@openclaw/crabline 0.1.9 → 0.1.10

package/dist/src/providers/signed-jwt.d.ts

@@ -0,0 +1,29 @@
+import { type KeyObject } from "node:crypto";
+type JwtHeader = {
+    alg: string;
+    kid: string;
+};
+export type JwtClaims = Record<string, unknown>;
+export type RemoteJwtKeySet<T> = {
+    expiresAt: number;
+    values: readonly T[];
+};
+export declare function readBearerToken(request: Request): string | undefined;
+export declare function resolveHttpCacheExpiry(response: Response, now: number): number;
+export declare function createCachedJwtKeyResolver<T>(params: {
+    fetchKeys(signal: AbortSignal): Promise<RemoteJwtKeySet<T>>;
+    keyId(value: T): string | undefined;
+    now?: (() => number) | undefined;
+    refreshCooldownMs?: number | undefined;
+    timeoutMs?: number | undefined;
+    unknownKeyMessage: string;
+}): (header: JwtHeader) => Promise<T>;
+export declare function verifySignedJwt(params: {
+    audience: string;
+    clockSkewSeconds?: number | undefined;
+    issuers: readonly string[];
+    now?: (() => number) | undefined;
+    resolveKey(header: JwtHeader): Promise<KeyObject>;
+    token: string;
+}): Promise<JwtClaims>;
+export {};

package/dist/src/providers/signed-jwt.js

@@ -0,0 +1,202 @@
+import { verify } from "node:crypto";
+const DEFAULT_KEY_FETCH_TIMEOUT_MS = 5_000;
+const DEFAULT_UNKNOWN_KEY_COOLDOWN_MS = 30_000;
+const MAX_NEGATIVE_KEY_IDS = 128;
+const UTF8_DECODER = new TextDecoder("utf-8", { fatal: true });
+function decodeBase64UrlPart(value, label) {
+    if (!/^[A-Za-z0-9_-]+$/u.test(value)) {
+        throw new Error(`${label} must use unpadded base64url encoding.`);
+    }
+    const decoded = Buffer.from(value, "base64url");
+    if (decoded.length === 0 || decoded.toString("base64url") !== value) {
+        throw new Error(`${label} must use canonical base64url encoding.`);
+    }
+    return decoded;
+}
+function decodeJsonPart(value) {
+    const decoded = JSON.parse(UTF8_DECODER.decode(decodeBase64UrlPart(value, "JWT part")));
+    if (!decoded || typeof decoded !== "object" || Array.isArray(decoded)) {
+        throw new Error("JWT part must be a JSON object.");
+    }
+    return decoded;
+}
+function readHeader(value) {
+    if (value.alg !== "RS256" || typeof value.kid !== "string" || !value.kid) {
+        throw new Error("JWT must use RS256 and include a key id.");
+    }
+    return { alg: value.alg, kid: value.kid };
+}
+function hasAudience(claim, expected) {
+    return claim === expected || (Array.isArray(claim) && claim.includes(expected));
+}
+function numericClaim(claims, name, required = false) {
+    if (!(name in claims)) {
+        if (required) {
+            throw new Error(`JWT ${name} claim is required.`);
+        }
+        return undefined;
+    }
+    const value = claims[name];
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        throw new Error(`JWT ${name} claim must be a finite number.`);
+    }
+    return value;
+}
+export function readBearerToken(request) {
+    const authorization = request.headers.get("authorization");
+    const match = /^Bearer\s+(\S+)$/iu.exec(authorization ?? "");
+    return match?.[1];
+}
+export function resolveHttpCacheExpiry(response, now) {
+    const cacheControl = response.headers.get("cache-control");
+    if (/(?:^|,)\s*(?:no-cache|no-store)(?:\s*(?:=|,|$))/iu.test(cacheControl ?? "")) {
+        return now;
+    }
+    const ageHeader = response.headers.get("age");
+    const ageSeconds = ageHeader && /^\d+$/u.test(ageHeader) ? Number.parseInt(ageHeader, 10) : 0;
+    const maxAge = /(?:^|,)\s*max-age=(\d+)/iu.exec(cacheControl ?? "");
+    if (maxAge) {
+        return now + Math.max(0, Number(maxAge[1]) - ageSeconds) * 1_000;
+    }
+    const expires = Date.parse(response.headers.get("expires") ?? "");
+    return Number.isFinite(expires) && expires > now
+        ? expires
+        : now + Math.max(0, 60 * 60 - ageSeconds) * 1_000;
+}
+export function createCachedJwtKeyResolver(params) {
+    const now = params.now ?? Date.now;
+    const refreshCooldownMs = params.refreshCooldownMs ?? DEFAULT_UNKNOWN_KEY_COOLDOWN_MS;
+    const timeoutMs = params.timeoutMs ?? DEFAULT_KEY_FETCH_TIMEOUT_MS;
+    let cached;
+    let fetchInFlight;
+    let refreshInFlight;
+    let refreshCooldownUntil = 0;
+    let fetchFailureCooldownUntil = 0;
+    let fetchFailureError;
+    const negativeKeyIds = new Map();
+    const rejectUnknownKey = (kid, expiresAt) => {
+        for (const [candidate, candidateExpiry] of negativeKeyIds) {
+            if (candidateExpiry <= now()) {
+                negativeKeyIds.delete(candidate);
+            }
+        }
+        if (negativeKeyIds.size >= MAX_NEGATIVE_KEY_IDS) {
+            const oldest = negativeKeyIds.keys().next().value;
+            if (oldest) {
+                negativeKeyIds.delete(oldest);
+            }
+        }
+        negativeKeyIds.set(kid, expiresAt);
+        throw new Error(params.unknownKeyMessage);
+    };
+    const fetchKeys = async () => {
+        if (fetchInFlight) {
+            return await fetchInFlight;
+        }
+        if (fetchFailureCooldownUntil > now()) {
+            throw fetchFailureError;
+        }
+        const controller = new AbortController();
+        let timeout;
+        const timedOut = new Promise((_, reject) => {
+            timeout = setTimeout(() => {
+                controller.abort();
+                reject(new Error("JWT signing key fetch timed out."));
+            }, timeoutMs);
+        });
+        fetchInFlight = Promise.race([params.fetchKeys(controller.signal), timedOut])
+            .then((keySet) => {
+            cached = keySet.expiresAt > now() ? keySet : undefined;
+            fetchFailureCooldownUntil = 0;
+            fetchFailureError = undefined;
+            for (const value of keySet.values) {
+                const keyId = params.keyId(value);
+                if (keyId) {
+                    negativeKeyIds.delete(keyId);
+                }
+            }
+            return keySet;
+        })
+            .catch((error) => {
+            fetchFailureCooldownUntil = now() + refreshCooldownMs;
+            fetchFailureError = error;
+            throw error;
+        })
+            .finally(() => {
+            if (timeout) {
+                clearTimeout(timeout);
+            }
+            fetchInFlight = undefined;
+        });
+        return await fetchInFlight;
+    };
+    return async (header) => {
+        const currentTime = now();
