skyloom 1.19.0 → 1.21.0

package/dist/gateway/channels/feishu.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * Feishu / Lark channel adapter.
+ *
+ * Inbound: the event-subscription webhook (v2 schema). Handles the
+ * url_verification challenge, optional AES-encrypted payloads, and the optional
+ * verification-token check, then normalizes im.message.receive_v1 events.
+ *
+ * Outbound: obtains a tenant_access_token (cached) and replies via the
+ * im/v1/messages API (text by default).
+ *
+ * Config (channels.feishu): { appId, appSecret, encryptKey?, verificationToken?,
+ *   domain?: 'feishu'|'lark', agent? }. Env fallback: FEISHU_APP_ID,
+ *   FEISHU_APP_SECRET, FEISHU_ENCRYPT_KEY, FEISHU_VERIFICATION_TOKEN.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decryptFeishu = decryptFeishu;
+exports.createFeishuAdapter = createFeishuAdapter;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../core/logger");
+const helpers_1 = require("../helpers");
+const log = (0, logger_1.getLogger)('channel-feishu');
+/** Decrypt a Feishu AES-256-CBC encrypted event body. */
+function decryptFeishu(encrypt, encryptKey) {
+    const key = crypto.createHash('sha256').update(encryptKey).digest();
+    const data = Buffer.from(encrypt, 'base64');
+    const iv = data.subarray(0, 16);
+    const ciphertext = data.subarray(16);
+    const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
+    decipher.setAutoPadding(false);
+    let out = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    // PKCS#7 unpad
+    const pad = out[out.length - 1];
+    if (pad > 0 && pad <= 16)
+        out = out.subarray(0, out.length - pad);
+    return out.toString('utf8');
+}
+function createFeishuAdapter(cfg, env) {
+    const appId = (0, helpers_1.resolveSecret)(cfg.appId, env, 'FEISHU_APP_ID');
+    const appSecret = (0, helpers_1.resolveSecret)(cfg.appSecret, env, 'FEISHU_APP_SECRET');
+    if (!appId || !appSecret)
+        return null; // not configured
+    const encryptKey = (0, helpers_1.resolveSecret)(cfg.encryptKey, env, 'FEISHU_ENCRYPT_KEY');
+    const verificationToken = (0, helpers_1.resolveSecret)(cfg.verificationToken, env, 'FEISHU_VERIFICATION_TOKEN');
+    const base = cfg.domain === 'lark' ? 'https://open.larksuite.com' : 'https://open.feishu.cn';
+    const tokenCache = new helpers_1.TokenCache(async () => {
+        const data = await (0, helpers_1.postJson)(`${base}/open-apis/auth/v3/tenant_access_token/internal`, {
+            app_id: appId, app_secret: appSecret,
+        });
+        if (data.code !== 0)
+            throw new Error(`feishu token error ${data.code}: ${data.msg}`);
+        return { token: data.tenant_access_token, expiresInSec: data.expire ?? 7200 };
+    });
+    // De-dupe redelivered events (Feishu retries on slow ack).
+    const seen = new Set();
+    const remember = (id) => {
+        if (!id)
+            return false;
+        if (seen.has(id))
+            return true;
+        seen.add(id);
+        if (seen.size > 2000)
+            seen.clear();
+        return false;
+    };
+    return {
+        id: 'feishu',
+        name: 'Feishu/Lark',
+        defaultAgent: cfg.agent || 'fair',
+        async handleWebhook(req) {
+            let payload;
+            try {
+                payload = JSON.parse(req.body.toString('utf8') || '{}');
+            }
+            catch {
+                return { response: { status: 400, body: 'bad json' } };
+            }
+            // Encrypted transport: { encrypt: "..." } → decrypt to the real payload.
+            if (payload.encrypt) {
+                if (!encryptKey)
+                    return { response: { status: 400, body: 'encrypt key not configured' } };
+                try {
+                    payload = JSON.parse(decryptFeishu(payload.encrypt, encryptKey));
+                }
+                catch (e) {
+                    log.warn('feishu_decrypt_failed', { error: String(e) });
+                    return { response: { status: 400, body: 'decrypt failed' } };
+                }
+            }
+            // URL verification handshake.
