@openclaw/crabline 0.1.9 → 0.1.10

package/dist/src/openclaw/bridges/whatsapp.js.map

@@ -1 +1 @@
-{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/whatsapp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,MAAM,eAAe,GACnB,qFAAqF,CAAC;AAExF,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,0CAA0C,GAAG,oCAAoC,CAAC;IAC7F,QAAQ,EAAE,UAAU;IACpB,aAAa,CAAC,QAAQ;QACpB,OAAO;YACL,KAAK,CAAC,KAAK;gBACT,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACzF,CAAC;gBACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,UAAU;oBACnB,2BAA2B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACrC,GAAG,GAAG;wBACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;wBAClD,+BAA+B,EAAE,QAAQ,CAAC,YAAY;wBACtD,0BAA0B,EAAE,QAAQ,CAAC,OAAO;wBAC5C,gCAAgC,EAAE,QAAQ,CAAC,SAAS,CAAC,mBAAmB;qBACzE,CAAC;oBACF,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE9D,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,QAAQ,EAAE;oCACR,GAAG,cAAc;oCACjB,OAAO,EAAE,IAAI;oCACb,QAAQ,EAAE,MAAM;oCAChB,WAAW,EAAE,MAAM;oCACnB,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,MAAM,EAAE;wCACN,GAAG,MAAM;wCACT,GAAG,EAAE;4CACH,GAAG,YAAY;4CACf,cAAc,EAAE,KAAK;yCACtB;qCACF;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,UAAU,CAAC;iBAChC,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAC5D,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,EAAE;oBACF,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACnF,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;gBACxE,OAAO;oBACL,GAAG,yBAAyB,CAAC,QAAQ,CAAC;oBACtC,YAAY,EAAE;wBACZ,OAAO;wBACP,SAAS;wBACT,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;oBACD,iBAAiB,EAAE,OAAO;oBAC1B,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC;oBACnC,iBAAiB,EAAE;wBACjB,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;qBACrD;iBACF,CAAC;YACJ,CAAC;YACD,+BAA+B,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBAC5F,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,EAAE,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;iBACzC,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/whatsapp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AAEvC,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IACxE,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAqD,EACrD,QAAgB;IAEhB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAwB,EAAE,QAAgB;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,0CAA0C,GAAG,oCAAoC,CAAC;IAC7F,QAAQ,EAAE,UAAU;IACpB,aAAa,CAAC,QAAQ;QACpB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QACtE,OAAO;YACL,KAAK,CAAC,KAAK,CAAC,MAAM;gBAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE;oBAC9D,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,QAAQ,CAAC,WAAW,EAAE;qBAChD;oBACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,UAAU;oBACnB,2BAA2B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACrC,GAAG,GAAG;wBACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;wBAClD,+BAA+B,EAAE,QAAQ,CAAC,YAAY;wBACtD,0BAA0B,EAAE,QAAQ,CAAC,OAAO;wBAC5C,gCAAgC,EAAE,QAAQ,CAAC,SAAS,CAAC,mBAAmB;qBACzE,CAAC;oBACF,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE9D,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,QAAQ,EAAE;oCACR,GAAG,cAAc;oCACjB,OAAO,EAAE,IAAI;oCACb,QAAQ,EAAE,MAAM;oCAChB,WAAW,EAAE,MAAM;oCACnB,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,MAAM,EAAE;wCACN,GAAG,MAAM;wCACT,GAAG,EAAE;4CACH,GAAG,YAAY;4CACf,cAAc,EAAE,KAAK;yCACtB;qCACF;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,UAAU,CAAC;iBAChC,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAC5D,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBACxF,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,EAAE;oBACF,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACnF,+BAA+B,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBAC9E,OAAO;oBACL,GAAG,yBAAyB,CAAC,QAAQ,CAAC;oBACtC,YAAY,EAAE;wBACZ,OAAO;wBACP,SAAS;wBACT,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;oBACD,iBAAiB,EAAE,OAAO;oBAC1B,QAAQ,EAAE,kBAAkB,CAAC;wBAC3B,GAAG,KAAK;wBACR,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE;qBACrD,CAAC;oBACF,iBAAiB,EAAE;wBACjB,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;qBACrD;iBACF,CAAC;YACJ,CAAC;YACD,+BAA+B,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC/D,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,KAAK,CAAC,QAAQ,KAAK,IAAI;oBACvB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;gBAChF,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,MAAM,IAAI,GAAG,aAAa;oBACxB,CAAC,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,CAAC;oBAClD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;wBACrB,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;wBACtC,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,cAAc,GAAG,aAAa;oBAClC,CAAC,CAAC,sCAAsC,CAAC,EAAE,CAAC;oBAC5C,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,CAAC;wBAChC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,EAAE,EAAE,sBAAsB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,cAAc;iBACjE,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import {\n  createAdminInboundRequest,\n  createOpenClawCrablineProviderBridge,\n  DEFAULT_ACCOUNT_ID,\n  isRecord,\n  qaTargetForInbound,\n  readNonBlankString,\n  readString,\n} from \"../shared.js\";\nimport {\n  canonicalizeWhatsAppChatJid,\n  canonicalizeWhatsAppUserCorrelationJid,\n  canonicalizeWhatsAppUserJid,\n} from \"../../servers/whatsapp-jid.js\";\n\nfunction requireWhatsAppJid(value: string, label: string, userOnly = false): string {\n  const canonical = userOnly\n    ? canonicalizeWhatsAppUserJid(value)\n    : canonicalizeWhatsAppChatJid(value);\n  if (!canonical) {\n    throw new Error(`${label} must be a native WhatsApp JID.`);\n  }\n  return canonical;\n}\n\nfunction requireWhatsAppTargetKind(\n  parsed: { kind: \"direct\" | \"group\"; native: boolean },\n  targetId: string,\n): void {\n  if (parsed.native) {\n    return;\n  }\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (parsed.kind !== nativeKind) {\n    throw new Error(\"WhatsApp target kind does not match the native JID.