@yach.zhiyinlou.com/yach 2.16.0 → 2.16.1-beta.0

package/dist/src/core/authorization-flow.js

@@ -0,0 +1,157 @@
+import { randomUUID } from "node:crypto";
+export function createWebAuthorizationWaiter(binding, scopes, trace = () => { }) {
+    return {
+        key: `webchat:${binding.sessionKey}:${binding.requestId}`,
+        isActive: () => binding.isActive(),
+        register: (id, detach) => binding.defer(id, "authorization", detach),
+        pending(id, silent) {
+            trace("authorization.waiting");
+            binding.publish({
+                type: "authorization", status: "waiting",
+                text: silent ? undefined : "请在知音楼完成授权，完成后将继续当前网页操作。",
+                data: { flowId: id, scopes: [...scopes], silent },
+            });
+        },
+        async authorized(id) {
+            trace("authorization.authorized");
+            binding.publish({ type: "authorization", status: "authorized", data: { flowId: id } });
+            binding.settle(id);
+            try {
+                await binding.resume(`用户授权已完成。请只继续 Web 请求 ${JSON.stringify(binding.requestId)} 中尚未完成的操作，不重复已完成步骤，其他请求另行处理。`, `authorization:${id}`);
+            }
+            catch {
+                trace("authorization.resume.failed");
+                binding.settle(id, "authorization_resume_failed");
+            }
+        },
+        async failed(id, failure) {
+            trace("authorization.failed");
+            binding.publish({ type: "authorization", status: "failed", text: failure.message, data: { flowId: id, error: failure.error } });
+            binding.settle(id, failure.error);
+        },
+    };
+}
+function abortable(promise, signal) {
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            signal.removeEventListener("abort", onAbort);
+            reject(signal.reason);
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        promise.then((result) => { signal.removeEventListener("abort", onAbort); resolve(result); }, (error) => { signal.removeEventListener("abort", onAbort); reject(error); });
+    });
+}
+/** 授权按用户/scopes 合并，操作等待者独立保存，取消不影响其他入口。 */
+export function createAuthorizationFlows() {
+    const flows = new Map();
+    function cleanup(key, flow) {
+        if (flows.get(key) === flow)
+            flows.delete(key);
+        if (flow.timer)
+            clearTimeout(flow.timer);
+        flow.controller.abort();
+    }
+    async function finish(key, flow, failure) {
+        if (flows.get(key) !== flow)
+            return;
+        const waiters = [...flow.waiters.values()];
+        flow.failure = failure;
+        flow.waiters.clear();
+        cleanup(key, flow);
+        const notices = new Set();
+        const claimNotice = (noticeKey) => {
+            if (notices.has(noticeKey))
+                return false;
+            notices.add(noticeKey);
+            return true;
+        };
+        await Promise.allSettled(waiters.filter((waiter) => waiter.isActive()).map((waiter) => failure ? waiter.failed(flow.id, failure, flow.silent, claimNotice) : waiter.authorized(flow.id, flow.silent, claimNotice)));
+    }
+    function add(key, flow, waiter) {
+        if (flow.waiters.has(waiter.key))
+            return true;
+        if (!waiter.isActive())
+            return false;
+        const detach = () => {
+            flow.waiters.delete(waiter.key);
+            if (!flow.waiters.size)
+                cleanup(key, flow);
+        };
+        if (!waiter.register(flow.id, detach))
+            return false;
+        flow.waiters.set(waiter.key, waiter);
+        if (flow.ready)
+            waiter.pending(flow.id, flow.silent);
+        return true;
+    }
+    return {
+        async start(key, waiter, setup) {
+            const existing = flows.get(key);
+            if (existing) {
+                if (!add(key, existing, waiter)) {
+                    return { flowId: existing.id, reused: true, failure: { error: "cancelled", message: "请求已失效。" } };
+                }
+                return { flowId: existing.id, reused: true };
+            }
+            const flow = {
+                id: randomUUID(), controller: new AbortController(), waiters: new Map(), silent: false, ready: false,
+            };
+            flows.set(key, flow);
+            if (!add(key, flow, waiter)) {
+                cleanup(key, flow);
+                return { flowId: flow.id, reused: false, failure: { error: "cancelled", message: "请求已失效。" } };
+            }
+            let deviceDeadlineArmed = false;
+            const scheduleDeadline = (expiresIn) => {
+                if (flow.timer)
+                    clearTimeout(flow.timer);
+                flow.timer = setTimeout(() => {
+                    void finish(key, flow, { error: "expired_token", message: "授权超时，请重新发起。" });
+                }, (expiresIn + 30) * 1000);
+                flow.timer.unref?.();
+            };
+            const armDeadline = (expiresIn) => {
+                if (flows.get(key) !== flow || flow.controller.signal.aborted)
+                    return;
+                deviceDeadlineArmed = true;
+                scheduleDeadline(expiresIn);
+            };
+            // 初始化网络请求也有上界；拿到设备码后立即改为设备码有效期，不能等发卡返回。
+            scheduleDeadline(60);
+            try {
+                const prepared = await abortable(setup(flow.controller.signal, flow.id, armDeadline), flow.controller.signal);
+                if (flows.get(key) !== flow) {
+                    return { flowId: flow.id, reused: false, failure: { error: "cancelled", message: "请求已失效。" } };
+                }
+                flow.silent = prepared.silent;
+                flow.ready = true;
+                for (const waiting of flow.waiters.values()) {
+                    if (waiting.isActive())
+                        waiting.pending(flow.id, flow.silent);
+                }
+                if (!deviceDeadlineArmed)
+                    armDeadline(prepared.expiresIn);
+                void prepared.poll(flow.controller.signal).then((result) => finish(key, flow, result.ok ? undefined : result), () => finish(key, flow, { error: "device_flow_failed", message: "授权轮询失败，请重新发起。" }));
+                return { flowId: flow.id, reused: false };
+            }
+            catch (err) {
+                const aborted = err instanceof Error && err.name === "AbortError";
+                const failure = flow.failure ?? {
+                    error: aborted ? "cancelled" : err instanceof Error && err.name === "YachAppScopeError" ? "app_scope_missing" : "device_flow_failed",
+                    message: aborted ? "授权请求已失效。" : err instanceof Error && err.name === "YachAppScopeError"
+                        ? "应用尚未开通所需权限。" : "无法发起授权流程，请稍后重试。",
+                    setup: true,
+                };
+                await finish(key, flow, failure);
+                return { flowId: flow.id, reused: false, failure };
+            }
+        },
+        clear() {
+            for (const [key, flow] of flows)
+                cleanup(key, flow);
+        },
+    };
+}
+//# sourceMappingURL=authorization-flow.js.map