+            if (payload.type === 'url_verification') {
+                if (verificationToken && payload.token && payload.token !== verificationToken) {
+                    return { response: { status: 403, body: 'bad token' } };
+                }
+                return { response: { status: 200, contentType: 'application/json', body: JSON.stringify({ challenge: payload.challenge }) } };
+            }
+            // Verification token check (v2 puts it in header.token).
+            const token = payload.header?.token ?? payload.token;
+            if (verificationToken && token && token !== verificationToken) {
+                return { response: { status: 403, body: 'bad token' } };
+            }
+            const eventId = payload.header?.event_id;
+            if (remember(eventId))
+                return {}; // duplicate redelivery
+            const eventType = payload.header?.event_type ?? payload.event?.type;
+            if (eventType !== 'im.message.receive_v1')
+                return {}; // only handle message receipts
+            const message = payload.event?.message;
+            if (!message)
+                return {};
+            const chatId = message.chat_id;
+            const msgType = message.message_type;
+            let text = '';
+            if (msgType === 'text') {
+                try {
+                    text = JSON.parse(message.content || '{}').text || '';
+                }
+                catch {
+                    text = '';
+                }
+                // Strip @mentions like "@_user_1 ".
+                text = text.replace(/@_user_\d+/g, '').trim();
+            }
+            else {
+                text = `[${msgType} 消息]`;
+            }
+            const senderId = payload.event?.sender?.sender_id?.open_id || payload.event?.sender?.sender_id?.user_id || 'unknown';
+            return {
+                message: {
+                    channel: 'feishu',
+                    conversationId: chatId || senderId,
+                    userId: senderId,
+                    text,
+                    replyTo: { channel: 'feishu', chatId },
+                    raw: payload,
+                },
+            };
+        },
+        async send(target, text) {
+            const chatId = target.chatId;
+            if (!chatId)
+                return;
+            const token = await tokenCache.get();
+            const data = await (0, helpers_1.postJson)(`${base}/open-apis/im/v1/messages?receive_id_type=chat_id`, { receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text }) }, { headers: { Authorization: `Bearer ${token}` } });
+            if (data.code !== 0) {
+                if (data.code === 99991663 || data.code === 99991661)
+                    tokenCache.invalidate(); // token expired
+                throw new Error(`feishu send error ${data.code}: ${data.msg}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=feishu.js.map

package/dist/gateway/channels/feishu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu.js","sourceRoot":"","sources":["../../../src/gateway/channels/feishu.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,sCAYC;AAED,kDAwGC;AA9HD,+CAAiC;AACjC,8CAA8C;AAC9C,wCAAiE;AAGjE,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,gBAAgB,CAAC,CAAC;AAExC,yDAAyD;AACzD,SAAgB,aAAa,CAAC,OAAe,EAAE,UAAkB;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,eAAe;IACf,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAQ,EAAE,GAAsB;IAClE,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAExD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAE7F,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EAAC,GAAG,IAAI,iDAAiD,EAAE;YACpF,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;SACrC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAW,EAAE;QACvC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAEjC,KAAK,CAAC,aAAa,CAAC,GAAe;YACjC,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;YAAC,CAAC;YAElI,yEAAyE;YACzE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU;oBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,CAAC;gBAC1F,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACzE,OAAO,CAAC,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;gBAAC,CAAC;YACtI,CAAC;YAED,8BAA8B;YAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,IAAI,iBAAiB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;oBAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;gBAC1D,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YAChI,CAAC;YAED,yDAAyD;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;YACrD,IAAI,iBAAiB,IAAI,KAAK,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;gBAC9D,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;YACzC,IAAI,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC,CAAC,uBAAuB;YAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACpE,IAAI,SAAS,KAAK,uBAAuB;gBAAE,OAAO,EAAE,CAAC,CAAC,+BAA+B;YAErF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;YACvC,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAiB,CAAC;YACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAsB,CAAC;YAC/C,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,CAAC;gBACnF,oCAAoC;gBACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,OAAO,MAAM,CAAC;YAC3B,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,IAAI,SAAS,CAAC;YAErH,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,QAAQ;oBACjB,cAAc,EAAE,MAAM,IAAI,QAAQ;oBAClC,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;oBACtC,GAAG,EAAE,OAAO;iBACb;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,IAAY;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgB,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,GAAG,IAAI,mDAAmD,EAC1D,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAC3E,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,gBAAgB;gBAC/F,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/channels/qq.d.ts

@@ -0,0 +1,25 @@
+/**
+ * QQ official-bot channel adapter (webhook mode, QQ 频道/群 机器人).
