skyloom 1.20.0 → 1.22.0

package/dist/gateway/channels/feishu.js

@@ -0,0 +1,290 @@
+"use strict";
+/**
+ * Feishu / Lark channel adapter.
+ *
+ * Inbound: the event-subscription webhook (v2 schema). Handles the
+ * url_verification challenge, optional AES-encrypted payloads, and the optional
+ * verification-token check, then normalizes im.message.receive_v1 events.
+ *
+ * Outbound: obtains a tenant_access_token (cached) and replies via the
+ * im/v1/messages API (text by default).
+ *
+ * Config (channels.feishu): { appId, appSecret, encryptKey?, verificationToken?,
+ *   domain?: 'feishu'|'lark', agent? }. Env fallback: FEISHU_APP_ID,
+ *   FEISHU_APP_SECRET, FEISHU_ENCRYPT_KEY, FEISHU_VERIFICATION_TOKEN.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decryptFeishu = decryptFeishu;
+exports.createFeishuAdapter = createFeishuAdapter;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../core/logger");
+const helpers_1 = require("../helpers");
+const log = (0, logger_1.getLogger)('channel-feishu');
+/** Decrypt a Feishu AES-256-CBC encrypted event body. */
+function decryptFeishu(encrypt, encryptKey) {
+    const key = crypto.createHash('sha256').update(encryptKey).digest();
+    const data = Buffer.from(encrypt, 'base64');
+    const iv = data.subarray(0, 16);
+    const ciphertext = data.subarray(16);
+    const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
+    decipher.setAutoPadding(false);
+    let out = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    // PKCS#7 unpad
+    const pad = out[out.length - 1];
+    if (pad > 0 && pad <= 16)
+        out = out.subarray(0, out.length - pad);
+    return out.toString('utf8');
+}
+function createFeishuAdapter(cfg, env) {
+    const appId = (0, helpers_1.resolveSecret)(cfg.appId, env, 'FEISHU_APP_ID');
+    const appSecret = (0, helpers_1.resolveSecret)(cfg.appSecret, env, 'FEISHU_APP_SECRET');
+    if (!appId || !appSecret)
+        return null; // not configured
+    const encryptKey = (0, helpers_1.resolveSecret)(cfg.encryptKey, env, 'FEISHU_ENCRYPT_KEY');
+    const verificationToken = (0, helpers_1.resolveSecret)(cfg.verificationToken, env, 'FEISHU_VERIFICATION_TOKEN');
+    const base = cfg.domain === 'lark' ? 'https://open.larksuite.com' : 'https://open.feishu.cn';
+    // 'card' replies render as an interactive card (supports streaming patches);
+    // 'raw' forces plain text; 'auto' (default) uses a card so streaming works.
+    const renderMode = cfg.renderMode || 'auto';
+    const useCard = renderMode === 'card' || renderMode === 'auto';
+    const tokenCache = new helpers_1.TokenCache(async () => {
+        const data = await (0, helpers_1.postJson)(`${base}/open-apis/auth/v3/tenant_access_token/internal`, {
+            app_id: appId, app_secret: appSecret,
+        });
+        if (data.code !== 0)
+            throw new Error(`feishu token error ${data.code}: ${data.msg}`);
+        return { token: data.tenant_access_token, expiresInSec: data.expire ?? 7200 };
+    });
+    const authHeader = async () => ({ Authorization: `Bearer ${await tokenCache.get()}` });
+    const onTokenError = (code) => { if (code === 99991663 || code === 99991661)
+        tokenCache.invalidate(); };
+    /** A minimal interactive card carrying a single markdown body. */
+    const cardContent = (text) => JSON.stringify({
+        config: { wide_screen_mode: true, update_multi: true },
+        elements: [{ tag: 'markdown', content: text || ' ' }],
+    });
+    /** Create a card message in a chat; returns its message_id for later patches. */
+    const createCard = async (chatId, text) => {
+        const data = await (0, helpers_1.postJson)(`${base}/open-apis/im/v1/messages?receive_id_type=chat_id`, { receive_id: chatId, msg_type: 'interactive', content: cardContent(text) }, { headers: await authHeader() });
+        if (data.code !== 0) {
+            onTokenError(data.code);
+            throw new Error(`feishu card create ${data.code}: ${data.msg}`);
+        }
+        return data.data?.message_id || null;
+    };
+    /** Patch an existing card message with new content. */
+    const patchCard = async (messageId, text) => {
+        const data = await (0, helpers_1.postJson)(`${base}/open-apis/im/v1/messages/${messageId}`, { content: cardContent(text) }, { headers: await authHeader() }).catch((e) => ({ code: -1, msg: String(e) }));
+        if (data && data.code !== 0)
+            onTokenError(data.code);
+    };
+    // De-dupe redelivered events (Feishu retries on slow ack).