+        const negativeExpiry = negativeKeyIds.get(header.kid);
+        if (negativeExpiry && negativeExpiry > currentTime) {
+            throw new Error(params.unknownKeyMessage);
+        }
+        negativeKeyIds.delete(header.kid);
+        const freshCache = cached && cached.expiresAt > currentTime ? cached : undefined;
+        const keySet = freshCache ?? (await fetchKeys());
+        const key = keySet.values.find((candidate) => params.keyId(candidate) === header.kid);
+        if (key) {
+            return key;
+        }
+        if (!freshCache) {
+            return rejectUnknownKey(header.kid, now() + refreshCooldownMs);
+        }
+        let refreshed;
+        if (refreshInFlight) {
+            refreshed = await refreshInFlight;
+        }
+        else {
+            const refreshTime = now();
+            if (refreshCooldownUntil > refreshTime) {
+                return rejectUnknownKey(header.kid, refreshCooldownUntil);
+            }
+            refreshCooldownUntil = refreshTime + refreshCooldownMs;
+            refreshInFlight = fetchKeys().finally(() => {
+                refreshInFlight = undefined;
+            });
+            refreshed = await refreshInFlight;
+        }
+        const rotatedKey = refreshed.values.find((candidate) => params.keyId(candidate) === header.kid);
+        if (!rotatedKey) {
+            return rejectUnknownKey(header.kid, refreshCooldownUntil);
+        }
+        return rotatedKey;
+    };
+}
+export async function verifySignedJwt(params) {
+    const parts = params.token.split(".");
+    if (parts.length !== 3) {
+        throw new Error("JWT must contain three parts.");
+    }
+    const [encodedHeader, encodedClaims, encodedSignature] = parts;
+    const header = readHeader(decodeJsonPart(encodedHeader));
+    const claims = decodeJsonPart(encodedClaims);
+    const key = await params.resolveKey(header);
+    const signature = decodeBase64UrlPart(encodedSignature, "JWT signature");
+    if (!verify("RSA-SHA256", Buffer.from(`${encodedHeader}.${encodedClaims}`), key, signature)) {
+        throw new Error("JWT signature is invalid.");
+    }
+    if (!params.issuers.includes(String(claims.iss ?? ""))) {
+        throw new Error("JWT issuer is invalid.");
+    }
+    if (!hasAudience(claims.aud, params.audience)) {
+        throw new Error("JWT audience is invalid.");
+    }
+    const now = Math.floor((params.now?.() ?? Date.now()) / 1000);
+    const skew = params.clockSkewSeconds ?? 300;
+    const expiresAt = numericClaim(claims, "exp", true);
+    if (expiresAt <= now - skew) {
+        throw new Error("JWT is expired.");
+    }
+    const notBefore = numericClaim(claims, "nbf");
+    if (notBefore !== undefined && notBefore > now + skew) {
+        throw new Error("JWT is not active.");
+    }
+    return claims;
+}
+//# sourceMappingURL=signed-jwt.js.map

package/dist/src/providers/signed-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-jwt.js","sourceRoot":"","sources":["../../../src/providers/signed-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAcrD,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAC/C,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/D,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa;IACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IAChD,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,QAAgB;IACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,YAAY,CAAC,MAAiB,EAAE,IAAY,EAAE,QAAQ,GAAG,KAAK;IACrE,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,iCAAiC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAkB,EAAE,GAAW;IACpE,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,mDAAmD,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG;QAC9C,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAI,MAO7C;IACC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACnE,IAAI,MAAsC,CAAC;IAC3C,IAAI,aAAsD,CAAC;IAC3D,IAAI,eAAwD,CAAC;IAC7D,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,IAAI,yBAAyB,GAAG,CAAC,CAAC;IAClC,IAAI,iBAA0B,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,SAAiB,EAAS,EAAE;QACjE,KAAK,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,cAAc,EAAE,CAAC;YAC1D,IAAI,eAAe,IAAI,GAAG,EAAE,EAAE,CAAC;gBAC7B,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,MAAM,EAAE,CAAC;gBACX,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,IAAiC,EAAE;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,MAAM,aAAa,CAAC;QAC7B,CAAC;QACD,IAAI,yBAAyB,GAAG,GAAG,EAAE,EAAE,CAAC;YACtC,MAAM,iBAAiB,CAAC;QAC1B,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,OAAmC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAChD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;YACxD,CAAC,EAAE,SAAS,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;aAC1E,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,yBAAyB,GAAG,CAAC,CAAC;YAC9B,iBAAiB,GAAG,SAAS,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACV,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,yBAAyB,GAAG,GAAG,EAAE,GAAG,iBAAiB,CAAC;YACtD,iBAAiB,GAAG,KAAK,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YACD,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACL,OAAO,MAAM,aAAa,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,MAAiB,EAAc,EAAE;QAC7C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,cAAc,IAAI,cAAc,GAAG,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,SAA6B,CAAC;QAClC,IAAI,eAAe,EAAE,CAAC;YACpB,SAAS,GAAG,MAAM,eAAe,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;YAC1B,IAAI,oBAAoB,GAAG,WAAW,EAAE,CAAC;gBACvC,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,oBAAoB,GAAG,WAAW,GAAG,iBAAiB,CAAC;YACvD,eAAe,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACzC,eAAe,GAAG,SAAS,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,SAAS,GAAG,MAAM,eAAe,CAAC;QACpC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QAChG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAOrC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,gBAAgB,CAAC,GAAG,KAAiC,CAAC;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAE,CAAC;IACrD,IAAI,SAAS,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { verify, type KeyObject } from \"node:crypto\";\n\ntype JwtHeader = {\n  alg: string;\n  kid: string;\n};\n\nexport type JwtClaims = Record<string, unknown>;\n\nexport type RemoteJwtKeySet<T> = {\n  expiresAt: number;\n  values: readonly T[];\n};\n\nconst DEFAULT_KEY_FETCH_TIMEOUT_MS = 5_000;\nconst DEFAULT_UNKNOWN_KEY_COOLDOWN_MS = 30_000;\nconst MAX_NEGATIVE_KEY_IDS = 128;\nconst UTF8_DECODER = new TextDecoder(\"utf-8\", { fatal: true });\n\nfunction decodeBase64UrlPart(value: string, label: string): Buffer {\n  if (!