseSchema.safeParse(await this.fetchConfig(peer));
+            if (!parsed.success || !parsed.data.typing_ticket)
+                throw new Error('typing ticket unavailable');
+            const typingTicket = parsed.data.typing_ticket;
+            this.cache.set(peer, {
+                typingTicket,
+                nextFetchAt: now + this.nextRefreshDelay(),
+                retryDelayMs: this.initialRetryDelayMs,
+                everSucceeded: true,
+            });
+            return typingTicket;
+        }
+        catch {
+            const retryDelayMs = Math.min(prior?.retryDelayMs ?? this.initialRetryDelayMs, this.maxRetryDelayMs);
+            this.cache.set(peer, {
+                typingTicket: prior?.typingTicket,
+                nextFetchAt: now + retryDelayMs,
+                retryDelayMs: Math.min(retryDelayMs * 2, this.maxRetryDelayMs),
+                everSucceeded: prior?.everSucceeded ?? false,
+            });
+            return prior?.typingTicket;
+        }
+    }
+    nextRefreshDelay() {
+        const boundedRandom = Math.min(1, Math.max(0, this.rand()));
+        return this.minRefreshMs + Math.floor(this.refreshJitterMs * boundedRandom);
+    }
+}
+//# sourceMappingURL=config-manager.js.map

package/lib/upstream/config-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../src/upstream/config-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC,WAAW,EAAE,CAAC;AAsBjB,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtD,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAC7C,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACb,WAAW,CAAqC;IAChD,GAAG,CAAe;IAClB,IAAI,CAAe;IACnB,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,mBAAmB,CAAS;IAC5B,eAAe,CAAS;IACxB,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE1E,YAAY,OAAmC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACnE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAC5E,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;QACzF,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,0BAA0B,CAAC;IAC/E,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,mBAAmB,CAAC,IAAwB;QAChD,MAAM,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC;QAE7E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,IAAa;QACjB,MAAM,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAwB;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAEhG,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBACnB,YAAY;gBACZ,WAAW,EAAE,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE;gBAC1C,YAAY,EAAE,IAAI,CAAC,mBAAmB;gBACtC,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,YAAY,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,mBAAmB,EAC/C,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBACnB,YAAY,EAAE,KAAK,EAAE,YAAY;gBACjC,WAAW,EAAE,GAAG,GAAG,YAAY;gBAC/B,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC;gBAC9D,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,KAAK;aAC7C,CAAC,CAAC;YACH,OAAO,KAAK,EAAE,YAAY,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,aAAa,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/lib/upstream/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * index.ts — public surface of the Weixin upstream layer.
+ *
+ * Re-exports the DSH-side port (`WeixinUpstream`) and the factory
+ * (`createWeixinUpstream`). Consumers (the adapter) depend only on the port;
+ * the Tencent implementation and the vendor deep-import boundary stay internal.
+ */
+import type { HttpTransport } from '../transport.js';
+import type { WeixinConfig } from '../config.js';
+import type { SecureRemoteMediaFetcher } from '@krischoichoi/channel-core';
+import type { WeixinUpstream } from './port.js';
+export type { WeixinUpstream, WeixinUpstreamHostEnv, WeixinQrTicket, WeixinQrAuthPoll, WeixinAuthCredential, WeixinMediaRef, WeixinDownloadResult, WeixinTextParams, WeixinImageParams, WeixinFileParams, WeixinVideoParams, WeixinSendResult, QrAuthState, } from './port.js';
+export { UpstreamCapabilityError } from './port.js';
+export { TencentWeixinUpstream, type WeixinUpstreamOptions } from './tencent-upstream.js';
+export { normalizeMediaRef, toPortMediaRef, toDownloadResult, toSendMediaRef } from './compat.js';
+export interface CreateWeixinUpstreamOptions {
+    config: WeixinConfig;
+    transport?: HttpTransport;
+    now?: () => number;
+    rand?: () => number;
+    /** Injectable fetch for media download (tests); defaults to globalThis.fetch. */
+    fetchImpl?: typeof fetch;
+    /** Injectable shared secure downloader (tests). */
+    mediaFetcher?: SecureRemoteMediaFetcher;
+}
+/**
+ * Create the Weixin upstream facade. Call [WeixinUpstream.extend/bind] with a
+ * host env before using startMonitor/send/download — see [WeixinUpstreamHostEnv]
+ * and [TencentWeixinUpstream.bind].
+ */
+export declare function createWeixinUpstream(options: CreateWeixinUpstreamOptions): WeixinUpstream & {
+    bind(env: import('./port.js').WeixinUpstreamHostEnv): void;
+    loadCredential(): Promise<boolean>;
+    startTyping(peer: string): Promise<void>;
+    stopTyping(peer: string): Promise<void>;
+    getHealthInfo(): Promise<{
+        authenticated: boolean;
+        connection: import('./tencent-upstream.js').WeixinConnectionState;
+    }>;
+    get_iLinkClient(): import('../ilink/client.js').ILinkClient | undefined;
+};
+//# sourceMappingURL=index.d.ts.map