+ *
+ * Auth/crypto: QQ uses Ed25519. The signing seed is the bot secret repeated to
+ * 32 bytes. Two webhook concerns:
+ *   - validation (op 13): the platform sends { d: { plain_token, event_ts } };
+ *     we reply { plain_token, signature } where signature = ed25519(event_ts +
+ *     plain_token).
+ *   - event signature: each push carries X-Signature-Ed25519 (hex) and
+ *     X-Signature-Timestamp; verify ed25519 over (timestamp + body).
+ *
+ * Inbound message events: GROUP_AT_MESSAGE_CREATE / C2C_MESSAGE_CREATE /
+ * AT_MESSAGE_CREATE. Outbound: getAppAccessToken (cached) then the v2 messages
+ * API (passive reply via msg_id). Config (channels.qq): { appId, secret,
+ *   agent? }. Env fallback: QQ_BOT_APPID, QQ_BOT_SECRET.
+ */
+import type { ChannelAdapter } from '../types';
+/** Repeat the bot secret to a 32-byte Ed25519 seed (QQ's scheme). */
+export declare function qqSeed(secret: string): Buffer;
+/** Sign `event_ts + plain_token` for the validation handshake; returns hex. */
+export declare function qqSignValidation(secret: string, eventTs: string, plainToken: string): string;
+/** Verify an event push signature (hex) over `timestamp + body`. */
+export declare function qqVerify(secret: string, timestamp: string, body: Buffer, signatureHex: string): boolean;
+export declare function createQQAdapter(cfg: any, env: NodeJS.ProcessEnv): ChannelAdapter | null;
+//# sourceMappingURL=qq.d.ts.map

package/dist/gateway/channels/qq.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qq.d.ts","sourceRoot":"","sources":["../../../src/gateway/channels/qq.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,cAAc,EAA2C,MAAM,UAAU,CAAC;AAMxF,qEAAqE;AACrE,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI7C;AAMD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG5F;AAED,oEAAoE;AACpE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CASvG;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,cAAc,GAAG,IAAI,CAoFvF"}

package/dist/gateway/channels/qq.js

@@ -0,0 +1,177 @@
+"use strict";
+/**
+ * QQ official-bot channel adapter (webhook mode, QQ 频道/群 机器人).
+ *
+ * Auth/crypto: QQ uses Ed25519. The signing seed is the bot secret repeated to
+ * 32 bytes. Two webhook concerns:
+ *   - validation (op 13): the platform sends { d: { plain_token, event_ts } };
+ *     we reply { plain_token, signature } where signature = ed25519(event_ts +
+ *     plain_token).
+ *   - event signature: each push carries X-Signature-Ed25519 (hex) and
+ *     X-Signature-Timestamp; verify ed25519 over (timestamp + body).
