@lanbaolu/dsh-wechat-bridge 0.1.0

package/lib/bridge/pending-queue.js

@@ -0,0 +1,55 @@
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { DATA_DIR } from './constants.js';
+import { logger } from './logger.js';
+const QUEUE_DIR = join(DATA_DIR, 'pending-queue');
+function queuePath(accountId) {
+    return join(QUEUE_DIR, `${accountId}.json`);
+}
+function ensureDir() {
+    if (!existsSync(QUEUE_DIR)) {
+        mkdirSync(QUEUE_DIR, { recursive: true });
+    }
+}
+export function loadPendingQueue(accountId) {
+    try {
+        const path = queuePath(accountId);
+        if (!existsSync(path))
+            return [];
+        const raw = readFileSync(path, 'utf-8');
+        const data = JSON.parse(raw);
+        return Array.isArray(data) ? data : [];
+    }
+    catch (err) {
+        logger.warn('Failed to load pending queue', {
+            accountId,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return [];
+    }
+}
+export function savePendingQueue(accountId, items) {
+    try {
+        ensureDir();
+        writeFileSync(queuePath(accountId), JSON.stringify(items, null, 2), 'utf-8');
+    }
+    catch (err) {
+        logger.warn('Failed to save pending queue', {
+            accountId,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export function appendPending(accountId, item) {
+    const items = loadPendingQueue(accountId);
+    items.push(item);
+    savePendingQueue(accountId, items);
+    return items;
+}
+export function clearPending(accountId) {
+    savePendingQueue(accountId, []);
+}
+export function hasPending(accountId) {
+    return loadPendingQueue(accountId).length > 0;
+}
+//# sourceMappingURL=pending-queue.js.map

package/lib/bridge/pending-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-queue.js","sourceRoot":"","sources":["../../src/bridge/pending-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAElD,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC1C,SAAS;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAAoB;IACtE,IAAI,CAAC;QACH,SAAS,EAAE,CAAC;QACZ,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC1C,SAAS;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAiB;IAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/lib/bridge/session.js

@@ -0,0 +1,84 @@
+import { loadJson, saveJson, validateAccountId } from './store.js';
+import { mkdirSync } from 'node:fs';
+import { DATA_DIR, DEFAULT_WORKING_DIR } from './constants.js';
+import { join } from 'node:path';
+const SESSIONS_DIR = join(DATA_DIR, 'sessions');
+const DEFAULT_MAX_HISTORY = 100;
+export function createSessionStore() {
+    function getSessionPath(accountId) {
+        validateAccountId(accountId);
+        return join(SESSIONS_DIR, `${accountId}.json`);
+    }
+    function load(accountId) {
+        validateAccountId(accountId);
+        const session = loadJson(getSessionPath(accountId), {
+            workingDirectory: DEFAULT_WORKING_DIR,
+            state: 'idle',
+            chatHistory: [],
+            maxHistoryLength: DEFAULT_MAX_HISTORY,
+        });
+        // Backward compatibility: ensure chatHistory exists
+        if (!session.chatHistory) {
+            session.chatHistory = [];
+        }
+        if (!session.maxHistoryLength) {
+            session.maxHistoryLength = DEFAULT_MAX_HISTORY;
+        }
+        return session;
+    }
+    function save(accountId, session) {
+        mkdirSync(SESSIONS_DIR, { recursive: true });
+        // Trim chat history if it exceeds max length before saving
+        const maxLen = session.maxHistoryLength || DEFAULT_MAX_HISTORY;
+        if (session.chatHistory.length > maxLen) {
+            session.chatHistory = session.chatHistory.slice(-maxLen);
+        }
+        saveJson(getSessionPath(accountId), session);
+    }
+    function clear(accountId, currentSession) {
+        const session = {
+            sdkSessionId: undefined, // explicitly clear so Object.assign removes it
+            previousSdkSessionId: undefined,
+            workingDirectory: currentSession?.workingDirectory ?? DEFAULT_WORKING_DIR,
+            model: currentSession?.model,
+            state: 'idle',
+            chatHistory: [],
+            maxHistoryLength: currentSession?.maxHistoryLength || DEFAULT_MAX_HISTORY,
+        };
+        save(accountId, session);
+        return session;
+    }
+    function addChatMessage(session, role, content) {
+        if (!session.chatHistory) {
+            session.chatHistory = [];
+        }
+        session.chatHistory.push({
+            role,
+            content,
+            timestamp: Date.now(),
+        });
+        // Trim if exceeds max length
+        const maxLen = session.maxHistoryLength || DEFAULT_MAX_HISTORY;
+        if (session.chatHistory.length > maxLen) {
+            session.chatHistory = session.chatHistory.slice(-maxLen);
+        }
+    }
+    function getChatHistoryText(session, limit) {
+        const history = session.chatHistory || [];
+        const messages = limit ? history.slice(-limit) : history;
+        if (messages.length === 0) {
+            return '暂无对话记录';
+        }
+        const lines = [];
+        for (const msg of messages) {
+            const time = new Date(msg.timestamp).toLocaleString('zh-CN');
+            const role = msg.role === 'user' ? '用户' : 'DSH';
+            lines.push(`[${time}] ${role}:`);
+            lines.push(msg.content);
+            lines.push('');
+        }
+        return lines.join('\n');
+    }
+    return { load, save, clear, addChatMessage, getChatHistoryText };
+}
+//# sourceMappingURL=session.js.map