package/dist/src/core/authorization-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-flow.js","sourceRoot":"","sources":["../../../src/core/authorization-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,4BAA4B,CAC1C,OAAuB,EACvB,MAAgB,EAChB,QAAiC,GAAG,EAAE,GAAE,CAAC;IAEzC,OAAO;QACL,GAAG,EAAE,WAAW,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE;QACzD,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC;QACpE,OAAO,CAAC,EAAE,EAAE,MAAM;YAChB,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC/B,OAAO,CAAC,OAAO,CAAC;gBACd,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS;gBACxC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB;gBACpD,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,MAAM,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,EAAE;YACjB,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACvF,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,8BAA8B,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;YACtI,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO;YACtB,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChI,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAiCD,SAAS,SAAS,CAAI,OAAmB,EAAE,MAAmB;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAC9E,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,wBAAwB;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,SAAS,OAAO,CAAC,GAAW,EAAE,IAAuB;QACnD,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,IAAuB,EAAE,OAA8B;QACxF,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,EAAE;YACxC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpF,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAC3H,CAAC,CAAC;IACL,CAAC;IAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAuB,EAAE,MAA2B;QAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CACT,GAAW,EACX,MAA2B,EAC3B,KAAoH;YAEpH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;oBAChC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;gBACnG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YACD,MAAM,IAAI,GAAsB;gBAC9B,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;aACrG,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,IAAI,mBAAmB,GAAG,KAAK,CAAC;YAChC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,EAAE;gBAC7C,IAAI,IAAI,CAAC,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC7E,CAAC,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,EAAE;gBACxC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtE,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC,CAAC;YACF,wCAAwC;YACxC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC9G,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC5C,IAAI,OAAO,CAAC,QAAQ,EAAE;wBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC,mBAAmB;oBAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC1D,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAC7D,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CACnF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;gBAClE,MAAM,OAAO,GAAyB,IAAI,CAAC,OAAO,IAAI;oBACpD,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB;oBACpI,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;wBACtF,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB;oBACrC,KAAK,EAAE,IAAI;iBACZ,CAAC;gBACF,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACrD,CAAC;QACH,CAAC;QACD,KAAK;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/core/execution-context.js

@@ -0,0 +1,73 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const storage = new AsyncLocalStorage();
+const webchatTurns = new Map();
+/** 核心可能隔离工具的异步上下文，仅保留本次已验签且仍在执行的会话绑定。 */
+export async function withWebchatTurn(binding, fn) {
+    if (webchatTurns.has(binding.sessionKey))
+        throw new Error("同一 Web 会话不能并发派发。");
+    webchatTurns.set(binding.sessionKey, binding);
+    try {
+        return await withExecutionContext({ source: "webchat", binding, sessionKey: binding.sessionKey }, fn);
+    }
+    finally {
+        if (webchatTurns.get(binding.sessionKey) === binding)
+            webchatTurns.delete(binding.sessionKey);
+    }
+}
+export function getExecutionContext() {
+    return storage.getStore();
+}
+export function withExecutionContext(context, fn) {
+    return storage.run(Object.freeze(context), fn);
+}
+export function resolveMessageSource(ctx) {
+    const channel = ctx?.messageChannel ?? ctx?.deliveryContext?.channel;
+    return channel === "yach" || channel === "webchat" ? channel : "unknown";
+}
+/** 本轮来源优先于外层 ALS，避免 Web 工具继承到旧的 IM 身份或投递目标。 */
+export function resolveToolExecutionContext(ctx, ticket) {
+    const current = getExecutionContext();
+    const hasSource = Boolean(ctx?.messageChannel || ctx?.deliveryContext?.channel);
+    const source = hasSource ? resolveMessageSource(ctx) : (current?.source ?? "unknown");
+    const trace = {
+        sessionKey: ctx?.sessionKey ?? current?.sessionKey,
+        sessionId: ctx?.sessionId ?? current?.sessionId,
+        toolCallId: current?.toolCallId,
+        toolName: current?.toolName,
+    };
+    if (source === "webchat") {
+        const binding = (current?.source === "webchat" ? current.binding : undefined) ??
+            (ctx?.sessionKey ? webchatTurns.get(ctx.sessionKey) : undefined);
+        const matches = binding?.isActive() &&
+            (!ctx || (ctx.sessionKey === binding.sessionKey && ctx.requesterSenderId === binding.senderId));
+        return { ...trace, source, binding: matches ? binding : undefined };
+    }
+    if (source === "yach" && ticket &&
+        (!ctx?.requesterSenderId || ctx.requesterSenderId === ticket.senderId)) {
+        return { ...trace, source, ticket };
+    }
+    return { ...trace, source: "unknown" };
+}
+export function executionIdentity(context = getExecutionContext()) {
+    if (context?.source === "yach")
+        return context.ticket;
+    if (context?.source === "webchat" && context.binding?.isActive())
+        return context.binding;
+    return undefined;
+}
+export function executionTrace(context = getExecutionContext()) {
+    const ticket = context?.source === "yach" ? context.ticket : undefined;
+    const binding = context?.source === "webchat" ? context.binding : undefined;
+    const identity = ticket ?? binding;
+    return {
+        source: context?.source ?? "unknown",
+        sessionKey: context?.sessionKey ?? ticket?.sessionKey ?? binding?.sessionKey,
+        sessionId: context?.sessionId,
+        accountId: identity?.accountId,
+        msgId: ticket?.msgId,
+        requestId: binding?.requestId,
+        toolCallId: context?.toolCallId,
+        toolName: context?.toolName,
+    };
+}
+//# sourceMappingURL=execution-context.js.map

package/dist/src/core/execution-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/core/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAwCrD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEvD,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,OAAuB,EAAE,EAAoB;IACpF,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9E,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;YAAS,CAAC;QACT,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO;YAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,OAA6B,EAAE,EAAW;IAChF,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAA0C;IAC7E,MAAM,OAAO,GAAG,GAAG,EAAE,cAAc,IAAI,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC;IACrE,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,2BAA2B,CACzC,GAA0C,EAC1C,MAA8B;IAE9B,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,IAAI,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;IACtF,MAAM,KAAK,GAAmB;QAC5B,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,OAAO,EAAE,UAAU;QAClD,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,OAAO,EAAE,SAAS;QAC/C,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC5B,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE;YACjC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClG,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM;QAC3B,CAAC,CAAC,GAAG,EAAE,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAO,GAAG,mBAAmB,EAAE;IAE/D,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IACtD,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IACzF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAO,GAAG,mBAAmB,EAAE;IAC5D,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAC;IACnC,OAAO;QACL,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;QACpC,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,MAAM,EAAE,UAAU,IAAI,OAAO,EAAE,UAAU;QAC5E,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;QAC9B,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC5B,CAAC;AACJ,CAAC"}