+    const seen = new Set();
+    const remember = (id) => {
+        if (!id)
+            return false;
+        if (seen.has(id))
+            return true;
+        seen.add(id);
+        if (seen.size > 2000)
+            seen.clear();
+        return false;
+    };
+    return {
+        id: 'feishu',
+        name: 'Feishu/Lark',
+        defaultAgent: cfg.agent || 'fair',
+        async handleWebhook(req) {
+            let payload;
+            try {
+                payload = JSON.parse(req.body.toString('utf8') || '{}');
+            }
+            catch {
+                return { response: { status: 400, body: 'bad json' } };
+            }
+            // Encrypted transport: { encrypt: "..." } → decrypt to the real payload.
+            if (payload.encrypt) {
+                if (!encryptKey)
+                    return { response: { status: 400, body: 'encrypt key not configured' } };
+                try {
+                    payload = JSON.parse(decryptFeishu(payload.encrypt, encryptKey));
+                }
+                catch (e) {
+                    log.warn('feishu_decrypt_failed', { error: String(e) });
+                    return { response: { status: 400, body: 'decrypt failed' } };
+                }
+            }
+            // URL verification handshake.
+            if (payload.type === 'url_verification') {
+                if (verificationToken && payload.token && payload.token !== verificationToken) {
+                    return { response: { status: 403, body: 'bad token' } };
+                }
+                return { response: { status: 200, contentType: 'application/json', body: JSON.stringify({ challenge: payload.challenge }) } };
+            }
+            // Verification token check (v2 puts it in header.token).
+            const token = payload.header?.token ?? payload.token;
+            if (verificationToken && token && token !== verificationToken) {
+                return { response: { status: 403, body: 'bad token' } };
+            }
+            const eventId = payload.header?.event_id;
+            if (remember(eventId))
+                return {}; // duplicate redelivery
+            const eventType = payload.header?.event_type ?? payload.event?.type;
+            if (eventType !== 'im.message.receive_v1')
+                return {}; // only handle message receipts
+            const message = payload.event?.message;
+            if (!message)
+                return {};
+            const chatId = message.chat_id;
+            const msgType = message.message_type;
+            let text = '';
+            const media = [];
+            let content = {};
+            try {
+                content = JSON.parse(message.content || '{}');
+            }
+            catch { /* ignore */ }
+            switch (msgType) {
+                case 'text':
+                    text = (content.text || '').replace(/@_user_\d+/g, '').trim(); // strip @mentions
+                    break;
+                case 'image':
+                    media.push({ kind: 'image', ref: content.image_key });
+                    break;
+                case 'audio':
+                    media.push({ kind: 'audio', ref: content.file_key });
+                    break;
+                case 'media': // short video
+                    media.push({ kind: 'video', ref: content.file_key, filename: content.file_name });
+                    break;
+                case 'file':
+                    media.push({ kind: 'file', ref: content.file_key, filename: content.file_name });
+                    break;
+                case 'sticker':
+                    media.push({ kind: 'sticker', ref: content.file_key });
+                    break;
+                case 'post': { // rich text: pull plain text + embedded images
+                    const blocks = content?.content;
+                    if (Array.isArray(blocks)) {
+                        for (const row of blocks) {
+                            for (const el of row || []) {
+                                if (el?.tag === 'text' && el.text)
+                                    text += el.text;
+                                else if (el?.tag === 'a' && el.text)
+                                    text += el.text;
+                                else if (el?.tag === 'img' && el.image_key)
+                                    media.push({ kind: 'image', ref: el.image_key });
+                            }
+                            text += '\n';
+                        }
+                    }
+                    text = text.trim();
+                    break;
+                }
+                default:
+                    text = `[${msgType} 消息]`;
+            }
+            const senderId = payload.event?.sender?.sender_id?.open_id || payload.event?.sender?.sender_id?.user_id || 'unknown';
+            return {
+                message: {
+                    channel: 'feishu',
+                    conversationId: chatId || senderId,
+                    userId: senderId,
+                    text,
+                    media: media.length ? media : undefined,
+                    replyTo: { channel: 'feishu', chatId },
+                    raw: payload,
+                },
+            };
+        },
+        async send(target, text) {
+            const chatId = target.chatId;
+            if (!chatId)
+                return;
+            if (useCard) {
+                await createCard(chatId, text);
+                return;
+            }
+            const data = await (0, helpers_1.postJson)(`${base}/open-apis/im/v1/messages?receive_id_type=chat_id`, { receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text }) }, { headers: await authHeader() });
+            if (data.code !== 0) {
+                onTokenError(data.code);
+                throw new Error(`feishu send error ${data.code}: ${data.msg}`);
+            }
+        },
+        // Streaming reply: post a placeholder card, then patch it as text arrives —
+        // throttled (≥600ms apart) to stay well under Feishu's update rate limit.
+        async sendStreaming(target, chunks) {
+            const chatId = target.chatId;
+            if (!chatId)
+                return;
+            if (!useCard) { // plain-text mode can't patch; collect then send once
+                let all = '';
+                for await (const c of chunks)
+                    all += c;
+                await this.send(target, all.trim() || '(无回复)');
+                return;
+            }
+            let messageId = null;
+            let acc = '';
+            let lastPatch = 0;
+            let dirty = false;
+            const MIN_INTERVAL = 600;
+            try {
+                messageId = await createCard(chatId, '思考中…');
+            }
+            catch (e) {
+                log.warn('feishu_card_create_failed', { error: String(e) });
+                return;
+            }
+            if (!messageId)
+                return;
+            for await (const chunk of chunks) {
+                acc += chunk;
+                dirty = true;
+                const now = Date.now();
+                if (now - lastPatch >= MIN_INTERVAL) {
+                    lastPatch = now;
+                    dirty = false;
+                    await patchCard(messageId, acc);
+                }
+            }
+            // Final flush so the last tokens always land.
+            if (dirty || acc)
+                await patchCard(messageId, acc.trim() || '(无回复)');
+        },
+    };
+}
+//# sourceMappingURL=feishu.js.map

package/dist/gateway/channels/feishu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu.js","sourceRoot":"","sources":["../../../src/gateway/channels/feishu.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,sCAYC;AAED,kDA4MC;AAlOD,+CAAiC;AACjC,8CAA8C;AAC9C,wCAAiE;AAGjE,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,gBAAgB,CAAC,CAAC;AAExC,yDAAyD;AACzD,SAAgB,aAAa,CAAC,OAAe,EAAE,UAAkB;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,eAAe;IACf,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAQ,EAAE,GAAsB;IAClE,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAExD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC7F,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,UAAU,GAA4B,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,CAAC;IAE/D,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EAAC,GAAG,IAAI,iDAAiD,EAAE;YACpF,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;SACrC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ;QAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhH,kEAAkE;IAClE,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3D,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QACtD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,iFAAiF;IACjF,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAAE,IAAY,EAA0B,EAAE;QAChF,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,GAAG,IAAI,mDAAmD,EAC1D,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAC3E,EAAE,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,CAChC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QAClH,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;IACvC,CAAC,CAAC;IAEF,uDAAuD;IACvD,MAAM,SAAS,GAAG,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAiB,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,GAAG,IAAI,6BAA6B,SAAS,EAAE,EAC/C,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAC9B,EAAE,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,CAChC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAW,EAAE;QACvC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAEjC,KAAK,CAAC,aAAa,CAAC,GAAe;YACjC,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;YAAC,CAAC;YAElI,yEAAyE;YACzE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU;oBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,CAAC;gBAC1F,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACzE,OAAO,CAAC,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;gBAAC,CAAC;YACtI,CAAC;YAED,8BAA8B;YAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,IAAI,iBAAiB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;oBAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;gBAC1D,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YAChI,CAAC;YAED,yDAAyD;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;YACrD,IAAI,iBAAiB,IAAI,KAAK,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;gBAC9D,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;YACzC,IAAI,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC,CAAC,uBAAuB;YAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACpE,IAAI,SAAS,KAAK,uBAAuB;gBAAE,OAAO,EAAE,CAAC,CAAC,+BAA+B;YAErF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;YACvC,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAiB,CAAC;YACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAsB,CAAC;YAC/C,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,MAAM,KAAK,GAAsB,EAAE,CAAC;YACpC,IAAI,OAAO,GAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7E,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,MAAM;oBACT,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