tencentcloud-sdk-nodejs-essbasic 4.1.302 → 4.1.303

package/es/services/essbasic/v20210526/essbasic_client.js

@@ -135,8 +135,8 @@ export class Client extends TencentCloudCommon.AbstractClient {
     async CreateBatchInitOrganizationUrl(req, cb) {
         return this.request("CreateBatchInitOrganizationUrl", req, cb);
     }
-    async ChannelDescribeAccountBillDetail(req, cb) {
-        return this.request("ChannelDescribeAccountBillDetail", req, cb);
+    async CreateRequestWithEncryption(req, cb) {
+        return this.request("CreateRequestWithEncryption", req, cb);
     }
     async ChannelDescribeFlowComponents(req, cb) {
         return this.request("ChannelDescribeFlowComponents", req, cb);
@@ -225,6 +225,9 @@ export class Client extends TencentCloudCommon.AbstractClient {
     async DeleteOrganizationAuthorizations(req, cb) {
         return this.request("DeleteOrganizationAuthorizations", req, cb);
     }
+    async ChannelDescribeAccountBillDetail(req, cb) {
+        return this.request("ChannelDescribeAccountBillDetail", req, cb);
+    }
     async ModifyFlowDeadline(req, cb) {
         return this.request("ModifyFlowDeadline", req, cb);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tencentcloud-sdk-nodejs-essbasic",
-  "version": "4.1.302",
+  "version": "4.1.303",
   "description": "腾讯云 API NODEJS SDK",
   "main": "./tencentcloud/index.js",
   "module": "./es/index.js",

package/tencentcloud/services/essbasic/v20210526/essbasic_client.d.ts

@@ -1,5 +1,5 @@
 import * as TencentCloudCommon from "tencentcloud-sdk-nodejs-common";
-import { SyncProxyOrganizationResponse, ChannelCreateConvertTaskApiResponse, CreateBatchAdminChangeInvitationsResponse, ChannelCreateFlowRemindsResponse, DescribeUserFlowTypeResponse, ChannelDeleteSealPoliciesRequest, ChannelBatchCancelFlowsResponse, ChannelDescribeSignFaceVideoRequest, ChannelDisableUserAutoSignResponse, DescribeExtendedServiceAuthDetailResponse, CreateLegalSealQrCodeResponse, DescribeCancelFlowsTaskResponse, CreateEmployeeQualificationSealQrCodeResponse, ChannelCreateFlowGroupByTemplatesResponse, ChannelCreateFlowSignReviewRequest, CreateFlowForwardsRequest, DescribeFlowDetailInfoRequest, ChannelCancelFlowResponse, ModifyExtendedServiceRequest, DescribeResourceUrlsByFlowsRequest, CreateFileConvertTaskRequest, CreateChannelOrganizationInfoChangeUrlResponse, ChannelCreateFlowSignUrlResponse, DescribeFileConvertTaskResponse, ChannelCreateBatchSignUrlResponse, CreateBatchAdminChangeInvitationsUrlRequest, ChannelCreatePrepareFlowResponse, CreateBatchInitOrganizationUrlResponse, OperateChannelTemplateResponse, ChannelCreateDynamicFlowApproverResponse, ChannelCreateRoleRequest, CreateOrganizationAuthFileResponse, CreateConsoleLoginUrlResponse, ChannelDeleteRoleUsersRequest, ChannelCreateUserRolesResponse, ChannelCreatePrepareFlowRequest, ChannelCreateFlowSignUrlRequest, ChannelCreateSealPolicyResponse, OperateTemplateRequest, ChannelDescribeSignFaceVideoResponse, ChannelCancelUserAutoSignEnableUrlResponse, ChannelCreateWebThemeConfigRequest, CancelOrganizationFlowsResponse, CreateFlowGroupSignReviewResponse, ChannelCreateConvertTaskApiRequest, ChannelCreateFlowByFilesRequest, UploadFilesResponse, ChannelCreatePreparedPersonalEsignResponse, DescribeResourceUrlsByFlowsResponse, ChannelCreateFlowGroupByFilesRequest, DescribeFileConvertTaskRequest, ChannelCreateOrganizationModifyQrCodeRequest, CreateChannelSubOrganizationActiveRequest, ChannelRenewAutoSignLicenseResponse, ModifyOrganizationBusinessInfoResponse, ChannelDescribeRolesRequest, DescribeBatchOrganizationRegistrationUrlsRequest, PrepareFlowsResponse, ChannelCreateOrganizationBatchSignUrlRequest, GetDownloadFlowUrlResponse, DescribeTemplatesResponse, CreateBatchOrganizationRegistrationTasksResponse, ChannelVerifyPdfRequest, CreateChannelFlowEvidenceReportRequest, ChannelCancelUserAutoSignEnableUrlRequest, DeleteOrganizationAuthorizationsResponse, ChannelCreatePrepareFlowGroupRequest, DescribeExtendedServiceAuthDetailRequest, CreateOrganizationAuthFileRequest, ChannelVerifyPdfResponse, ArchiveDynamicFlowResponse, CreateConsoleLoginUrlRequest, CreateLegalSealQrCodeRequest, CreateCloseOrganizationUrlRequest, CreatePersonAuthCertificateImageResponse, ModifyPartnerAutoSignAuthUrlRequest, CreateEmployeeQualificationSealQrCodeRequest, DescribeBatchOrganizationRegistrationTasksRequest, ChannelCreateUserAutoSignSealUrlRequest, ChannelCreateUserAutoSignEnableUrlRequest, ChannelCancelMultiFlowSignQRCodeRequest, ChannelDescribeOrganizationSealsRequest, DescribeUsageRequest, DescribeExtendedServiceAuthInfoRequest, CreateCloseOrganizationUrlResponse, DescribeChannelSealPolicyWorkflowUrlRequest, CreatePartnerAutoSignAuthUrlResponse, ArchiveDynamicFlowRequest, ChannelCreateDynamicFlowApproverRequest, ModifyFlowDeadlineResponse, DescribeFlowDetailInfoResponse, ChannelCreateBoundFlowsResponse, ChannelCreateUserAutoSignSealUrlResponse, ChannelCreateBatchQuickSignUrlRequest, ChannelCreateBoundFlowsRequest, ChannelDescribeEmployeesRequest, OperateTemplateResponse, CreateFlowBlockchainEvidenceUrlResponse, ChannelDeleteRoleUsersResponse, SyncProxyOrganizationOperatorsRequest, ChannelCreateFlowApproversResponse, CreateBatchAdminChangeInvitationsUrlResponse, DescribeUsageResponse, CreateSignUrlsRequest, ChannelCreateMultiFlowSignQRCodeRequest, ChannelCreateUserAutoSignEnableUrlResponse, ChannelGetTaskResultApiRequest, DescribeChannelOrganizationsRequest, ChannelDescribeBillUsageDetailResponse, CreateEmployeeChangeUrlResponse, ChannelRenewAutoSignLicenseRequest, ChannelCreatePreparedPersonalEsignRequest, CancelOrganizationFlowsRequest, CreatePersonAuthCertificateImageRequest, PrepareFlowsRequest, CreateFlowsByTemplatesResponse, DescribeChannelFlowEvidenceReportRequest, ChannelCreateRoleResponse, CreateEmployeeChangeUrlRequest, ChannelDescribeUserAutoSignStatusRequest, CreateModifyAdminAuthorizationUrlRequest, ChannelModifyRoleResponse, ModifyOrganizationBusinessInfoRequest, CreateSignUrlsResponse, ChannelDeleteRoleRequest, CreateBatchOrganizationRegistrationTasksRequest, ChannelCreateBatchQuickSignUrlResponse, CreateBatchOrganizationAuthorizationUrlResponse, CreatePartnerAutoSignAuthUrlRequest, DescribeBatchOrganizationRegistrationTasksResponse, ChannelCreateBatchCancelFlowUrlRequest, ChannelDescribeAccountBillDetailResponse, CreateFlowForwardsResponse, ChannelCreateFlowByFilesResponse, ChannelCreateFlowSignReviewResponse, ChannelDisableUserAutoSignRequest, ChannelDescribeOrganizationSealsResponse, SyncProxyOrganizationOperatorsResponse, CreateSealByImageResponse, ChannelCancelMultiFlowSignQRCodeResponse, ChannelDescribeRolesResponse, CreateChannelSubOrganizationActiveResponse, ChannelCreateReleaseFlowRequest, ChannelDescribeFlowComponentsResponse, DeleteOrganizationAuthorizationsRequest, ChannelCreateFlowGroupByFilesResponse, ChannelCreateMultiFlowSignQRCodeResponse, ChannelCreatePrepareFlowGroupResponse, DescribeCancelFlowsTaskRequest, ChannelDescribeUserAutoSignStatusResponse, ModifyExtendedServiceResponse, ChannelCreateUserRolesRequest, ChannelGetTaskResultApiResponse, ChannelCreateBatchSignUrlRequest, ChannelUpdateSealStatusResponse, ChannelCreateOrganizationModifyQrCodeResponse, ChannelDeleteSealPoliciesResponse, ChannelCreateWebThemeConfigResponse, GetDownloadFlowUrlRequest, ChannelCreateEmbedWebUrlResponse, ChannelBatchCancelFlowsRequest, CreateChannelOrganizationInfoChangeUrlRequest, ChannelModifyRoleRequest, ModifyFlowDeadlineRequest, ChannelUpdateSealStatusRequest, ChannelCreateFlowGroupByTemplatesRequest, CreateBatchInitOrganizationUrlRequest, CreateFlowGroupSignReviewRequest, ChannelCancelFlowRequest, DescribeTemplatesRequest, ChannelCreateSealPolicyRequest, CreateBatchAdminChangeInvitationsRequest, CreateFlowsByTemplatesRequest, DescribeBatchOrganizationRegistrationUrlsResponse, UploadFilesRequest, CreateSealByImageRequest, DescribeChannelOrganizationsResponse, ChannelCreateOrganizationBatchSignUrlResponse, CreateBatchOrganizationAuthorizationUrlRequest, ChannelCreateBatchCancelFlowUrlResponse, OperateChannelTemplateRequest, DescribeChannelSealPolicyWorkflowUrlResponse, CreateChannelFlowEvidenceReportResponse, ChannelDescribeAccountBillDetailRequest, ChannelDescribeEmployeesResponse, CreateModifyAdminAuthorizationUrlResponse, ChannelDeleteRoleResponse, ChannelCreateReleaseFlowResponse, SyncProxyOrganizationRequest, DescribeChannelFlowEvidenceReportResponse, ModifyPartnerAutoSignAuthUrlResponse, CreateFlowBlockchainEvidenceUrlRequest, DescribeUserFlowTypeRequest, ChannelCreateFlowApproversRequest, ChannelDescribeBillUsageDetailRequest, ChannelCreateFlowRemindsRequest, DescribeExtendedServiceAuthInfoResponse, CreateFileConvertTaskResponse, ChannelCreateEmbedWebUrlRequest, ChannelDescribeFlowComponentsRequest } from "./essbasic_models";
+import { SyncProxyOrganizationResponse, ChannelCreateConvertTaskApiResponse, CreateBatchAdminChangeInvitationsResponse, ChannelCreateFlowRemindsResponse, DescribeUserFlowTypeResponse, ChannelDeleteSealPoliciesRequest, ChannelBatchCancelFlowsResponse, ChannelDescribeSignFaceVideoRequest, ChannelDisableUserAutoSignResponse, DescribeExtendedServiceAuthDetailResponse, CreateLegalSealQrCodeResponse, DescribeCancelFlowsTaskResponse, CreateEmployeeQualificationSealQrCodeResponse, ChannelCreateFlowGroupByTemplatesResponse, ChannelCreateFlowSignReviewRequest, CreateFlowForwardsRequest, DescribeFlowDetailInfoRequest, ChannelCancelFlowResponse, ModifyExtendedServiceRequest, DescribeResourceUrlsByFlowsRequest, CreateFileConvertTaskRequest, CreateChannelOrganizationInfoChangeUrlResponse, ChannelCreateFlowSignUrlResponse, DescribeFileConvertTaskResponse, ChannelCreateBatchSignUrlResponse, CreateBatchAdminChangeInvitationsUrlRequest, ChannelCreatePrepareFlowResponse, CreateBatchInitOrganizationUrlResponse, OperateChannelTemplateResponse, ChannelCreateDynamicFlowApproverResponse, ChannelCreateRoleRequest, CreateOrganizationAuthFileResponse, CreateConsoleLoginUrlResponse, ChannelDeleteRoleUsersRequest, ChannelCreateUserRolesResponse, ChannelCreatePrepareFlowRequest, ChannelCreateFlowSignUrlRequest, ChannelCreateSealPolicyResponse, OperateTemplateRequest, ChannelDescribeSignFaceVideoResponse, ChannelCancelUserAutoSignEnableUrlResponse, ChannelCreateWebThemeConfigRequest, CancelOrganizationFlowsResponse, CreateFlowGroupSignReviewResponse, ChannelCreateConvertTaskApiRequest, ChannelCreateFlowByFilesRequest, UploadFilesResponse, ChannelCreatePreparedPersonalEsignResponse, DescribeResourceUrlsByFlowsResponse, ChannelCreateFlowGroupByFilesRequest, DescribeFileConvertTaskRequest, ChannelCreateOrganizationModifyQrCodeRequest, CreateChannelSubOrganizationActiveRequest, ChannelRenewAutoSignLicenseResponse, ModifyOrganizationBusinessInfoResponse, ChannelDescribeRolesRequest, DescribeBatchOrganizationRegistrationUrlsRequest, PrepareFlowsResponse, CreateRequestWithEncryptionResponse, ChannelCreateOrganizationBatchSignUrlRequest, GetDownloadFlowUrlResponse, DescribeTemplatesResponse, CreateBatchOrganizationRegistrationTasksResponse, ChannelVerifyPdfRequest, CreateChannelFlowEvidenceReportRequest, ChannelCancelUserAutoSignEnableUrlRequest, DeleteOrganizationAuthorizationsResponse, ChannelCreatePrepareFlowGroupRequest, DescribeExtendedServiceAuthDetailRequest, CreateOrganizationAuthFileRequest, ChannelVerifyPdfResponse, ArchiveDynamicFlowResponse, CreateConsoleLoginUrlRequest, CreateLegalSealQrCodeRequest, CreateCloseOrganizationUrlRequest, CreatePersonAuthCertificateImageResponse, ModifyPartnerAutoSignAuthUrlRequest, CreateEmployeeQualificationSealQrCodeRequest, DescribeBatchOrganizationRegistrationTasksRequest, ChannelCreateUserAutoSignSealUrlRequest, ChannelCreateUserAutoSignEnableUrlRequest, CreateRequestWithEncryptionRequest, ChannelCancelMultiFlowSignQRCodeRequest, ChannelDescribeOrganizationSealsRequest, DescribeUsageRequest, DescribeExtendedServiceAuthInfoRequest, CreateCloseOrganizationUrlResponse, DescribeChannelSealPolicyWorkflowUrlRequest, CreatePartnerAutoSignAuthUrlResponse, ArchiveDynamicFlowRequest, ChannelCreateDynamicFlowApproverRequest, ModifyFlowDeadlineResponse, DescribeFlowDetailInfoResponse, ChannelCreateBoundFlowsResponse, ChannelCreateUserAutoSignSealUrlResponse, ChannelCreateBatchQuickSignUrlRequest, ChannelCreateBoundFlowsRequest, ChannelDescribeEmployeesRequest, OperateTemplateResponse, CreateFlowBlockchainEvidenceUrlResponse, ChannelDeleteRoleUsersResponse, SyncProxyOrganizationOperatorsRequest, ChannelCreateFlowApproversResponse, CreateBatchAdminChangeInvitationsUrlResponse, DescribeUsageResponse, CreateSignUrlsRequest, ChannelCreateMultiFlowSignQRCodeRequest, ChannelCreateUserAutoSignEnableUrlResponse, ChannelGetTaskResultApiRequest, DescribeChannelOrganizationsRequest, ChannelDescribeBillUsageDetailResponse, CreateEmployeeChangeUrlResponse, ChannelRenewAutoSignLicenseRequest, ChannelCreatePreparedPersonalEsignRequest, CancelOrganizationFlowsRequest, CreatePersonAuthCertificateImageRequest, PrepareFlowsRequest, CreateFlowsByTemplatesResponse, DescribeChannelFlowEvidenceReportRequest, ChannelCreateRoleResponse, CreateEmployeeChangeUrlRequest, ChannelDescribeUserAutoSignStatusRequest, CreateModifyAdminAuthorizationUrlRequest, ChannelModifyRoleResponse, ModifyOrganizationBusinessInfoRequest, CreateSignUrlsResponse, ChannelDeleteRoleRequest, CreateBatchOrganizationRegistrationTasksRequest, ChannelCreateBatchQuickSignUrlResponse, CreateBatchOrganizationAuthorizationUrlResponse, CreatePartnerAutoSignAuthUrlRequest, DescribeBatchOrganizationRegistrationTasksResponse, ChannelCreateBatchCancelFlowUrlRequest, ChannelDescribeAccountBillDetailResponse, CreateFlowForwardsResponse, ChannelCreateFlowByFilesResponse, ChannelCreateFlowSignReviewResponse, ChannelDisableUserAutoSignRequest, ChannelDescribeOrganizationSealsResponse, SyncProxyOrganizationOperatorsResponse, CreateSealByImageResponse, ChannelCancelMultiFlowSignQRCodeResponse, ChannelDescribeRolesResponse, CreateChannelSubOrganizationActiveResponse, ChannelCreateReleaseFlowRequest, ChannelDescribeFlowComponentsResponse, DeleteOrganizationAuthorizationsRequest, ChannelCreateFlowGroupByFilesResponse, ChannelCreateMultiFlowSignQRCodeResponse, ChannelCreatePrepareFlowGroupResponse, DescribeCancelFlowsTaskRequest, ChannelDescribeUserAutoSignStatusResponse, ModifyExtendedServiceResponse, ChannelCreateUserRolesRequest, ChannelGetTaskResultApiResponse, ChannelCreateBatchSignUrlRequest, ChannelUpdateSealStatusResponse, ChannelCreateOrganizationModifyQrCodeResponse, ChannelDeleteSealPoliciesResponse, ChannelCreateWebThemeConfigResponse, GetDownloadFlowUrlRequest, ChannelCreateEmbedWebUrlResponse, ChannelBatchCancelFlowsRequest, CreateChannelOrganizationInfoChangeUrlRequest, ChannelModifyRoleRequest, ModifyFlowDeadlineRequest, ChannelUpdateSealStatusRequest, ChannelCreateFlowGroupByTemplatesRequest, CreateBatchInitOrganizationUrlRequest, CreateFlowGroupSignReviewRequest, ChannelCancelFlowRequest, DescribeTemplatesRequest, ChannelCreateSealPolicyRequest, CreateBatchAdminChangeInvitationsRequest, CreateFlowsByTemplatesRequest, DescribeBatchOrganizationRegistrationUrlsResponse, UploadFilesRequest, CreateSealByImageRequest, DescribeChannelOrganizationsResponse, ChannelCreateOrganizationBatchSignUrlResponse, CreateBatchOrganizationAuthorizationUrlRequest, ChannelCreateBatchCancelFlowUrlResponse, OperateChannelTemplateRequest, DescribeChannelSealPolicyWorkflowUrlResponse, CreateChannelFlowEvidenceReportResponse, ChannelDescribeAccountBillDetailRequest, ChannelDescribeEmployeesResponse, CreateModifyAdminAuthorizationUrlResponse, ChannelDeleteRoleResponse, ChannelCreateReleaseFlowResponse, SyncProxyOrganizationRequest, DescribeChannelFlowEvidenceReportResponse, ModifyPartnerAutoSignAuthUrlResponse, CreateFlowBlockchainEvidenceUrlRequest, DescribeUserFlowTypeRequest, ChannelCreateFlowApproversRequest, ChannelDescribeBillUsageDetailRequest, ChannelCreateFlowRemindsRequest, DescribeExtendedServiceAuthInfoResponse, CreateFileConvertTaskResponse, ChannelCreateEmbedWebUrlRequest, ChannelDescribeFlowComponentsRequest } from "./essbasic_models";
 /**
  * essbasic client
  * @class
@@ -636,12 +636,126 @@ export declare class Client extends TencentCloudCommon.AbstractClient {
        */
     CreateBatchInitOrganizationUrl(req: CreateBatchInitOrganizationUrlRequest, cb?: (error: string, rep: CreateBatchInitOrganizationUrlResponse) => void): Promise<CreateBatchInitOrganizationUrlResponse>;
     /**
-       * 通过此接口（ChannelDescribeAccountBillDetail）查询该第三方平台子客账号绑定中、剩余可绑定账号等套餐使用情况。
-  <ul>
-  <li>对于渠道客户企业的查询，通过指定渠道企业的唯一标识(Agent.ProxyOrganizationId)来查询“子客账号”套餐消耗详情</li>
-  </ul>
+       * 该接口支持对请求内容进行加密传输。调用方需使用约定的 AES-CBC 或 SM4-CBC 算法对请求内容进行加密，并使用 HMAC-SHA256 或 HMAC-SM3 算法对 IV 和加密后的数据进行完整性校验，防止请求内容被篡改。
+  
+  ![image](https://qcloudimg.tencent-cloud.cn/raw/391df0a37c2b213445c4909ba98824ac.svg)
+  
+  **请求端加密流程**
+  1. 每次请求使用密码学安全的随机源生成 16 字节 的 IV。每次请求必须重新生成，严禁复用。
+  2. 使用约定的 AES-CBC 或 SM4-CBC 算法对原始请求体进行加密，使用 PKCS#7 Padding。
+  3. 将加密后的密文原始字节进行标准 Base64 编码，作为 EncryptedData 参数。
+  4. 将 IV 原始字节进行标准 Base64 编码，作为 IV 参数。
+  5. 对 IV 原始字节和密文原始字节直接拼接（不添加分隔符），计算 HMAC-SHA256 或 HMAC-SM4：HMAC(Key, IVBytes || CiphertextBytes)
+  6. 将 HMAC 的结果进行 标准 Base64 编码，作为 EncryptionSignature 参数。
+  
+  **响应端解密流程**
+  1. 先判断本接口自身是否返回外层错误，此时错误为明文（标准腾讯云错误体），有则直接失败处理。
+  2. 分别对 IV、EncryptedData、EncryptionSignature 做标准 Base64 解码，得到原始字节。
+  3. 将 IV 与密文原始字节直接拼接（无分隔符），计算 HMAC-SHA256 或 HMAC-SM4：HMAC(Key, IVBytes || CiphertextBytes)。
+  4. 与响应中 EncryptionSignature 解码后的字节做恒定时间比较，不一致立即失败，不得继续解密。
+  5. 使用约定的 AES-CBC 或 SM4-CBC，以 IV 和密钥解密 EncryptedData，去除 PKCS#7 Padding 得到明文。
+  6. 先用腾讯云标准错误体反序列化明文，判断被加密业务接口是否返回 Error。
+  7. 无业务错误时，再用目标业务接口的响应结构体反序列化明文，取出实际业务参数。
+  
+  **响应端错误处理**
+  1. 外层错误（本接口本身调用失败）：返回标准腾讯云错误 JSON（含 Error.Code / Error.Message），无 EncryptedData，不需要解密即可处理。
+  2. 内层错误（业务接口执行失败）：外层成功，但解密后的明文里包含 Error.Code / Error.Message，按目标业务接口的错误规范处理。
+  
+  **处理过程示例**
+  ```
+  # ========== 前置约定 ==========
+  AESKey  : 加密 密钥（AES 32 字节，SM4 16 字节）
+  HMACKey : HMAC 密钥（与加密密钥需要不同）
+  ALGO    : AES-CBC 或 SM4-CBC，双方约定
+  HMAC    : ALGO == AES-CBC ? HMAC-SHA256 : HMAC-SM3
+  
+  # ========== 请求端：加密并调用 ==========
+  function CallWithEncryption(bizAction, bizApplicationId, bizRequestObj):
+      # 1. 序列化业务请求
+      plaintext = JSON.stringify(bizRequestObj)
+      # 2. 生成 16 字节随机 IV（每次新生成，禁止复用）
+      iv = SecureRandom(16)
+      # 3. 对称加密（PKCS#7 Padding）
+      ciphertext = SymmetricEncrypt(ALGO, AESKey, iv, plaintext)
+      # 4. 计算完整性签名：HMAC(Key, IV || Ciphertext)
+      signature = HMAC(HMACKey, concat(iv, ciphertext))
+      # 5. 组装外层请求参数（三段均为标准 Base64）
+      encReq = {
+          RequestAction:       bizAction,
+          ApplicationId:       bizApplicationId,
+          IV:                  Base64(iv),
