hailin 3d626aebb5 feat(dingtalk): OAuth one-tap binding + voice tool + public Kong route ... - DingTalk binding UX replaced with OAuth one-tap flow: - GET /api/v1/agent/channels/dingtalk/oauth/init returns OAuth URL - GET /api/v1/agent/channels/dingtalk/oauth/callback (public, no JWT) exchanges code+state for openId, saves binding, returns HTML page - oauthStates Map with 10-min TTL; state validated before exchange - msg.senderId (openId) aligned with OAuth openId for consistent routing - CODE_TTL_MS extended from 5→15 min (fallback code method preserved) - Kong: dingtalk-oauth-public service declared before agent-service so callback path matches without JWT plugin - Voice sessions: use stored session.systemPrompt + voice rules; allowedTools includes Bash so Claude can call internal APIs - Flutter _DingTalkBindSheet: OAuth-first UX with code-based fallback phases: idle→loadingOAuth→waitingOAuth→success + polling every 2s - docker-compose: IT0_BASE_URL env var for agent-service (redirect URI) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-03-08 09:09:00 -07:00
..
docker-entrypoint.sh	fix: configure Kong JWT auth flow with consumer credentials	2026-02-21 23:20:06 -08:00
kong.yml	feat(dingtalk): OAuth one-tap binding + voice tool + public Kong route	2026-03-08 09:09:00 -07:00