+ *
+ * Inbound message events: GROUP_AT_MESSAGE_CREATE / C2C_MESSAGE_CREATE /
+ * AT_MESSAGE_CREATE. Outbound: getAppAccessToken (cached) then the v2 messages
+ * API (passive reply via msg_id). Config (channels.qq): { appId, secret,
+ *   agent? }. Env fallback: QQ_BOT_APPID, QQ_BOT_SECRET.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.qqSeed = qqSeed;
+exports.qqSignValidation = qqSignValidation;
+exports.qqVerify = qqVerify;
+exports.createQQAdapter = createQQAdapter;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../core/logger");
+const helpers_1 = require("../helpers");
+const log = (0, logger_1.getLogger)('channel-qq');
+const PKCS8_ED25519_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+/** Repeat the bot secret to a 32-byte Ed25519 seed (QQ's scheme). */
+function qqSeed(secret) {
+    let s = secret;
+    while (s.length < 32)
+        s = s + s;
+    return Buffer.from(s.slice(0, 32), 'utf8');
+}
+function privKeyFromSeed(seed) {
+    return crypto.createPrivateKey({ key: Buffer.concat([PKCS8_ED25519_PREFIX, seed]), format: 'der', type: 'pkcs8' });
+}
+/** Sign `event_ts + plain_token` for the validation handshake; returns hex. */
+function qqSignValidation(secret, eventTs, plainToken) {
+    const priv = privKeyFromSeed(qqSeed(secret));
+    return crypto.sign(null, Buffer.from(eventTs + plainToken, 'utf8'), priv).toString('hex');
+}
+/** Verify an event push signature (hex) over `timestamp + body`. */
+function qqVerify(secret, timestamp, body, signatureHex) {
+    try {
+        const pub = crypto.createPublicKey(privKeyFromSeed(qqSeed(secret)));
+        const msg = Buffer.concat([Buffer.from(timestamp, 'utf8'), body]);
+        return crypto.verify(null, msg, pub, Buffer.from(signatureHex, 'hex'));
+    }
+    catch (e) {
+        log.warn('qq_verify_error', { error: String(e) });
+        return false;
+    }
+}
+function createQQAdapter(cfg, env) {
+    const appId = (0, helpers_1.resolveSecret)(cfg.appId != null ? String(cfg.appId) : undefined, env, 'QQ_BOT_APPID');
+    const secret = (0, helpers_1.resolveSecret)(cfg.secret, env, 'QQ_BOT_SECRET');
+    if (!appId || !secret)
+        return null;
+    const tokenCache = new helpers_1.TokenCache(async () => {
+        const data = await (0, helpers_1.postJson)('https://bots.qq.com/app/getAppAccessToken', {
+            appId, clientSecret: secret,
+        });
+        if (!data.access_token)
+            throw new Error(`qq token error: ${JSON.stringify(data).slice(0, 120)}`);
+        return { token: data.access_token, expiresInSec: Number(data.expires_in) || 7200 };
+    });
+    const authHeaders = async () => ({ Authorization: `QQBot ${await tokenCache.get()}`, 'X-Union-Appid': appId });
+    return {
+        id: 'qq',
+        name: 'QQ Bot',
+        defaultAgent: cfg.agent || 'fair',
+        async handleWebhook(req) {
+            let payload;
+            try {
+                payload = JSON.parse(req.body.toString('utf8') || '{}');
+            }
+            catch {
+                return { response: { status: 400, body: 'bad json' } };
+            }
+            // Validation handshake (op 13) — no signature header on this one.
+            if (payload.op === 13 && payload.d?.plain_token && payload.d?.event_ts) {
+                const signature = qqSignValidation(secret, String(payload.d.event_ts), String(payload.d.plain_token));
+                return { response: { status: 200, contentType: 'application/json', body: JSON.stringify({ plain_token: payload.d.plain_token, signature }) } };
+            }
+            // Verify the event push signature.