package/lib/upstream/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upstream/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElG,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC;IACpB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,mDAAmD;IACnD,YAAY,CAAC,EAAE,wBAAwB,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,cAAc,GAAG;IAC3F,IAAI,CAAC,GAAG,EAAE,OAAO,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3D,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,uBAAuB,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IACxH,eAAe,IAAI,OAAO,oBAAoB,EAAE,WAAW,GAAG,SAAS,CAAC;CACzE,CAEA"}

package/lib/upstream/index.js

@@ -0,0 +1,13 @@
+import { TencentWeixinUpstream } from './tencent-upstream.js';
+export { UpstreamCapabilityError } from './port.js';
+export { TencentWeixinUpstream } from './tencent-upstream.js';
+export { normalizeMediaRef, toPortMediaRef, toDownloadResult, toSendMediaRef } from './compat.js';
+/**
+ * Create the Weixin upstream facade. Call [WeixinUpstream.extend/bind] with a
+ * host env before using startMonitor/send/download — see [WeixinUpstreamHostEnv]
+ * and [TencentWeixinUpstream.bind].
+ */
+export function createWeixinUpstream(options) {
+    return new TencentWeixinUpstream(options);
+}
+//# sourceMappingURL=index.js.map

package/lib/upstream/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/upstream/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,qBAAqB,EAA8B,MAAM,uBAAuB,CAAC;AAkB1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAA8B,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAalG;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IAQvE,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/lib/upstream/port.d.ts