/^[A-Za-z0-9_-]+$/u.test(value)) {\n    throw new Error(`${label} must use unpadded base64url encoding.`);\n  }\n  const decoded = Buffer.from(value, \"base64url\");\n  if (decoded.length === 0 || decoded.toString(\"base64url\") !== value) {\n    throw new Error(`${label} must use canonical base64url encoding.`);\n  }\n  return decoded;\n}\n\nfunction decodeJsonPart(value: string): Record<string, unknown> {\n  const decoded: unknown = JSON.parse(UTF8_DECODER.decode(decodeBase64UrlPart(value, \"JWT part\")));\n  if (!decoded || typeof decoded !== \"object\" || Array.isArray(decoded)) {\n    throw new Error(\"JWT part must be a JSON object.\");\n  }\n  return decoded as Record<string, unknown>;\n}\n\nfunction readHeader(value: Record<string, unknown>): JwtHeader {\n  if (value.alg !== \"RS256\" || typeof value.kid !== \"string\" || !value.kid) {\n    throw new Error(\"JWT must use RS256 and include a key id.\");\n  }\n  return { alg: value.alg, kid: value.kid };\n}\n\nfunction hasAudience(claim: unknown, expected: string): boolean {\n  return claim === expected || (Array.isArray(claim) && claim.includes(expected));\n}\n\nfunction numericClaim(claims: JwtClaims, name: string, required = false): number | undefined {\n  if (!(name in claims)) {\n    if (required) {\n      throw new Error(`JWT ${name} claim is required.`);\n    }\n    return undefined;\n  }\n  const value = claims[name];\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    throw new Error(`JWT ${name} claim must be a finite number.`);\n  }\n  return value;\n}\n\nexport function readBearerToken(request: Request): string | undefined {\n  const authorization = request.headers.get(\"authorization\");\n  const match = /^Bearer\\s+(\\S+)$/iu.exec(authorization ?? \"\");\n  return match?.[1];\n}\n\nexport function resolveHttpCacheExpiry(response: Response, now: number): number {\n  const cacheControl = response.headers.get(\"cache-control\");\n  if (/(?:^|,)\\s*(?:no-cache|no-store)(?:\\s*(?:=|,|$))/iu.test(cacheControl ?? \"\")) {\n    return now;\n  }\n  const ageHeader = response.headers.get(\"age\");\n  const ageSeconds = ageHeader && /^\\d+$/u.test(ageHeader) ? Number.parseInt(ageHeader, 10) : 0;\n  const maxAge = /(?:^|,)\\s*max-age=(\\d+)/iu.exec(cacheControl ?? \"\");\n  if (maxAge) {\n    return now + Math.max(0, Number(maxAge[1]) - ageSeconds) * 1_000;\n  }\n  const expires = Date.parse(response.headers.get(\"expires\") ?? \"\");\n  return Number.isFinite(expires) && expires > now\n    ? expires\n    : now + Math.max(0, 60 * 60 - ageSeconds) * 1_000;\n}\n\nexport function createCachedJwtKeyResolver<T>(params: {\n  fetchKeys(signal: AbortSignal): Promise<RemoteJwtKeySet<T>>;\n  keyId(value: T): string | undefined;\n  now?: (() => number) | undefined;\n  refreshCooldownMs?: number | undefined;\n  timeoutMs?: number | undefined;\n  unknownKeyMessage: string;\n}) {\n  const now = params.now ?? Date.now;\n  const refreshCooldownMs = params.refreshCooldownMs ?? DEFAULT_UNKNOWN_KEY_COOLDOWN_MS;\n  const timeoutMs = params.timeoutMs ?? DEFAULT_KEY_FETCH_TIMEOUT_MS;\n  let cached: RemoteJwtKeySet<T> | undefined;\n  let fetchInFlight: Promise<RemoteJwtKeySet<T>> | undefined;\n  let refreshInFlight: Promise<RemoteJwtKeySet<T>> | undefined;\n  let refreshCooldownUntil = 0;\n  let fetchFailureCooldownUntil = 0;\n  let fetchFailureError: unknown;\n  const negativeKeyIds = new Map<string, number>();\n\n  const rejectUnknownKey = (kid: string, expiresAt: number): never => {\n    for (const [candidate, candidateExpiry] of negativeKeyIds) {\n      if (candidateExpiry <= now()) {\n        negativeKeyIds.delete(candidate);\n      }\n    }\n    if (negativeKeyIds.size >= MAX_NEGATIVE_KEY_IDS) {\n      const oldest = negativeKeyIds.keys().next().value;\n      if (oldest) {\n        negativeKeyIds.delete(oldest);\n      }\n    }\n    negativeKeyIds.set(kid, expiresAt);\n    throw new Error(params.unknownKeyMessage);\n  };\n\n  const fetchKeys = async (): Promise<RemoteJwtKeySet<T>> => {\n    if (fetchInFlight) {\n      return await fetchInFlight;\n    }\n    if (fetchFailureCooldownUntil > now()) {\n      throw fetchFailureError;\n    }\n    const controller = new AbortController();\n    let timeout: NodeJS.Timeout | undefined;\n    const timedOut = new Promise<never>((_, reject) => {\n      timeout = setTimeout(() => {\n        controller.abort();\n        reject(new Error(\"JWT signing key fetch timed out.\"));\n      }, timeoutMs);\n    });\n    fetchInFlight = Promise.race([params.fetchKeys(controller.signal), timedOut])\n      .then((keySet) => {\n        cached = keySet.expiresAt > now() ? keySet : undefined;\n        fetchFailureCooldownUntil = 0;\n        fetchFailureError = undefined;\n        for (const value of keySet.values) {\n          const keyId = params.keyId(value);\n          if (keyId) {\n            negativeKeyIds.delete(keyId);\n          }\n        }\n        return keySet;\n      })\n      .catch((error: unknown) => {\n        fetchFailureCooldownUntil = now() + refreshCooldownMs;\n        fetchFailureError = error;\n        throw error;\n      })\n      .finally(() => {\n        if (timeout) {\n          clearTimeout(timeout);\n        }\n        fetchInFlight = undefined;\n      });\n    return await fetchInFlight;\n  };\n\n  return async (header: JwtHeader): Promise<T> => {\n    const currentTime = now();\n    const negativeExpiry = negativeKeyIds.get(header.kid);\n    if (negativeExpiry && negativeExpiry > currentTime) {\n      throw new Error(params.unknownKeyMessage);\n    }\n    negativeKeyIds.delete(header.kid);\n\n    const freshCache = cached && cached.expiresAt > currentTime ? cached : undefined;\n    const keySet = freshCache ?? (await fetchKeys());\n    const key = keySet.values.find((candidate) => params.keyId(candidate) === header.kid);\n    if (key) {\n      return key;\n    }\n\n    if (!freshCache) {\n      return rejectUnknownKey(header.kid, now() + refreshCooldownMs);\n    }\n\n    let refreshed: RemoteJwtKeySet<T>;\n    if (refreshInFlight) {\n      refreshed = await refreshInFlight;\n    } else {\n      const refreshTime = now();\n      if (refreshCooldownUntil > refreshTime) {\n        return rejectUnknownKey(header.kid, refreshCooldownUntil);\n      }\n      refreshCooldownUntil = refreshTime + refreshCooldownMs;\n      refreshInFlight = fetchKeys().finally(() => {\n        refreshInFlight = undefined;\n      });\n      refreshed = await refreshInFlight;\n    }\n\n    const rotatedKey = refreshed.values.find((candidate) => params.keyId(candidate) === header.kid);\n    if (!rotatedKey) {\n      return rejectUnknownKey(header.kid, refreshCooldownUntil);\n    }\n    return rotatedKey;\n  };\n}\n\nexport async function verifySignedJwt(params: {\n  audience: string;\n  clockSkewSeconds?: number | undefined;\n  issuers: readonly string[];\n  now?: (() => number) | undefined;\n  resolveKey(header: JwtHeader): Promise<KeyObject>;\n  token: string;\n}): Promise<JwtClaims> {\n  const parts = params.token.split(\".