\");\n  }\n}\n\nfunction requireWhatsAppConversationKind(kind: \"direct\" | \"group\", targetId: string): void {\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (kind !== nativeKind) {\n    throw new Error(\"WhatsApp inbound conversation kind does not match the native JID.\");\n  }\n}\n\nexport const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProviderBridge({\n  provider: \"whatsapp\",\n  createAdapter(whatsapp) {\n    const messagesPath = new URL(whatsapp.endpoints.messagesUrl).pathname;\n    return {\n      async probe(signal) {\n        const response = await fetch(whatsapp.endpoints.phoneNumberUrl, {\n          headers: {\n            authorization: `Bearer ${whatsapp.accessToken}`,\n          },\n          ...(signal ? { signal } : {}),\n        });\n        if (!response.ok) {\n          throw new Error(`Crabline WhatsApp probe failed with HTTP ${response.status}.`);\n        }\n        const payload: unknown = await response.json();\n        if (!isRecord(payload) || readString(payload.id) !== whatsapp.phoneNumberId) {\n          throw new Error(\"Crabline WhatsApp probe returned an unexpected phone number.\");\n        }\n        return payload;\n      },\n      createBinding() {\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          channel: \"whatsapp\",\n          createChannelDriverSmokeEnv: (env) => ({\n            ...env,\n            CRABLINE_WHATSAPP_ADMIN_TOKEN: whatsapp.adminToken,\n            CRABLINE_WHATSAPP_RECORDER_PATH: whatsapp.recorderPath,\n            CRABLINE_WHATSAPP_SELF_JID: whatsapp.selfJid,\n            OPENCLAW_WHATSAPP_WEB_SOCKET_URL: whatsapp.endpoints.baileysWebSocketUrl,\n          }),\n          createGatewayConfig: (openclawConfig = {}) => {\n            const channels = isRecord(openclawConfig.channels) ? openclawConfig.channels : {};\n            const whatsappConfig = isRecord(channels.whatsapp) ? channels.whatsapp : {};\n            const groups = isRecord(whatsappConfig.groups) ? whatsappConfig.groups : {};\n            const defaultGroup = isRecord(groups[\"*\"]) ? groups[\"*\"] : {};\n\n            return {\n              ...openclawConfig,\n              channels: {\n                ...channels,\n                whatsapp: {\n                  ...whatsappConfig,\n                  enabled: true,\n                  dmPolicy: \"open\",\n                  groupPolicy: \"open\",\n                  allowFrom: [\"*\"],\n                  groupAllowFrom: [\"*\"],\n                  groups: {\n                    ...groups,\n                    \"*\": {\n                      ...defaultGroup,\n                      requireMention: false,\n                    },\n                  },\n                },\n              },\n            };\n          },\n          requiredPluginIds: [\"whatsapp\"],\n        };\n      },\n      createAgentDelivery(parsed) {\n        if (parsed.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const to = requireWhatsAppJid(parsed.id, \"WhatsApp target\");\n        requireWhatsAppTargetKind(parsed, to);\n        if (to.endsWith(\"@g.us\")) {\n          throw new Error(\"WhatsApp Crabline WebSocket outbound supports direct targets only.\");\n        }\n        return {\n          channel: \"whatsapp\",\n          to,\n          replyChannel: \"whatsapp\",\n          replyTo: to,\n        };\n      },\n      createInbound(input) {\n        if (input.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const chatJid = requireWhatsAppJid(input.conversation.id, \"WhatsApp conversation\");\n        requireWhatsAppConversationKind(input.conversation.kind, chatJid);\n        const senderJid = requireWhatsAppJid(input.senderId, \"WhatsApp sender\", true);\n        return {\n          ...createAdminInboundRequest(whatsapp),\n          providerBody: {\n            chatJid,\n            senderJid,\n            ...(input.senderName ? { pushName: input.senderName } : {}),\n            text: input.text,\n          },\n          providerTargetKey: chatJid,\n          qaTarget: qaTargetForInbound({\n            ...input,\n            conversation: { ...input.conversation, id: chatJid },\n          }),\n          stateConversation: {\n            id: chatJid,\n            kind: chatJid.endsWith(\"@g.us\") ? \"group\" : \"direct\",\n          },\n        };\n      },\n      createOutboundFromRecorderEvent({ event, targetByProviderTarget }) {\n        if (\n          !isRecord(event) ||\n          event.type !== \"api\" ||\n          event.accepted !== true ||\n          typeof event.path !== \"string\"\n        ) {\n          return null;\n        }\n        if (!isRecord(event.body)) {\n          return null;\n        }\n        const baileysKey = isRecord(event.body.key) ? event.body.key : undefined;\n        const baileysMessage = isRecord(event.body.message) ? event.body.message : undefined;\n        const isBaileysSend = event.method === \"WEBSOCKET\" && event.path === \"/ws/chat\";\n        if (!isBaileysSend && event.path !== messagesPath) {\n          return null;\n        }\n        const to = isBaileysSend ? readString(baileysKey?.remoteJid) : readString(event.body.to);\n        const textPayload = event.body.text;\n        const text = isBaileysSend\n          ? readNonBlankString(baileysMessage?.conversation)\n          : isRecord(textPayload)\n            ? readNonBlankString(textPayload.body)\n            : undefined;\n        if (!to || !text) {\n          return null;\n        }\n        const providerTarget = isBaileysSend\n          ? canonicalizeWhatsAppUserCorrelationJid(to)\n          : (canonicalizeWhatsAppChatJid(to) ??\n            (/^\\d{7,15}$/u.test(to) ? `${to}@s.whatsapp.net` : to));\n        if (!providerTarget) {\n          return null;\n        }\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          senderId: \"openclaw\",\n          senderName: \"OpenClaw QA\",\n          text,\n          to: targetByProviderTarget.get(providerTarget) ?? providerTarget,\n        };\n      },\n    };\n  },\n});\n"]}