@@ -0,0 +1,153 @@
+/**
+ * port.ts — DSH-side minimal upstream interface.
+ *
+ * `WeixinUpstream` is the ONLY surface the Weixin adapter depends on. It is a
+ * thin, protocol-agnostic port: the adapter no longer knows AES keys,
+ * getuploadurl payloads, CDN query assembly, or iLink endpoints (plan DoD #1) —
+ * those all live inside the DSH-hosted source-port implementation
+ * (tencent-upstream.ts).
+ *
+ * Design constraints:
+ *   - method count stays small — only what DSH genuinely consumes;
+ *   - no token/retry/reconnect/AES/upload-algorithm logic here — pure shape;
+ *   - a capability that the upstream cannot yet provide is surfaced as a
+ *     typed `UpstreamCapabilityError` — NEVER faked.
+ */
+import type { ChannelAdapterContext } from '@krischoichoi/channel-core';
+import type { SecretStore, ChannelStorage } from '@krischoichoi/channel-core';
+/** Uniform upstream-facing QR state (normalizes the Weixin iLink machine). */
+export type QrAuthState = 'pending' | 'authenticated' | 'expired' | 'failed';
+/** A QR login ticket handed to the operator. */
+export interface WeixinQrTicket {
+    /** Stable ticket id used by later pollQrAuth calls. */
+    id: string;
+    /** QR payload (URL or data:image) for the operator to scan/render. */
+    qrUrl?: string;
+    /** Short human instruction (e.g. "scan with WeChat"). */
+    instruction?: string;
+    /** Expiry instant (ms epoch). */
+    expiresAt?: number;
+}
+/** Credential produced once a QR login is confirmed. */
+export interface WeixinAuthCredential {
+    token: string;
+    ilinkBotId: string;
+    userId?: string;
+    baseUrl: string;
+}
+/** One QR auth poll result. */
+export interface WeixinQrAuthPoll {
+    state: QrAuthState;
+    detail?: string;
+    /** Present only when `state === 'authenticated'`. */
+    credential?: WeixinAuthCredential;
+}
+/** Context referencing a Weixin media resource for download. */
+export interface WeixinMediaRef {
+    /** CDN base URL override (derives a download URL when no fullUrl). */
+    cdnBaseUrl?: string;
+    /** Server-returned full_url (preferred carrier). */
+    fullUrl?: string;
+    /** `encrypt_query_param` when the CDN URL must be derived. */
+    encryptQueryParam?: string;
+    /** AES-128 key as 16-byte HEX (image item `aeskey`), preferred. */
+    aesKeyHex?: string;
+    /** AES-128 key as base64 (CDN media `aes_key`). */
+    aesKeyBase64?: string;
+    /** MIME hint (image/jpeg …) when known from item metadata. */
+    mimeType?: string;
+}
+/** Result of a media download. */
+export interface WeixinDownloadResult {
+    /** Plaintext (decrypted) bytes. */
+    data: Uint8Array;
+    mimeType?: string;
+}
+/** Target for an outbound send + optional turn correlation. */
+export interface WeixinSendTarget {
+    to: string;
+    contextToken?: string;
+    runId?: string;
+}
+export interface WeixinTextParams extends WeixinSendTarget {
+    text: string;
+}
+export interface WeixinImageParams extends WeixinSendTarget {
+    /** Plaintext image bytes. */
+    data: Uint8Array;
+    mimeType?: string;
+}
+export interface WeixinFileParams extends WeixinSendTarget {
+    data: Uint8Array;
+    fileName: string;
+    mimeType?: string;
+}
+export interface WeixinVideoParams extends WeixinSendTarget {
+    data: Uint8Array;
+    mimeType?: string;
+}
+/** Result of one outbound send. */
+export interface WeixinSendResult {
+    messageId?: string;
+    delivered: boolean;
+}
+/**
+ * Upstream resources wired once by the host (adapter) at start. Provides the
+ * harness seam the monitor needs (emit/dispatch, signal, logger) and the store
+ * boundaries for credentials / sync-cursor / context-token / dedup.
+ */
+export interface WeixinUpstreamHostEnv {
+    ctx: ChannelAdapterContext;
+    secrets: SecretStore;
+    storage: ChannelStorage;
+    /** Optional connection-state callback (monitor health → adapter/heartbeat). */
+    onConnectionChange?: (state: 'connected' | 'reconnecting' | 'disconnected') => void;
+}
+/**
+ * The DSH-side upstream port implemented by TencentWeixinUpstream.
+ */
+export interface WeixinUpstream {
+    readonly id: 'weixin';
+    /** Begin a WeChat QR login; returns a fresh ticket. */
+    beginQrAuth(): Promise<WeixinQrTicket>;
+    /** Poll the active QR ticket. */
+    pollQrAuth(ticketId: string): Promise<WeixinQrAuthPoll>;
+    /** Submit a phone-verify code for the active QR ticket (adapter-specific). */
+    submitVerifyCode(code: string): void;
+    /** Start the getUpdates monitor; requires the host env to be bound first. */
+    startMonitor(): Promise<void>;
+    /** Stop the getUpdates monitor (best effort). */
+    stopMonitor(): Promise<void>;
+    /** Send a text message. */
+    sendText(params: WeixinTextParams): Promise<WeixinSendResult>;
+    /** Send an image message (uploads plaintext bytes, sends an image item). */
+    sendImage(params: WeixinImageParams): Promise<WeixinSendResult>;
+    /** Send a file message. */
+    sendFile(params: WeixinFileParams): Promise<WeixinSendResult>;
+    /** Send a video message. */
+    sendVideo(params: WeixinVideoParams): Promise<WeixinSendResult>;
+    /** Download + decrypt an inbound image. */
+    downloadImage(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    /** Download + decrypt an inbound file. */
+    downloadFile(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    /** Download + decrypt an inbound audio attachment. */
+    downloadAudio(ref: WeixinMediaRef, options?: {
+        encodeType?: number;
+        sampleRate?: number;
+    }): Promise<WeixinDownloadResult>;
+    /** Download + decrypt an inbound video attachment. */
+    downloadVideo(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    /** True when the bound credential is present and non-empty. */
+    hasCredential(): boolean;
+}
+/**
+ * A typed capability error: the requested operation is not (yet) provided by
+ * the upstream. Thrown instead of fabricating support ("do not fake
+ * support").
+ */
+export declare class UpstreamCapabilityError extends Error {
+    /** Which capability is missing. */
+    readonly capability: string;
+    constructor(capability: string, reason: string);
+}
+//# sourceMappingURL=port.d.ts.map

package/lib/upstream/port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.d.ts","sourceRoot":"","sources":["../../src/upstream/port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE9E,8EAA8E;AAC9E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7E,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACnC,mCAAmC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,6BAA6B;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,qBAAqB,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;IACxB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,KAAK,IAAI,CAAC;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAEtB,uDAAuD;IACvD,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,iCAAiC;IACjC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxD,8EAA8E;IAC9E,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAErC,6EAA6E;IAC7E,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,iDAAiD;IACjD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7B,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,4EAA4E;IAC5E,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChE,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,4BAA4B;IAC5B,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEhE,2CAA2C;IAC3C,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClE,0CAA0C;IAC1C,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjE,sDAAsD;IACtD,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1H,sDAAsD;IACtD,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAElE,+DAA+D;IAC/D,aAAa,IAAI,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK/C"}

