@xmanrui/dsh-im 1.1.0 → 1.3.0

package/src/channels/shared/text-harness-bridge.mjs

@@ -23,6 +23,10 @@ import {
   imagePromptUserMessage,
   promptContentForMessage,
 } from './image-prompt.mjs';
+import {
+  hasInboundFiles,
+  inboundFileUserMessage,
+} from './inbound-file.mjs';
 import {
   harnessAnswerForQuestion,
   harnessQuestionText,
@@ -50,6 +54,7 @@ function canClaimInteractionReply(message, pending, senderId) {
   return pending.actor === senderId
     && (message.kind !== 'group' || message.addressed === true)
     && !hasInboundImages(message)
+    && !hasInboundFiles(message)
     && Boolean(cleanText(message.content));
 }
 
@@ -171,7 +176,7 @@ export class TextHarnessBridge {
     const key = `${kind}:${conversationId}`;
     const pending = this.#pendingInteractions.get(key);
     const text = cleanText(normalized.content);
-    const commandRunner = isControlCommand(text)
+    const commandRunner = hasInboundFiles(normalized) ? null : isControlCommand(text)
       ? runControlCommand
       : (isModelCommand(text)
           ? runModelCommand
@@ -194,7 +199,7 @@ export class TextHarnessBridge {
       key,
       actor: senderId,
       messageId,
-      text: hasInboundImages(normalized) ? '' : normalized.content,
+      text: hasInboundImages(normalized) || hasInboundFiles(normalized) ? '' : normalized.content,
       addressed: normalized.kind !== 'group' || normalized.addressed === true,
       hasPendingQuestion: Boolean(pending),
       questionCompletion: pending?.submitting || pending?.claimedReplyMessageId
@@ -300,6 +305,7 @@ export class TextHarnessBridge {
         {
           signal: this.#signal,
           hasImages: hasInboundImages(message),
+          hasFiles: hasInboundFiles(message),
           pendingInteraction: this.#pendingInteractions.has(key)
             || this.#approvals.hasPending(key),
           control: { owner: this, key },
@@ -423,16 +429,17 @@ export class TextHarnessBridge {
         return;
       }
       const hasImages = hasInboundImages(message);
-      if (!text && !hasImages) {
-        await this.#bot.sendText(target, '目前支持文字和图片消息。');
+      const hasFiles = hasInboundFiles(message);
+      if (!text && !hasImages && !hasFiles) {
+        await this.#bot.sendText(target, '目前支持文字、图片和文件消息。');
         return;
       }
       const command = text.toLowerCase();
-      if (!hasImages && command === '/help') {
+      if (!hasImages && !hasFiles && command === '/help') {
         await this.#bot.sendText(target, [
           `${this.#descriptor.label}机器人已连接 DeepSeek Harness。`,
           '',
-          '直接发送文字或图片即可继续当前会话。',
+          '直接发送文字、图片或文件即可继续当前会话。',
           '/new  开启一个全新会话',
           '/compact  压缩当前会话的较早上下文',
           '/workspace 工作区绝对路径  切换工作区',
@@ -453,12 +460,12 @@ export class TextHarnessBridge {
         ].join('\n'));
         return;
       }
-      if (!hasImages && command === '/status') {
+      if (!hasImages && !hasFiles && command === '/status') {
         await this.#harness.ensureRunning({ signal: this.#signal });
         await this.#bot.sendText(target, `${this.#descriptor.label}机器人与 DeepSeek Harness 连接正常。`);
         return;
       }
-      const workspaceCommand = !hasImages
+      const workspaceCommand = !hasImages && !hasFiles
         ? await runWorkspaceCommand(text, this.#harness, conversationKey)
         : null;
       if (workspaceCommand) {
@@ -467,12 +474,12 @@ export class TextHarnessBridge {
         }
         return;
       }
-      if (!hasImages && command === '/new') {
+      if (!hasImages && !hasFiles && command === '/new') {
         await this.#state.clearSession(conversationKey);
         await this.#bot.sendText(target, '已开启新会话。请发送你的问题。');
         return;
       }
-      const compactCommand = !hasImages
+      const compactCommand = !hasImages && !hasFiles
         ? await runCompactCommand(
             text,
             this.#harness,
@@ -527,6 +534,7 @@ export class TextHarnessBridge {
             requiresMention: message.kind === 'group',
           }),
           onInteractionResolved: (resolution) => this.#handleInteractionResolved(resolution),
+          files: message.files,
         },
       });
       const visibleAnswer = !cleanText(answer) && artifacts.length > 0
@@ -600,6 +608,18 @@ export class TextHarnessBridge {
         }
         return;
       }
+      const fileErrorMessage = inboundFileUserMessage(error);
+      if (fileErrorMessage) {
+        try {
+          await this.#bot.sendText(target, fileErrorMessage);
+        } catch (sendError) {
+          this.#logger.error?.(
+            `[dsh-im:${this.#descriptor.key}] failed to send the file error reply:`,
+            sendError,
+          );
+        }
+        return;
+      }
       this.#logger.error?.(`[dsh-im:${this.#descriptor.key}] failed to process a message:`, error);
       try {
         await this.#bot.sendText(target, '消息处理失败，请稍后重试。');
@@ -642,7 +662,7 @@ export class TextHarnessBridge {
 