+            const sig = req.headers['x-signature-ed25519'] || '';
+            const ts = req.headers['x-signature-timestamp'] || '';
+            if (sig && ts && !qqVerify(secret, ts, req.body, sig)) {
+                return { response: { status: 403, body: 'bad signature' } };
+            }
+            if (payload.op !== 0)
+                return { response: { status: 200, body: '' } }; // not a dispatch
+            const t = payload.t;
+            const d = payload.d || {};
+            const content = String(d.content || '').replace(/<@!?\d+>/g, '').trim();
+            const msgId = d.id;
+            let replyTo = null;
+            if (t === 'GROUP_AT_MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'group', groupOpenid: d.group_openid, msgId };
+            else if (t === 'C2C_MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'c2c', userOpenid: d.author?.user_openid, msgId };
+            else if (t === 'AT_MESSAGE_CREATE' || t === 'MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'channel', channelId: d.channel_id, msgId };
+            if (!replyTo || !content)
+                return { response: { status: 200, body: '' } };
+            const userId = d.author?.user_openid || d.author?.id || d.author?.member_openid || 'unknown';
+            return {
+                response: { status: 200, body: '' },
+                message: {
+                    channel: 'qq',
+                    conversationId: replyTo.groupOpenid || replyTo.channelId || userId,
+                    userId,
+                    text: content,
+                    replyTo,
+                    raw: payload,
+                },
+            };
+        },
+        async send(target, text) {
+            const headers = { ...(await authHeaders()), 'Content-Type': 'application/json' };
+            const msgId = target.msgId;
+            const payload = { msg_type: 0, content: text };
+            if (msgId)
+                payload.msg_id = msgId; // passive reply within the allowed window
+            let url;
+            if (target.kind === 'group')
+                url = `https://api.sgroup.qq.com/v2/groups/${target.groupOpenid}/messages`;
+            else if (target.kind === 'c2c')
+                url = `https://api.sgroup.qq.com/v2/users/${target.userOpenid}/messages`;
+            else
+                url = `https://api.sgroup.qq.com/channels/${target.channelId}/messages`;
+            try {
+                await (0, helpers_1.postJson)(url, payload, { headers });
+            }
+            catch (e) {
+                if (e?.response?.status === 401)
+                    tokenCache.invalidate();
+                throw new Error(`qq send error: ${e?.response?.status || ''} ${String(e?.message || e).slice(0, 120)}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=qq.js.map

package/dist/gateway/channels/qq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qq.js","sourceRoot":"","sources":["../../../src/gateway/channels/qq.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYH,wBAIC;AAOD,4CAGC;AAGD,4BASC;AAED,0CAoFC;AA1HD,+CAAiC;AACjC,8CAA8C;AAC9C,wCAAiE;AAGjE,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,YAAY,CAAC,CAAC;AAEpC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAEpF,qEAAqE;AACrE,SAAgB,MAAM,CAAC,MAAc;IACnC,IAAI,CAAC,GAAG,MAAM,CAAC;IACf,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,+EAA+E;AAC/E,SAAgB,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,UAAkB;IAClF,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,oEAAoE;AACpE,SAAgB,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,YAAoB;IAC5F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,GAAQ,EAAE,GAAsB;IAC9D,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EAAC,2CAA2C,EAAE;YACvE,KAAK,EAAE,YAAY,EAAE,MAAM;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/G,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAEjC,KAAK,CAAC,aAAa,CAAC,GAAe;YACjC,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;YAAC,CAAC;YAElI,kEAAkE;YAClE,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,WAAW,IAAI,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;gBACtG,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACjJ,CAAC;YAED,mCAAmC;YACnC,MAAM,GAAG,GAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAY,IAAI,EAAE,CAAC;YACjE,MAAM,EAAE,GAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAY,IAAI,EAAE,CAAC;YAClE,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;YAC9D,CAAC;YAED,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB;YAEvF,MAAM,CAAC,GAAG,OAAO,CAAC,CAAW,CAAC;YAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,CAAC,EAAY,CAAC;YAE7B,IAAI,OAAO,GAAuB,IAAI,CAAC;YACvC,IAAI,CAAC,KAAK,yBAAyB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;iBAC/G,IAAI,CAAC,KAAK,oBAAoB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;iBACnH,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,gBAAgB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;YAE3I,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;YAEzE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;YAC7F,OAAO;gBACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnC,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,cAAc,EAAG,OAAO,CAAC,WAAsB,IAAK,OAAO,CAAC,SAAoB,IAAK,MAAiB;oBACtG,MAAM;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO;oBACP,GAAG,EAAE,OAAO;iBACb;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,IAAY;YAC1C,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,CAAC,KAA2B,CAAC;YACjD,MAAM,OAAO,GAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,0CAA0C;YAE7E,IAAI,GAAW,CAAC;YAChB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,GAAG,GAAG,uCAAuC,MAAM,CAAC,WAAW,WAAW,CAAC;iBACnG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;gBAAE,GAAG,GAAG,sCAAsC,MAAM,CAAC,UAAU,WAAW,CAAC;;gBACpG,GAAG,GAAG,sCAAsC,MAAM,CAAC,SAAS,WAAW,CAAC;YAE7E,IAAI,CAAC;gBACH,MAAM,IAAA,kBAAQ,EAAC,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,UAAU,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/channels/wecom.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WeCom (企业微信) channel adapter.