package/dist/src/tools/index.js

@@ -1,4 +1,6 @@
 import { runToolWithContext } from "../core/yach-ticket.js";
+import { yachLogger } from "../core/yach-logger.js";
+const log = yachLogger("tools/source");
 import { registerCalendarTools } from "./calendar/index.js";
 import { registerDocTools } from "./doc/index.js";
 import { registerSpaceTools } from "./space/space-node.js";
@@ -26,6 +28,25 @@ function wrapToolContext(api) {
         originalRegisterTool((ctx) => withToolContext(ctx, tool), opts);
     };
 }
+/**
+ * 来源诊断日志：区分知音楼入站（yach）与 Dashboard 直连（webchat）。
+ * channelType 取本轮核心下发的真实渠道，缺省回退 deliveryContext.channel；
+ * 两者都没有时标记 unknown，不从 sessionKey 猜测。
+ */
+function logToolSource(ctx, toolName) {
+    log.info("工具调用来源", {
+        stage: "tool.source",
+        tool: toolName,
+        channelType: ctx.messageChannel ?? ctx.deliveryContext?.channel ?? "unknown",
+        messageChannel: ctx.messageChannel,
+        deliveryChannel: ctx.deliveryContext?.channel,
+        deliveryAccountId: ctx.deliveryContext?.accountId,
+        agentAccountId: ctx.agentAccountId,
+        agentId: ctx.agentId,
+        sessionKey: ctx.sessionKey,
+        senderId: ctx.requesterSenderId,
+    });
+}
 function withToolContext(ctx, tool) {
     const execute = tool.execute;
     // 返回新实例（浅拷贝 + 替换 execute），绝不动原 tool 对象：
@@ -33,7 +54,10 @@ function withToolContext(ctx, tool) {
     // 多会话并发 run 会互相覆盖 execute 闭包导致 ctx 串台。
     return {
         ...tool,
-        execute: (async (...args) => runToolWithContext(ctx, () => execute(...args))),
+        execute: (async (...args) => {
+            logToolSource(ctx, tool.name);
+            return runToolWithContext(ctx, () => execute(...args));
+        }),
     };
 }
 export function registerYachTools(api) {

package/dist/src/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAI5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAsB;IAC7C,MAAM,oBAAoB,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,GAAG,CACjB,IAA8C,EAC9C,IAAgC,EAChC,EAAE;QACF,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,cAAc;YACd,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,oBAAoB,CAClB,CAAC,GAA8B,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAC9D,IAAI,CACL,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAyB,GAA8B,EAAE,IAAO;IACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,wCAAwC;IACxC,gDAAgD;IAChD,uCAAuC;IACvC,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,IAAU,EAAE,EAAE,CAChC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAiB;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAIpD,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;AAEvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAsB;IAC7C,MAAM,oBAAoB,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,GAAG,CACjB,IAA8C,EAC9C,IAAgC,EAChC,EAAE;QACF,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,cAAc;YACd,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,oBAAoB,CAClB,CAAC,GAA8B,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAC9D,IAAI,CACL,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAA8B,EAAE,QAAgB;IACrE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;QACjB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,IAAI,SAAS;QAC5E,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,OAAO;QAC7C,iBAAiB,EAAE,GAAG,CAAC,eAAe,EAAE,SAAS;QACjD,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,iBAAiB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAyB,GAA8B,EAAE,IAAO;IACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,wCAAwC;IACxC,gDAAgD;IAChD,uCAAuC;IACvC,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,IAAU,EAAE,EAAE;YAChC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC,CAAiB;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC"}

package/dist/src/webchat/auth.js

@@ -0,0 +1,142 @@
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { WEBCHAT_METHODS } from "./types.js";
+const MAX_LIFETIME_MS = 5 * 60_000;
+const ID_FIELDS = ["accountId", "tenantId", "senderId", "agentId", "conversationId", "requestId", "nonce"];
+export class WebchatRequestError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "WebchatRequestError";
+    }
+}
+function fail(code = "WEBCHAT_INVALID_REQUEST", message = "网页聊天请求格式无效") {
+    throw new WebchatRequestError(code, message);
+}
+/** 仅接受普通对象的自有数据属性，不执行访问器，也不接纳未签名字段。 */
+function record(value, allowed) {
+    try {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            fail();
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null)
+            fail();
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        const entries = Reflect.ownKeys(descriptors).map((key) => {
+            if (typeof key !== "string" || !allowed.includes(key))
+                fail();
+            const descriptor = descriptors[key];
+            if (!descriptor.enumerable || !("value" in descriptor))
+                fail();
+            return [key, descriptor.value];
+        });
+        return Object.fromEntries(entries);
+    }
+    catch {
+        return fail();
+    }
+}
+function checkSecret(secret) {
+    const bytes = typeof secret === "string" ? Buffer.byteLength(secret, "utf8")
+        : secret instanceof Uint8Array ? secret.byteLength : 0;
+    if (bytes < 32)
+        fail("WEBCHAT_INVALID_SECRET", "网页聊天签名密钥配置无效");
+}
+function checkMethod(method) {
+    if (!WEBCHAT_METHODS.includes(method))
+        fail();
+}
+function copyClaims(method, value) {
+    checkMethod(method);
+    const fields = [...ID_FIELDS, "expiresAt", ...(method === "yach.webchat.send" ? ["message"] : [])];
+    const payload = record(value, fields);
+    for (const field of ID_FIELDS) {
+        const id = payload[field];
+        if (typeof id !== "string" || !id.trim() || id.length > 256 || /[\u0000-\u001f\u007f-\u009f]/u.test(id))
+            fail();
+    }
+    if (!Number.isSafeInteger(payload.expiresAt))
+        fail();
+    if (method === "yach.webchat.send") {
+        const message = payload.message;
+        if (typeof message !== "string" || !message.trim() || message.length > 32_000)
+            fail();
+    }
+    return payload;
+}
+function checkExpiry(expiresAt, now, lifetime = MAX_LIFETIME_MS) {
+    if (!Number.isSafeInteger(now) || now < 0 || !Number.isSafeInteger(expiresAt))
+        fail();
+    if (expiresAt <= now)
+        fail("WEBCHAT_EXPIRED", "网页聊天请求已过期");
+    if (expiresAt - now > lifetime)
+        fail("WEBCHAT_INVALID_REQUEST", "网页聊天请求有效期无效");
+}
+// 摘要覆盖 JSON 编码后的全文，避免孤立代理字符被 UTF-8 替换后出现相同摘要。
+function hash(value) {
+    return createHash("sha256").update(JSON.stringify(value), "utf8").digest("hex");
+}
+function signature(method, payload, secret) {
+    const canonical = JSON.stringify({
+        method, accountId: payload.accountId, tenantId: payload.tenantId, senderId: payload.senderId,
+        agentId: payload.agentId, conversationId: payload.conversationId, requestId: payload.requestId,
+        nonce: payload.nonce, expiresAt: payload.expiresAt,
+        messageHash: payload.message === undefined ? null : hash(payload.message),
+    });
+    return createHmac("sha256", secret).update(canonical, "utf8").digest("hex");
+}
+/** 仅供受信宿主后端使用；身份必须来自服务端登录态，秘密不可交给浏览器。 */
+export function createWebchatSignature(method, payload, secret) {
+    checkSecret(secret);
+    return signature(method, copyClaims(method, payload), secret);
+}
+/** 只验证宿主签名，不替代 Yach 鉴权；返回已知字段副本，不修改原始请求。 */
+export function verifyWebchatRequest(method, raw, secret, now = Date.now()) {
+    checkSecret(secret);
+    const wrapper = record(raw, ["payload", "signature"]);
+    if (typeof wrapper.signature !== "string" || !/^[a-fA-F0-9]{64}$/u.test(wrapper.signature)) {