     const target = message.replyTarget;
     const text = cleanText(message.content);
-    if (!text || hasInboundImages(message)) {
+    if (!text || hasInboundImages(message) || hasInboundFiles(message)) {
       try {
         await this.#bot.sendText(target, '请用文字回答当前问题。');
       } catch (error) {

package/src/channels/slack/slack-api.mjs

@@ -1,3 +1,4 @@
+import { fetchFileStream } from '../shared/file-download.mjs';
 import { fetchImageBuffer, ImagePromptError } from '../shared/image-prompt.mjs';
 
 const DEFAULT_BASE_URL = 'https://slack.com/api/';
@@ -232,6 +233,18 @@ export class SlackApi {
     });
   }
 
+  async fileInfo({ fileId, signal } = {}) {
+    const value = await this.#request('files.info', {
+      tokenKind: 'bot',
+      signal,
+      body: { file: slackId(fileId, 'file id') },
+    });
+    if (!value?.file || typeof value.file !== 'object' || Array.isArray(value.file)) {
+      throw new Error('Slack files.info returned no file object');
+    }
+    return value.file;
+  }
+
   postMessage({ channelId, text, threadTs, signal }) {
     return this.#request('chat.postMessage', {
       tokenKind: 'bot',
@@ -396,6 +409,14 @@ export class SlackApi {
   }
 
   async downloadFile({ url, signal, maxBytes }) {
+    return this.#downloadFile({ url, signal, maxBytes, stream: false });
+  }
+
+  async downloadFileStream({ url, signal }) {
+    return this.#downloadFile({ url, signal, stream: true });
+  }
+
+  async #downloadFile({ url, signal, maxBytes, stream }) {
     if (!this.#botToken) throw new TypeError('Slack bot token is required for file download');
     const target = secureSlackFileUrl(url);
     const fetchSlackFile = async (requestUrl, options) => {
@@ -414,13 +435,15 @@ export class SlackApi {
       }
       return response;
     };
-    return fetchImageBuffer(target, {
+    const options = {
       fetchImpl: fetchSlackFile,
       headers: { authorization: `Bearer ${this.#botToken}` },
       signal,
-      maxBytes,
       allowedHosts: SLACK_FILE_HOSTS,
-    });
+    };
+    return stream
+      ? fetchFileStream(target, options)
+      : fetchImageBuffer(target, { ...options, maxBytes });
   }
 
   async #request(method, {
@@ -432,7 +455,7 @@ export class SlackApi {
   }) {
     const token = tokenKind === 'app' ? this.#appToken : this.#botToken;
     if (!token) throw new TypeError(`Slack ${tokenKind} token is required for ${method}`);
-    const formEncoded = method === 'files.getUploadURLExternal';
+    const formEncoded = method === 'files.getUploadURLExternal' || method === 'files.info';
     let response;
     try {
       response = await this.#fetch(new URL(method, this.#baseUrl), {

package/src/channels/slack/slack-runtime.mjs

@@ -43,10 +43,14 @@ function stripBotMention(value, botUserId) {
     .trim();
 }
 