+ *
+ * Uses the official "receive messages" callback with the standard WeWork
+ * crypto: msg_signature = sha1(sort(token, timestamp, nonce, echostr|encrypt)),
+ * and AES-256-CBC (PKCS7) where the key is base64(EncodingAESKey + "=") and the
+ * plaintext is [16B random][4B big-endian msg-len][msg][receiveid].
+ *
+ * Inbound is XML. GET verifies the callback URL (echo the decrypted echostr);
+ * POST carries the encrypted message. We extract text from <Content>.
+ *
+ * Outbound uses the application message API (message/send) with the agent's
+ * gettoken. Config (channels.wecom): { corpId, corpSecret, token, encodingAesKey,
+ *   agentId, agent? }. Env fallback: WECOM_CORP_ID, WECOM_CORP_SECRET,
+ *   WECOM_TOKEN, WECOM_AES_KEY, WECOM_AGENT_ID.
+ */
+import type { ChannelAdapter } from '../types';
+/** WeWork msg_signature: sha1 over the sorted concatenation. */
+export declare function wecomSignature(token: string, timestamp: string, nonce: string, encrypt: string): string;
+/** Decrypt a WeWork AES message. Returns { message, receiveId }. */
+export declare function decryptWecom(encrypt: string, encodingAesKey: string): {
+    message: string;
+    receiveId: string;
+};
+export declare function createWecomAdapter(cfg: any, env: NodeJS.ProcessEnv): ChannelAdapter | null;
+//# sourceMappingURL=wecom.d.ts.map

package/dist/gateway/channels/wecom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wecom.d.ts","sourceRoot":"","sources":["../../../src/gateway/channels/wecom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,cAAc,EAA2C,MAAM,UAAU,CAAC;AAIxF,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGvG;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAe5G;AASD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,cAAc,GAAG,IAAI,CAsF1F"}

package/dist/gateway/channels/wecom.js

@@ -0,0 +1,177 @@
+"use strict";
+/**
+ * WeCom (企业微信) channel adapter.
+ *
+ * Uses the official "receive messages" callback with the standard WeWork
+ * crypto: msg_signature = sha1(sort(token, timestamp, nonce, echostr|encrypt)),
+ * and AES-256-CBC (PKCS7) where the key is base64(EncodingAESKey + "=") and the
+ * plaintext is [16B random][4B big-endian msg-len][msg][receiveid].
+ *
+ * Inbound is XML. GET verifies the callback URL (echo the decrypted echostr);
+ * POST carries the encrypted message. We extract text from <Content>.