package/lib/bridge/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/bridge/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAoBhD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,UAAU,kBAAkB;IAChC,SAAS,cAAc,CAAC,SAAiB;QACvC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,IAAI,CAAC,SAAiB;QAC7B,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAU,cAAc,CAAC,SAAS,CAAC,EAAE;YAC3D,gBAAgB,EAAE,mBAAmB;YACrC,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE;YACf,gBAAgB,EAAE,mBAAmB;SACtC,CAAC,CAAC;QAEH,oDAAoD;QACpD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO,CAAC,gBAAgB,GAAG,mBAAmB,CAAC;QACjD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,IAAI,CAAC,SAAiB,EAAE,OAAgB;QAC/C,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;QAC/D,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAED,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,KAAK,CAAC,SAAiB,EAAE,cAAwB;QACxD,MAAM,OAAO,GAAY;YACvB,YAAY,EAAE,SAAS,EAAW,+CAA+C;YACjF,oBAAoB,EAAE,SAAS;YAC/B,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,IAAI,mBAAmB;YACzE,KAAK,EAAE,cAAc,EAAE,KAAK;YAC5B,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE;YACf,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,IAAI,mBAAmB;SAC1E,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,cAAc,CAAC,OAAgB,EAAE,IAA0B,EAAE,OAAe;QACnF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;YACvB,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;QAC/D,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,SAAS,kBAAkB,CAAC,OAAgB,EAAE,KAAc;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAEzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AACnE,CAAC"}

package/lib/bridge/store.js

@@ -0,0 +1,38 @@
+import { readFileSync, writeFileSync, chmodSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { logger } from "./logger.js";
+export function validateAccountId(accountId) {
+    if (!/^[a-zA-Z0-9_.@=-]+$/.test(accountId)) {
+        throw new Error(`Invalid accountId: "${accountId}"`);
+    }
+}
+/**
+ * Load a JSON file, returning a typed object or the fallback if the file
+ * does not exist or cannot be parsed.
+ */
+export function loadJson(filePath, fallback) {
+    try {
+        const raw = readFileSync(filePath, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code !== 'ENOENT') {
+            logger.warn('loadJson failed, using fallback', { filePath, error: err instanceof Error ? err.message : String(err) });
+        }
+        return fallback;
+    }
+}
+/**
+ * Persist an object as pretty-printed JSON.
+ * File is written with mode 0o600 (owner read/write only).
+ */
+export function saveJson(filePath, data) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    const raw = JSON.stringify(data, null, 2) + "\n";
+    writeFileSync(filePath, raw, "utf-8");
+    if (process.platform !== 'win32') {
+        chmodSync(filePath, 0o600);
+    }
+}
+//# sourceMappingURL=store.js.map

package/lib/bridge/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/bridge/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAI,QAAgB,EAAE,QAAW;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,IAAa;IACtD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACjD,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/lib/bridge/wechat/accounts.js