+function slackFileUrl(file) {
+  return typeof file?.url_private_download === 'string' && file.url_private_download
+    ? file.url_private_download : file?.url_private;
+}
+
 function slackImageSource(file, loadFile) {
   const mediaType = typeof file?.mimetype === 'string' ? file.mimetype.toLowerCase() : '';
-  const url = typeof file?.url_private_download === 'string' && file.url_private_download
-    ? file.url_private_download : file?.url_private;
+  const url = slackFileUrl(file);
   if (!IMAGE_MEDIA_TYPES.has(mediaType) || typeof url !== 'string' || !url) return null;
   return {
     name: typeof file.name === 'string' ? file.name : undefined,
@@ -56,9 +60,50 @@ function slackImageSource(file, loadFile) {
   };
 }
 
-export function normalizeSlackEvent(payload, botUserId, { loadFile = async () => {
-  throw new Error('Slack file downloader is unavailable');
-} } = {}) {
+function slackFileSource(file, loadFile, loadFileInfo) {
+  const mediaType = typeof file?.mimetype === 'string' && file.mimetype
+    ? file.mimetype.toLowerCase() : undefined;
+  const url = slackFileUrl(file);
+  if (IMAGE_MEDIA_TYPES.has(mediaType)) return null;
+  const requiresInfo = file?.file_access === 'check_file_info'
+    && typeof file?.id === 'string' && file.id;
+  if ((typeof url !== 'string' || !url) && !requiresInfo) return null;
+  return {
+    name: typeof file?.name === 'string' && file.name
+      ? file.name : typeof file?.title === 'string' && file.title
+        ? file.title : requiresInfo ? file.id : 'slack-file',
+    ...(mediaType ? { mediaType } : {}),
+    size: Number.isSafeInteger(file?.size) && file.size >= 0 ? file.size : undefined,
+    load: async ({ signal } = {}) => {
+      if (!requiresInfo) return loadFile(url, { signal });
+      const resolved = await loadFileInfo(file.id, { signal });
+      const resolvedUrl = slackFileUrl(resolved);
+      if (typeof resolvedUrl !== 'string' || !resolvedUrl) {
+        throw new Error('Slack files.info returned no downloadable URL');
+      }
+      const loaded = await loadFile(resolvedUrl, { signal });
+      const name = typeof resolved?.name === 'string' && resolved.name
+        ? resolved.name : typeof resolved?.title === 'string' && resolved.title
+          ? resolved.title : file.id;
+      const resolvedMediaType = typeof resolved?.mimetype === 'string' && resolved.mimetype
+        ? resolved.mimetype.toLowerCase() : undefined;
+      if (Buffer.isBuffer(loaded) || loaded instanceof Uint8Array) {
+        return { data: loaded, name, ...(resolvedMediaType ? { mediaType: resolvedMediaType } : {}) };
+      }
+      return {
+        ...loaded,
+        name,
+        ...(resolvedMediaType ? { mediaType: resolvedMediaType } : {}),
+      };
+    },
+  };
+}
+
+export function normalizeSlackEvent(payload, botUserId, {
+  loadFile = async () => { throw new Error('Slack file downloader is unavailable'); },
+  loadFileStream = loadFile,
+  loadFileInfo = async () => { throw new Error('Slack file metadata loader is unavailable'); },
+} = {}) {
   const event = payload?.event;
   if (!event || !payload?.event_id || !event.channel || !event.user || !event.ts) return null;
   const direct = event.type === 'message' && event.channel_type === 'im';
@@ -76,6 +121,9 @@ export function normalizeSlackEvent(payload, botUserId, { loadFile = async () =>
     images: Array.isArray(event.files)
       ? event.files.map((file) => slackImageSource(file, loadFile)).filter(Boolean)
       : [],
+    files: Array.isArray(event.files)
+      ? event.files.map((file) => slackFileSource(file, loadFileStream, loadFileInfo)).filter(Boolean)
+      : [],
     addressed: direct || mentioned,
     replyTarget: {
       channelId: String(event.channel),
@@ -436,6 +484,8 @@ export class SlackRuntime {
           && packet.payload.api_app_id !== this.#appId) return;
         const message = normalizeSlackEvent(packet.payload, this.#config.platformId.split(':')[1], {
           loadFile: (url, options) => this.#api.downloadFile({ url, ...options }),
+          loadFileStream: (url, options) => this.#api.downloadFileStream({ url, ...options }),
+          loadFileInfo: (fileId, options) => this.#api.fileInfo({ fileId, ...options }),
         });
         const bridge = this.#bridge;
         if (message && bridge) {