\");\n  if (parts.length !== 3) {\n    throw new Error(\"JWT must contain three parts.\");\n  }\n  const [encodedHeader, encodedClaims, encodedSignature] = parts as [string, string, string];\n  const header = readHeader(decodeJsonPart(encodedHeader));\n  const claims = decodeJsonPart(encodedClaims);\n  const key = await params.resolveKey(header);\n  const signature = decodeBase64UrlPart(encodedSignature, \"JWT signature\");\n  if (!verify(\"RSA-SHA256\", Buffer.from(`${encodedHeader}.${encodedClaims}`), key, signature)) {\n    throw new Error(\"JWT signature is invalid.\");\n  }\n\n  if (!params.issuers.includes(String(claims.iss ?? \"\"))) {\n    throw new Error(\"JWT issuer is invalid.\");\n  }\n  if (!hasAudience(claims.aud, params.audience)) {\n    throw new Error(\"JWT audience is invalid.\");\n  }\n\n  const now = Math.floor((params.now?.() ?? Date.now()) / 1000);\n  const skew = params.clockSkewSeconds ?? 300;\n  const expiresAt = numericClaim(claims, \"exp\", true)!;\n  if (expiresAt <= now - skew) {\n    throw new Error(\"JWT is expired.\");\n  }\n  const notBefore = numericClaim(claims, \"nbf\");\n  if (notBefore !== undefined && notBefore > now + skew) {\n    throw new Error(\"JWT is not active.\");\n  }\n\n  return claims;\n}\n"]}

package/dist/src/providers/slack-ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"slack-ids.js","sourceRoot":"","sources":["../../../src/providers/slack-ids.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAiB;IACrD,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,+BAA+B;IACrC,OAAO,EAAE,wBAAwB;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,qBAAqB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,OAAO,EAAE,mBAAmB;IAC5B,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAiB;IAC/D,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,WAAW,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"slack-ids.js","sourceRoot":"","sources":["../../../src/providers/slack-ids.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAiB;IACrD,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,+BAA+B;IACrC,OAAO,EAAE,wBAAwB;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,qBAAqB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,OAAO,EAAE,mBAAmB;IAC5B,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAiB;IAC/D,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,WAAW,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC","sourcesContent":["import type { NativeIdRule } from \"./native-ids.js\";\n\nexport const SLACK_CHANNEL_ID_RULE: NativeIdRule = {\n  example: \"C1234567890\",\n  name: \"Slack conversation id\",\n  pattern: /^[CDG][A-Z0-9]{2,}$/u,\n};\n\nexport const SLACK_SEND_TARGET_ID_RULE: NativeIdRule = {\n  example: \"C1234567890\",\n  name: \"Slack conversation or user id\",\n  pattern: /^[CDGUW][A-Z0-9]{2,}$/u,\n};\n\nexport const SLACK_USER_ID_RULE: NativeIdRule = {\n  example: \"U1234567890\",\n  name: \"Slack user id\",\n  pattern: /^[UW][A-Z0-9]{2,}$/u,\n};\n\nexport const SLACK_TS_RULE: NativeIdRule = {\n  example: \"1700000000.000100\",\n  name: \"Slack timestamp\",\n  pattern: /^\\d{10}\\.\\d{6}$/u,\n};\n\nexport function slackTargetKey(channel: string, threadTs?: string) {\n  return threadTs ? `${channel}:thread:${threadTs}` : channel;\n}\n"]}

package/dist/src/providers/target-normalizers.d.ts

@@ -0,0 +1,26 @@
+import type { BuiltinAdapterId, FixtureDefinition, ProviderPlatform } from "../config/schema.js";
+import type { LocalMockTargetCodec } from "./local-mock.js";
+import type { NativeIdRule } from "./native-ids.js";
+import type { NormalizedTarget } from "./types.js";
+export type BuiltinProviderAdapterId = Exclude<BuiltinAdapterId, "script">;
+export declare const DISCORD_SNOWFLAKE_RULE: NativeIdRule;
+export declare const FEISHU_CHAT_ID_RULE: NativeIdRule;
+export declare const FEISHU_MESSAGE_ID_RULE: NativeIdRule;
+export declare const GOOGLE_CHAT_SPACE_RULE: NativeIdRule;
+export declare const GOOGLE_CHAT_THREAD_RULE: NativeIdRule;
+export declare const IMESSAGE_THREAD_RULE: NativeIdRule;
+export declare const MATRIX_ROOM_ID_RULE: NativeIdRule;
+export declare const MATRIX_EVENT_ID_RULE: NativeIdRule;
+export declare const MATTERMOST_ID_RULE: NativeIdRule;
+export declare const MSTEAMS_CONVERSATION_ID_RULE: NativeIdRule;
+export declare const TELEGRAM_CHAT_ID_RULE: NativeIdRule;
+export declare const TELEGRAM_MESSAGE_THREAD_ID_RULE: NativeIdRule;
+export declare const WHATSAPP_WA_ID_RULE: NativeIdRule;
+export declare const ZALO_ID_RULE: NativeIdRule;
+export declare function createGenericLocalMockTargetCodec(platform: ProviderPlatform): LocalMockTargetCodec;
+export declare function parseCanonicalTelegramTopic(value: string): {
+    chatId: string;
+    topicId: string;
+} | undefined;
+export declare function getBuiltinTargetCodec(adapter: BuiltinProviderAdapterId): LocalMockTargetCodec;
+export declare function normalizeBuiltinTarget(adapter: BuiltinProviderAdapterId, target: FixtureDefinition["target"]): NormalizedTarget;

package/dist/src/providers/target-normalizers.js

@@ -0,0 +1,276 @@
+import { CrablineError } from "../core/errors.js";
+import { slackTargetKey, SLACK_SEND_TARGET_ID_RULE, SLACK_TS_RULE } from "./slack-ids.js";
+export const DISCORD_SNOWFLAKE_RULE = {
+    example: "123456789012345678",
+    name: "Discord snowflake id",
+    pattern: /^\d{17,20}$/u,
+};
+export const FEISHU_CHAT_ID_RULE = {
+    example: "oc_abc123",
+    name: "Feishu chat_id",
+    pattern: /^oc_[A-Za-z0-9_-]+$/u,
+};
+export const FEISHU_MESSAGE_ID_RULE = {
+    example: "om_abc123",
+    name: "Feishu message_id",
+    pattern: /^om_[A-Za-z0-9_-]+$/u,
+};
+export const GOOGLE_CHAT_SPACE_RULE = {
+    example: "spaces/AAAABbbbCCC",
+    name: "Google Chat space name",
+    pattern: /^spaces\/[A-Za-z0-9_-]+$/u,
+};
+export const GOOGLE_CHAT_THREAD_RULE = {
