@onlyne/im-qq 0.0.0-stage → 3.2.0

package/dist/port.d.ts

@@ -0,0 +1,86 @@
+/**
+ * The HTTP boundary: every platform call the connector makes goes through this port, so the
+ * translation logic runs against a fake in tests and the real QQ OpenAPI in production. The only
+ * injected seams are `fetch` and `now`.
+ */
+export declare const QQ_API_BASE = "https://api.bot.qq.com";
+export interface QqHttpRequest {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}
+export interface QqHttpResponse {
+    readonly status: number;
+    text(): Promise<string>;
+}
+export type QqFetch = (url: string, init: QqHttpRequest) => Promise<QqHttpResponse>;
+export interface QqPortErrorInit {
+    /** The HTTP status; `0` when the request never reached the platform. */
+    status: number;
+    /** The platform's own error code, when its body carried one. */
+    code?: string | number;
+    /** The platform's own error text, verbatim. */
+    detail?: string;
+}
+/** A platform refusal or a transport failure, with what the platform said kept apart from the summary. */
+export declare class QqPortError extends Error {
+    readonly status: number;
+    readonly code?: string | number;
+    readonly detail?: string;
+    constructor(message: string, init: QqPortErrorInit);
+}
+/** A QQ conversation coordinate as the platform addresses it. */
+export interface QqSendTarget {
+    kind: 'c2c' | 'group';
+    openid: string;
+}
+/** The message body QQ v2 accepts; the connector fills only what it sends. */
+export interface QqMessageBody {
+    msg_type: number;
+    content?: string;
+    markdown?: {
+        content: string;
+    };
+    /** The passive reply id from the inbound event. */
+    msg_id?: string;
+    msg_seq?: number;
+    message_reference?: {
+        message_id: string;
+    };
+    input_notify?: {
+        input_type: 1;
+        input_second: number;
+    };
+}
+export interface QqSendResult {
+    id?: string;
+    timestamp?: string;
+    ext_info?: {
+        ref_idx?: string;
+    };
+}
+export interface QqPortStatus {
+    state: string;
+    connected: boolean;
+    rate_limits: number;
+}
+export interface QqPort {
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /** The access token, fetched on demand and cached until shortly before it expires. */
+    token(): Promise<string>;
+    request<T>(method: string, path: string, body?: unknown): Promise<T>;
+    send(target: QqSendTarget, body: QqMessageBody): Promise<QqSendResult>;
+    status(): QqPortStatus;
+}
+export interface QqPortOptions {
+    appId: string;
+    appSecret: string;
+    baseUrl?: string;
+    fetch?: QqFetch;
+    now?: () => number;
+}
+/** The message endpoint for one conversation; `messageId` narrows it to that message (retract). */
+export declare function messagePath(target: QqSendTarget, messageId?: string): string;
+export declare function createQqPort(options: QqPortOptions): QqPort;
+//# sourceMappingURL=port.d.ts.map

package/dist/port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.d.ts","sourceRoot":"","sources":["../src/port.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,WAAW,2BAA2B,CAAC;AAOpD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0GAA0G;AAC1G,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe;CAOnD;AAED,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,CAAC,EAAE;QAAE,UAAU,EAAE,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,sFAAsF;IACtF,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACvE,MAAM,IAAI,YAAY,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,mGAAmG;AACnG,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAI5E;AAyBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAiH3D"}