@@ -0,0 +1,50 @@
+import { join } from 'node:path';
+import { readdirSync, statSync } from 'node:fs';
+import { loadJson, saveJson, validateAccountId } from '../store.js';
+import { logger } from '../logger.js';
+import { DATA_DIR } from '../constants.js';
+export const DEFAULT_BASE_URL = 'https://ilinkai.weixin.qq.com';
+const ACCOUNTS_DIR = join(DATA_DIR, 'accounts');
+function accountPath(accountId) {
+    validateAccountId(accountId);
+    return join(ACCOUNTS_DIR, `${accountId}.json`);
+}
+/** Persist account credentials to disk. */
+export function saveAccount(data) {
+    const filePath = accountPath(data.accountId);
+    saveJson(filePath, data);
+    logger.info('Account saved', { accountId: data.accountId });
+}
+/** Load account credentials by ID. Returns null if not found. */
+export function loadAccount(accountId) {
+    const filePath = accountPath(accountId);
+    const data = loadJson(filePath, null);
+    if (data) {
+        logger.info('Account loaded', { accountId });
+    }
+    return data;
+}
+/** Load the most recently modified account. Returns null if none exist. */
+export function loadLatestAccount() {
+    try {
+        const files = readdirSync(ACCOUNTS_DIR).filter((f) => f.endsWith('.json'));
+        if (files.length === 0)
+            return null;
+        let latestFile = files[0];
+        let latestMtime = 0;
+        for (const file of files) {
+            const stat = statSync(join(ACCOUNTS_DIR, file));
+            if (stat.mtimeMs > latestMtime) {
+                latestMtime = stat.mtimeMs;
+                latestFile = file;
+            }
+        }
+        const accountId = latestFile.replace(/\.json$/, '');
+        return loadAccount(accountId);
+    }
+    catch {
+        // Directory does not exist or is unreadable
+        return null;
+    }
+}
+//# sourceMappingURL=accounts.js.map

package/lib/bridge/wechat/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../../src/bridge/wechat/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAUhE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAEhD,SAAS,WAAW,CAAC,SAAiB;IACpC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAqB,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,IAAI,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC/B,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/lib/bridge/wechat/api.js