package/src/channels/telegram/telegram-api.mjs

@@ -1,3 +1,4 @@
+import { fetchFileStream } from '../shared/file-download.mjs';
 import { fetchImageBuffer } from '../shared/image-prompt.mjs';
 
 const DEFAULT_BASE_URL = 'https://api.telegram.org/';
@@ -131,6 +132,25 @@ export class TelegramApi {
   }
 
   async downloadFile({ fileId, signal, maxBytes } = {}) {
+    const url = await this.#downloadUrl(fileId, signal);
+    return fetchImageBuffer(url, {
+      fetchImpl: this.#fetch,
+      signal,
+      maxBytes,
+      allowedHosts: TELEGRAM_FILE_HOSTS,
+    });
+  }
+
+  async downloadFileStream({ fileId, signal } = {}) {
+    const url = await this.#downloadUrl(fileId, signal);
+    return fetchFileStream(url, {
+      fetchImpl: this.#fetch,
+      signal,
+      allowedHosts: TELEGRAM_FILE_HOSTS,
+    });
+  }
+
+  async #downloadUrl(fileId, signal) {
     const file = await this.getFile({ fileId, signal });
     const filePath = cleanString(file?.file_path);
     if (!filePath || filePath.startsWith('/') || filePath.includes('\\')
@@ -148,12 +168,7 @@ export class TelegramApi {
     }
     const url = new URL(this.#baseUrl);
     url.pathname = `/file/bot${this.#token}/${filePath}`;
-    return fetchImageBuffer(url, {
-      fetchImpl: this.#fetch,
-      signal,
-      maxBytes,
-      allowedHosts: TELEGRAM_FILE_HOSTS,
-    });
+    return url;
   }
 