package/dist/port.js

@@ -0,0 +1,161 @@
+/**
+ * The HTTP boundary: every platform call the connector makes goes through this port, so the
+ * translation logic runs against a fake in tests and the real QQ OpenAPI in production. The only
+ * injected seams are `fetch` and `now`.
+ */
+export const QQ_API_BASE = 'https://api.bot.qq.com';
+/** The token is refreshed this long before the platform's own expiry. */
+const TOKEN_REFRESH_WINDOW_MS = 60_000;
+/** What the platform answers when it omits `expires_in`; QQ documents 7200 seconds. */
+const DEFAULT_TOKEN_LIFETIME_SECONDS = 7200;
+/** A platform refusal or a transport failure, with what the platform said kept apart from the summary. */
+export class QqPortError extends Error {
+    status;
+    code;
+    detail;
+    constructor(message, init) {
+        super(message);
+        this.name = 'QqPortError';
+        this.status = init.status;
+        if (init.code !== undefined)
+            this.code = init.code;
+        if (init.detail !== undefined)
+            this.detail = init.detail;
+    }
+}
+/** The message endpoint for one conversation; `messageId` narrows it to that message (retract). */
+export function messagePath(target, messageId) {
+    const scope = target.kind === 'group' ? 'groups' : 'users';
+    const base = `/v2/${scope}/${encodeURIComponent(target.openid)}/messages`;
+    return messageId === undefined ? base : `${base}/${encodeURIComponent(messageId)}`;
+}
+function recordOf(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function codeOf(body) {
+    const code = recordOf(body)?.code;
+    if (typeof code === 'number')
+        return code;
+    if (typeof code === 'string' && /^\d+$/.test(code))
+        return Number(code);
+    return undefined;
+}
+function messageOf(body) {
+    const record = recordOf(body);
+    const message = record?.message ?? record?.errmsg;
+    return typeof message === 'string' && message.length > 0 ? message : undefined;
+}
+function detailOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function createQqPort(options) {
+    const baseUrl = (options.baseUrl ?? QQ_API_BASE).replace(/\/+$/, '');
+    const fetchImpl = options.fetch ?? ((url, init) => globalThis.fetch(url, init));
+    const now = options.now ?? Date.now;
+    let cached;
+    let inflight;
+    let state = 'idle';
+    let rateLimits = 0;
+    /**
+     * A 2xx body can still be a refusal: the QQ error envelope is `{code, message}` and some
+     * endpoints answer it with HTTP 200, so a non-zero `code` is read as a rejection.
+     */
+    function rejection(method, path, status, body, raw) {
+        const code = codeOf(body);
+        const detail = messageOf(body) ?? (raw.trim().length > 0 ? raw.trim() : 'no body');
+        const label = code === undefined ? detail : `${code} ${detail}`;
+        const summary = status >= 500
+            ? `The QQ platform failed ${method} ${path} with HTTP ${status}: ${label}`
+            : `The platform rejected ${method} ${path}: ${label}`;
+        return new QqPortError(summary, { status, ...(code === undefined ? {} : { code }), detail });
+    }
+    async function call(method, path, body, authorized) {
+        const headers = { 'content-type': 'application/json' };
+        if (authorized)
+            headers.authorization = `QQBot ${await token()}`;
+        const init = { method, headers, ...(body === undefined ? {} : { body: JSON.stringify(body) }) };
+        let response;
+        try {
+            response = await fetchImpl(`${baseUrl}${path}`, init);
+        }
+        catch (error) {
+            throw new QqPortError(`The QQ request ${method} ${path} did not complete: ${detailOf(error)}`, { status: 0 });
+        }
+        const raw = await response.text();
+        if (response.status === 429)
+            rateLimits += 1;
+        let parsed;
+        try {
+            parsed = raw.length === 0 ? undefined : JSON.parse(raw);
+        }
+        catch {
+            parsed = undefined;
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw rejection(method, path, response.status, parsed, raw);
+        }
+        const code = codeOf(parsed);
+        if (code !== undefined && code !== 0)
+            throw rejection(method, path, response.status, parsed, raw);
+        return parsed ?? {};
+    }
+    async function fetchToken() {
+        try {
+            const body = await call('POST', '/app/getAppAccessToken', { appId: options.appId, clientSecret: options.appSecret }, false);
+            const record = recordOf(body);
+            const token = record?.access_token;
+            if (typeof token !== 'string' || token.length === 0) {
+                throw new QqPortError('The QQ token endpoint answered without an access_token.', { status: 200 });
+            }
+            const lifetime = Number(record?.expires_in);
+            const seconds = Number.isFinite(lifetime) && lifetime > 0 ? lifetime : DEFAULT_TOKEN_LIFETIME_SECONDS;
+            cached = { token, expiresAt: now() + seconds * 1000 };
+            state = 'connected';
+            return token;
+        }
+        catch (error) {
+            state = 'error';
+            throw error;
+        }
+    }
+    async function token() {
+        if (cached !== undefined && now() < cached.expiresAt - TOKEN_REFRESH_WINDOW_MS)
+            return cached.token;
+        if (inflight !== undefined)
+            return inflight;
+        const pending = fetchToken();
+        inflight = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (inflight === pending)
+                inflight = undefined;
+        }
+    }
+    return {
+        async start() {
+            // No long connection to open: QQ delivers events to the webhook, and the token is fetched
+            // on the first authorized call.
+            state = cached === undefined ? 'idle' : 'connected';
+        },
+        async stop() {
+            cached = undefined;
+            inflight = undefined;
+            state = 'stopped';
+        },
+        token,
+        async request(method, path, body) {
+            return await call(method, path, body, true);
+        },
+        async send(target, body) {
+            return await call('POST', messagePath(target), body, true);
+        },
+        status() {
+            return { state, connected: state === 'connected', rate_limits: rateLimits };
+        },
+    };
+}
+//# sourceMappingURL=port.js.map