package/dist/src/openclaw/bridges/zalo.js

@@ -1,4 +1,4 @@
-import { createAdminInboundRequest, createOpenClawCrablineProviderBridge, DEFAULT_ACCOUNT_ID, isRecord, qaTargetForInbound, readString, } from "../shared.js";
+import { createAdminInboundRequest, createOpenClawCrablineProviderBridge, DEFAULT_ACCOUNT_ID, isRecord, qaTargetForInbound, readNonBlankString, readString, } from "../shared.js";
 function nativeId(value) {
     const id = value.trim();
     if (!id) {
@@ -10,14 +10,23 @@ export const ZALO_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProv
     provider: "zalo",
     createAdapter(zalo) {
         return {
-            async probe() {
+            async probe(signal) {
                 const response = await fetch(`${zalo.endpoints.apiRoot}/bot${zalo.botToken}/getMe`, {
                     method: "POST",
+                    ...(signal ? { signal } : {}),
                 });
                 if (!response.ok) {
                     throw new Error(`Crabline Zalo getMe probe failed with HTTP ${response.status}.`);
                 }
-                return await response.json();
+                const result = await response.json();
+                const bot = isRecord(result) && isRecord(result.result) ? result.result : undefined;
+                if (!isRecord(result) || result.ok !== true || readNonBlankString(bot?.id) !== zalo.botId) {
+                    const detail = (isRecord(result) ? readNonBlankString(result.description) : undefined) ??
+                        (isRecord(result) ? readNonBlankString(result.error) : undefined) ??
+                        "invalid response";
+                    throw new Error(`Crabline Zalo getMe probe failed: ${detail}.`);
+                }
+                return result;
             },
             createBinding() {
                 return {
@@ -83,8 +92,8 @@ export const ZALO_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProv
                 }
                 const chatId = readString(event.body.chat_id);
                 const text = event.path === "/bot<redacted>/sendMessage"
-                    ? readString(event.body.text)
-                    : readString(event.body.caption);
+                    ? readNonBlankString(event.body.text)
+                    : readNonBlankString(event.body.caption);
                 if (!chatId || !text) {
                     return null;
                 }