   async sendMessage({ chatId, text, replyToMessageId, messageThreadId, signal }) {

package/src/channels/telegram/telegram-runtime.mjs

@@ -100,9 +100,27 @@ function telegramImageSource(message, loadFile) {
   };
 }
 
-export function normalizeTelegramUpdate(update, { botId, username, loadFile = async () => {
-  throw new Error('Telegram file downloader is unavailable');
-} }) {
+function telegramFileSource(message, loadFile) {
+  const file = message?.document;
+  if (!file || imageTypeForDocument(file)
+    || typeof file.file_id !== 'string' || !file.file_id) return null;
+  const mediaType = typeof file.mime_type === 'string' && file.mime_type
+    ? file.mime_type.toLowerCase() : undefined;
+  return {
+    name: typeof file.file_name === 'string' && file.file_name
+      ? file.file_name : String(file.file_unique_id ?? file.file_id),
+    ...(mediaType ? { mediaType } : {}),
+    size: fileSize(file.file_size),
+    load: ({ signal } = {}) => loadFile(file.file_id, { signal }),
+  };
+}
+
+export function normalizeTelegramUpdate(update, {
+  botId,
+  username,
+  loadFile = async () => { throw new Error('Telegram file downloader is unavailable'); },
+  loadFileStream = loadFile,
+}) {
   const message = update?.message;
   const chatId = message?.chat?.id;
   const senderId = message?.from?.id;
@@ -117,6 +135,7 @@ export function normalizeTelegramUpdate(update, { botId, username, loadFile = as
   const messageThreadId = Number.isSafeInteger(message.message_thread_id)
     ? message.message_thread_id : undefined;
   const image = telegramImageSource(message, loadFile);
+  const file = telegramFileSource(message, loadFileStream);
   return {
     messageId: String(update.update_id),
     senderId: String(senderId),
@@ -126,6 +145,7 @@ export function normalizeTelegramUpdate(update, { botId, username, loadFile = as
       ? String(chatId) : `${chatId}:${messageThreadId}`,
     content: withoutBotMention(message.text ?? message.caption ?? '', username),
     images: image ? [image] : [],
+    files: file ? [file] : [],
     addressed,
     replyTarget: {
       chatId,
@@ -381,6 +401,7 @@ export class TelegramRuntime {
           botId: this.#config.platformId,
           username: this.#config.username,
           loadFile: (fileId, options) => this.#api.downloadFile({ fileId, ...options }),
+          loadFileStream: (fileId, options) => this.#api.downloadFileStream({ fileId, ...options }),
         });
         if (message && telegramInboundAllowed(message, {
           accessMode: this.#accessMode,

package/src/channels/wecom/wecom-bridge.mjs

@@ -26,6 +26,10 @@ import {
   imagePromptUserMessage,
   promptContentForMessage,
 } from '../shared/image-prompt.mjs';
+import {
+  hasInboundFiles,
+  inboundFileUserMessage,
+} from '../shared/inbound-file.mjs';
 import { rememberConnectionTestTarget } from '../shared/connection-test.mjs';
 import {
   materializeOutboundArtifact,
@@ -43,7 +47,7 @@ const DEFAULT_FILE_UPLOAD_TIMEOUT_MS = 120_000;
 const HELP_TEXT = [
   '企业微信机器人已连接 DeepSeek Harness。',
   '',
-  '直接发送文字或图片即可继续当前会话。',
+  '直接发送文字、图片或文件即可继续当前会话。',
   '/new  开启一个全新会话',
   '/compact  压缩当前会话的较早上下文',
   '/workspace 工作区绝对路径  切换工作区',
@@ -110,6 +114,13 @@ function imageContents(frame) {
     .map((item) => item.image);
 }
 
+function fileContents(frame) {
+  const body = bodyOf(frame);
+  return body.msgtype === 'file' && body.file && typeof body.file === 'object'
+    ? [body.file]
+    : [];
+}
+
 function imageSource(client, image) {
   const url = nonEmptyString(image?.url);
   if (!url) return null;
@@ -139,10 +150,56 @@ function imageSource(client, image) {
   };
 }
 
+function fileSource(client, file) {
+  const url = nonEmptyString(file?.url);
+  if (!url) return null;
+  const aeskey = nonEmptyString(file?.aeskey) ?? undefined;
+  return {
+    name: nonEmptyString(file?.filename ?? file?.file_name ?? file?.name) ?? 'file',
+    async load({ signal } = {}) {
+      signal?.throwIfAborted();
+      if (typeof client?.downloadFile !== 'function') {
+        throw new Error('Enterprise WeChat file download is unavailable');
+      }
+      const result = await client.downloadFile(url, aeskey);
+      signal?.throwIfAborted();
+      const raw = result?.buffer ?? result?.data;
+      if (!Buffer.isBuffer(raw) && !(raw instanceof Uint8Array)) {
+        throw new Error('Enterprise WeChat file download returned no data');
+      }
+      return {
+        data: Buffer.from(raw),
+        ...(nonEmptyString(result?.filename) ? { name: result.filename.trim() } : {}),
+      };
+    },
+  };
+}
+
 export function wecomInboundMessage(frame, client) {
   return {
     content: messageText(frame),
     images: imageContents(frame).map((image) => imageSource(client, image)).filter(Boolean),
+    files: fileContents(frame).map((file) => fileSource(client, file)).filter(Boolean),
+  };
+}
+
+function prefetchInboundFiles(message, signal) {
+  if (!Array.isArray(message?.files) || message.files.length === 0) return message;
+  return {
+    ...message,
+    files: message.files.map((source) => {
+      const download = source.load({ signal });
+      download.catch(() => undefined);
+      return {
+        ...source,
+        async load({ signal: loadSignal } = {}) {
+          loadSignal?.throwIfAborted();
+          const result = await download;
+          loadSignal?.throwIfAborted();
+          return result;
+        },
+      };
+    }),
   };
 }
 
@@ -400,7 +457,7 @@ export class WecomHarnessBridge {
     const pending = this.#pendingInteractions.get(key);
     const commandMessage = wecomInboundMessage(frame, this.#client);
     const commandText = nonEmptyString(commandMessage.content) ?? '';
-    const commandRunner = isControlCommand(commandText)
+    const commandRunner = hasInboundFiles(commandMessage) ? null : isControlCommand(commandText)
       ? runControlCommand
       : (isModelCommand(commandText)
           ? runModelCommand
@@ -510,6 +567,7 @@ export class WecomHarnessBridge {
         preparedMessage = imageQueueFullMessage(inboundMessage);
       }
     }
+    preparedMessage = prefetchInboundFiles(preparedMessage, this.#signal);
     const previous = this.#queues.get(key) ?? Promise.resolve();
     const current = previous
       .catch(() => undefined)
@@ -543,6 +601,7 @@ export class WecomHarnessBridge {
     const result = await runner(message.content, this.#harness, this.#state, key, {
       signal: this.#signal,
       hasImages: hasInboundImages(message),
+      hasFiles: hasInboundFiles(message),
       pendingInteraction: this.#pendingInteractions.has(key)
         || this.#approvals.hasPending(key),
       control: { owner: this, key },
@@ -701,34 +760,35 @@ export class WecomHarnessBridge {
     const message = preparedMessage ?? wecomInboundMessage(frame, this.#client);
     const text = message.content;
     const hasImages = hasInboundImages(message);
+    const hasFiles = hasInboundFiles(message);
     const key = conversationKey(frame);
     let streamId = null;
     let streamStarted = false;
     try {
-      if (!text && !hasImages) {
-        await this.#sendImmediate(frame, chatId, '目前支持文字、图片和语音转写消息。');
+      if (!text && !hasImages && !hasFiles) {
+        await this.#sendImmediate(frame, chatId, '目前支持文字、图片、文件和语音转写消息。');
         await this.#state.markSeen(messageId);
         return;
       }
       const command = text.toLowerCase();
-      if (!hasImages && command === '/help') {
+      if (!hasImages && !hasFiles && command === '/help') {
         await this.#sendImmediate(frame, chatId, HELP_TEXT);
         await this.#state.markSeen(messageId);
         return;
       }
-      if (!hasImages && command === '/status') {
+      if (!hasImages && !hasFiles && command === '/status') {
         await this.#harness.ensureRunning({ signal: this.#signal });
         await this.#sendImmediate(frame, chatId, '企业微信机器人与 DeepSeek Harness 连接正常。');
         await this.#state.markSeen(messageId);
         return;
       }
-      if (!hasImages && command === '/new') {
+      if (!hasImages && !hasFiles && command === '/new') {
         await this.#state.clearSession(key);
         await this.#sendImmediate(frame, chatId, '已开启新会话。请发送你的问题。');
         await this.#state.markSeen(messageId);
         return;
       }
-      const workspaceCommand = hasImages
+      const workspaceCommand = hasImages || hasFiles
         ? null
         : await runWorkspaceCommand(text, this.#harness, key);
       if (workspaceCommand) {
@@ -738,7 +798,7 @@ export class WecomHarnessBridge {
         await this.#state.markSeen(messageId);
         return;
       }
-      const compactCommand = hasImages
+      const compactCommand = hasImages || hasFiles
         ? null
         : await runCompactCommand(
             text,
@@ -789,6 +849,7 @@ export class WecomHarnessBridge {
             requiresMention: body.chattype === 'group',
           }),
           onInteractionResolved: (resolution) => this.#handleInteractionResolved(resolution),
+          files: message.files,
         },
       });
 