package/dist/port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../src/port.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,uFAAuF;AACvF,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAwB5C,0GAA0G;AAC1G,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,MAAM,CAAS;IACf,IAAI,CAAmB;IACvB,MAAM,CAAU;IAEzB,YAAY,OAAe,EAAE,IAAqB;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3D,CAAC;CACF;AAkDD,mGAAmG;AACnG,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,SAAkB;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;IAC1E,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,CAAC;IAClD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAY,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,IAAI,MAAwD,CAAC;IAC7D,IAAI,QAAqC,CAAC;IAC1C,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB;;;OAGG;IACH,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc,EAAE,IAAa,EAAE,GAAW;QACzF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,GAAG;YAC3B,CAAC,CAAC,0BAA0B,MAAM,IAAI,IAAI,cAAc,MAAM,KAAK,KAAK,EAAE;YAC1E,CAAC,CAAC,yBAAyB,MAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACxD,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,IAAa,EAAE,UAAmB;QAClF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,UAAU;YAAE,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,KAAK,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/G,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CAAC,kBAAkB,MAAM,IAAI,IAAI,sBAAsB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,UAAU,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAClG,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,UAAU;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,MAAM,EACN,wBAAwB,EACxB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,EACzD,KAAK,CACN,CAAC;YACF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,CAAC;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,WAAW,CAAC,yDAAyD,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACtG,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;YACtD,KAAK,GAAG,WAAW,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,GAAG,OAAO,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACpG,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,QAAQ,GAAG,OAAO,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,OAAO;gBAAE,QAAQ,GAAG,SAAS,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,0FAA0F;YAC1F,gCAAgC;YAChC,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,SAAS,CAAC;YACnB,QAAQ,GAAG,SAAS,CAAC;YACrB,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QAED,KAAK;QAEL,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;YAC3D,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAM,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAoB,EAAE,IAAmB;YAClD,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAiB,CAAC;QAC7E,CAAC;QAED,MAAM;YACJ,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,KAAK,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;QAC9E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/send.d.ts

@@ -0,0 +1,24 @@
+/**
+ * One outbound message, translated into a QQ v2 message body. QQ carries no attachments and no
+ * cards through this connector, so a request that has them is settled locally instead of being
+ * half-sent.
+ */
+import type { SendOutcome, SendRequest } from '@onlyne/im-core';
+import { type QqMessageBody, type QqSendResult, type QqSendTarget } from './port.js';
+/** The port slice `send` needs; `QqPort` satisfies it as it stands. */
+export interface QqMessagePort {
+    send(target: QqSendTarget, body: QqMessageBody): Promise<QqSendResult>;
+}
+/**
+ * `msg_seq` is per passive message id: QQ rejects a second message with the same `msg_id` and
+ * `msg_seq`, so the connector counts how many answers it already sent into one event.
+ */
+export interface SendState {
+    readonly sequences: Map<string, number>;
+}
+export declare function createSendState(): SendState;
+export declare function parseConversation(conversation: string): QqSendTarget | undefined;
+/** The platform's answer as the bridge needs it: a refusal is settled, an unclear transport is not. */
+export declare function outcomeOf(error: unknown, subject: 'send' | 'operation'): SendOutcome;
+export declare function sendMessage(port: QqMessagePort, request: SendRequest, state: SendState): Promise<SendOutcome>;
+//# sourceMappingURL=send.d.ts.map