,kBAAkB;oBACjF,MAAM;gBACR,KAAK,OAAO;oBACV,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBACtD,MAAM;gBACR,KAAK,OAAO;oBACV,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,KAAK,OAAO,EAAE,cAAc;oBAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBAClF,MAAM;gBACR,KAAK,MAAM;oBACT,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBACjF,MAAM;gBACR,KAAK,SAAS;oBACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACvD,MAAM;gBACR,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,+CAA+C;oBAC5D,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC;oBAChC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;4BACzB,KAAK,MAAM,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;gCAC3B,IAAI,EAAE,EAAE,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,IAAI;oCAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC;qCAC9C,IAAI,EAAE,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC,IAAI;oCAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC;qCAChD,IAAI,EAAE,EAAE,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC,SAAS;oCAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;4BAC/F,CAAC;4BACD,IAAI,IAAI,IAAI,CAAC;wBACf,CAAC;oBACH,CAAC;oBACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD;oBACE,IAAI,GAAG,IAAI,OAAO,MAAM,CAAC;YAC7B,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,IAAI,SAAS,CAAC;YAErH,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,QAAQ;oBACjB,cAAc,EAAE,MAAM,IAAI,QAAQ;oBAClC,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACvC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;oBACtC,GAAG,EAAE,OAAO;iBACb;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,IAAY;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgB,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,OAAO,EAAE,CAAC;gBAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EACzB,GAAG,IAAI,mDAAmD,EAC1D,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAC3E,EAAE,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,CAChC,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,CAAC;QACnH,CAAC;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,KAAK,CAAC,aAAa,CAAC,MAAmB,EAAE,MAA6B;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgB,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,sDAAsD;gBACpE,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM;oBAAE,GAAG,IAAI,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,MAAM,YAAY,GAAG,GAAG,CAAC;YACzB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpF,IAAI,CAAC,SAAS;gBAAE,OAAO;YAEvB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,GAAG,IAAI,KAAK,CAAC;gBACb,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;oBACpC,SAAS,GAAG,GAAG,CAAC;oBAChB,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,8CAA8C;YAC9C,IAAI,KAAK,IAAI,GAAG;gBAAE,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/channels/qq.d.ts

@@ -0,0 +1,25 @@
+/**
+ * QQ official-bot channel adapter (webhook mode, QQ 频道/群 机器人).
+ *
+ * Auth/crypto: QQ uses Ed25519. The signing seed is the bot secret repeated to
+ * 32 bytes. Two webhook concerns:
+ *   - validation (op 13): the platform sends { d: { plain_token, event_ts } };
+ *     we reply { plain_token, signature } where signature = ed25519(event_ts +
+ *     plain_token).
+ *   - event signature: each push carries X-Signature-Ed25519 (hex) and
+ *     X-Signature-Timestamp; verify ed25519 over (timestamp + body).
+ *
+ * Inbound message events: GROUP_AT_MESSAGE_CREATE / C2C_MESSAGE_CREATE /
+ * AT_MESSAGE_CREATE. Outbound: getAppAccessToken (cached) then the v2 messages
+ * API (passive reply via msg_id). Config (channels.qq): { appId, secret,
+ *   agent? }. Env fallback: QQ_BOT_APPID, QQ_BOT_SECRET.
+ */
+import type { ChannelAdapter } from '../types';
+/** Repeat the bot secret to a 32-byte Ed25519 seed (QQ's scheme). */
+export declare function qqSeed(secret: string): Buffer;
+/** Sign `event_ts + plain_token` for the validation handshake; returns hex. */
+export declare function qqSignValidation(secret: string, eventTs: string, plainToken: string): string;
+/** Verify an event push signature (hex) over `timestamp + body`. */
+export declare function qqVerify(secret: string, timestamp: string, body: Buffer, signatureHex: string): boolean;
+export declare function createQQAdapter(cfg: any, env: NodeJS.ProcessEnv): ChannelAdapter | null;
+//# sourceMappingURL=qq.d.ts.map

package/dist/gateway/channels/qq.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qq.d.ts","sourceRoot":"","sources":["../../../src/gateway/channels/qq.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,cAAc,EAA4D,MAAM,UAAU,CAAC;AAMzG,qEAAqE;AACrE,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI7C;AAMD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG5F;AAED,oEAAoE;AACpE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CASvG;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,cAAc,GAAG,IAAI,CA+FvF"}

package/dist/gateway/channels/qq.js

@@ -0,0 +1,187 @@
+"use strict";
+/**
+ * QQ official-bot channel adapter (webhook mode, QQ 频道/群 机器人).