@@ -0,0 +1,197 @@
+import { logger } from '../logger.js';
+/** Generate a random base64 identifier. */
+function generateUin() {
+    const buf = new Uint8Array(4);
+    crypto.getRandomValues(buf);
+    return Buffer.from(buf).toString('base64');
+}
+export class WeChatApi {
+    token;
+    baseUrl;
+    uin;
+    nextSendTime = new Map();
+    static MIN_SEND_INTERVAL = 2500;
+    // Cooldown applied after a rate-limit (ret:-2). Aligned with the circuit
+    // breaker window so they don't fight each other.
+    static RATE_LIMIT_COOLDOWN_MS = 30_000;
+    // ── Circuit breaker ────────────────────────────────────────────────────
+    // Borrowed from Hermes WeChat adapter: trip after the first genuine
+    // rate-limit in a 30s window, stay open 30s. While open, all sends fail
+    // fast without hitting the API — breaking the 14-minute "head-banging"
+    // loop we observed in production logs.
+    static CIRCUIT_THRESHOLD = 1;
+    static CIRCUIT_WINDOW_MS = 30_000;
+    static CIRCUIT_OPEN_MS = 30_000;
+    _rateLimitEvents = [];
+    _circuitUntil = 0;
+    // ret:-2 + errmsg="unknown error" is a stale-session signal (same family
+    // as errcode:-14), not a real rate-limit. Pause that user 10 minutes
+    // instead of cycling through the rate-limit path.
+    static STALE_SESSION_PAUSE_MS = 10 * 60 * 1000;
+    constructor(token, baseUrl = 'https://ilinkai.weixin.qq.com') {
+        if (baseUrl) {
+            try {
+                const url = new URL(baseUrl);
+                const allowedHosts = ['weixin.qq.com', 'wechat.com'];
+                const isAllowed = allowedHosts.some(h => url.hostname === h || url.hostname.endsWith('.' + h));
+                if (url.protocol !== 'https:' || !isAllowed) {
+                    logger.warn('Untrusted baseUrl, using default', { baseUrl });
+                    baseUrl = 'https://ilinkai.weixin.qq.com';
+                }
+            }
+            catch {
+                logger.warn('Invalid baseUrl, using default', { baseUrl });
+                baseUrl = 'https://ilinkai.weixin.qq.com';
+            }
+        }
+        this.token = token;
+        this.baseUrl = baseUrl.replace(/\/+$/, '');
+        this.uin = generateUin();
+    }
+    headers() {
+        return {
+            'Content-Type': 'application/json',
+            'Authorization': `Bearer ${this.token}`,
+            'AuthorizationType': 'ilink_bot_token',
+            'X-WECHAT-UIN': this.uin,
+        };
+    }
+    async request(path, body, timeoutMs = 15_000) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const url = `${this.baseUrl}/${path}`;
+        logger.debug('API request', { url, body });
+        try {
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: this.headers(),
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!res.ok) {
+                const text = await res.text();
+                throw new Error(`HTTP ${res.status}: ${text}`);
+            }
+            const json = (await res.json());
+            logger.debug('API response', json);
+            return json;
+        }
+        catch (err) {
+            if (err instanceof DOMException && err.name === 'AbortError') {
+                throw new Error(`Request to ${url} timed out after ${timeoutMs}ms`);
+            }
+            throw err;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /** Long-poll for new messages. Timeout 35s for long-polling. */
+    async getUpdates(buf) {
+        return this.request('ilink/bot/getupdates', buf ? { get_updates_buf: buf } : {}, 35_000);
+    }
+    /** Send a message to a user. Per-user rate limited, retries on rate-limit (ret: -2). */
+    async sendMessage(req) {
+        // Circuit breaker: fail fast without calling the API while open.
+        // This is what breaks the 14-minute head-banging loop.
+        if (this._isCircuitOpen()) {
+            const remainingSec = Math.ceil((this._circuitUntil - Date.now()) / 1000);
+            logger.warn('sendMessage rejected by circuit breaker', { remainingSec });
+            throw new Error(`circuit breaker open, ${remainingSec}s remaining`);
+        }
+        const userId = req.msg?.to_user_id;
+        if (userId) {
+            const now = Date.now();
+            const nextAvailable = (this.nextSendTime.get(userId) ?? 0) + WeChatApi.MIN_SEND_INTERVAL;
+            const sendAt = Math.max(now, nextAvailable);
+            this.nextSendTime.set(userId, sendAt);
+            const waitMs = sendAt - now;
+            if (waitMs > 0) {
+                logger.debug('Rate limiter waiting', { userId, waitMs });
+                await new Promise(r => setTimeout(r, waitMs));
+            }
+        }
+        const MAX_RETRIES = 2;
+        let delay = 3_000;
+        for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+            // Re-check the circuit on each retry — a prior attempt may have just tripped it.
+            if (this._isCircuitOpen()) {
+                const remainingSec = Math.ceil((this._circuitUntil - Date.now()) / 1000);
+                logger.warn('sendMessage aborted mid-retry by circuit breaker', { attempt, remainingSec });
+                throw new Error(`circuit breaker open during retry, ${remainingSec}s remaining`);
+            }
+            const res = await this.request('ilink/bot/sendmessage', req);
+            if (res.ret === -2) {
+                // Distinguish stale-session (ret:-2 + errmsg "unknown error") from a real rate-limit.
+                // Hermes WeChat adapter established this pattern: the stale-session case behaves
+                // like errcode:-14 and is fixed by re-login, not by retry.
+                const errmsg = (res.errmsg ?? '').toLowerCase();
+                if (errmsg === 'unknown error') {
+                    logger.warn('sendMessage stale session detected (ret:-2 + unknown error)', { userId });
+                    if (userId) {
+                        this.nextSendTime.set(userId, Date.now() + WeChatApi.STALE_SESSION_PAUSE_MS);
+                    }
+                    throw new Error('stale session — user must send a message to refresh context_token');
+                }
+                // Real rate-limit: trip the circuit breaker so subsequent sends fail fast.
+                this._tripCircuit();
+                if (userId) {
+                    this.nextSendTime.set(userId, Date.now() + WeChatApi.RATE_LIMIT_COOLDOWN_MS);
+                }
+                if (attempt === MAX_RETRIES) {
+                    logger.warn('sendMessage rate-limited after max retries', { attempts: MAX_RETRIES });
+                    throw new Error(`sendMessage rate-limited after ${MAX_RETRIES} retries`);
+                }
+                logger.warn('sendMessage rate-limited (ret:-2), retrying', { attempt, delayMs: delay });
+                await new Promise(r => setTimeout(r, delay));
+                delay = Math.min(delay * 2, 15_000);
+                continue;
+            }
+            return;
+        }
+    }
+    // ── Circuit breaker helpers ────────────────────────────────────────────
+    /** True while the breaker is open (sends should fail fast). */
+    _isCircuitOpen() {
+        if (this._circuitUntil === 0)
+            return false;
+        if (Date.now() >= this._circuitUntil) {
+            this._circuitUntil = 0;
+            this._rateLimitEvents.length = 0;
+            return false;
+        }
+        return true;
+    }
+    /** Record a rate-limit event and open the breaker if threshold is met. */
+    _tripCircuit() {
+        const now = Date.now();
+        const windowStart = now - WeChatApi.CIRCUIT_WINDOW_MS;
+        while (this._rateLimitEvents.length > 0 && this._rateLimitEvents[0] < windowStart) {
+            this._rateLimitEvents.shift();
+        }
+        this._rateLimitEvents.push(now);
+        if (this._rateLimitEvents.length >= WeChatApi.CIRCUIT_THRESHOLD) {
+            const openUntil = Math.max(this._circuitUntil, now + WeChatApi.CIRCUIT_OPEN_MS);
+            if (openUntil > this._circuitUntil) {
+                logger.warn('Circuit breaker tripped', {
+                    events: this._rateLimitEvents.length,
+                    openMs: WeChatApi.CIRCUIT_OPEN_MS,
+                });
+            }
+            this._circuitUntil = openUntil;
+        }
+    }
+    /** Fetch bot config (includes typing_ticket). */
+    async getConfig(ilinkUserId, contextToken) {
+        return this.request('ilink/bot/getconfig', { ilink_user_id: ilinkUserId, context_token: contextToken }, 10_000);
+    }
+    /** Send a typing indicator to a user. */
+    async sendTyping(req) {
+        await this.request('ilink/bot/sendtyping', req, 10_000);
+    }
+    /** Get a presigned upload URL for media files. */
+    async getUploadUrl(req) {
+        return this.request('ilink/bot/getuploadurl', req);
+    }
+}
+//# sourceMappingURL=api.js.map