+    example: "spaces/AAAABbbbCCC/threads/BBBBccccDDD",
+    name: "Google Chat thread name",
+    pattern: /^spaces\/[A-Za-z0-9_-]+\/threads\/[A-Za-z0-9_-]+$/u,
+};
+export const IMESSAGE_THREAD_RULE = {
+    example: "+15551234567, user@example.com, or iMessage;-;chat-guid",
+    name: "iMessage recipient or chat GUID",
+    pattern: /^(?:\+[1-9]\d{6,14}|[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}|(?:iMessage|SMS);[+-];.+)$/u,
+};
+export const MATRIX_ROOM_ID_RULE = {
+    example: "!abcdef:matrix.org",
+    name: "Matrix room id",
+    pattern: /^!(?:[^:\s]+:[^\s]+|[A-Za-z0-9_-]{43})$/u,
+};
+export const MATRIX_EVENT_ID_RULE = {
+    example: "$eventid:matrix.org",
+    name: "Matrix event id",
+    pattern: /^\$[^\s]+(?::[^\s]+)?$/u,
+};
+export const MATTERMOST_ID_RULE = {
+    example: "abcdefghijklmnopqrstuvwx12",
+    name: "Mattermost id",
+    pattern: /^[a-z0-9]{26}$/u,
+};
+export const MSTEAMS_CONVERSATION_ID_RULE = {
+    example: "a:opaque-conversation-id",
+    name: "Microsoft Teams conversation id",
+    pattern: /^.+$/su,
+};
+export const TELEGRAM_CHAT_ID_RULE = {
+    example: "-1001234567890 or @channelusername",
+    name: "Telegram chat id",
+    pattern: /^(?:-?[1-9]\d*|@[A-Za-z][A-Za-z0-9_]{3,31})$/u,
+};
+export const TELEGRAM_MESSAGE_THREAD_ID_RULE = {
+    example: "42",
+    name: "Telegram message_thread_id",
+    pattern: /^[1-9]\d*$/u,
+};
+export const WHATSAPP_WA_ID_RULE = {
+    example: "15551234567",
+    name: "WhatsApp wa_id",
+    pattern: /^\d{7,15}$/u,
+};
+export const ZALO_ID_RULE = {
+    example: "user-1",
+    name: "Zalo string id",
+    pattern: /^\S+$/u,
+};
+function requireNativeId(value, rule, label) {
+    if (!rule.pattern.test(value)) {
+        throw new CrablineError(`${label} must be a native ${rule.name} such as ${rule.example}.`, {
+            kind: "config",
+        });
+    }
+    return value;
+}
+function createNativeTargetCodec(options) {
+    const channelLabel = options.channelLabel ?? "channelId";
+    const threadLabel = options.threadLabel ?? "threadId";
+    const threadRule = options.thread ?? options.channel;
+    return {
+        normalize(target) {
+            const channelId = requireNativeId(target.channelId ?? target.id, options.channel, channelLabel);
+            const normalized = {
+                channelId,
+                id: target.id,
+                metadata: target.metadata,
+            };
+            if (target.threadId) {
+                normalized.threadId = requireNativeId(target.threadId, threadRule, threadLabel);
+            }
+            return normalized;
+        },
+        resolveThreadId(target) {
+            const normalized = this.normalize(target);
+            return normalized.threadId ?? normalized.channelId ?? normalized.id;
+        },
+    };
+}
+export function createGenericLocalMockTargetCodec(platform) {
+    const prefix = `${platform}:`;
+    const encode = (value) => (value.startsWith(prefix) ? value : `${prefix}${value}`);
+    return {
+        normalize(target) {
+            const normalized = {
+                id: target.id,
+                metadata: target.metadata,
+            };
+            if (target.channelId) {
+                normalized.channelId = encode(target.channelId);
+            }
+            else if (!target.threadId) {
+                normalized.channelId = encode(target.id);
+            }
+            if (target.threadId) {
+                normalized.channelId ??= encode(target.id);
+                if (target.threadId.startsWith(prefix) &&
+                    !target.threadId.startsWith(`${normalized.channelId}:`)) {
+                    throw new CrablineError(`${platform} canonical thread parent must match the target channel.`, { kind: "config" });
+                }
+                normalized.threadId = target.threadId.startsWith(prefix)
+                    ? target.threadId
+                    : `${normalized.channelId}:${target.threadId}`;
+            }
+            return normalized;
+        },
+        resolveThreadId(target) {
+            const normalized = this.normalize(target);
+            return normalized.threadId ?? normalized.channelId ?? encode(normalized.id);
+        },
+    };
+}
+function requireSlackSendTargetId(value, label) {
+    if (!SLACK_SEND_TARGET_ID_RULE.pattern.test(value)) {
+        throw new CrablineError(`Slack ${label} must be a native Slack conversation or user id such as C1234567890, G1234567890, D1234567890, U1234567890, or W1234567890.`, { kind: "config" });
+    }
+    return value;
+}
+function requireSlackThreadTs(value, label) {
+    if (!SLACK_TS_RULE.pattern.test(value)) {
+        throw new CrablineError(`Slack ${label} must be a Slack timestamp such as 1700000000.000100.`, {
+            kind: "config",
+        });
+    }
+    return value;
+}
+const SLACK_TARGET_CODEC = {
+    normalize(target) {
+        const channelId = requireSlackSendTargetId(target.channelId ?? target.id, "channelId");
+        const normalized = {
+            channelId,
+            id: target.id,
+            metadata: target.metadata,
+        };
+        if (target.threadId) {
+            normalized.threadId = requireSlackThreadTs(target.threadId, "threadId");
+        }
+        return normalized;
+    },
+    resolveThreadId(target) {
+        const normalized = this.normalize(target);
+        const channelId = normalized.channelId ?? normalized.id;
+        return slackTargetKey(channelId, normalized.threadId);
+    },
+};
+const TELEGRAM_BASE_CODEC = createNativeTargetCodec({
+    channel: TELEGRAM_CHAT_ID_RULE,
+    channelLabel: "Telegram chat_id",
+    thread: TELEGRAM_MESSAGE_THREAD_ID_RULE,
+    threadLabel: "Telegram message_thread_id",
+});
+export function parseCanonicalTelegramTopic(value) {
+    const separator = value.lastIndexOf(":");
+    if (separator <= 0) {
+        return undefined;
+    }
+    const chatId = value.slice(0, separator);
+    const topicId = value.slice(separator + 1);
+    if (!TELEGRAM_CHAT_ID_RULE.pattern.test(chatId) ||
+        !TELEGRAM_MESSAGE_THREAD_ID_RULE.pattern.test(topicId)) {
+        return undefined;
+    }
+    return { chatId, topicId };
+}
+const TELEGRAM_TARGET_CODEC = {
+    normalize(target) {
+        const canonicalTopic = target.threadId
+            ? parseCanonicalTelegramTopic(target.threadId)
+            : undefined;
+        const targetChatId = target.channelId ?? target.id;
+        if (canonicalTopic &&