package/dist/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../src/send.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAe,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAOlG,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACxE;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,wBAAgB,eAAe,IAAI,SAAS,CAE3C;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAShF;AAED,uGAAuG;AACvG,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,CAcpF;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CA0BnH"}

package/dist/send.js

@@ -0,0 +1,106 @@
+/**
+ * One outbound message, translated into a QQ v2 message body. QQ carries no attachments and no
+ * cards through this connector, so a request that has them is settled locally instead of being
+ * half-sent.
+ */
+import { QqPortError } from './port.js';
+const UNSUPPORTED = 'unsupported by @onlyne/im-qq: the connector sends text and markdown only, so attachments/cards were not sent.';
+/** How many passive ids keep their `msg_seq`; beyond this the oldest is dropped. */
+const SEQUENCE_LIMIT = 1024;
+export function createSendState() {
+    return { sequences: new Map() };
+}
+export function parseConversation(conversation) {
+    const separator = conversation.indexOf(':');
+    if (separator <= 0)
+        return undefined;
+    const scope = conversation.slice(0, separator);
+    const openid = conversation.slice(separator + 1);
+    if (openid.length === 0)
+        return undefined;
+    if (scope === 'c2c')
+        return { kind: 'c2c', openid };
+    if (scope === 'group')
+        return { kind: 'group', openid };
+    return undefined;
+}
+/** The platform's answer as the bridge needs it: a refusal is settled, an unclear transport is not. */
+export function outcomeOf(error, subject) {
+    if (error instanceof QqPortError) {
+        // QQ answers some refusals with HTTP 200 and a non-zero `code`; either form is settled.
+        const refused = (error.status >= 400 && error.status < 500)
+            || (error.status >= 200 && error.status < 300 && error.code !== undefined);
+        if (refused) {
+            const label = [error.code === undefined ? '' : String(error.code), error.detail ?? '']
+                .filter(part => part.length > 0)
+                .join(' ');
+            return { state: 'committed', error: `The platform rejected the ${subject}: ${label.length > 0 ? label : error.message}` };
+        }
+        return { state: 'unknown', error: error.message };
+    }
+    return { state: 'unknown', error: error instanceof Error ? error.message : String(error) };
+}
+export async function sendMessage(port, request, state) {
+    if (request.attachments.length > 0 || request.card !== undefined) {
+        return { state: 'committed', error: UNSUPPORTED };
+    }
+    const target = parseConversation(request.conversation);
+    if (target === undefined) {
+        return {
+            state: 'unknown',
+            error: `The QQ connector addresses c2c:<openid> or group:<openid>, not ${request.conversation}.`,
+        };
+    }
+    if (request.text.trim().length === 0) {
+        return { state: 'unknown', error: 'nothing to send: the QQ connector sends text or markdown only.' };
+    }
+    try {
+        const result = await port.send(target, messageBody(request, state));
+        const id = typeof result.id === 'string' && result.id.length > 0 ? result.id : undefined;
+        const ref = result.ext_info?.ref_idx;
+        return {
+            state: 'committed',
+            ...(id === undefined ? {} : { message_id: id }),
+            ...(typeof ref === 'string' && ref.length > 0 ? { ref_handle: ref } : {}),
+        };
+    }
+    catch (error) {
+        return outcomeOf(error, 'send');
+    }
+}
+function messageBody(request, state) {
+    // msg_type 2 carries `markdown` and no `content`: QQ renders whichever field matches the type.
+    const body = request.format === 'markdown'
+        ? { msg_type: 2, markdown: { content: request.text } }
+        : { msg_type: 0, content: request.text };
+    return { ...body, ...passiveReply(request.reply_to, state) };
+}
+/**
+ * `reply_to` is `msg_id|REFIDX`: the passive reply id, and the quote reference when the inbound
+ * event carried one. A single part answers passively without quoting anything.
+ */
+function passiveReply(replyTo, state) {
+    if (replyTo === undefined || replyTo.length === 0)
+        return {};
+    const separator = replyTo.indexOf('|');
+    const messageId = separator < 0 ? replyTo : replyTo.slice(0, separator);
+    const quote = separator < 0 ? '' : replyTo.slice(separator + 1);
+    if (messageId.length === 0)
+        return {};
+    const sequence = (state.sequences.get(messageId) ?? 0) + 1;
+    state.sequences.set(messageId, sequence);
+    if (state.sequences.size > SEQUENCE_LIMIT) {
+        for (const key of state.sequences.keys()) {
+            if (key === messageId)
+                continue;
+            state.sequences.delete(key);
+            break;
+        }
+    }
+    return {
+        msg_id: messageId,
+        msg_seq: sequence,
+        ...(quote.length === 0 ? {} : { message_reference: { message_id: quote } }),
+    };
+}
+//# sourceMappingURL=send.js.map