+          EncryptedData:       Base64(ciphertext),
+          EncryptionSignature: Base64(signature),
+      }
+      # 6. 调用 CreateRequestWithEncryption
+      #    TC3-HMAC-SHA256 鉴权由官方 SDK 自动完成
+      encResp = CloudAPI.CreateRequestWithEncryption(encReq)
+      # 7. 外层错误：明文，直接抛出
+      if encResp.Error != nil:
+          raise OuterError(encResp.Error)
+      # 8. 解密并返回业务响应
+      return DecryptResponse(encResp.Response)
+  
+  # ========== 响应端：校验并解密 ==========
+  function DecryptResponse(resp):
+      # 1. Base64 解码
+      ivBytes  = Base64Decode(resp.IV)
+      ctBytes  = Base64Decode(resp.EncryptedData)
+      sigBytes = Base64Decode(resp.EncryptionSignature)
+      # 2. 重新计算 HMAC
+      expected = HMAC(HMACKey, concat(ivBytes, ctBytes))
+      # 3. 恒定时间比较，失败立即终止（不得继续解密）
+      if not ConstantTimeEqual(expected, sigBytes):
+          raise SignatureMismatch
+      # 4. 对称解密，去除 PKCS#7 Padding
+      plaintext = SymmetricDecrypt(ALGO, AESKey, ivBytes, ctBytes)
+      # 5. 先按腾讯云错误体解析，判断业务是否失败
+      bizErr = TryParseTencentCloudError(plaintext)
+      if bizErr != nil:
+          raise BusinessError(bizErr)
+      # 6. 按目标业务接口的响应结构反序列化
+      return JSON.parse(plaintext, BizResponseSchema)
+  ```
+  
+  **AES-CBC 示例**
+  以下示例参数及结果可用于验证 AES-CBC 加密和 HMAC-SHA256 签名算法的实现是否正确。
+  
+  加密密钥：AES-CBC-Key-1234
+  签名密钥：AES-HMAC-Key-123
+  IV：1234567890abcdef
+  请求内容：{"Request": "This is a test."}
+  
+  最终请求参数：
+  ```
+  {
+    "RequestAction": "DescribeFlowComponents",
+    "ApplicationId: "yD******************************,
+    "IV": "MTIzNDU2Nzg5MGFiY2RlZg==",
+    "EncryptedData": "Iqp2W1jislwMNmE7bH9dKZZiMQsfkAPyvAAqDFRnWLw=",
+    "EncryptionSignature": "4TT3PUCZgZT7YmEPtXDm5PDcM6xT7FoYHfMW8xunB5I="
+  }
+  ```
+  
+  **SM4-CBC 示例**
+  以下示例参数及结果可用于验证 SM4-CBC 加密和 HMAC-SM4 签名算法的实现是否正确。
+  
+  加密密钥：SM4-CBC-Key-1234
+  签名密钥：SM4-HMAC-Key-123
+  IV：fedcba0987654321
+  请求内容：{"Request": "This is a test."}
+  
+  最终请求参数：
+  ```
+  {
+    "RequestAction": "DescribeFlowComponents",
+    "ApplicationId: "yD******************************,
+    "IV": "ZmVkY2JhMDk4NzY1NDMyMQ==",
+    "EncryptedData": "GwUovQhNUPaUnVM/UDXMtPOYTpTSi2B1oyZDFbyyvns=",
+    "EncryptionSignature": "nHB/v/AvOaDCQ66esFNnp12lHKcGkwaLGid0Warl/KE="
+  }
+  ```
        */
-    ChannelDescribeAccountBillDetail(req: ChannelDescribeAccountBillDetailRequest, cb?: (error: string, rep: ChannelDescribeAccountBillDetailResponse) => void): Promise<ChannelDescribeAccountBillDetailResponse>;
+    CreateRequestWithEncryption(req: CreateRequestWithEncryptionRequest, cb?: (error: string, rep: CreateRequestWithEncryptionResponse) => void): Promise<CreateRequestWithEncryptionResponse>;
     /**
        * 您可以通过合同流程ID查询相关的<font color="red"><b>填写控件</b></font>信息及其内容。这包括控件的归属方、控件的填写状态（是否已填写）以及具体的填写内容。
   
@@ -1131,6 +1245,13 @@ export declare class Client extends TencentCloudCommon.AbstractClient {
   **这个接口的操作人必须跟生成批量认证链接接口的应用号一致，才可以调用，否则会返回当前操作人没有认证中的企业认证流**
        */
     DeleteOrganizationAuthorizations(req: DeleteOrganizationAuthorizationsRequest, cb?: (error: string, rep: DeleteOrganizationAuthorizationsResponse) => void): Promise<DeleteOrganizationAuthorizationsResponse>;
+    /**
+       * 通过此接口（ChannelDescribeAccountBillDetail）查询该第三方平台子客账号绑定中、剩余可绑定账号等套餐使用情况。
+  <ul>
+  <li>对于渠道客户企业的查询，通过指定渠道企业的唯一标识(Agent.ProxyOrganizationId)来查询“子客账号”套餐消耗详情</li>
+  </ul>
+       */
+    ChannelDescribeAccountBillDetail(req: ChannelDescribeAccountBillDetailRequest, cb?: (error: string, rep: ChannelDescribeAccountBillDetailResponse) => void): Promise<ChannelDescribeAccountBillDetailResponse>;
     /**
        * 在已启动的签署流程中，可对签署截止日期进行延期操作，主要分为以下两个层面：
   1. <b> 合同（流程）层面</b>：仅需提供签署流程ID。此操作将对整个签署流程以及未单独设置签署截止时间的签署人进行延期。

package/tencentcloud/services/essbasic/v20210526/essbasic_client.js