+            requireNativeId(targetChatId, TELEGRAM_CHAT_ID_RULE, "Telegram chat_id") !==
+                canonicalTopic.chatId) {
+            throw new CrablineError("Telegram canonical topic chat_id must match the target chat_id.", {
+                kind: "config",
+            });
+        }
+        const normalized = TELEGRAM_BASE_CODEC.normalize({
+            ...target,
+            ...(canonicalTopic ? { channelId: canonicalTopic.chatId } : {}),
+            threadId: undefined,
+        });
+        if (!target.threadId) {
+            return normalized;
+        }
+        const topicId = requireNativeId(canonicalTopic?.topicId ?? target.threadId, TELEGRAM_MESSAGE_THREAD_ID_RULE, "Telegram message_thread_id");
+        return {
+            ...normalized,
+            threadId: `${normalized.channelId}:${topicId}`,
+        };
+    },
+    resolveThreadId(target) {
+        const normalized = this.normalize(target);
+        return normalized.threadId ?? normalized.channelId ?? normalized.id;
+    },
+};
+const BUILTIN_TARGET_CODECS = {
+    discord: createNativeTargetCodec({
+        channel: DISCORD_SNOWFLAKE_RULE,
+        channelLabel: "Discord channel_id",
+        thread: DISCORD_SNOWFLAKE_RULE,
+        threadLabel: "Discord thread id",
+    }),
+    feishu: createNativeTargetCodec({
+        channel: FEISHU_CHAT_ID_RULE,
+        channelLabel: "Feishu chat_id",
+        thread: FEISHU_MESSAGE_ID_RULE,
+        threadLabel: "Feishu message_id",
+    }),
+    googlechat: createNativeTargetCodec({
+        channel: GOOGLE_CHAT_SPACE_RULE,
+        channelLabel: "Google Chat space.name",
+        thread: GOOGLE_CHAT_THREAD_RULE,
+        threadLabel: "Google Chat thread.name",
+    }),
+    imessage: createNativeTargetCodec({
+        channel: IMESSAGE_THREAD_RULE,
+        channelLabel: "iMessage recipient or chat GUID",
+    }),
+    loopback: createGenericLocalMockTargetCodec("loopback"),
+    matrix: createNativeTargetCodec({
+        channel: MATRIX_ROOM_ID_RULE,
+        channelLabel: "Matrix room_id",
+        thread: MATRIX_EVENT_ID_RULE,
+        threadLabel: "Matrix event_id",
+    }),
+    mattermost: createNativeTargetCodec({
+        channel: MATTERMOST_ID_RULE,
+        channelLabel: "Mattermost channel_id",
+    }),
+    msteams: createNativeTargetCodec({
+        channel: MSTEAMS_CONVERSATION_ID_RULE,
+        channelLabel: "Microsoft Teams conversation.id",
+    }),
+    slack: SLACK_TARGET_CODEC,
+    telegram: TELEGRAM_TARGET_CODEC,
+    whatsapp: createNativeTargetCodec({
+        channel: WHATSAPP_WA_ID_RULE,
+        channelLabel: "WhatsApp wa_id",
+    }),
+    zalo: createNativeTargetCodec({
+        channel: ZALO_ID_RULE,
+        channelLabel: "Zalo user_id or oa_id",
+    }),
+};
+export function getBuiltinTargetCodec(adapter) {
+    return BUILTIN_TARGET_CODECS[adapter];
+}
+export function normalizeBuiltinTarget(adapter, target) {
+    return getBuiltinTargetCodec(adapter).normalize(target);
+}
+//# sourceMappingURL=target-normalizers.js.map

package/dist/src/providers/target-normalizers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-normalizers.js","sourceRoot":"","sources":["../../../src/providers/target-normalizers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAK1F,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAClD,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,cAAc;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAClD,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,mBAAmB;IACzB,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAClD,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,2BAA2B;CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAiB;IACnD,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,oDAAoD;CAC9D,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAiB;IAChD,OAAO,EAAE,yDAAyD;IAClE,IAAI,EAAE,iCAAiC;IACvC,OAAO,EACL,gGAAgG;CACnG,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,0CAA0C;CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAiB;IAChD,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,yBAAyB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,OAAO,EAAE,4BAA4B;IACrC,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,iBAAiB;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAiB;IACxD,OAAO,EAAE,0BAA0B;IACnC,IAAI,EAAE,iCAAiC;IACvC,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,OAAO,EAAE,oCAAoC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,+CAA+C;CACzD,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAiB;IAC3D,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,4BAA4B;IAClC,OAAO,EAAE,aAAa;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,aAAa;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa,EAAE,IAAkB,EAAE,KAAa;IACvE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,qBAAqB,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,OAAO,GAAG,EAAE;YACzF,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,OAKhC;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAErD,OAAO;QACL,SAAS,CAAC,MAAM;YACd,MAAM,SAAS,GAAG,eAAe,CAC/B,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,EAC7B,OAAO,CAAC,OAAO,EACf,YAAY,CACb,CAAC;YACF,MAAM,UAAU,GAAqB;gBACnC,SAAS;gBACT,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,CAAC,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,eAAe,CAAC,MAAM;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAA0B;IAE1B,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3F,OAAO;QACL,SAAS,CAAC,MAAM;YACd,MAAM,UAAU,GAAqB;gBACnC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;YACF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3C,IACE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,SAAS,GAAG,CAAC,EACvD,CAAC;oBACD,MAAM,IAAI,aAAa,CACrB,GAAG,QAAQ,yDAAyD,EACpE,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;gBACJ,CAAC;gBACD,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBACtD,CAAC,CAAC,MAAM,CAAC,QAAQ;oBACjB,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,eAAe,CAAC,MAAM;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa,EAAE,KAAa;IAC5D,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,aAAa,CACrB,SAAS,KAAK,6HAA6H,EAC3I,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa;IACxD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,SAAS,KAAK,uDAAuD,EAAE;YAC7F,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAyB;IAC/C,SAAS,CAAC,MAAM;QACd,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACvF,MAAM,UAAU,GAAqB;YACnC,SAAS;YACT,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,UAAU,CAAC,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