+ *
+ * Auth/crypto: QQ uses Ed25519. The signing seed is the bot secret repeated to
+ * 32 bytes. Two webhook concerns:
+ *   - validation (op 13): the platform sends { d: { plain_token, event_ts } };
+ *     we reply { plain_token, signature } where signature = ed25519(event_ts +
+ *     plain_token).
+ *   - event signature: each push carries X-Signature-Ed25519 (hex) and
+ *     X-Signature-Timestamp; verify ed25519 over (timestamp + body).
+ *
+ * Inbound message events: GROUP_AT_MESSAGE_CREATE / C2C_MESSAGE_CREATE /
+ * AT_MESSAGE_CREATE. Outbound: getAppAccessToken (cached) then the v2 messages
+ * API (passive reply via msg_id). Config (channels.qq): { appId, secret,
+ *   agent? }. Env fallback: QQ_BOT_APPID, QQ_BOT_SECRET.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.qqSeed = qqSeed;
+exports.qqSignValidation = qqSignValidation;
+exports.qqVerify = qqVerify;
+exports.createQQAdapter = createQQAdapter;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../core/logger");
+const helpers_1 = require("../helpers");
+const log = (0, logger_1.getLogger)('channel-qq');
+const PKCS8_ED25519_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+/** Repeat the bot secret to a 32-byte Ed25519 seed (QQ's scheme). */
+function qqSeed(secret) {
+    let s = secret;
+    while (s.length < 32)
+        s = s + s;
+    return Buffer.from(s.slice(0, 32), 'utf8');
+}
+function privKeyFromSeed(seed) {
+    return crypto.createPrivateKey({ key: Buffer.concat([PKCS8_ED25519_PREFIX, seed]), format: 'der', type: 'pkcs8' });
+}
+/** Sign `event_ts + plain_token` for the validation handshake; returns hex. */
+function qqSignValidation(secret, eventTs, plainToken) {
+    const priv = privKeyFromSeed(qqSeed(secret));
+    return crypto.sign(null, Buffer.from(eventTs + plainToken, 'utf8'), priv).toString('hex');
+}
+/** Verify an event push signature (hex) over `timestamp + body`. */
+function qqVerify(secret, timestamp, body, signatureHex) {
+    try {
+        const pub = crypto.createPublicKey(privKeyFromSeed(qqSeed(secret)));
+        const msg = Buffer.concat([Buffer.from(timestamp, 'utf8'), body]);
+        return crypto.verify(null, msg, pub, Buffer.from(signatureHex, 'hex'));
+    }
+    catch (e) {
+        log.warn('qq_verify_error', { error: String(e) });
+        return false;
+    }
+}
+function createQQAdapter(cfg, env) {
+    const appId = (0, helpers_1.resolveSecret)(cfg.appId != null ? String(cfg.appId) : undefined, env, 'QQ_BOT_APPID');
+    const secret = (0, helpers_1.resolveSecret)(cfg.secret, env, 'QQ_BOT_SECRET');
+    if (!appId || !secret)
+        return null;
+    const tokenCache = new helpers_1.TokenCache(async () => {
+        const data = await (0, helpers_1.postJson)('https://bots.qq.com/app/getAppAccessToken', {
+            appId, clientSecret: secret,
+        });
+        if (!data.access_token)
+            throw new Error(`qq token error: ${JSON.stringify(data).slice(0, 120)}`);
+        return { token: data.access_token, expiresInSec: Number(data.expires_in) || 7200 };
+    });
+    const authHeaders = async () => ({ Authorization: `QQBot ${await tokenCache.get()}`, 'X-Union-Appid': appId });
+    return {
+        id: 'qq',
+        name: 'QQ Bot',
+        defaultAgent: cfg.agent || 'fair',
+        async handleWebhook(req) {
+            let payload;
+            try {
+                payload = JSON.parse(req.body.toString('utf8') || '{}');
+            }
+            catch {
+                return { response: { status: 400, body: 'bad json' } };
+            }
+            // Validation handshake (op 13) — no signature header on this one.