package/lib/upstream/port.js

@@ -0,0 +1,15 @@
+/**
+ * A typed capability error: the requested operation is not (yet) provided by
+ * the upstream. Thrown instead of fabricating support ("do not fake
+ * support").
+ */
+export class UpstreamCapabilityError extends Error {
+    /** Which capability is missing. */
+    capability;
+    constructor(capability, reason) {
+        super(`weixin upstream capability '${capability}' is unavailable: ${reason}`);
+        this.name = 'UpstreamCapabilityError';
+        this.capability = capability;
+    }
+}
+//# sourceMappingURL=port.js.map

package/lib/upstream/port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/upstream/port.ts"],"names":[],"mappings":"AA+JA;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,mCAAmC;IAC1B,UAAU,CAAS;IAE5B,YAAY,UAAkB,EAAE,MAAc;QAC5C,KAAK,CAAC,+BAA+B,UAAU,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF"}

package/lib/upstream/tencent-upstream.d.ts

@@ -0,0 +1,116 @@
+/**
+ * tencent-upstream.ts — DSH-hosted Weixin iLink source-port.
+ *
+ * Tencent's published @tencent-weixin/openclaw-weixin plugin couples its
+ * runtime to OpenClaw. It is retained as a source reference only: importing
+ * its internal dist paths or installing its OpenClaw peer dependency would
+ * violate the DSH host boundary. Protocol orchestration and AES therefore stay
+ * in this adapter behind the WeixinUpstream port.
+ *
+ * ZERO-REGRESSION contract:
+ *   Weixin image → localData → saveImage() → ImageBlock unchanged.
+ *   downloadImage() returns the SAME decrypted bytes legacy media/download.ts
+ *   produced. URL resolution keeps the legacy shape because the Tencent plugin
+ *   uses a different URL form that would alter the working CDN path.
+ */
+import { SecureRemoteMediaFetcher } from '@krischoichoi/channel-core';
+import type { WeixinConfig } from '../config.js';
+import { ILinkClient } from '../ilink/client.js';
+import type { HttpTransport } from '../transport.js';
+import type { WeixinUpstream, WeixinUpstreamHostEnv, WeixinQrTicket, WeixinQrAuthPoll, WeixinMediaRef, WeixinDownloadResult, WeixinTextParams, WeixinImageParams, WeixinFileParams, WeixinVideoParams, WeixinSendResult } from './port.js';
+/** Connection state surfaced to the host (mirrors the monitor's own notion). */
+export type WeixinConnectionState = 'connected' | 'reconnecting' | 'disconnected' | 'not-started';
+/** Options to construct a [TencentWeixinUpstream]. */
+export interface WeixinUpstreamOptions {
+    config: WeixinConfig;
+    transport?: HttpTransport;
+    now?: () => number;
+    rand?: () => number;
+    /** Injectable fetch for media download (tests); defaults to globalThis.fetch. */
+    fetchImpl?: typeof fetch;
+    /** Injectable shared secure downloader (tests); defaults to the core boundary. */
+    mediaFetcher?: SecureRemoteMediaFetcher;
+}
+/**
+ * The concrete upstream implementation. Owns every protocol/media detail; the
+ * adapter depends only on the `WeixinUpstream` port.
+ */
+export declare class TencentWeixinUpstream implements WeixinUpstream {
+    readonly id = "weixin";
+    private readonly config;
+    private readonly now;
+    private readonly rand;
+    private readonly transport;
+    private readonly mediaFetcher;
+    private env?;
+    private client?;
+    private credentialStore?;
+    private cursorStore?;
+    private contextTokens?;
+    private qrAuth?;
+    private sender?;
+    private monitor?;
+    private typing?;
+    private configManager?;
+    private typingPeer?;
+    private connected;
+    /** Whether a credential is loaded/persisted (the adapter's "authenticated"). */
+    private authenticated;
+    /** Active QR ticket id + expiry, so pollAuth can rebuild the challenge. */
+    private activeQrId?;
+    private activeQrExpiresAt?;
+    constructor(options: WeixinUpstreamOptions);
+    /**
+     * Wire the host environment (stores + context) and build the internal
+     * protocol session. Called by the adapter at start(); idempotent.
+     */
+    bind(env: WeixinUpstreamHostEnv): void;
+    hasCredential(): boolean;
+    /**
+     * Load the persisted credential, applying token/baseUrl to the client.
+     * Returns true when a full credential exists. This is the adapter's "have we
+     * authenticated before?" signal.
+     */
+    loadCredential(): Promise<boolean>;
+    beginQrAuth(): Promise<WeixinQrTicket>;
+    pollQrAuth(ticketId: string): Promise<WeixinQrAuthPoll>;
+    submitVerifyCode(code: string): void;
+    startMonitor(): Promise<void>;
+    stopMonitor(): Promise<void>;
+    sendText(params: WeixinTextParams): Promise<WeixinSendResult>;
+    sendImage(params: WeixinImageParams): Promise<WeixinSendResult>;
+    sendFile(params: WeixinFileParams): Promise<WeixinSendResult>;
+    sendVideo(params: WeixinVideoParams): Promise<WeixinSendResult>;
+    downloadImage(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    downloadFile(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    downloadAudio(ref: WeixinMediaRef, options?: {
+        encodeType?: number;
+        sampleRate?: number;
+    }): Promise<WeixinDownloadResult>;
+    downloadVideo(ref: WeixinMediaRef): Promise<WeixinDownloadResult>;
+    startTyping(conversationId: string): Promise<void>;
+    stopTyping(conversationId: string): Promise<void>;
+    /** Health introspection (bound credential + connection). */
+    getHealthInfo(): Promise<{
+        authenticated: boolean;
+        connection: WeixinConnectionState;
+    }>;
+    /** Introspection for tests: the underlying client. */
+    get_iLinkClient(): ILinkClient | undefined;
+    private ensureSession;
+    private requireReady;
+    private targetOf;
+    private persistCredential;
+    /** Hydrate inbound media before the event reaches the attachment pipeline. */
+    private enrichInboundMedia;
+    /**
+     * Resolve the platform media reference, then cross the shared secure remote
+     * media boundary before applying Weixin's source-port AES decryption.
+     */
+    private downloadAndDecrypt;
+    private resolveDownloadUrl;
+    /** Resolve the AES-128 key honoring hex (item aeskey) then base64 (media aes_key). */
+    private resolveAesKey;
+    private resolveTypingTicket;
+}
+//# sourceMappingURL=tencent-upstream.d.ts.map