package/dist/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../src/send.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,WAAW,EAA4D,MAAM,WAAW,CAAC;AAElG,MAAM,WAAW,GAAG,+GAA+G,CAAC;AAEpI,oFAAoF;AACpF,MAAM,cAAc,GAAG,IAAI,CAAC;AAe5B,MAAM,UAAU,eAAe;IAC7B,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,OAA6B;IACrE,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,wFAAwF;QACxF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;eACtD,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC7E,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;iBACnF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;iBAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,6BAA6B,OAAO,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5H,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAmB,EAAE,OAAoB,EAAE,KAAgB;IAC3F,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,kEAAkE,OAAO,CAAC,YAAY,GAAG;SACjG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB,EAAE,KAAgB;IACzD,+FAA+F;IAC/F,MAAM,IAAI,GAAkB,OAAO,CAAC,MAAM,KAAK,UAAU;QACvD,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;QACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAA2B,EAAE,KAAgB;IACjE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3D,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,QAAQ;QACjB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/webhook.d.ts

@@ -0,0 +1,24 @@
+/**
+ * QQ's callback authentication: Ed25519 over an app-secret-derived seed. The platform derives the
+ * same key pair from the AppSecret, which is why the secret alone both signs the `op 13` challenge
+ * and verifies every `op 0` dispatch.
+ */
+import { type KeyObject } from 'node:crypto';
+export interface QqEd25519Keys {
+    privateKey: KeyObject;
+    publicKey: KeyObject;
+    /** The raw 32-byte public key, hex: what QQ's console shows for the app. */
+    publicHex: string;
+}
+export declare function deriveEd25519(secret: string): QqEd25519Keys;
+export declare function signHex(secret: string, message: string | Buffer): string;
+export declare function verifyHex(secret: string, message: string | Buffer, signatureHex: string): boolean;
+/**
+ * The `op 13` callback validation: QQ asks the bot to prove it holds the AppSecret by signing
+ * `event_ts + plain_token`. The answer echoes the token with the signature.
+ */
+export declare function challenge(secret: string, bodyJson: string): {
+    plain_token: string;
+    signature: string;
+} | undefined;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAU9F,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAmB3D;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAKxE;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAUjG;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmBlH"}