+            if (payload.op === 13 && payload.d?.plain_token && payload.d?.event_ts) {
+                const signature = qqSignValidation(secret, String(payload.d.event_ts), String(payload.d.plain_token));
+                return { response: { status: 200, contentType: 'application/json', body: JSON.stringify({ plain_token: payload.d.plain_token, signature }) } };
+            }
+            // Verify the event push signature.
+            const sig = req.headers['x-signature-ed25519'] || '';
+            const ts = req.headers['x-signature-timestamp'] || '';
+            if (sig && ts && !qqVerify(secret, ts, req.body, sig)) {
+                return { response: { status: 403, body: 'bad signature' } };
+            }
+            if (payload.op !== 0)
+                return { response: { status: 200, body: '' } }; // not a dispatch
+            const t = payload.t;
+            const d = payload.d || {};
+            const content = String(d.content || '').replace(/<@!?\d+>/g, '').trim();
+            const msgId = d.id;
+            let replyTo = null;
+            if (t === 'GROUP_AT_MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'group', groupOpenid: d.group_openid, msgId };
+            else if (t === 'C2C_MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'c2c', userOpenid: d.author?.user_openid, msgId };
+            else if (t === 'AT_MESSAGE_CREATE' || t === 'MESSAGE_CREATE')
+                replyTo = { channel: 'qq', kind: 'channel', channelId: d.channel_id, msgId };
+            // QQ delivers images/files as an attachments array on the event.
+            const media = [];
+            for (const att of (Array.isArray(d.attachments) ? d.attachments : [])) {
+                const ct = String(att?.content_type || '');
+                const kind = ct.startsWith('image') ? 'image'
+                    : ct.startsWith('audio') || ct.startsWith('voice') ? 'audio'
+                        : ct.startsWith('video') ? 'video' : 'file';
+                media.push({ kind, ref: att?.id, filename: att?.filename, mimeType: att?.content_type, url: att?.url });
+            }
+            if (!replyTo || (!content && media.length === 0))
+                return { response: { status: 200, body: '' } };
+            const userId = d.author?.user_openid || d.author?.id || d.author?.member_openid || 'unknown';
+            return {
+                response: { status: 200, body: '' },
+                message: {
+                    channel: 'qq',
+                    conversationId: replyTo.groupOpenid || replyTo.channelId || userId,
+                    userId,
+                    text: content,
+                    media: media.length ? media : undefined,
+                    replyTo,
+                    raw: payload,
+                },
+            };
+        },
+        async send(target, text) {
+            const headers = { ...(await authHeaders()), 'Content-Type': 'application/json' };
+            const msgId = target.msgId;
+            const payload = { msg_type: 0, content: text };
+            if (msgId)
+                payload.msg_id = msgId; // passive reply within the allowed window
+            let url;
+            if (target.kind === 'group')
+                url = `https://api.sgroup.qq.com/v2/groups/${target.groupOpenid}/messages`;
+            else if (target.kind === 'c2c')
+                url = `https://api.sgroup.qq.com/v2/users/${target.userOpenid}/messages`;
+            else
+                url = `https://api.sgroup.qq.com/channels/${target.channelId}/messages`;
+            try {
+                await (0, helpers_1.postJson)(url, payload, { headers });
+            }
+            catch (e) {
+                if (e?.response?.status === 401)
+                    tokenCache.invalidate();
+                throw new Error(`qq send error: ${e?.response?.status || ''} ${String(e?.message || e).slice(0, 120)}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=qq.js.map