@@ -746,13 +746,127 @@ class Client extends TencentCloudCommon.AbstractClient {
         return this.request("CreateBatchInitOrganizationUrl", req, cb);
     }
     /**
-       * 通过此接口（ChannelDescribeAccountBillDetail）查询该第三方平台子客账号绑定中、剩余可绑定账号等套餐使用情况。
-  <ul>
-  <li>对于渠道客户企业的查询，通过指定渠道企业的唯一标识(Agent.ProxyOrganizationId)来查询“子客账号”套餐消耗详情</li>
-  </ul>
+       * 该接口支持对请求内容进行加密传输。调用方需使用约定的 AES-CBC 或 SM4-CBC 算法对请求内容进行加密，并使用 HMAC-SHA256 或 HMAC-SM3 算法对 IV 和加密后的数据进行完整性校验，防止请求内容被篡改。
+  
+  ![image](https://qcloudimg.tencent-cloud.cn/raw/391df0a37c2b213445c4909ba98824ac.svg)
+  
+  **请求端加密流程**
+  1. 每次请求使用密码学安全的随机源生成 16 字节 的 IV。每次请求必须重新生成，严禁复用。
+  2. 使用约定的 AES-CBC 或 SM4-CBC 算法对原始请求体进行加密，使用 PKCS#7 Padding。
+  3. 将加密后的密文原始字节进行标准 Base64 编码，作为 EncryptedData 参数。
+  4. 将 IV 原始字节进行标准 Base64 编码，作为 IV 参数。
+  5. 对 IV 原始字节和密文原始字节直接拼接（不添加分隔符），计算 HMAC-SHA256 或 HMAC-SM4：HMAC(Key, IVBytes || CiphertextBytes)
+  6. 将 HMAC 的结果进行 标准 Base64 编码，作为 EncryptionSignature 参数。
+  
+  **响应端解密流程**
+  1. 先判断本接口自身是否返回外层错误，此时错误为明文（标准腾讯云错误体），有则直接失败处理。
+  2. 分别对 IV、EncryptedData、EncryptionSignature 做标准 Base64 解码，得到原始字节。
+  3. 将 IV 与密文原始字节直接拼接（无分隔符），计算 HMAC-SHA256 或 HMAC-SM4：HMAC(Key, IVBytes || CiphertextBytes)。
+  4. 与响应中 EncryptionSignature 解码后的字节做恒定时间比较，不一致立即失败，不得继续解密。
+  5. 使用约定的 AES-CBC 或 SM4-CBC，以 IV 和密钥解密 EncryptedData，去除 PKCS#7 Padding 得到明文。
+  6. 先用腾讯云标准错误体反序列化明文，判断被加密业务接口是否返回 Error。
+  7. 无业务错误时，再用目标业务接口的响应结构体反序列化明文，取出实际业务参数。
+  
+  **响应端错误处理**
+  1. 外层错误（本接口本身调用失败）：返回标准腾讯云错误 JSON（含 Error.Code / Error.Message），无 EncryptedData，不需要解密即可处理。
+  2. 内层错误（业务接口执行失败）：外层成功，但解密后的明文里包含 Error.Code / Error.Message，按目标业务接口的错误规范处理。
+  
+  **处理过程示例**
+  ```
+  # ========== 前置约定 ==========
+  AESKey  : 加密 密钥（AES 32 字节，SM4 16 字节）
+  HMACKey : HMAC 密钥（与加密密钥需要不同）
+  ALGO    : AES-CBC 或 SM4-CBC，双方约定
+  HMAC    : ALGO == AES-CBC ? HMAC-SHA256 : HMAC-SM3
+  
+  # ========== 请求端：加密并调用 ==========
+  function CallWithEncryption(bizAction, bizApplicationId, bizRequestObj):
+      # 1. 序列化业务请求
+      plaintext = JSON.stringify(bizRequestObj)
+      # 2. 生成 16 字节随机 IV（每次新生成，禁止复用）
+      iv = SecureRandom(16)
+      # 3. 对称加密（PKCS#7 Padding）
+      ciphertext = SymmetricEncrypt(ALGO, AESKey, iv, plaintext)
+      # 4. 计算完整性签名：HMAC(Key, IV || Ciphertext)
+      signature = HMAC(HMACKey, concat(iv, ciphertext))
+      # 5. 组装外层请求参数（三段均为标准 Base64）
+      encReq = {
+          RequestAction:       bizAction,
+          ApplicationId:       bizApplicationId,
+          IV:                  Base64(iv),
+          EncryptedData:       Base64(ciphertext),
+          EncryptionSignature: Base64(signature),
+      }
+      # 6. 调用 CreateRequestWithEncryption
+      #    TC3-HMAC-SHA256 鉴权由官方 SDK 自动完成
+      encResp = CloudAPI.CreateRequestWithEncryption(encReq)
+      # 7. 外层错误：明文，直接抛出
+      if encResp.Error != nil:
+          raise OuterError(encResp.Error)
+      # 8. 解密并返回业务响应
+      return DecryptResponse(encResp.Response)
+  
+  # ========== 响应端：校验并解密 ==========
+  function DecryptResponse(resp):
+      # 1. Base64 解码
+      ivBytes  = Base64Decode(resp.IV)
+      ctBytes  = Base64Decode(resp.EncryptedData)
+      sigBytes = Base64Decode(resp.EncryptionSignature)
+      # 2. 重新计算 HMAC
+      expected = HMAC(HMACKey, concat(ivBytes, ctBytes))
+      # 3. 恒定时间比较，失败立即终止（不得继续解密）
+      if not ConstantTimeEqual(expected, sigBytes):
+          raise SignatureMismatch
+      # 4. 对称解密，去除 PKCS#7 Padding
+      plaintext = SymmetricDecrypt(ALGO, AESKey, ivBytes, ctBytes)
+      # 5. 先按腾讯云错误体解析，判断业务是否失败
+      bizErr = TryParseTencentCloudError(plaintext)
+      if bizErr != nil:
+          raise BusinessError(bizErr)
+      # 6. 按目标业务接口的响应结构反序列化
+      return JSON.parse(plaintext, BizResponseSchema)
+  ```
+  
+  **AES-CBC 示例**
+  以下示例参数及结果可用于验证 AES-CBC 加密和 HMAC-SHA256 签名算法的实现是否正确。