+ *
+ * Outbound uses the application message API (message/send) with the agent's
+ * gettoken. Config (channels.wecom): { corpId, corpSecret, token, encodingAesKey,
+ *   agentId, agent? }. Env fallback: WECOM_CORP_ID, WECOM_CORP_SECRET,
+ *   WECOM_TOKEN, WECOM_AES_KEY, WECOM_AGENT_ID.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wecomSignature = wecomSignature;
+exports.decryptWecom = decryptWecom;
+exports.createWecomAdapter = createWecomAdapter;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../core/logger");
+const helpers_1 = require("../helpers");
+const log = (0, logger_1.getLogger)('channel-wecom');
+/** WeWork msg_signature: sha1 over the sorted concatenation. */
+function wecomSignature(token, timestamp, nonce, encrypt) {
+    const arr = [token, timestamp, nonce, encrypt].sort();
+    return crypto.createHash('sha1').update(arr.join('')).digest('hex');
+}
+/** Decrypt a WeWork AES message. Returns { message, receiveId }. */
+function decryptWecom(encrypt, encodingAesKey) {
+    const key = Buffer.from(encodingAesKey + '=', 'base64'); // 32 bytes
+    const iv = key.subarray(0, 16);
+    const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
+    decipher.setAutoPadding(false);
+    let decrypted = Buffer.concat([decipher.update(Buffer.from(encrypt, 'base64')), decipher.final()]);
+    // PKCS7 unpad
+    const pad = decrypted[decrypted.length - 1];
+    if (pad > 0 && pad <= 32)
+        decrypted = decrypted.subarray(0, decrypted.length - pad);
+    // [16B random][4B msg len BE][msg][receiveid]
+    const content = decrypted.subarray(16);
+    const msgLen = content.readUInt32BE(0);
+    const message = content.subarray(4, 4 + msgLen).toString('utf8');
+    const receiveId = content.subarray(4 + msgLen).toString('utf8');
+    return { message, receiveId };
+}
+function xmlField(xml, tag) {
+    const cdata = xml.match(new RegExp(`<${tag}><!\\[CDATA\\[([\\s\\S]*?)\\]\\]></${tag}>`));
+    if (cdata)
+        return cdata[1];
+    const plain = xml.match(new RegExp(`<${tag}>([\\s\\S]*?)</${tag}>`));
+    return plain ? plain[1] : '';
+}
+function createWecomAdapter(cfg, env) {
+    const corpId = (0, helpers_1.resolveSecret)(cfg.corpId, env, 'WECOM_CORP_ID');
+    const corpSecret = (0, helpers_1.resolveSecret)(cfg.corpSecret, env, 'WECOM_CORP_SECRET');
+    const token = (0, helpers_1.resolveSecret)(cfg.token, env, 'WECOM_TOKEN');
+    const aesKey = (0, helpers_1.resolveSecret)(cfg.encodingAesKey, env, 'WECOM_AES_KEY');
+    const agentId = (0, helpers_1.resolveSecret)(cfg.agentId != null ? String(cfg.agentId) : undefined, env, 'WECOM_AGENT_ID');
+    if (!corpId || !corpSecret || !token || !aesKey)
+        return null;
+    const tokenCache = new helpers_1.TokenCache(async () => {
+        const data = await (0, helpers_1.getJson)(`https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=${encodeURIComponent(corpId)}&corpsecret=${encodeURIComponent(corpSecret)}`);
+        if (data.errcode !== 0)
+            throw new Error(`wecom token error ${data.errcode}: ${data.errmsg}`);
+        return { token: data.access_token, expiresInSec: data.expires_in ?? 7200 };
+    });
+    const verify = (req, encrypt) => {
+        const sig = req.query.get('msg_signature') || '';
+        const ts = req.query.get('timestamp') || '';
+        const nonce = req.query.get('nonce') || '';
+        return sig === wecomSignature(token, ts, nonce, encrypt);
+    };
+    return {
+        id: 'wecom',
+        name: 'WeCom (企业微信)',
+        defaultAgent: cfg.agent || 'fair',
+        async handleWebhook(req) {
+            // URL verification: GET with echostr.
+            if (req.method === 'GET') {
+                const echostr = req.query.get('echostr') || '';
+                if (!verify(req, echostr))
+                    return { response: { status: 403, body: 'bad signature' } };
+                try {
+                    const { message } = decryptWecom(echostr, aesKey);
+                    return { response: { status: 200, body: message } };
+                }
+                catch (e) {
+                    log.warn('wecom_echostr_decrypt_failed', { error: String(e) });
+                    return { response: { status: 400, body: 'decrypt failed' } };
+                }
+            }
+            // Message callback: POST with <Encrypt> XML.