package/dist/webhook.js

@@ -0,0 +1,88 @@
+/**
+ * QQ's callback authentication: Ed25519 over an app-secret-derived seed. The platform derives the
+ * same key pair from the AppSecret, which is why the secret alone both signs the `op 13` challenge
+ * and verifies every `op 0` dispatch.
+ */
+import { createPrivateKey, createPublicKey, sign, verify } from 'node:crypto';
+/** PKCS#8 header for an Ed25519 private key: the 32-byte seed follows it. */
+const PKCS8_ED25519_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+const SEED_LENGTH = 32;
+/** An Ed25519 SPKI ends with the 32-byte public key after this many header bytes. */
+const SPKI_HEADER_LENGTH = 12;
+const SIGNATURE_LENGTH = 64;
+const CACHE_LIMIT = 8;
+/** Key derivation costs a scalar multiplication, so one secret's pair is derived once. */
+const cache = new Map();
+export function deriveEd25519(secret) {
+    const cached = cache.get(secret);
+    if (cached !== undefined)
+        return cached;
+    if (secret.length === 0)
+        throw new Error('The QQ app secret is empty; no Ed25519 key can be derived.');
+    const seed = Buffer.from(secret.repeat(Math.ceil(SEED_LENGTH / secret.length)), 'utf8').subarray(0, SEED_LENGTH);
+    const privateKey = createPrivateKey({
+        key: Buffer.concat([PKCS8_ED25519_PREFIX, seed]),
+        format: 'der',
+        type: 'pkcs8',
+    });
+    const publicKey = createPublicKey(privateKey);
+    const publicHex = publicKey.export({ format: 'der', type: 'spki' }).subarray(SPKI_HEADER_LENGTH).toString('hex');
+    const keys = { privateKey, publicKey, publicHex };
+    if (cache.size >= CACHE_LIMIT) {
+        const oldest = cache.keys().next();
+        if (!oldest.done)
+            cache.delete(oldest.value);
+    }
+    cache.set(secret, keys);
+    return keys;
+}
+export function signHex(secret, message) {
+    // The platform signs the raw body bytes; QQ messages are UTF-8, so the string form must encode
+    // the same way. For the ASCII-only challenge the two encodings agree byte for byte.
+    const data = typeof message === 'string' ? Buffer.from(message, 'utf8') : message;
+    return sign(null, data, deriveEd25519(secret).privateKey).toString('hex');
+}
+export function verifyHex(secret, message, signatureHex) {
+    const signature = Buffer.from(signatureHex, 'hex');
+    // A malformed hex string decodes short rather than throwing; the length is the real check.
+    if (signature.length !== SIGNATURE_LENGTH)
+        return false;
+    const data = typeof message === 'string' ? Buffer.from(message, 'utf8') : message;
+    try {
+        return verify(null, data, deriveEd25519(secret).publicKey, signature);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The `op 13` callback validation: QQ asks the bot to prove it holds the AppSecret by signing
+ * `event_ts + plain_token`. The answer echoes the token with the signature.
+ */
+export function challenge(secret, bodyJson) {
+    let payload;
+    try {
+        payload = JSON.parse(bodyJson);
+    }
+    catch {
+        return undefined;
+    }
+    if (payload === null || typeof payload !== 'object' || Array.isArray(payload))
+        return undefined;
+    const envelope = payload;
+    if (envelope.op !== 13)
+        return undefined;
+    const d = envelope.d;
+    if (d === null || typeof d !== 'object' || Array.isArray(d))
+        return undefined;
+    const fields = d;
+    const plainToken = fields.plain_token;
+    const eventTs = fields.event_ts;
+    if (typeof plainToken !== 'string' || plainToken.length === 0)
+        return undefined;
+    const timestamp = typeof eventTs === 'string' ? eventTs : typeof eventTs === 'number' ? String(eventTs) : undefined;
+    if (timestamp === undefined || timestamp.length === 0)
+        return undefined;
+    return { plain_token: plainToken, signature: signHex(secret, `${timestamp}${plainToken}`) };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAE9F,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AACpF,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,WAAW,GAAG,CAAC,CAAC;AAStB,0FAA0F;AAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE/C,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACvG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjH,MAAM,IAAI,GAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,OAAwB;IAC9D,+FAA+F;IAC/F,oFAAoF;IACpF,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,OAAwB,EAAE,YAAoB;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACnD,2FAA2F;IAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAClF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,QAAgB;IACxD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChG,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,IAAI,QAAQ,CAAC,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,MAAM,MAAM,GAAG,CAA4B,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpH,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "@onlyne/im-qq",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "3.2.0",
+  "description": "QQ official Bot OpenAPI v2 connector for the Onlyne IM gateway: gateway WebSocket or webhook events, text and markdown messages, recall and typing",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dbydd/onlyne.git",
+    "directory": "packages/im-qq"
+  },
+  "homepage": "https://github.com/dbydd/onlyne#readme",
+  "bugs": "https://github.com/dbydd/onlyne/issues",
+  "keywords": ["onlyne", "qq", "bot", "im", "connector"],
+  "publishConfig": { "access": "public" },
+  "engines": { "bun": ">=1.4.3" },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "LICENSE"],
+  "scripts": {
+    "build": "tsc",
+    "check": "tsc && tsc -p tsconfig.tests.json",
+    "test": "bun tests/verify.ts && bun tests/send.ts && bun tests/webhook.ts && bun tests/gateway.ts",
+    "prepack": "bun run build"
+  },
+  "dependencies": {
+    "@onlyne/im-core": "^3.2.0",
+    "@onlyne/lib": "^3.2.0"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.3.0",
+    "typescript": "^5.9.0"
+  }
+}