+        fail("WEBCHAT_INVALID_SIGNATURE", "网页聊天请求签名无效");
+    }
+    const request = { payload: copyClaims(method, wrapper.payload), signature: wrapper.signature };
+    checkExpiry(request.payload.expiresAt, now);
+    const expected = Buffer.from(signature(method, request.payload, secret), "hex");
+    if (!timingSafeEqual(expected, Buffer.from(request.signature, "hex"))) {
+        fail("WEBCHAT_INVALID_SIGNATURE", "网页聊天请求签名无效");
+    }
+    return request.payload;
+}
+/** 用固定字段数组编码边界，避免身份中的分隔符引起所有权碰撞。 */
+export function webchatOwnerKey(claims) {
+    return hash(["webchat.owner", claims.accountId, claims.tenantId, claims.senderId, claims.agentId, claims.conversationId]);
+}
+/** 同一消息重试可更换 nonce 和有效期，但身份、请求号与正文不可更换。 */
+export function webchatRequestFingerprint(claims) {
+    return hash(["webchat.request", webchatOwnerKey(claims), claims.requestId, claims.message === undefined ? null : hash(claims.message)]);
+}
+export function createWebchatNonceGuard(options = {}) {
+    const { now = Date.now, maxEntries = 10_000, ttlMs = MAX_LIFETIME_MS } = options;
+    if (typeof now !== "function" || !Number.isSafeInteger(maxEntries) || maxEntries < 1
+        || !Number.isSafeInteger(ttlMs) || ttlMs < 1)
+        fail("WEBCHAT_INVALID_CONFIG", "网页聊天防重放配置无效");
+    const entries = new Map();
+    return {
+        // 调用方必须先验签。ttlMs 限制可接纳的剩余有效期，绝不提前释放仍有效的 nonce。
+        consume(claims) {
+            const timestamp = now();
+            if (!Number.isSafeInteger(timestamp) || timestamp < 0)
+                fail();
+            for (const [key, expiresAt] of entries)
+                if (expiresAt <= timestamp)
+                    entries.delete(key);
+            checkExpiry(claims.expiresAt, timestamp, ttlMs);
+            const key = hash(["webchat.nonce", claims.accountId, claims.tenantId, claims.senderId, claims.nonce]);
+            if (entries.has(key))
+                fail("WEBCHAT_REPLAY", "网页聊天请求不可重复使用");
+            if (entries.size >= maxEntries)
+                fail("WEBCHAT_NONCE_CAPACITY", "网页聊天请求过多，请稍后重试");
+            entries.set(key, claims.expiresAt);
+        },
+        clear() { entries.clear(); },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/webchat/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/webchat/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,eAAe,EAAqE,MAAM,YAAY,CAAC;AAEhH,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AAGpH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QADW,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,IAAI,CAAC,IAAI,GAAG,yBAAyB,EAAE,OAAO,GAAG,YAAY;IACpE,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,uCAAuC;AACvC,SAAS,MAAM,CAAC,KAAc,EAAE,OAA0B;IACxD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAU,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1E,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,EAAE;QAAE,IAAI,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,KAAc;IACvD,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,IAAI,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAI,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM;YAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,OAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,GAAW,EAAE,QAAQ,GAAG,eAAe;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAAE,IAAI,EAAE,CAAC;IACtF,IAAI,SAAS,IAAI,GAAG;QAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,SAAS,GAAG,GAAG,GAAG,QAAQ;QAAE,IAAI,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;AACjF,CAAC;AAED,8CAA8C;AAC9C,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB,EAAE,OAAsB,EAAE,MAAqB;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC5F,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC9F,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;QAClD,WAAW,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,OAAsB,EAAE,MAAqB;IACzG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,oBAAoB,CAAC,MAAqB,EAAE,GAAY,EAAE,MAAqB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC/G,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAyB,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACrH,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,OAAO,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,OAAO,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1I,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAuE,EAAE;IAG/G,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,EAAE,KAAK,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;IACjF,IAAI,OAAO,GAAG,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;WAC/E,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO;QACL,+CAA+C;QAC/C,OAAO,CAAC,MAAM;YACZ,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,OAAO;gBAAE,IAAI,SAAS,IAAI,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxF,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAC7D,IAAI,OAAO,CAAC,IAAI,IAAI,UAAU;gBAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/src/webchat/gateway.js

@@ -0,0 +1,136 @@
+import { randomUUID } from "node:crypto";
+import { listYachAccountIds, resolveYachAccount } from "../accounts/index.js";
+import { withExecutionContext, withWebchatTurn } from "../core/execution-context.js";
+import { getYachConfig, getYachRuntime } from "../core/runtime.js";
+import { yachLogger } from "../core/yach-logger.js";
+import { WebchatRequestError } from "./auth.js";
+import { createWebchatService } from "./service.js";
+import { WEBCHAT_METHODS } from "./types.js";
+const log = yachLogger("webchat");
+const DEFAULT_SECRET_ENV = "YACH_WEBCHAT_SIGNING_SECRET";
+export async function dispatchWebchatTurn(params) {
+    const { runtime, cfg, claims, binding, message } = params;
+    const account = resolveYachAccount({ cfg, accountId: claims.accountId });
+    await withWebchatTurn(binding, async () => {
+        const ctx = runtime.channel.reply.finalizeInboundContext({
+            Body: message, BodyForAgent: message, RawBody: message, CommandBody: message,
+            CommandAuthorized: false, From: binding.senderId, To: binding.sessionKey,
+            SessionKey: binding.sessionKey, AccountId: account.appKey,
+            Provider: "webchat", Surface: "webchat", ChatType: "direct",
+            // requestId 用于业务幂等；每次续接必须有新消息 ID，避免被核心入站去重丢弃。
+            SenderId: binding.senderId, MessageSid: `webchat:${binding.requestId}:${randomUUID()}`, Timestamp: Date.now(),
+            OriginatingChannel: "webchat", OriginatingTo: binding.sessionKey,
+            OwnerAllowFrom: [],
+        });
+        let partialText = "";
+        const { dispatcher, replyOptions, markDispatchIdle } = runtime.channel.reply.createReplyDispatcherWithTyping({
+            responsePrefix: "", responsePrefixContextProvider: () => ({}),
+            humanDelay: runtime.channel.reply.resolveHumanDelayConfig(cfg, claims.agentId),
+            onReplyStart: () => { }, onIdle: () => { }, onCleanup: () => { },
+            deliver: async (payload, info) => {
+                if (!binding.isActive())
+                    return;
+                const data = { kind: info.kind };
+                if (payload.mediaUrl)
+                    data.mediaUrl = payload.mediaUrl;
+                if (payload.mediaUrls?.length)
+                    data.mediaUrls = payload.mediaUrls;
+                const presentation = payload.presentation;
+                if (presentation !== undefined)
+                    data.presentation = presentation;
+                if (payload.text && payload.text !== partialText) {
+                    binding.publish({ type: "reply", text: payload.text, replace: true, data });
+                    partialText = payload.text;
+                }
+                else if (Object.keys(data).length > 1) {