package/dist/src/openclaw/bridges/zalo.js.map

@@ -1 +1 @@
-{"version":3,"file":"zalo.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/zalo.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,sCAAsC,GAAG,oCAAoC,CAAC;IACzF,QAAQ,EAAE,MAAM;IAChB,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,KAAK,CAAC,KAAK;gBACT,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,OAAO,IAAI,CAAC,QAAQ,QAAQ,EAAE;oBAClF,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,MAAM;oBACf,2BAA2B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/D,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,IAAI,EAAE;oCACJ,GAAG,UAAU;oCACb,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oCACvB,QAAQ,EAAE,MAAM;oCAChB,OAAO,EAAE,IAAI;oCACb,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,WAAW,EAAE,MAAM;iCACpB;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,MAAM,CAAC;iBAC5B,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;YACpE,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC/C,OAAO;oBACL,GAAG,yBAAyB,CAAC,IAAI,CAAC;oBAClC,YAAY,EAAE;wBACZ,MAAM;wBACN,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;wBACjD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;oBACD,iBAAiB,EAAE,MAAM;oBACzB,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC;oBACnC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxC,CAAC;YACJ,CAAC;YACD,+BAA+B,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC/D,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;oBACnD,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBACrB,CAAC,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAC1F,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,4BAA4B;oBACzC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC7B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,EAAE,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM;iBACjD,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"zalo.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/zalo.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,sCAAsC,GAAG,oCAAoC,CAAC;IACzF,QAAQ,EAAE,MAAM;IAChB,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,KAAK,CAAC,KAAK,CAAC,MAAM;gBAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,OAAO,IAAI,CAAC,QAAQ,QAAQ,EAAE;oBAClF,MAAM,EAAE,MAAM;oBACd,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpF,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC1F,MAAM,MAAM,GACV,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACvE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACjE,kBAAkB,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,MAAM;oBACf,2BAA2B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/D,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,IAAI,EAAE;oCACJ,GAAG,UAAU;oCACb,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oCACvB,QAAQ,EAAE,MAAM;oCAChB,OAAO,EAAE,IAAI;oCACb,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,WAAW,EAAE,MAAM;iCACpB;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,MAAM,CAAC;iBAC5B,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;YACpE,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC/C,OAAO;oBACL,GAAG,yBAAyB,CAAC,IAAI,CAAC;oBAClC,YAAY,EAAE;wBACZ,MAAM;wBACN,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;wBACjD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;oBACD,iBAAiB,EAAE,MAAM;oBACzB,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC;oBACnC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxC,CAAC;YACJ,CAAC;YACD,+BAA+B,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC/D,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;oBACnD,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBACrB,CAAC,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAC1F,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,4BAA4B;oBACzC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;oBACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,EAAE,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM;iBACjD,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import {\n  createAdminInboundRequest,\n  createOpenClawCrablineProviderBridge,\n  DEFAULT_ACCOUNT_ID,\n  isRecord,\n  qaTargetForInbound,\n  readNonBlankString,\n  readString,\n} from \"../shared.js\";\n\nfunction nativeId(value: string): string {\n  const id = value.trim();\n  if (!id) {\n    throw new Error(\"Zalo target is required.\");\n  }\n  return id;\n}\n\nexport const ZALO_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProviderBridge({\n  provider: \"zalo\",\n  createAdapter(zalo) {\n    return {\n      async probe(signal) {\n        const response = await fetch(`${zalo.endpoints.apiRoot}/bot${zalo.botToken}/getMe`, {\n          method: \"POST\",\n          ...(signal ? { signal } : {}),\n        });\n        if (!response.ok) {\n          throw new Error(`Crabline Zalo getMe probe failed with HTTP ${response.status}.`);\n        }\n        const result = await response.json();\n        const bot = isRecord(result) && isRecord(result.result) ? result.result : undefined;\n        if (!isRecord(result) || result.ok !== true || readNonBlankString(bot?.id) !== zalo.botId) {\n          const detail =\n            (isRecord(result) ? readNonBlankString(result.description) : undefined) ??\n            (isRecord(result) ? readNonBlankString(result.error) : undefined) ??\n            \"invalid response\";\n          throw new Error(`Crabline Zalo getMe probe failed: ${detail}.`);\n        }\n        return result;\n      },\n      createBinding() {\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          channel: \"zalo\",\n          createChannelDriverSmokeEnv: (env) => ({ ...env, ...zalo.env }),\n          createGatewayConfig: (openclawConfig = {}) => {\n            const channels = isRecord(openclawConfig.channels) ? openclawConfig.channels : {};\n            const zaloConfig = isRecord(channels.zalo) ? channels.zalo : {};\n            return {\n              ...openclawConfig,\n              channels: {\n                ...channels,\n                zalo: {\n                  ...zaloConfig,\n                  allowFrom: [\"*\"],\n                  botToken: zalo.botToken,\n                  dmPolicy: \"open\",\n                  enabled: true,\n                  groupAllowFrom: [\"*\"],\n                  groupPolicy: \"open\",\n                },\n              },\n            };\n          },\n          requiredPluginIds: [\"zalo\"],\n        };\n      },\n      createAgentDelivery(parsed) {\n        if (parsed.threadId) {\n          throw new Error(\"Zalo does not support thread targets.\");\n        }\n        const to = nativeId(parsed.id);\n        return { channel: \"zalo\", replyChannel: \"zalo\", replyTo: to, to };\n      },\n      createInbound(input) {\n        if (input.threadId) {\n          throw new Error(\"Zalo does not support thread targets.\");\n        }\n        const kind = input.conversation.kind === \"direct\" ? \"direct\" : \"group\";\n        const chatId = nativeId(input.conversation.id);\n        return {\n          ...createAdminInboundRequest(zalo),\n          providerBody: {\n            chatId,\n            chatType: kind === \"direct\" ? \"PRIVATE\" : \"GROUP\",\n            senderId: nativeId(input.senderId),\n            ...(input.senderName ? { senderName: input.senderName } : {}),\n            text: input.text,\n          },\n          providerTargetKey: chatId,\n          qaTarget: qaTargetForInbound(input),\n          stateConversation: { id: chatId, kind },\n        };\n      },\n      createOutboundFromRecorderEvent({ event, targetByProviderTarget }) {\n        if (\n          !isRecord(event) ||\n          event.type !== \"api\" ||\n          (event.method !== \"GET\" && event.method !== \"POST\") ||\n          !isRecord(event.body) ||\n          (event.path !== \"/bot<redacted>/sendMessage\" && event.path !== \"/bot<redacted>/sendPhoto\")\n        ) {\n          return null;\n        }\n        const chatId = readString(event.body.chat_id);\n        const text =\n          event.path === \"/bot<redacted>/sendMessage\"\n            ? readNonBlankString(event.body.text)\n            : readNonBlankString(event.body.caption);\n        if (!chatId || !text) {\n          return null;\n        }\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          senderId: zalo.botId,\n          senderName: \"OpenClaw QA\",\n          text,\n          to: targetByProviderTarget.get(chatId) ?? chatId,\n        };\n      },\n    };\n  },\n});\n"]}

package/dist/src/openclaw/outbound-contract.d.ts

@@ -0,0 +1,5 @@
+import type { CrablineServerManifest } from "../servers/index.js";
+export declare function isAcceptedOpenClawCrablineOutbound(params: {
+    event: unknown;
+    manifest: CrablineServerManifest;
+}): boolean;