,eAAe,CAAC,MAAM;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;IAClD,OAAO,EAAE,qBAAqB;IAC9B,YAAY,EAAE,kBAAkB;IAChC,MAAM,EAAE,+BAA+B;IACvC,WAAW,EAAE,4BAA4B;CAC1C,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,KAAa;IAEb,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC3C,IACE,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3C,CAAC,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EACtD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,qBAAqB,GAAyB;IAClD,SAAS,CAAC,MAAM;QACd,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ;YACpC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC;QACnD,IACE,cAAc;YACd,eAAe,CAAC,YAAY,EAAE,qBAAqB,EAAE,kBAAkB,CAAC;gBACtE,cAAc,CAAC,MAAM,EACvB,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,iEAAiE,EAAE;gBACzF,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC;YAC/C,GAAG,MAAM;YACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAC7B,cAAc,EAAE,OAAO,IAAI,MAAM,CAAC,QAAQ,EAC1C,+BAA+B,EAC/B,4BAA4B,CAC7B,CAAC;QACF,OAAO;YACL,GAAG,UAAU;YACb,QAAQ,EAAE,GAAG,UAAU,CAAC,SAAS,IAAI,OAAO,EAAE;SAC/C,CAAC;IACJ,CAAC;IACD,eAAe,CAAC,MAAM;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;IACtE,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B,OAAO,EAAE,uBAAuB,CAAC;QAC/B,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,oBAAoB;QAClC,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,mBAAmB;KACjC,CAAC;IACF,MAAM,EAAE,uBAAuB,CAAC;QAC9B,OAAO,EAAE,mBAAmB;QAC5B,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,mBAAmB;KACjC,CAAC;IACF,UAAU,EAAE,uBAAuB,CAAC;QAClC,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,wBAAwB;QACtC,MAAM,EAAE,uBAAuB;QAC/B,WAAW,EAAE,yBAAyB;KACvC,CAAC;IACF,QAAQ,EAAE,uBAAuB,CAAC;QAChC,OAAO,EAAE,oBAAoB;QAC7B,YAAY,EAAE,iCAAiC;KAChD,CAAC;IACF,QAAQ,EAAE,iCAAiC,CAAC,UAAU,CAAC;IACvD,MAAM,EAAE,uBAAuB,CAAC;QAC9B,OAAO,EAAE,mBAAmB;QAC5B,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE,oBAAoB;QAC5B,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACF,UAAU,EAAE,uBAAuB,CAAC;QAClC,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,uBAAuB;KACtC,CAAC;IACF,OAAO,EAAE,uBAAuB,CAAC;QAC/B,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,iCAAiC;KAChD,CAAC;IACF,KAAK,EAAE,kBAAkB;IACzB,QAAQ,EAAE,qBAAqB;IAC/B,QAAQ,EAAE,uBAAuB,CAAC;QAChC,OAAO,EAAE,mBAAmB;QAC5B,YAAY,EAAE,gBAAgB;KAC/B,CAAC;IACF,IAAI,EAAE,uBAAuB,CAAC;QAC5B,OAAO,EAAE,YAAY;QACrB,YAAY,EAAE,uBAAuB;KACtC,CAAC;CAC8D,CAAC;AAEnE,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAiC,EACjC,MAAmC;IAEnC,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import type { BuiltinAdapterId, FixtureDefinition, ProviderPlatform } from \"../config/schema.js\";\nimport { CrablineError } from \"../core/errors.js\";\nimport type { LocalMockTargetCodec } from \"./local-mock.js\";\nimport type { NativeIdRule } from \"./native-ids.js\";\nimport { slackTargetKey, SLACK_SEND_TARGET_ID_RULE, SLACK_TS_RULE } from \"./slack-ids.js\";\nimport type { NormalizedTarget } from \"./types.js\";\n\nexport type BuiltinProviderAdapterId = Exclude<BuiltinAdapterId, \"script\">;\n\nexport const DISCORD_SNOWFLAKE_RULE: NativeIdRule = {\n  example: \"123456789012345678\",\n  name: \"Discord snowflake id\",\n  pattern: /^\\d{17,20}$/u,\n};\n\nexport const FEISHU_CHAT_ID_RULE: NativeIdRule = {\n  example: \"oc_abc123\",\n  name: \"Feishu chat_id\",\n  pattern: /^oc_[A-Za-z0-9_-]+$/u,\n};\n\nexport const FEISHU_MESSAGE_ID_RULE: NativeIdRule = {\n  example: \"om_abc123\",\n  name: \"Feishu message_id\",\n  pattern: /^om_[A-Za-z0-9_-]+$/u,\n};\n\nexport const GOOGLE_CHAT_SPACE_RULE: NativeIdRule = {\n  example: \"spaces/AAAABbbbCCC\",\n  name: \"Google Chat space name\",\n  pattern: /^spaces\\/[A-Za-z0-9_-]+$/u,\n};\n\nexport const GOOGLE_CHAT_THREAD_RULE: NativeIdRule = {\n  example: \"spaces/AAAABbbbCCC/threads/BBBBccccDDD\",\n  name: \"Google Chat thread name\",\n  pattern: /^spaces\\/[A-Za-z0-9_-]+\\/threads\\/[A-Za-z0-9_-]+$/u,\n};\n\nexport const IMESSAGE_THREAD_RULE: NativeIdRule = {\n  example: \"+15551234567, user@example.com, or iMessage;-;chat-guid\",\n  name: \"iMessage recipient or chat GUID\",\n  pattern:\n    /^(?:\\+[1-9]\\d{6,14}|[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|(?:iMessage|SMS);[+-];.+)$/u,\n};\n\nexport const MATRIX_ROOM_ID_RULE: NativeIdRule = {\n  example: \"!abcdef:matrix.org\",\n  name: \"Matrix room id\",\n  pattern: /^!(?:[^:\\s]+:[^\\s]+|[A-Za-z0-9_-]{43})$/u,\n};\n\nexport const MATRIX_EVENT_ID_RULE: NativeIdRule = {\n  example: \"$eventid:matrix.org\",\n  name: \"Matrix event id\",\n  pattern: /^\\$[^\\s]+(?::[^\\s]+)?$/u,\n};\n\nexport const MATTERMOST_ID_RULE: NativeIdRule = {\n  example: \"abcdefghijklmnopqrstuvwx12\",\n  name: \"Mattermost id\",\n  pattern: /^[a-z0-9]{26}$/u,\n};\n\nexport const MSTEAMS_CONVERSATION_ID_RULE: NativeIdRule = {\n  example: \"a:opaque-conversation-id\",\n  name: \"Microsoft Teams conversation id\",\n  pattern: /^.+$/su,\n};\n\nexport const TELEGRAM_CHAT_ID_RULE: NativeIdRule = {\n  example: \"-1001234567890 or @channelusername\",\n  name: \"Telegram chat id\",\n  pattern: /^(?:-?[1-9]\\d*|@[A-Za-z][A-Za-z0-9_]{3,31})$/u,\n};\n\nexport const TELEGRAM_MESSAGE_THREAD_ID_RULE: NativeIdRule = {\n  example: \"42\",\n  name: \"Telegram message_thread_id\",\n  pattern: /^[1-9]\\d*$/u,\n};\n\nexport const WHATSAPP_WA_ID_RULE: NativeIdRule = {\n  example: \"15551234567\",\n  name: \"WhatsApp wa_id\",\n  pattern: /^\\d{7,15}$/u,\n};\n\nexport const ZALO_ID_RULE: NativeIdRule = {\n  example: \"user-1\",\n  name: \"Zalo string id\",\n  pattern: /^\\S+$/u,\n};\n\nfunction requireNativeId(value: string, rule: NativeIdRule, label: string): string {\n  if (!rule.pattern.test(value)) {\n    throw new CrablineError(`${label} must be a native ${rule.name} such as ${rule.example}.