+  
+  加密密钥：AES-CBC-Key-1234
+  签名密钥：AES-HMAC-Key-123
+  IV：1234567890abcdef
+  请求内容：{"Request": "This is a test."}
+  
+  最终请求参数：
+  ```
+  {
+    "RequestAction": "DescribeFlowComponents",
+    "ApplicationId: "yD******************************,
+    "IV": "MTIzNDU2Nzg5MGFiY2RlZg==",
+    "EncryptedData": "Iqp2W1jislwMNmE7bH9dKZZiMQsfkAPyvAAqDFRnWLw=",
+    "EncryptionSignature": "4TT3PUCZgZT7YmEPtXDm5PDcM6xT7FoYHfMW8xunB5I="
+  }
+  ```
+  
+  **SM4-CBC 示例**
+  以下示例参数及结果可用于验证 SM4-CBC 加密和 HMAC-SM4 签名算法的实现是否正确。
+  
+  加密密钥：SM4-CBC-Key-1234
+  签名密钥：SM4-HMAC-Key-123
+  IV：fedcba0987654321
+  请求内容：{"Request": "This is a test."}
+  
+  最终请求参数：
+  ```
+  {
+    "RequestAction": "DescribeFlowComponents",
+    "ApplicationId: "yD******************************,
+    "IV": "ZmVkY2JhMDk4NzY1NDMyMQ==",
+    "EncryptedData": "GwUovQhNUPaUnVM/UDXMtPOYTpTSi2B1oyZDFbyyvns=",
+    "EncryptionSignature": "nHB/v/AvOaDCQ66esFNnp12lHKcGkwaLGid0Warl/KE="
+  }
+  ```
        */
-    async ChannelDescribeAccountBillDetail(req, cb) {
-        return this.request("ChannelDescribeAccountBillDetail", req, cb);
+    async CreateRequestWithEncryption(req, cb) {
+        return this.request("CreateRequestWithEncryption", req, cb);
     }
     /**
        * 您可以通过合同流程ID查询相关的<font color="red"><b>填写控件</b></font>信息及其内容。这包括控件的归属方、控件的填写状态（是否已填写）以及具体的填写内容。
@@ -1301,6 +1415,15 @@ class Client extends TencentCloudCommon.AbstractClient {
     async DeleteOrganizationAuthorizations(req, cb) {
         return this.request("DeleteOrganizationAuthorizations", req, cb);
     }
+    /**
+       * 通过此接口（ChannelDescribeAccountBillDetail）查询该第三方平台子客账号绑定中、剩余可绑定账号等套餐使用情况。
+  <ul>
+  <li>对于渠道客户企业的查询，通过指定渠道企业的唯一标识(Agent.ProxyOrganizationId)来查询“子客账号”套餐消耗详情</li>
+  </ul>
+       */
+    async ChannelDescribeAccountBillDetail(req, cb) {
+        return this.request("ChannelDescribeAccountBillDetail", req, cb);
+    }
     /**
        * 在已启动的签署流程中，可对签署截止日期进行延期操作，主要分为以下两个层面：
   1. <b> 合同（流程）层面</b>：仅需提供签署流程ID。此操作将对整个签署流程以及未单独设置签署截止时间的签署人进行延期。

package/tencentcloud/services/essbasic/v20210526/essbasic_models.d.ts

@@ -2451,6 +2451,27 @@ export interface PrepareFlowsResponse {
      */
     RequestId?: string;
 }
+/**
+ * CreateRequestWithEncryption返回参数结构体
+ */
+export interface CreateRequestWithEncryptionResponse {
+    /**
+     * <p>加密算法使用的初始化向量。固定为 16 字节，将 IV 原始字节使用标准 Base64 编码后传入。</p>
+     */
+    IV?: string;
+    /**
+     * <p>使用 AES-CBC 或 SM4-CBC 加密返回内容得到的密文。加密前返回内容采用 PKCS#7 Padding；将密文原始字节使用标准 Base64 编码后传入。</p>
+     */
+    EncryptedData?: string;
+    /**
+     * <p>用于校验请求数据完整性。对 IV 原始字节和密文原始字节直接拼接（不加拼接符）后计算 HMAC-SHA256，再将计算结果使用标准 Base64 编码后传入。</p>
+     */
+    EncryptionSignature?: string;
+    /**
+     * 唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。
+     */
+    RequestId?: string;
+}
 /**
  * 流程签署二维码的签署信息，适用于客户系统整合二维码功能。 通过链接，用户可直接访问电子签名小程序并签署合同。
  */
@@ -4087,6 +4108,31 @@ export interface ChannelCreateUserAutoSignEnableUrlRequest {
      */
     EndPoint?: string;
 }
+/**
+ * CreateRequestWithEncryption请求参数结构体
+ */
+export interface CreateRequestWithEncryptionRequest {
+    /**
+     * <p>操作的接口名称。取值参考接口文档输入参数章节关于公共参数 Action 的说明。</p>
+     */
+    RequestAction: string;
+    /**
+     * <p>第三方应用的唯一标识，对应通用参数 Agent.AppId。</p>
+     */
+    ApplicationId: string;
+    /**
+     * <p>加密算法使用的初始化向量。固定为 16 字节，将 IV 原始字节使用标准 Base64 编码后传入。</p>
+     */
+    IV: string;
+    /**
+     * <p>使用 AES-CBC 或 SM4-CBC 加密请求内容得到的密文。加密前请求内容采用 PKCS#7 Padding；将密文原始字节使用标准 Base64 编码后传入。</p>
+     */
+    EncryptedData: string;
+    /**
+     * <p>用于校验请求数据完整性。对 IV 原始字节和密文原始字节直接拼接（不加拼接符）后计算 HMAC-SHA256，再将计算结果使用标准 Base64 编码后传入。</p>
+     */
+    EncryptionSignature?: string;
+}
 /**
  * ChannelCancelMultiFlowSignQRCode请求参数结构体
  */