+                    binding.publish({ type: "reply", data });
+                }
+            },
+        });
+        await runtime.channel.reply.withReplyDispatcher({
+            dispatcher, onSettled: markDispatchIdle,
+            run: () => runtime.channel.reply.dispatchReplyFromConfig({
+                ctx, cfg, dispatcher,
+                replyOptions: {
+                    ...replyOptions, disableBlockStreaming: true,
+                    suppressDefaultToolProgressMessages: true,
+                    onPartialReply: (payload) => {
+                        const next = typeof payload.text === "string" ? payload.text :
+                            (payload.replace ? "" : partialText) + (payload.delta ?? "");
+                        if (next === partialText || !binding.isActive())
+                            return;
+                        partialText = next;
+                        binding.publish({ type: "reply", text: partialText, replace: true });
+                    },
+                },
+            }),
+        });
+    });
+}
+export function registerWebchatGateway(api) {
+    const getConfig = () => getYachConfig();
+    const getSecret = () => {
+        const webchat = getConfig().channels?.yach?.webchat;
+        if (webchat?.enabled !== true) {
+            throw new WebchatRequestError("WEBCHAT_DISABLED", "插件 Web 接入未启用。");
+        }
+        const envName = webchat.signingSecretEnv ?? DEFAULT_SECRET_ENV;
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(envName)) {
+            throw new WebchatRequestError("WEBCHAT_CONFIG_INVALID", "Web 签名密钥环境变量名不合法。");
+        }
+        const secret = process.env[envName];
+        if (!secret)
+            throw new WebchatRequestError("WEBCHAT_SECRET_MISSING", "服务端 Web 签名密钥未配置。");
+        return secret;
+    };
+    const service = createWebchatService({
+        getSecret,
+        validateTarget(claims) {
+            getSecret();
+            const cfg = getConfig();
+            if (!listYachAccountIds(cfg).includes(claims.accountId)) {
+                throw new WebchatRequestError("WEBCHAT_ACCOUNT_INVALID", "目标知音楼账号不存在。");
+            }
+            const account = resolveYachAccount({ cfg, accountId: claims.accountId });
+            if (!account.configured || !account.enabled) {
+                throw new WebchatRequestError("WEBCHAT_ACCOUNT_INVALID", "目标知音楼账号未配置或已停用。");
+            }
+            const agents = cfg.agents?.list?.map((agent) => agent.id) ?? [];
+            const allowed = agents.length ? agents : ["main"];
+            if (!/^[a-z0-9][a-z0-9_-]{0,127}$/.test(claims.agentId) || !allowed.includes(claims.agentId)) {
+                throw new WebchatRequestError("WEBCHAT_AGENT_INVALID", "目标 Agent 不存在。");
+            }
+        },
+        dispatch: (claims, binding, message) => dispatchWebchatTurn({
+            runtime: getYachRuntime(), cfg: getConfig(), claims, binding, message,
+        }),
+        log: (stage, meta) => withExecutionContext({
+            source: "webchat", sessionKey: typeof meta.sessionKey === "string" ? meta.sessionKey : undefined,
+        }, () => log.info("Web 链路状态", { ...meta, stage })),
+    });
+    for (const method of WEBCHAT_METHODS) {
+        api.registerGatewayMethod(method, async ({ params, client, context, respond }) => {
+            await withExecutionContext({ source: "webchat" }, async () => {
+                try {
+                    const connId = client?.connId;
+                    const subscriber = connId && typeof context.broadcastToConnIds === "function" ? {
+                        connId,
+                        send: (payload) => context.broadcastToConnIds("plugin.yach.webchat.update", payload, new Set([connId])),
+                    } : undefined;
+                    const result = service.handle(method, params, subscriber);
+                    respond(true, result);
+                }
+                catch (err) {
+                    const reasonCode = err instanceof WebchatRequestError ? err.code : "WEBCHAT_INTERNAL_ERROR";
+                    log.warn("Web 接入请求被拒绝", { stage: "webchat.request.rejected", method, reasonCode });
+                    respond(false, undefined, {
+                        code: "INVALID_REQUEST",
+                        message: err instanceof WebchatRequestError ? err.message : "Web 请求处理失败。",
+                        details: { reasonCode },
+                    });
+                }
+            });
+        }, { scope: "operator.write" });
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/src/webchat/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../../src/webchat/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAuB,MAAM,8BAA8B,CAAC;AAC1G,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAsB,MAAM,YAAY,CAAC;AAEjE,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAMzC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;YACvD,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO;YAC5E,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU;YACxE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM;YACzD,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;YAC3D,8CAA8C;YAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAC7G,kBAAkB,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU;YAChE,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC;YAC3G,cAAc,EAAE,EAAE,EAAE,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC;YAC9E,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,OAAqB,EAAE,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAAE,OAAO;gBAChC,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,OAAO,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACvD,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM;oBAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;gBAClE,MAAM,YAAY,GAAI,OAAqD,CAAC,YAAY,CAAC;gBACzF,IAAI,YAAY,KAAK,SAAS;oBAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;gBACjE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjD,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5E,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC7B,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAC9C,UAAU,EAAE,SAAS,EAAE,gBAAgB;YACvC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;gBACvD,GAAG,EAAE,GAAG,EAAE,UAAU;gBACpB,YAAY,EAAE;oBACZ,GAAG,YAAY,EAAE,qBAAqB,EAAE,IAAI;oBAC5C,mCAAmC,EAAE,IAAI;oBACzC,cAAc,EAAE,CAAC,OAA6D,EAAE,EAAE;wBAChF,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BAC5D,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;wBAC/D,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;4BAAE,OAAO;wBACxD,WAAW,GAAG,IAAI,CAAC;wBACnB,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvE,CAAC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,aAAa,EAAoB,CAAC;IAC1D,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,MAAM,OAAO,GAAI,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAqC,EAAE,OAAO,CAAC;QACtF,IAAI,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,kBAAkB,CAAC;QAC/D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,SAAS;QACT,cAAc,CAAC,MAAM;YACnB,SAAS,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC5C,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC;YAC1D,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;SACtE,CAAC;QACF,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC;YACzC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACjG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;KACnD,CAAC,CAAC;IAEH,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,GAAG,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/E,MAAM,oBAAoB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC3D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;oBAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,OAAO,OAAO,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC,CAAC;wBAC9E,MAAM;wBACN,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE,CACzC,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;qBACvF,CAAC,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;oBAC1D,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,UAAU,GAAG,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;oBAC5F,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;oBACnF,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE;wBACxB,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;wBACzE,OAAO,EAAE,EAAE,UAAU,EAAE;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/src/webchat/service.js