package/dist/src/openclaw/outbound-contract.js

@@ -0,0 +1,40 @@
+import { canonicalizeWhatsAppUserCorrelationJid } from "../servers/whatsapp-jid.js";
+import { isRecord, readNonBlankString } from "./shared.js";
+const MATRIX_SEND_PATH_RE = /^\/_matrix\/client\/(?:v3|r0)\/rooms\/[^/]+\/send\/m\.room\.message\/[^/]+$/u;
+const TELEGRAM_SEND_PATH_RE = /^\/bot<redacted>\/(?:sendAnimation|sendAudio|sendDocument|sendMessage|sendPhoto|sendVideo)$/iu;
+const ZALO_SEND_PATH_RE = /^\/bot<redacted>\/(?:sendMessage|sendPhoto)$/u;
+export function isAcceptedOpenClawCrablineOutbound(params) {
+    if (!isRecord(params.event) || params.event.type !== "api" || params.event.accepted !== true) {
+        return false;
+    }
+    const method = readNonBlankString(params.event.method);
+    const requestPath = readNonBlankString(params.event.path);
+    if (!method || !requestPath) {
+        return false;
+    }
+    switch (params.manifest.provider) {
+        case "mattermost":
+            return method === "POST" && requestPath === "/api/v4/posts";
+        case "matrix":
+            return method === "PUT" && MATRIX_SEND_PATH_RE.test(requestPath);
+        case "signal":
+            return method === "POST" && requestPath === "/api/v1/rpc";
+        case "slack":
+            return method === "POST" && requestPath === "/api/chat.postMessage";
+        case "telegram":
+            return (method === "GET" || method === "POST") && TELEGRAM_SEND_PATH_RE.test(requestPath);
+        case "whatsapp": {
+            const messagesPath = new URL(params.manifest.endpoints.messagesUrl).pathname;
+            const body = isRecord(params.event.body) ? params.event.body : undefined;
+            const key = isRecord(body?.key) ? body.key : undefined;
+            const directWebSocketTarget = canonicalizeWhatsAppUserCorrelationJid(readNonBlankString(key?.remoteJid) ?? "");
+            return ((method === "POST" && requestPath === messagesPath) ||
+                (method === "WEBSOCKET" &&
+                    requestPath === "/ws/chat" &&
+                    directWebSocketTarget !== undefined));
+        }
+        case "zalo":
+            return (method === "GET" || method === "POST") && ZALO_SEND_PATH_RE.test(requestPath);
+    }
+}
+//# sourceMappingURL=outbound-contract.js.map

package/dist/src/openclaw/outbound-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-contract.js","sourceRoot":"","sources":["../../../src/openclaw/outbound-contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,mBAAmB,GACvB,8EAA8E,CAAC;AACjF,MAAM,qBAAqB,GACzB,+FAA+F,CAAC;AAClG,MAAM,iBAAiB,GAAG,+CAA+C,CAAC;AAE1E,MAAM,UAAU,kCAAkC,CAAC,MAGlD;IACC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,QAAQ,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,KAAK,MAAM,IAAI,WAAW,KAAK,eAAe,CAAC;QAC9D,KAAK,QAAQ;YACX,OAAO,MAAM,KAAK,KAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,MAAM,KAAK,MAAM,IAAI,WAAW,KAAK,aAAa,CAAC;QAC5D,KAAK,OAAO;YACV,OAAO,MAAM,KAAK,MAAM,IAAI,WAAW,KAAK,uBAAuB,CAAC;QACtE,KAAK,UAAU;YACb,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5F,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;YAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,MAAM,qBAAqB,GAAG,sCAAsC,CAClE,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,CACzC,CAAC;YACF,OAAO,CACL,CAAC,MAAM,KAAK,MAAM,IAAI,WAAW,KAAK,YAAY,CAAC;gBACnD,CAAC,MAAM,KAAK,WAAW;oBACrB,WAAW,KAAK,UAAU;oBAC1B,qBAAqB,KAAK,SAAS,CAAC,CACvC,CAAC;QACJ,CAAC;QACD,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC","sourcesContent":["import type { CrablineServerManifest } from \"../servers/index.js\";\nimport { canonicalizeWhatsAppUserCorrelationJid } from \"../servers/whatsapp-jid.js\";\nimport { isRecord, readNonBlankString } from \"./shared.js\";\n\nconst MATRIX_SEND_PATH_RE =\n  /^\\/_matrix\\/client\\/(?:v3|r0)\\/rooms\\/[^/]+\\/send\\/m\\.room\\.message\\/[^/]+$/u;\nconst TELEGRAM_SEND_PATH_RE =\n  /^\\/bot<redacted>\\/(?:sendAnimation|sendAudio|sendDocument|sendMessage|sendPhoto|sendVideo)$/iu;\nconst ZALO_SEND_PATH_RE = /^\\/bot<redacted>\\/(?:sendMessage|sendPhoto)$/u;\n\nexport function isAcceptedOpenClawCrablineOutbound(params: {\n  event: unknown;\n  manifest: CrablineServerManifest;\n}): boolean {\n  if (!isRecord(params.event) || params.event.type !== \"api\" || params.event.accepted !== true) {\n    return false;\n  }\n  const method = readNonBlankString(params.event.method);\n  const requestPath = readNonBlankString(params.event.path);\n  if (!method || !requestPath) {\n    return false;\n  }\n\n  switch (params.manifest.provider) {\n    case \"mattermost\":\n      return method === \"POST\" && requestPath === \"/api/v4/posts\";\n    case \"matrix\":\n      return method === \"PUT\" && MATRIX_SEND_PATH_RE.test(requestPath);\n    case \"signal\":\n      return method === \"POST\" && requestPath === \"/api/v1/rpc\";\n    case \"slack\":\n      return method === \"POST\" && requestPath === \"/api/chat.postMessage\";\n    case \"telegram\":\n      return (method === \"GET\" || method === \"POST\") && TELEGRAM_SEND_PATH_RE.test(requestPath);\n    case \"whatsapp\": {\n      const messagesPath = new URL(params.manifest.endpoints.messagesUrl).pathname;\n      const body = isRecord(params.event.body) ? params.event.body : undefined;\n      const key = isRecord(body?.key) ? body.key : undefined;\n      const directWebSocketTarget = canonicalizeWhatsAppUserCorrelationJid(\n        readNonBlankString(key?.remoteJid) ?? \"\",\n      );\n      return (\n        (method === \"POST\" && requestPath === messagesPath) ||\n        (method === \"WEBSOCKET\" &&\n          requestPath === \"/ws/chat\" &&\n          directWebSocketTarget !== undefined)\n      );\n    }\n    case \"zalo\":\n      return (method === \"GET\" || method === \"POST\") && ZALO_SEND_PATH_RE.test(requestPath);\n  }\n}\n"]}