package/lib/upstream/tencent-upstream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tencent-upstream.d.ts","sourceRoot":"","sources":["../../src/upstream/tencent-upstream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAEL,wBAAwB,EAKzB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAA2B,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAWrD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAEhB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,WAAW,CAAC;AAInB,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAC7B,WAAW,GACX,cAAc,GACd,cAAc,GACd,aAAa,CAAC;AAElB,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC;IACpB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,kFAAkF;IAClF,YAAY,CAAC,EAAE,wBAAwB,CAAC;CACzC;AAKD;;;GAGG;AACH,qBAAa,qBAAsB,YAAW,cAAc;IAC1D,QAAQ,CAAC,EAAE,YAAY;IAEvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD,OAAO,CAAC,GAAG,CAAC,CAAwB;IACpC,OAAO,CAAC,MAAM,CAAC,CAAc;IAC7B,OAAO,CAAC,eAAe,CAAC,CAAyB;IACjD,OAAO,CAAC,WAAW,CAAC,CAAkB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,MAAM,CAAC,CAAe;IAC9B,OAAO,CAAC,MAAM,CAAC,CAAiB;IAChC,OAAO,CAAC,OAAO,CAAC,CAAgB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,aAAa,CAAC,CAAsB;IAC5C,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAwC;IACzD,gFAAgF;IAChF,OAAO,CAAC,aAAa,CAAS;IAC9B,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,OAAO,EAAE,qBAAqB;IAU1C;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI;IAyCtC,aAAa,IAAI,OAAO;IAIxB;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAclC,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;IAmBtC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkC7D,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAO9B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA4C7B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAM7D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAU/D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO7D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQ/D,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKjE,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKhE,aAAa,CACjB,GAAG,EAAE,cAAc,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,oBAAoB,CAAC;IAM1B,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMjE,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlD,UAAU,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD,4DAA4D;IACtD,aAAa,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,qBAAqB,CAAA;KAAE,CAAC;IAQ7F,sDAAsD;IACtD,eAAe,IAAI,WAAW,GAAG,SAAS;IAM1C,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,QAAQ;YASF,iBAAiB;IAuB/B,8EAA8E;YAChE,kBAAkB;IA+DhC;;;OAGG;YACW,kBAAkB;IAkBhC,OAAO,CAAC,kBAAkB;IAQ1B,sFAAsF;IACtF,OAAO,CAAC,aAAa;YAcP,mBAAmB;CAGlC"}