@@ -0,0 +1,312 @@
+import { createHash } from "node:crypto";
+import { createWebchatNonceGuard, verifyWebchatRequest, webchatOwnerKey, webchatRequestFingerprint, WebchatRequestError, } from "./auth.js";
+const REQUEST_TTL_MS = 30 * 60_000;
+const MAX_REQUESTS = 1000;
+const MAX_SUBSCRIBERS = 32;
+const MAX_TEXT_LENGTH = 256_000;
+function isTerminal(request) {
+    return request.status === "completed" || request.status === "failed" || request.status === "cancelled";
+}
+export function buildWebchatSessionKey(claims) {
+    const peer = createHash("sha256").update(webchatOwnerKey(claims)).digest("hex");
+    return `agent:${claims.agentId}:yach-webchat:${peer}`;
+}
+/** 进程内有界状态；签名只用于接入，接受后的操作按独立 TTL 管理。 */
+export function createWebchatService(options) {
+    const now = options.now ?? Date.now;
+    const requests = new Map();
+    const queues = new Map();
+    const nonces = createWebchatNonceGuard({ now });
+    const requestKey = (claims) => `${webchatOwnerKey(claims)}:${claims.requestId}`;
+    const trace = (request) => ({
+        source: "webchat", accountId: request.claims.accountId,
+        requestId: request.claims.requestId, sessionKey: request.sessionKey,
+    });
+    function snapshot(request) {
+        return {
+            requestId: request.claims.requestId, sessionKey: request.sessionKey,
+            status: request.status, sequence: request.sequence,
+            text: [request.text, request.turnText].filter(Boolean).join("\n\n"),
+            error: request.error, createdAt: request.createdAt, expiresAt: request.expiresAt,
+            notices: request.notices.map((notice) => ({ ...notice, data: notice.data && { ...notice.data } })),
+        };
+    }
+    function emit(request, notice, includeSnapshot = false) {
+        request.sequence++;
+        // 增量事件不反复携带全部正文；重连订阅及 status 查询才返回完整快照。
+        const payload = includeSnapshot ? { ...snapshot(request), notice } : {
+            requestId: request.claims.requestId, sessionKey: request.sessionKey,
+            status: request.status, sequence: request.sequence, error: request.error, notice,
+        };
+        for (const subscriber of request.subscribers.values()) {
+            try {
+                subscriber.send(payload);
+            }
+            catch {
+                options.log("webchat.delivery.failed", { ...trace(request), reasonCode: "delivery_failed" });
+                request.subscribers.delete(subscriber.connId);
+            }
+        }
+    }
+    function terminate(request, status, error) {
+        if (isTerminal(request))
+            return;
+        request.status = status;
+        request.error = error;
+        request.generation++;
+        request.resumeMessages = [];
+        const pending = [...request.deferred.values()];
+        request.deferred.clear();
+        for (const operation of pending) {
+            try {
+                operation.cancel();
+            }
+            catch {
+                options.log("webchat.cancel.failed", trace(request));
+            }
+        }
+        options.log(`webchat.${status}`, { ...trace(request), reasonCode: error });
+        emit(request);
+    }
+    function forget(key, request) {
+        if (request.expiryTimer)
+            clearTimeout(request.expiryTimer);
+        if (requests.get(key) === request)
+            requests.delete(key);
+    }
+    function prune() {
+        for (const [key, request] of requests) {
+            if (request.expiresAt > now())
+                continue;
+            terminate(request, "failed", "webchat_request_expired");
+            // 正在执行的请求保留幂等记录，不能因 TTL 到期又接受同一业务操作。
+            if (request.running === 0 && request.queued === 0)
+                forget(key, request);
+        }
+    }
+    function active(request, generation) {
+        if (generation !== request.generation || isTerminal(request))
+            return false;
+        if (request.expiresAt <= now()) {
+            terminate(request, "failed", "webchat_request_expired");
+            return false;
+        }
+        try {
+            options.validateTarget(request.claims);
+        }
+        catch {
+            terminate(request, "failed", "webchat_binding_invalid");
+            return false;
+        }
+        return true;
+    }
+    function subscribe(request, subscriber) {
+        if (!request.subscribers.has(subscriber.connId) && request.subscribers.size >= MAX_SUBSCRIBERS) {
+            throw new WebchatRequestError("WEBCHAT_SUBSCRIBER_LIMIT", "当前请求的订阅连接过多。");
+        }
+        request.subscribers.set(subscriber.connId, subscriber);
+    }
+    function appendText(request, text) {
+        if (text)
+            request.text = [request.text, text].filter(Boolean).join("\n\n").slice(-MAX_TEXT_LENGTH);
+    }
+    function bindingFor(request) {
+        const generation = request.generation;
+        const turn = request.turn;
+        const binding = {
+            requestId: request.claims.requestId, accountId: request.claims.accountId,
+            senderId: request.claims.senderId, sessionKey: request.sessionKey,
+            isActive: () => active(request, generation),
+            publish(notice) {
+                if (!active(request, generation))
+                    return;
+                if (notice.type === "reply") {
+                    // 旧 turn 的增量回调不能覆盖授权后新一轮的回复。
+                    if (turn !== request.turn)
+                        return;
+                    request.turnText = notice.replace
+                        ? (notice.text ?? "").slice(-MAX_TEXT_LENGTH)
+                        : [request.turnText, notice.text].filter(Boolean).join("\n\n").slice(-MAX_TEXT_LENGTH);
+                }
+                else if (notice.text) {
+                    appendText(request, notice.text);
+                }
+                if (notice.type !== "reply" || notice.data) {
+                    request.notices.push({ ...notice });
+                    if (request.notices.length > 20)
+                        request.notices.shift();
+                }
+                emit(request, notice);
+            },
+            defer(id, kind, onCancel) {
+                if (!active(request, generation))
+                    return false;
+                request.deferred.set(id, { kind, cancel: onCancel });
+                request.status = kind === "authorization" ? "awaiting_authorization" : "pending_task";
+                emit(request);
+                return true;
+            },
+            settle(id, error) {
+                if (!active(request, generation))
+                    return;
+                request.deferred.delete(id);
+                if (error)
+                    terminate(request, "failed", error);
+            },
+            async resume(message, operationId) {
+                if (!active(request, generation))
+                    return;
+                if (operationId && request.resumedOperations.has(operationId))
+                    return;
+                if (operationId)
+                    request.resumedOperations.add(operationId);
+                if (!request.resumeMessages.includes(message))