@@ -862,7 +923,9 @@ export class WecomHarnessBridge {
       if (this.#signal?.aborted) return;
       this.#status.lastError = error?.message ?? String(error);
       this.#logger.error?.('[dsh-im:wecom] failed to process an inbound message');
-      const errorText = imagePromptUserMessage(error) ?? '消息处理失败，请稍后重试。';
+      const errorText = inboundFileUserMessage(error)
+        ?? imagePromptUserMessage(error)
+        ?? '消息处理失败，请稍后重试。';
       try {
         if (streamStarted && streamId) {
           await this.#client.replyStream(frame, streamId, errorText, true);

package/src/channels/weixin/weixin-api.mjs

@@ -196,6 +196,47 @@ export function extractWeixinImages(message, { fetchImpl = fetch } = {}) {
   return images;
 }
 
+async function fetchWeixinFileCiphertext(url, { fetchImpl, signal }) {
+  const response = await fetchImpl(new URL(url), {
+    method: 'GET',
+    signal,
+    redirect: 'manual',
+  });
+  if (!response?.ok) {
+    await response?.body?.cancel?.().catch?.(() => undefined);
+    throw new WeixinApiError(
+      'file-download-failed',
+      `微信文件下载失败（HTTP ${response?.status ?? 'unknown'}）。`,
+      { status: response?.status },
+    );
+  }
+  return Buffer.from(await response.arrayBuffer());
+}
+
+/** Convert native iLink file items into lazily downloaded, decrypted file references. */
+export function extractWeixinFiles(message, { fetchImpl = fetch } = {}) {
+  if (typeof fetchImpl !== 'function') throw new TypeError('fetchImpl must be a function');
+  const files = [];
+  for (const item of message?.item_list ?? []) {
+    const fileItem = item?.file_item;
+    if (!fileItem || typeof fileItem !== 'object') continue;
+    const declaredSize = Number(fileItem.len);
+    files.push({
+      name: nonEmptyString(fileItem.file_name) ?? (files.length === 0 ? 'file' : `file-${files.length + 1}`),
+      ...(Number.isFinite(declaredSize) && declaredSize >= 0 ? { size: declaredSize } : {}),
+      load: async ({ signal } = {}) => {
+        signal?.throwIfAborted();
+        const key = parseWeixinImageAesKey(fileItem);
+        const url = weixinImageDownloadUrl(fileItem.media);
+        const ciphertext = await fetchWeixinFileCiphertext(url, { fetchImpl, signal });
+        signal?.throwIfAborted();
+        return decryptWeixinImage(ciphertext, key);
+      },
+    });
+  }
+  return files;
+}
+
 function isWeixinHost(hostname) {
   const normalized = hostname.toLowerCase().replace(/\.$/, '');
   return normalized === 'weixin.qq.com' || normalized.endsWith('.weixin.qq.com');
@@ -421,6 +462,10 @@ export function createWeixinApi({ fetchImpl = fetch } = {}) {
       return extractWeixinImages(message, { fetchImpl });
     },
 
+    inboundFiles(message) {
+      return extractWeixinFiles(message, { fetchImpl });
+    },
+
     async beginLogin({ localTokens = [], botType = DEFAULT_BOT_TYPE, signal } = {}) {
       const tokens = [...new Set(localTokens.map(nonEmptyString).filter(Boolean))].slice(-10);
       const response = await requestJson(fetchImpl, {