package/lib/bridge/wechat/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/bridge/wechat/api.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,2CAA2C;AAC3C,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,OAAO,SAAS;IACH,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,GAAG,CAAS;IACZ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,MAAM,CAAU,iBAAiB,GAAG,IAAI,CAAC;IACjD,yEAAyE;IACzE,iDAAiD;IACzC,MAAM,CAAU,sBAAsB,GAAG,MAAM,CAAC;IAExD,0EAA0E;IAC1E,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,uCAAuC;IAC/B,MAAM,CAAU,iBAAiB,GAAG,CAAC,CAAC;IACtC,MAAM,CAAU,iBAAiB,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAU,eAAe,GAAG,MAAM,CAAC;IAChC,gBAAgB,GAAa,EAAE,CAAC;IACzC,aAAa,GAAG,CAAC,CAAC;IAE1B,yEAAyE;IACzE,qEAAqE;IACrE,kDAAkD;IAC1C,MAAM,CAAU,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEhE,YAAY,KAAa,EAAE,UAAkB,+BAA+B;QAC1E,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC7B,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;gBACrD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC7D,OAAO,GAAG,+BAA+B,CAAC;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC3D,OAAO,GAAG,+BAA+B,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,CAAC;IAC3B,CAAC;IAEO,OAAO;QACb,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACvC,mBAAmB,EAAE,iBAAiB;YACtC,cAAc,EAAE,IAAI,CAAC,GAAG;SACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,IAAa,EACb,YAAoB,MAAM;QAE1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAEtC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,oBAAoB,SAAS,IAAI,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,UAAU,CAAC,GAAY;QAC3B,OAAO,IAAI,CAAC,OAAO,CACjB,sBAAsB,EACtB,GAAG,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EACnC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,WAAW,CAAC,GAAmB;QACnC,iEAAiE;QACjE,uDAAuD;QACvD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,aAAa,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC,iBAAiB,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;YAC5B,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,iFAAiF;YACjF,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC3F,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,aAAa,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAoC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YAChG,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnB,sFAAsF;gBACtF,iFAAiF;gBACjF,2DAA2D;gBAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBACvF,IAAI,MAAM,EAAE,CAAC;wBACX,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;oBAC/E,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACvF,CAAC;gBAED,2EAA2E;gBAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;gBAC/E,CAAC;gBACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;oBACrF,MAAM,IAAI,KAAK,CAAC,kCAAkC,WAAW,UAAU,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;gBACpC,SAAS;YACX,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAED,0EAA0E;IAE1E,+DAA+D;IACvD,cAAc;QACpB,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAClE,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,SAAS,CAAC,iBAAiB,CAAC;QACtD,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,CAAC;YAClF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;YAChF,IAAI,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBACrC,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;oBACpC,MAAM,EAAE,SAAS,CAAC,eAAe;iBAClC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,YAAqB;QACxD,OAAO,IAAI,CAAC,OAAO,CACjB,qBAAqB,EACrB,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,EAC3D,MAAM,CACP,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,UAAU,CAAC,GAAkB;QACjC,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,YAAY,CAAC,GAAyC;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAmB,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC"}