package/dist/src/openclaw/private-file.d.ts

@@ -0,0 +1,26 @@
+export type WindowsAclRunner = (command: string, args: string[], options: {
+    env: NodeJS.ProcessEnv;
+    windowsHide: boolean;
+}) => Promise<void>;
+export declare function resolveWindowsPowerShellPath(systemRoot: string | null | undefined): string;
+export declare function applyOwnerOnlyWindowsAcl(filePath: string, run?: WindowsAclRunner, systemRoot?: string | null | undefined): Promise<void>;
+export declare function applyOwnerOnlyWindowsDirectoryAcl(directoryPath: string, run?: WindowsAclRunner, systemRoot?: string | null | undefined): Promise<void>;
+export type SecuredPrivateDirectory = {
+    assertIdentityAt(directoryPath?: string): Promise<void>;
+    directoryPath: string;
+};
+export declare function captureDirectoryIdentity(directoryPath: string): Promise<SecuredPrivateDirectory>;
+export declare function syncParentDirectory(filePath: string, platform?: NodeJS.Platform): Promise<void>;
+export declare function removeSecuredPrivateDirectory(secured: SecuredPrivateDirectory, currentPath?: string): Promise<void>;
+export declare function securePrivateDirectory(directoryPath: string, options?: {
+    platform?: NodeJS.Platform;
+    secureWindowsDirectory?: (directoryPath: string) => Promise<void>;
+}): Promise<SecuredPrivateDirectory>;
+export declare function publishPrivateFileAtomically(filePath: string, contents: string, options?: {
+    afterRename?: (filePath: string) => Promise<void>;
+    beforeRename?: (temporaryPath: string) => Promise<void>;
+    platform?: NodeJS.Platform;
+    removeTemporaryFile?: (temporaryPath: string) => Promise<void>;
+    secureWindowsFile?: (temporaryPath: string) => Promise<void>;
+    syncParent?: (filePath: string, platform?: NodeJS.Platform) => Promise<void>;
+}): Promise<void>;