+                    request.resumeMessages.push(message);
+                // 不同后台完成事件合并到排队的续接，不能因已有续接而丢掉后来的消息。
+                if ([...request.deferred.values()].some((operation) => operation.kind === "authorization"))
+                    return;
+                if (request.resumeQueued)
+                    return;
+                request.resumeQueued = true;
+                options.log("webchat.resume.queued", trace(request));
+                await enqueue(request, "", true);
+            },
+        };
+        return Object.freeze(binding);
+    }
+    function enqueue(request, message, resuming = false) {
+        const generation = request.generation;
+        request.queued++;
+        if (request.running === 0)
+            request.status = "queued";
+        const previous = queues.get(request.sessionKey) ?? Promise.resolve();
+        const work = previous.catch(() => { }).then(async () => {
+            request.queued--;
+            if (!active(request, generation)) {
+                if (request.error === "webchat_request_expired" && request.running === 0 && request.queued === 0) {
+                    forget(requestKey(request.claims), request);
+                }
+                return;
+            }
+            if (resuming) {
+                request.resumeQueued = false;
+                if ([...request.deferred.values()].some((operation) => operation.kind === "authorization")) {
+                    request.status = "awaiting_authorization";
+                    emit(request);
+                    return;
+                }
+                message = request.resumeMessages.splice(0).join("\n\n");
+            }
+            request.running++;
+            request.turn++;
+            request.status = "running";
+            options.log(resuming ? "webchat.resume.started" : "webchat.turn.started", trace(request));
+            emit(request);
+            try {
+                await options.dispatch(request.claims, bindingFor(request), message);
+            }
+            catch {
+                terminate(request, "failed", "webchat_dispatch_failed");
+            }
+            finally {
+                appendText(request, request.turnText);
+                request.turnText = "";
+                request.running--;
+                if (!isTerminal(request)) {
+                    const pending = [...request.deferred.values()];
+                    request.status = pending.some((operation) => operation.kind === "authorization")
+                        ? "awaiting_authorization"
+                        : pending.length ? "pending_task" : request.queued ? "queued" : "completed";
+                }
+                options.log("webchat.turn.settled", { ...trace(request), status: request.status });
+                emit(request);
+                if (request.error === "webchat_request_expired" && request.running === 0 && request.queued === 0) {
+                    forget(requestKey(request.claims), request);
+                }
+            }
+        });
+        const tracked = work.finally(() => {
+            if (queues.get(request.sessionKey) === tracked)
+                queues.delete(request.sessionKey);
+        });
+        queues.set(request.sessionKey, tracked);
+        return tracked;
+    }
+    return {
+        handle(method, raw, subscriber) {
+            const claims = Object.freeze(verifyWebchatRequest(method, raw, options.getSecret(), now()));
+            options.validateTarget(claims);
+            prune();
+            const key = requestKey(claims);
+            const existing = requests.get(key);
+            if (method === "yach.webchat.send" && existing) {
+                if (existing.fingerprint !== webchatRequestFingerprint(claims)) {
+                    throw new WebchatRequestError("WEBCHAT_REQUEST_CONFLICT", "同一 requestId 不能用于不同消息。");
+                }
+                if (subscriber)
+                    subscribe(existing, subscriber);
+                options.log("webchat.request.reused", trace(existing));
+                return snapshot(existing);
+            }
+            nonces.consume(claims);
+            if (method === "yach.webchat.send") {
+                if (requests.size >= (options.maxRequests ?? MAX_REQUESTS)) {
+                    throw new WebchatRequestError("WEBCHAT_REQUEST_LIMIT", "待处理请求过多，请稍后重试。");
+                }
+                const createdAt = now();
+                const request = {
+                    claims, fingerprint: webchatRequestFingerprint(claims),
+                    sessionKey: buildWebchatSessionKey(claims), status: "queued", sequence: 0,
+                    text: "", turnText: "", notices: [], createdAt,
+                    expiresAt: createdAt + (options.requestTtlMs ?? REQUEST_TTL_MS),
+                    generation: 0, turn: 0, running: 0, queued: 0, resumeQueued: false,
+                    resumeMessages: [], resumedOperations: new Set(),
+                    deferred: new Map(), subscribers: new Map(),
+                };
+                if (subscriber)
+                    subscribe(request, subscriber);
+                requests.set(key, request);
+                request.expiryTimer = setTimeout(() => {
+                    terminate(request, "failed", "webchat_request_expired");
+                    if (request.running === 0 && request.queued === 0)
+                        forget(key, request);
+                }, request.expiresAt - createdAt);
+                request.expiryTimer.unref?.();
+                options.log("webchat.request.accepted", trace(request));
+                // RPC 立即返回接受状态，模型执行和授权等待不占用 RPC 响应。
+                void enqueue(request, claims.message).catch(() => terminate(request, "failed", "webchat_dispatch_failed"));
+                return snapshot(request);
+            }
+            if (!existing) {
+                throw new WebchatRequestError("WEBCHAT_REQUEST_NOT_FOUND", "请求不存在或已过期；插件重启后需重新建立请求。");
+            }
+            if (method === "yach.webchat.subscribe") {
+                if (!subscriber)
+                    throw new WebchatRequestError("WEBCHAT_CONNECTION_REQUIRED", "订阅需要有效的 Gateway 连接。");
+                subscribe(existing, subscriber);
+                emit(existing, undefined, true);
+            }
+            else if (method === "yach.webchat.cancel") {
+                if (existing.running > 0) {
+                    throw new WebchatRequestError("WEBCHAT_REQUEST_RUNNING", "请求正在执行，无法撤回已经开始的业务操作。");
+                }
+                terminate(existing, "cancelled");
+            }
+            return snapshot(existing);
+        },
+        async drain() {
+            while (queues.size)
+                await Promise.allSettled([...queues.values()]);
+        },
+        clear() {
+            for (const request of requests.values()) {
+                if (request.expiryTimer)
+                    clearTimeout(request.expiryTimer);
+                terminate(request, "cancelled");
+            }
+            requests.clear();
+            nonces.clear();