package/dist/gateway/channels/qq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qq.js","sourceRoot":"","sources":["../../../src/gateway/channels/qq.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYH,wBAIC;AAOD,4CAGC;AAGD,4BASC;AAED,0CA+FC;AArID,+CAAiC;AACjC,8CAA8C;AAC9C,wCAAiE;AAGjE,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,YAAY,CAAC,CAAC;AAEpC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAEpF,qEAAqE;AACrE,SAAgB,MAAM,CAAC,MAAc;IACnC,IAAI,CAAC,GAAG,MAAM,CAAC;IACf,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,+EAA+E;AAC/E,SAAgB,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,UAAkB;IAClF,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,oEAAoE;AACpE,SAAgB,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,YAAoB;IAC5F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,GAAQ,EAAE,GAAsB;IAC9D,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EAAC,2CAA2C,EAAE;YACvE,KAAK,EAAE,YAAY,EAAE,MAAM;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/G,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAEjC,KAAK,CAAC,aAAa,CAAC,GAAe;YACjC,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;YAAC,CAAC;YAElI,kEAAkE;YAClE,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,WAAW,IAAI,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;gBACtG,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACjJ,CAAC;YAED,mCAAmC;YACnC,MAAM,GAAG,GAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAY,IAAI,EAAE,CAAC;YACjE,MAAM,EAAE,GAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAY,IAAI,EAAE,CAAC;YAClE,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;YAC9D,CAAC;YAED,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB;YAEvF,MAAM,CAAC,GAAG,OAAO,CAAC,CAAW,CAAC;YAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,CAAC,EAAY,CAAC;YAE7B,IAAI,OAAO,GAAuB,IAAI,CAAC;YACvC,IAAI,CAAC,KAAK,yBAAyB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;iBAC/G,IAAI,CAAC,KAAK,oBAAoB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;iBACnH,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,gBAAgB;gBAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;YAE3I,iEAAiE;YACjE,MAAM,KAAK,GAAsB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAA4B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;oBACpE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;wBAC5D,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1G,CAAC;YAED,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;YAEjG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;YAC7F,OAAO;gBACL,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnC,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,cAAc,EAAG,OAAO,CAAC,WAAsB,IAAK,OAAO,CAAC,SAAoB,IAAK,MAAiB;oBACtG,MAAM;oBACN,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACvC,OAAO;oBACP,GAAG,EAAE,OAAO;iBACb;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,IAAY;YAC1C,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,CAAC,KAA2B,CAAC;YACjD,MAAM,OAAO,GAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,0CAA0C;YAE7E,IAAI,GAAW,CAAC;YAChB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,GAAG,GAAG,uCAAuC,MAAM,CAAC,WAAW,WAAW,CAAC;iBACnG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;gBAAE,GAAG,GAAG,sCAAsC,MAAM,CAAC,UAAU,WAAW,CAAC;;gBACpG,GAAG,GAAG,sCAAsC,MAAM,CAAC,SAAS,WAAW,CAAC;YAE7E,IAAI,CAAC;gBACH,MAAM,IAAA,kBAAQ,EAAC,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,UAAU,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/channels/wecom.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WeCom (企业微信) channel adapter.
+ *
+ * Uses the official "receive messages" callback with the standard WeWork
+ * crypto: msg_signature = sha1(sort(token, timestamp, nonce, echostr|encrypt)),
+ * and AES-256-CBC (PKCS7) where the key is base64(EncodingAESKey + "=") and the
+ * plaintext is [16B random][4B big-endian msg-len][msg][receiveid].
+ *
+ * Inbound is XML. GET verifies the callback URL (echo the decrypted echostr);
+ * POST carries the encrypted message. We extract text from <Content>.
+ *
+ * Outbound uses the application message API (message/send) with the agent's
+ * gettoken. Config (channels.wecom): { corpId, corpSecret, token, encodingAesKey,
+ *   agentId, agent? }. Env fallback: WECOM_CORP_ID, WECOM_CORP_SECRET,
+ *   WECOM_TOKEN, WECOM_AES_KEY, WECOM_AGENT_ID.
+ */
+import type { ChannelAdapter } from '../types';
+/** WeWork msg_signature: sha1 over the sorted concatenation. */
+export declare function wecomSignature(token: string, timestamp: string, nonce: string, encrypt: string): string;
+/** Decrypt a WeWork AES message. Returns { message, receiveId }. */
+export declare function decryptWecom(encrypt: string, encodingAesKey: string): {
+    message: string;
+    receiveId: string;
+};
+export declare function createWecomAdapter(cfg: any, env: NodeJS.ProcessEnv): ChannelAdapter | null;
+//# sourceMappingURL=wecom.d.ts.map

package/dist/gateway/channels/wecom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wecom.d.ts","sourceRoot":"","sources":["../../../src/gateway/channels/wecom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,cAAc,EAA4D,MAAM,UAAU,CAAC;AAIzG,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGvG;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAe5G;AASD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,cAAc,GAAG,IAAI,CA+F1F"}