package/dist/src/openclaw/private-file.js

@@ -0,0 +1,411 @@
+import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import fs, {} from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const WINDOWS_OWNER_ONLY_ACL_SCRIPT = String.raw `
+$ErrorActionPreference = "Stop"
+$filePath = $env:CRABLINE_PRIVATE_FILE_PATH
+if ([string]::IsNullOrWhiteSpace($filePath)) {
+  throw "CRABLINE_PRIVATE_FILE_PATH is required."
+}
+
+$identity = [System.Security.Principal.WindowsIdentity]::GetCurrent()
+$sid = $identity.User
+if ($null -eq $sid) {
+  throw "Could not resolve the current Windows user SID."
+}
+
+$acl = Get-Acl -LiteralPath $filePath
+$acl.SetOwner($sid)
+$acl.SetAccessRuleProtection($true, $false)
+$existingRules = @($acl.GetAccessRules(
+  $true,
+  $false,
+  [System.Security.Principal.SecurityIdentifier]
+))
+foreach ($existingRule in $existingRules) {
+  [void]$acl.RemoveAccessRuleSpecific($existingRule)
+}
+$rule = [System.Security.AccessControl.FileSystemAccessRule]::new(
+  $sid,
+  [System.Security.AccessControl.FileSystemRights]::FullControl,
+  [System.Security.AccessControl.AccessControlType]::Allow
+)
+$acl.SetAccessRule($rule)
+Set-Acl -LiteralPath $filePath -AclObject $acl
+
+$actual = Get-Acl -LiteralPath $filePath
+$ownerSid = $actual.GetOwner([System.Security.Principal.SecurityIdentifier])
+$rules = @($actual.GetAccessRules(
+  $true,
+  $true,
+  [System.Security.Principal.SecurityIdentifier]
+))
+if (-not $actual.AreAccessRulesProtected) {
+  throw "Private file DACL still inherits permissions."
+}
+if ($ownerSid.Value -ne $sid.Value) {
+  throw "Private file owner SID does not match the current user."
+}
+if ($rules.Count -ne 1) {
+  throw "Private file DACL must contain exactly one access rule."
+}
+$actualRule = $rules[0]
+if (
+  $actualRule.IsInherited -or
+  $actualRule.IdentityReference.Value -ne $sid.Value -or
+  $actualRule.AccessControlType -ne [System.Security.AccessControl.AccessControlType]::Allow -or
+  (($actualRule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl)
+) {
+  throw "Private file DACL is not owner-only full control."
+}
+`;
+const WINDOWS_OWNER_ONLY_DIRECTORY_ACL_SCRIPT = String.raw `
+$ErrorActionPreference = "Stop"
+$directoryPath = $env:CRABLINE_PRIVATE_DIRECTORY_PATH
+if ([string]::IsNullOrWhiteSpace($directoryPath)) {
+  throw "CRABLINE_PRIVATE_DIRECTORY_PATH is required."
+}
+
+$identity = [System.Security.Principal.WindowsIdentity]::GetCurrent()
+$sid = $identity.User
+if ($null -eq $sid) {
+  throw "Could not resolve the current Windows user SID."
+}
+
+$acl = Get-Acl -LiteralPath $directoryPath
+$acl.SetOwner($sid)
+$acl.SetAccessRuleProtection($true, $false)
+$existingRules = @($acl.GetAccessRules(
+  $true,
+  $false,
+  [System.Security.Principal.SecurityIdentifier]
+))
+foreach ($existingRule in $existingRules) {
+  [void]$acl.RemoveAccessRuleSpecific($existingRule)
+}
+$inheritance = (
+  [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor
+  [System.Security.AccessControl.InheritanceFlags]::ObjectInherit
+)
+$rule = [System.Security.AccessControl.FileSystemAccessRule]::new(
+  $sid,
+  [System.Security.AccessControl.FileSystemRights]::FullControl,
+  $inheritance,
+  [System.Security.AccessControl.PropagationFlags]::None,
+  [System.Security.AccessControl.AccessControlType]::Allow
+)
+$acl.SetAccessRule($rule)
+Set-Acl -LiteralPath $directoryPath -AclObject $acl
+
+$actual = Get-Acl -LiteralPath $directoryPath
+$ownerSid = $actual.GetOwner([System.Security.Principal.SecurityIdentifier])
+$rules = @($actual.GetAccessRules(
+  $true,
+  $true,
+  [System.Security.Principal.SecurityIdentifier]
+))
+if (-not $actual.AreAccessRulesProtected) {
+  throw "Private directory DACL still inherits permissions."
+}
+if ($ownerSid.Value -ne $sid.Value) {
+  throw "Private directory owner SID does not match the current user."
+}
+if ($rules.Count -ne 1) {
+  throw "Private directory DACL must contain exactly one access rule."
+}
+$actualRule = $rules[0]
+$requiredInheritance = (
+  [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor
+  [System.Security.AccessControl.InheritanceFlags]::ObjectInherit
+)
+if (
+  $actualRule.IsInherited -or
+  $actualRule.IdentityReference.Value -ne $sid.Value -or
+  $actualRule.AccessControlType -ne [System.Security.AccessControl.AccessControlType]::Allow -or
+  (($actualRule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl) -or
+  (($actualRule.InheritanceFlags -band $requiredInheritance) -ne $requiredInheritance)
+) {
+  throw "Private directory DACL is not owner-only inheritable full control."
+}
+`;
+const runWindowsAclCommand = async (command, args, options) => {
+    await execFileAsync(command, args, options);
+};
+export function resolveWindowsPowerShellPath(systemRoot) {
+    const normalizedRoot = systemRoot?.trim() ? path.win32.normalize(systemRoot.trim()) : undefined;
+    if (!normalizedRoot || !/^[A-Za-z]:\\/.test(normalizedRoot)) {
+        throw new Error("SystemRoot must be an absolute local Windows path.");
+    }
+    return path.win32.join(normalizedRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+}
+export async function applyOwnerOnlyWindowsAcl(filePath, run = runWindowsAclCommand, systemRoot = process.env.SystemRoot) {
+    try {
+        const powershellPath = resolveWindowsPowerShellPath(systemRoot);
+        await run(powershellPath, ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", WINDOWS_OWNER_ONLY_ACL_SCRIPT], {
+            env: {
+                ...process.env,
+                CRABLINE_PRIVATE_FILE_PATH: path.resolve(filePath),
+            },
+            windowsHide: true,
+        });
+    }
+    catch (error) {
+        throw new Error("Could not apply and verify an owner-only Windows ACL; powershell.exe with Set-Acl is required.", { cause: error });
+    }
+}
+export async function applyOwnerOnlyWindowsDirectoryAcl(directoryPath, run = runWindowsAclCommand, systemRoot = process.env.SystemRoot) {
+    try {
+        const powershellPath = resolveWindowsPowerShellPath(systemRoot);
+        await run(powershellPath, [
+            "-NoLogo",
+            "-NoProfile",
+            "-NonInteractive",
+            "-Command",
+            WINDOWS_OWNER_ONLY_DIRECTORY_ACL_SCRIPT,
+        ], {
+            env: {
+                ...process.env,
+                CRABLINE_PRIVATE_DIRECTORY_PATH: path.resolve(directoryPath),
+            },
+            windowsHide: true,
+        });
+    }
+    catch (error) {
+        throw new Error("Could not apply and verify an owner-only Windows directory ACL; powershell.exe with Set-Acl is required.", { cause: error });
+    }
+}
+async function readHandleIdentity(handle) {
+    const stats = await handle.stat({ bigint: true });
+    if (stats.ino <= 0n) {
+        throw new Error("The filesystem did not provide a stable private file identity.");
+    }
+    return {
+        device: stats.dev,
+        inode: stats.ino,
+    };
+}
+async function assertPathIdentity(filePath, expected) {
+    try {
+        const stats = await fs.lstat(filePath, { bigint: true });
+        if (stats.isFile() &&
+            stats.nlink === 1n &&
+            stats.dev === expected.device &&
+            stats.ino === expected.inode) {
+            return;
+        }
+    }
+    catch (error) {
+        throw new Error("Private file path identity changed during publication.", { cause: error });
+    }
+    throw new Error("Private file path identity changed during publication.");
+}