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/src/webchat/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/webchat/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AACnC,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,eAAe,GAAG,OAAO,CAAC;AAyChC,SAAS,UAAU,CAAC,OAAuB;IACzC,OAAO,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,SAAS,MAAM,CAAC,OAAO,iBAAiB,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,OAAuB,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;QACtD,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;KACpE,CAAC,CAAC;IAEH,SAAS,QAAQ,CAAC,OAAuB;QACvC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACnE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAClD,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YACnE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAChF,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SACnG,CAAC;IACJ,CAAC;IAED,SAAS,IAAI,CAAC,OAAuB,EAAE,MAAsB,EAAE,eAAe,GAAG,KAAK;QACpF,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnB,wCAAwC;QACxC,MAAM,OAAO,GAA4B,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5F,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACnE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM;SACjF,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjC,MAAM,CAAC;gBACL,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7F,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,OAAuB,EAAE,MAA8B,EAAE,KAAc;QACxF,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO;QAChC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,CAAC,cAAc,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YAC3B,MAAM,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,CAAC;IAChB,CAAC;IAED,SAAS,MAAM,CAAC,GAAW,EAAE,OAAuB;QAClD,IAAI,OAAO,CAAC,WAAW;YAAE,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,SAAS,KAAK;QACZ,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;gBAAE,SAAS;YACxC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YACxD,qCAAqC;YACrC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,OAAuB,EAAE,UAAkB;QACzD,IAAI,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,EAAE,CAAC;YAC/B,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/C,MAAM,CAAC;YACL,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,SAAS,CAAC,OAAuB,EAAE,UAA6B;QACvE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YAC/F,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IAED,SAAS,UAAU,CAAC,OAAuB,EAAE,IAAY;QACvD,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC;IACrG,CAAC;IAED,SAAS,UAAU,CAAC,OAAuB;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAmB;YAC9B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;YACxE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACjE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;YAC3C,OAAO,CAAC,MAAM;gBACZ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,OAAO;gBACzC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,6BAA6B;oBAC7B,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI;wBAAE,OAAO;oBAClC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO;wBAC/B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC;wBAC7C,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC;gBAC3F,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBACvB,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC3C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;oBACpC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;wBAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ;gBACtB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACrD,OAAO,CAAC,MAAM,GAAG,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC;gBACtF,IAAI,CAAC,OAAO,CAAC,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,EAAE,EAAE,KAAK;gBACd,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,OAAO;gBACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,KAAK;oBAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW;gBAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,OAAO;gBACzC,IAAI,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;oBAAE,OAAO;gBACtE,IAAI,WAAW;oBAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpF,oCAAoC;gBACpC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC;oBAAE,OAAO;gBACnG,IAAI,OAAO,CAAC,YAAY;oBAAE,OAAO;gBACjC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACrD,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;SACF,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,OAAO,CAAC,OAAuB,EAAE,OAAe,EAAE,QAAQ,GAAG,KAAK;QACzE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpD,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,KAAK,KAAK,yBAAyB,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC7B,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;oBAC3F,OAAO,CAAC,MAAM,GAAG,wBAAwB,CAAC;oBAC1C,IAAI,CAAC,OAAO,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,OAAO,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YAC1D,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzB,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC/C,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC;wBAC9E,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;gBAChF,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,OAAO,CAAC,CAAC;gBACd,IAAI,OAAO,CAAC,KAAK,KAAK,yBAAyB,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAChC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO;QACL,MAAM,CAAC,MAAqB,EAAE,GAAY,EAAE,UAA8B;YACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC/B,KAAK,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,mBAAmB,IAAI,QAAQ,EAAE,CAAC;gBAC/C,IAAI,QAAQ,CAAC,WAAW,KAAK,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/D,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,UAAU;oBAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvD,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBACnC,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,YAAY,CAAC,EAAE,CAAC;oBAC3D,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAmB;oBAC9B,MAAM,EAAE,WAAW,EAAE,yBAAyB,CAAC,MAAM,CAAC;oBACtD,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;oBACzE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS;oBAC9C,SAAS,EAAE,SAAS,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,cAAc,CAAC;oBAC/D,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK;oBAClE,cAAc,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,GAAG,EAAE;oBAChD,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE;iBAC5C,CAAC;gBACF,IAAI,UAAU;oBAAE,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC/C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC3B,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;oBACpC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;oBACxD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1E,CAAC,EAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;gBAClC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxD,oCAAoC;gBACpC,KAAK,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;gBAC5G,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;gBACxC,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;gBACrG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAChC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBAC5C,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;gBACpF,CAAC;gBACD,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,KAAK;YACT,OAAO,MAAM,CAAC,IAAI;gBAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,KAAK;YACH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,WAAW;oBAAE,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC3D,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClC,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/webchat/types.js

@@ -0,0 +1,7 @@
+export const WEBCHAT_METHODS = [
+    "yach.webchat.send",
+    "yach.webchat.status",
+    "yach.webchat.subscribe",
+    "yach.webchat.cancel",
+];
+//# sourceMappingURL=types.js.map

package/dist/src/webchat/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/webchat/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mBAAmB;IACnB,qBAAqB;IACrB,wBAAwB;IACxB,qBAAqB;CACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yach.zhiyinlou.com/yach",
-  "version": "2.16.0",
+  "version": "2.16.1-beta.0",
   "description": "OpenClaw Yach (知音楼) channel plugin",
   "type": "module",
   "main": "./dist/index.js",
@@ -66,7 +66,7 @@
       "order": 80
     },
     "install": {
-      "npmSpec": "@yach.zhiyinlou.com/yach@2.16.0",
+      "npmSpec": "@yach.zhiyinlou.com/yach@2.16.1-beta.0",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.3.22"
     }