package/lib/bridge/wechat/cdn.js

@@ -0,0 +1,45 @@
+import { decryptAesEcb } from "./crypto.js";
+import { logger } from "../logger.js";
+import { CDN_BASE_URL } from "../constants.js";
+export function buildCdnDownloadUrl(encryptQueryParam) {
+    if (!/^[A-Za-z0-9%=&+._~\-/]+$/.test(encryptQueryParam)) {
+        throw new Error('Invalid CDN query parameter');
+    }
+    return `${CDN_BASE_URL}/download?encrypted_query_param=${encodeURIComponent(encryptQueryParam)}`;
+}
+export async function downloadAndDecrypt(encryptQueryParam, aesKeyBase64) {
+    const url = buildCdnDownloadUrl(encryptQueryParam);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 30_000);
+    let response;
+    try {
+        response = await fetch(url, { signal: controller.signal });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        throw new Error(`CDN download failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    clearTimeout(timer);
+    if (!response.ok) {
+        throw new Error(`CDN download failed: ${response.status} ${response.statusText}`);
+    }
+    const encrypted = Buffer.from(await response.arrayBuffer());
+    // Handle both formats:
+    // 1. base64-of-raw-16-bytes (16 raw bytes encoded as base64)
+    // 2. base64-of-hex-string (32 hex chars encoded as base64)
+    let aesKey;
+    const raw = Buffer.from(aesKeyBase64, "base64");
+    if (raw.length === 16) {
+        // base64-of-raw-16-bytes
+        aesKey = raw;
+    }
+    else {
+        // base64-of-hex-string: decode the string as hex to get the 16-byte key
+        const hexStr = raw.toString("utf-8");
+        aesKey = Buffer.from(hexStr, "hex");
+    }
+    const decrypted = decryptAesEcb(aesKey, encrypted);
+    logger.info("CDN download and decrypt succeeded", { size: decrypted.length });
+    return decrypted;
+}
+//# sourceMappingURL=cdn.js.map

package/lib/bridge/wechat/cdn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn.js","sourceRoot":"","sources":["../../../src/bridge/wechat/cdn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,iBAAyB;IAC3D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,YAAY,mCAAmC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,iBAAyB,EACzB,YAAoB;IAEpB,MAAM,GAAG,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5D,uBAAuB;IACvB,6DAA6D;IAC7D,2DAA2D;IAC3D,IAAI,MAAc,CAAC;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEhD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,yBAAyB;QACzB,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9E,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/lib/bridge/wechat/crypto.js

@@ -0,0 +1,17 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
+export function generateAesKey() {
+    return randomBytes(16).toString("base64");
+}
+export function aesEcbPaddedSize(size) {
+    const block = 16;
+    return Math.floor((size + block - 1) / block) * block;
+}
+export function encryptAesEcb(key, plaintext) {
+    const cipher = createCipheriv("aes-128-ecb", key, null);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+}
+export function decryptAesEcb(key, ciphertext) {
+    const decipher = createDecipheriv("aes-128-ecb", key, null);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+}
+//# sourceMappingURL=crypto.js.map

package/lib/bridge/wechat/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../src/bridge/wechat/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEvE,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,SAAiB;IAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,UAAkB;IAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC"}