+async function readDirectoryHandleIdentity(handle) {
+    const stats = await handle.stat({ bigint: true });
+    if (!stats.isDirectory() || stats.ino <= 0n) {
+        throw new Error("The filesystem did not provide a stable private directory identity.");
+    }
+    return {
+        device: stats.dev,
+        inode: stats.ino,
+    };
+}
+async function assertDirectoryPathIdentity(directoryPath, expected) {
+    try {
+        const stats = await fs.lstat(directoryPath, { bigint: true });
+        if (stats.isDirectory() && stats.dev === expected.device && stats.ino === expected.inode) {
+            return;
+        }
+    }
+    catch (error) {
+        throw new Error("Private directory path identity changed during publication.", {
+            cause: error,
+        });
+    }
+    throw new Error("Private directory path identity changed during publication.");
+}
+export async function captureDirectoryIdentity(directoryPath) {
+    const handle = await fs.open(directoryPath, "r");
+    try {
+        const identity = await readDirectoryHandleIdentity(handle);
+        const secured = {
+            async assertIdentityAt(currentPath = directoryPath) {
+                await assertDirectoryPathIdentity(currentPath, identity);
+            },
+            directoryPath,
+        };
+        await secured.assertIdentityAt();
+        return secured;
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function syncParentDirectory(filePath, platform = process.platform) {
+    if (platform === "win32") {
+        return;
+    }
+    const handle = await fs.open(path.dirname(filePath), "r");
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function removeSecuredPrivateDirectory(secured, currentPath = secured.directoryPath) {
+    const quarantinePath = path.join(path.dirname(currentPath), `.${path.basename(currentPath)}.${process.pid}.${randomUUID()}.remove`);
+    await secured.assertIdentityAt(currentPath);
+    await fs.rename(currentPath, quarantinePath);
+    await secured.assertIdentityAt(quarantinePath);
+    await syncParentDirectory(quarantinePath);
+    await fs.rm(quarantinePath, { force: true, recursive: true });
+    await syncParentDirectory(quarantinePath);
+}
+export async function securePrivateDirectory(directoryPath, options = {}) {
+    let created = false;
+    try {
+        await fs.mkdir(directoryPath, { mode: 0o700 });
+        created = true;
+    }
+    catch (error) {
+        if (error.code !== "EEXIST") {
+            throw error;
+        }
+    }
+    const handle = await fs.open(directoryPath, "r");
+    let handleOpen = true;
+    const closeHandle = async () => {
+        if (!handleOpen) {
+            return;
+        }
+        handleOpen = false;
+        await handle.close();
+    };
+    let identity;
+    try {
+        identity = await readDirectoryHandleIdentity(handle);
+    }
+    catch (error) {
+        try {
+            await closeHandle();
+        }
+        catch (closeError) {
+            const aggregateError = new AggregateError([error, closeError], "Private directory identity verification failed and its handle could not be closed.");
+            aggregateError.cause = error;
+            throw aggregateError;
+        }
+        throw error;
+    }
+    const secured = {
+        async assertIdentityAt(currentPath = directoryPath) {
+            await assertDirectoryPathIdentity(currentPath, identity);
+        },
+        directoryPath,
+    };
+    try {
+        await secured.assertIdentityAt();
+        if ((options.platform ?? process.platform) === "win32") {
+            await (options.secureWindowsDirectory ?? applyOwnerOnlyWindowsDirectoryAcl)(directoryPath);
+        }
+        else {
+            await handle.chmod(0o700);
+        }
+        await secured.assertIdentityAt();
+    }
+    catch (error) {
+        let primaryError = error;
+        try {
+            await closeHandle();
+        }
+        catch (closeError) {
+            const aggregateError = new AggregateError([error, closeError], "Private directory securing failed and its verification handle could not be closed.");
+            aggregateError.cause = error;
+            primaryError = aggregateError;
+        }
+        if (created) {
+            try {
+                await removeSecuredPrivateDirectory(secured);
+            }
+            catch (cleanupError) {
+                const aggregateError = new AggregateError([primaryError, cleanupError], `Private directory securing failed and rollback cleanup also failed: ${error instanceof Error ? error.message : String(error)}`);
+                aggregateError.cause = primaryError;
+                throw aggregateError;
+            }
+        }
+        throw primaryError;
+    }
+    finally {
+        await closeHandle();
+    }
+    return secured;
+}
+export async function publishPrivateFileAtomically(filePath, contents, options = {}) {
+    const temporaryPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`);
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    let handle;
+    let publicationFailed = false;
+    let primaryError;
+    try {
+        handle = await fs.open(temporaryPath, "wx+", 0o600);
+        const identity = await readHandleIdentity(handle);
+        if ((options.platform ?? process.platform) === "win32") {
+            await (options.secureWindowsFile ?? applyOwnerOnlyWindowsAcl)(temporaryPath);
+        }
+        else {
+            await handle.chmod(0o600);
+        }
+        await assertPathIdentity(temporaryPath, identity);
+        await handle.writeFile(contents, "utf8");
+        await handle.sync();
+        await assertPathIdentity(temporaryPath, identity);
+        await options.beforeRename?.(temporaryPath);
+        await assertPathIdentity(temporaryPath, identity);
+        await fs.rename(temporaryPath, filePath);
+        await (options.syncParent ?? syncParentDirectory)(filePath, options.platform);
+        await options.afterRename?.(filePath);
+        await assertPathIdentity(filePath, identity);
+    }
+    catch (error) {
+        publicationFailed = true;
+        primaryError = error;
+    }
+    const cleanupErrors = [];
+    try {
+        await handle?.close();
+    }
+    catch (error) {
+        cleanupErrors.push(error);
+    }
+    try {
+        await (options.removeTemporaryFile ??
+            ((candidatePath) => fs.rm(candidatePath, { force: true })))(temporaryPath);
+    }
+    catch (error) {
+        cleanupErrors.push(error);
+    }
+    if (publicationFailed) {
+        if (cleanupErrors.length > 0) {
+            const primaryMessage = primaryError instanceof Error ? primaryError.message : String(primaryError);
+            const aggregateError = new AggregateError([primaryError, ...cleanupErrors], `${primaryMessage} Private temporary file cleanup also failed.`);
+            aggregateError.cause = primaryError;
+            const primaryCode = typeof primaryError === "object" && primaryError !== null
+                ? primaryError.code
+                : undefined;
+            if (primaryCode) {
+                Object.assign(aggregateError, { code: primaryCode });
+            }
+            throw aggregateError;
+        }
+        throw primaryError;
+    }
+    if (cleanupErrors.length === 1) {
+        throw cleanupErrors[0];
+    }
+    if (cleanupErrors.length > 1) {
+        throw new AggregateError(cleanupErrors, "Private temporary file publication cleanup failed.");
+    }
+}
+//# sourceMappingURL=private-file.js.map