+            const xml = req.body.toString('utf8');
+            const encrypt = xmlField(xml, 'Encrypt');
+            if (!encrypt)
+                return { response: { status: 400, body: 'no encrypt' } };
+            if (!verify(req, encrypt))
+                return { response: { status: 403, body: 'bad signature' } };
+            let inner;
+            try {
+                inner = decryptWecom(encrypt, aesKey).message;
+            }
+            catch (e) {
+                log.warn('wecom_decrypt_failed', { error: String(e) });
+                return { response: { status: 400, body: 'decrypt failed' } };
+            }
+            const msgType = xmlField(inner, 'MsgType');
+            const fromUser = xmlField(inner, 'FromUserName');
+            let text = '';
+            if (msgType === 'text')
+                text = xmlField(inner, 'Content').trim();
+            else
+                text = `[${msgType} 消息]`;
+            // Ack the callback immediately (empty 200); reply is pushed via the API.
+            return {
+                response: { status: 200, body: '' },
+                message: text ? {
+                    channel: 'wecom',
+                    conversationId: fromUser,
+                    userId: fromUser,
+                    text,
+                    replyTo: { channel: 'wecom', toUser: fromUser },
+                    raw: inner,
+                } : undefined,
+            };
+        },
+        async send(target, text) {
+            const toUser = target.toUser;
+            if (!toUser || !agentId)
+                return;
+            const accessToken = await tokenCache.get();
+            const data = await (0, helpers_1.postJson)(`https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=${encodeURIComponent(accessToken)}`, { touser: toUser, msgtype: 'text', agentid: Number(agentId), text: { content: text } });
+            if (data.errcode !== 0) {
+                if (data.errcode === 42001 || data.errcode === 40014)
+                    tokenCache.invalidate();
+                throw new Error(`wecom send error ${data.errcode}: ${data.errmsg}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=wecom.js.map

package/dist/gateway/channels/wecom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wecom.js","sourceRoot":"","sources":["../../../src/gateway/channels/wecom.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,wCAGC;AAGD,oCAeC;AASD,gDAsFC;AA5HD,+CAAiC;AACjC,8CAA8C;AAC9C,wCAA0E;AAG1E,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,eAAe,CAAC,CAAC;AAEvC,gEAAgE;AAChE,SAAgB,cAAc,CAAC,KAAa,EAAE,SAAiB,EAAE,KAAa,EAAE,OAAe;IAC7F,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,oEAAoE;AACpE,SAAgB,YAAY,CAAC,OAAe,EAAE,cAAsB;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW;IACpE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnG,cAAc;IACd,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACpF,8CAA8C;IAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,sCAAsC,GAAG,GAAG,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,kBAAkB,GAAG,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAQ,EAAE,GAAsB;IACjE,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC5G,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,iBAAO,EACxB,uDAAuD,kBAAkB,CAAC,MAAM,CAAC,eAAe,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACjI,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,GAAe,EAAE,OAAe,EAAW,EAAE;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,GAAG,KAAK,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,cAAc;QACpB,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAEjC,KAAK,CAAC,aAAa,CAAC,GAAe;YACjC,sCAAsC;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;oBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;gBACvF,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAClD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;gBACtD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC/D,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;gBAC/D,CAAC;YACH,CAAC;YAED,6CAA6C;YAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;YAEvF,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC;YAAC,CAAC;YACtD,OAAO,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;YAAC,CAAC;YAEnI,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACjD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,OAAO,KAAK,MAAM;gBAAE,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;;gBAC5D,IAAI,GAAG,IAAI,OAAO,MAAM,CAAC;YAE9B,yEAAyE;YACzE,OAAO;gBACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;oBACd,OAAO,EAAE,OAAO;oBAChB,cAAc,EAAE,QAAQ;oBACxB,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC/C,GAAG,EAAE,KAAK;iBACX,CAAC,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,IAAY;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgB,CAAC;YACvC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;gBAAE,OAAO;YAChC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,iEAAiE,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAClG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CACvF,CAAC;YACF,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}