`, {\n      kind: \"config\",\n    });\n  }\n  return value;\n}\n\nfunction createNativeTargetCodec(options: {\n  channel: NativeIdRule;\n  channelLabel?: string | undefined;\n  thread?: NativeIdRule | undefined;\n  threadLabel?: string | undefined;\n}): LocalMockTargetCodec {\n  const channelLabel = options.channelLabel ?? \"channelId\";\n  const threadLabel = options.threadLabel ?? \"threadId\";\n  const threadRule = options.thread ?? options.channel;\n\n  return {\n    normalize(target): NormalizedTarget {\n      const channelId = requireNativeId(\n        target.channelId ?? target.id,\n        options.channel,\n        channelLabel,\n      );\n      const normalized: NormalizedTarget = {\n        channelId,\n        id: target.id,\n        metadata: target.metadata,\n      };\n      if (target.threadId) {\n        normalized.threadId = requireNativeId(target.threadId, threadRule, threadLabel);\n      }\n      return normalized;\n    },\n    resolveThreadId(target) {\n      const normalized = this.normalize(target);\n      return normalized.threadId ?? normalized.channelId ?? normalized.id;\n    },\n  };\n}\n\nexport function createGenericLocalMockTargetCodec(\n  platform: ProviderPlatform,\n): LocalMockTargetCodec {\n  const prefix = `${platform}:`;\n  const encode = (value: string) => (value.startsWith(prefix) ? value : `${prefix}${value}`);\n  return {\n    normalize(target): NormalizedTarget {\n      const normalized: NormalizedTarget = {\n        id: target.id,\n        metadata: target.metadata,\n      };\n      if (target.channelId) {\n        normalized.channelId = encode(target.channelId);\n      } else if (!target.threadId) {\n        normalized.channelId = encode(target.id);\n      }\n      if (target.threadId) {\n        normalized.channelId ??= encode(target.id);\n        if (\n          target.threadId.startsWith(prefix) &&\n          !target.threadId.startsWith(`${normalized.channelId}:`)\n        ) {\n          throw new CrablineError(\n            `${platform} canonical thread parent must match the target channel.`,\n            { kind: \"config\" },\n          );\n        }\n        normalized.threadId = target.threadId.startsWith(prefix)\n          ? target.threadId\n          : `${normalized.channelId}:${target.threadId}`;\n      }\n      return normalized;\n    },\n    resolveThreadId(target) {\n      const normalized = this.normalize(target);\n      return normalized.threadId ?? normalized.channelId ?? encode(normalized.id);\n    },\n  };\n}\n\nfunction requireSlackSendTargetId(value: string, label: string): string {\n  if (!SLACK_SEND_TARGET_ID_RULE.pattern.test(value)) {\n    throw new CrablineError(\n      `Slack ${label} must be a native Slack conversation or user id such as C1234567890, G1234567890, D1234567890, U1234567890, or W1234567890.`,\n      { kind: \"config\" },\n    );\n  }\n  return value;\n}\n\nfunction requireSlackThreadTs(value: string, label: string): string {\n  if (!SLACK_TS_RULE.pattern.test(value)) {\n    throw new CrablineError(`Slack ${label} must be a Slack timestamp such as 1700000000.000100.`, {\n      kind: \"config\",\n    });\n  }\n  return value;\n}\n\nconst SLACK_TARGET_CODEC: LocalMockTargetCodec = {\n  normalize(target): NormalizedTarget {\n    const channelId = requireSlackSendTargetId(target.channelId ?? target.id, \"channelId\");\n    const normalized: NormalizedTarget = {\n      channelId,\n      id: target.id,\n      metadata: target.metadata,\n    };\n    if (target.threadId) {\n      normalized.threadId = requireSlackThreadTs(target.threadId, \"threadId\");\n    }\n    return normalized;\n  },\n  resolveThreadId(target) {\n    const normalized = this.normalize(target);\n    const channelId = normalized.channelId ?? normalized.id;\n    return slackTargetKey(channelId, normalized.threadId);\n  },\n};\n\nconst TELEGRAM_BASE_CODEC = createNativeTargetCodec({\n  channel: TELEGRAM_CHAT_ID_RULE,\n  channelLabel: \"Telegram chat_id\",\n  thread: TELEGRAM_MESSAGE_THREAD_ID_RULE,\n  threadLabel: \"Telegram message_thread_id\",\n});\n\nexport function parseCanonicalTelegramTopic(\n  value: string,\n): { chatId: string; topicId: string } | undefined {\n  const separator = value.lastIndexOf(\":\");\n  if (separator <= 0) {\n    return undefined;\n  }\n  const chatId = value.slice(0, separator);\n  const topicId = value.slice(separator + 1);\n  if (\n    !TELEGRAM_CHAT_ID_RULE.pattern.test(chatId) ||\n    !TELEGRAM_MESSAGE_THREAD_ID_RULE.pattern.test(topicId)\n  ) {\n    return undefined;\n  }\n  return { chatId, topicId };\n}\n\nconst TELEGRAM_TARGET_CODEC: LocalMockTargetCodec = {\n  normalize(target) {\n    const canonicalTopic = target.threadId\n      ? parseCanonicalTelegramTopic(target.threadId)\n      : undefined;\n    const targetChatId = target.channelId ?? target.id;\n    if (\n      canonicalTopic &&\n      requireNativeId(targetChatId, TELEGRAM_CHAT_ID_RULE, \"Telegram chat_id\") !==\n        canonicalTopic.chatId\n    ) {\n      throw new CrablineError(\"Telegram canonical topic chat_id must match the target chat_id.\", {\n        kind: \"config\",\n      });\n    }\n    const normalized = TELEGRAM_BASE_CODEC.normalize({\n      ...target,\n      ...(canonicalTopic ? { channelId: canonicalTopic.chatId } : {}),\n      threadId: undefined,\n    });\n    if (!target.threadId) {\n      return normalized;\n    }\n    const topicId = requireNativeId(\n      canonicalTopic?.topicId ?? target.threadId,\n      TELEGRAM_MESSAGE_THREAD_ID_RULE,\n      \"Telegram message_thread_id\",\n    );\n    return {\n      ...normalized,\n      threadId: `${normalized.channelId}:${topicId}`,\n    };\n  },\n  resolveThreadId(target) {\n    const normalized = this.normalize(target);\n    return normalized.threadId ?? normalized.channelId ?? normalized.id;\n  },\n};\n\nconst BUILTIN_TARGET_CODECS = {\n  discord: createNativeTargetCodec({\n    channel: DISCORD_SNOWFLAKE_RULE,\n    channelLabel: \"Discord channel_id\",\n    thread: DISCORD_SNOWFLAKE_RULE,\n    threadLabel: \"Discord thread id\",\n  }),\n  feishu: createNativeTargetCodec({\n    channel: FEISHU_CHAT_ID_RULE,\n    channelLabel: \"Feishu chat_id\",\n    thread: FEISHU_MESSAGE_ID_RULE,\n    threadLabel: \"Feishu message_id\",\n  }),\n  googlechat: createNativeTargetCodec({\n    channel: GOOGLE_CHAT_SPACE_RULE,\n    channelLabel: \"Google Chat space.name\",\n    thread: GOOGLE_CHAT_THREAD_RULE,\n    threadLabel: \"Google Chat thread.name\",\n  }),\n  imessage: createNativeTargetCodec({\n    channel: IMESSAGE_THREAD_RULE,\n    channelLabel: \"iMessage recipient or chat GUID\",\n  }),\n  loopback: createGenericLocalMockTargetCodec(\"loopback\"),\n  matrix: createNativeTargetCodec({\n    channel: MATRIX_ROOM_ID_RULE,\n    channelLabel: \"Matrix room_id\",\n    thread: MATRIX_EVENT_ID_RULE,\n    threadLabel: \"Matrix event_id\",\n  }),\n  mattermost: createNativeTargetCodec({\n    channel: MATTERMOST_ID_RULE,\n    channelLabel: \"Mattermost channel_id\",\n  }),\n  msteams: createNativeTargetCodec({\n    channel: MSTEAMS_CONVERSATION_ID_RULE,\n    channelLabel: \"Microsoft Teams conversation.id\",\n  }),\n  slack: SLACK_TARGET_CODEC,\n  telegram: TELEGRAM_TARGET_CODEC,\n  whatsapp: createNativeTargetCodec({\n    channel: WHATSAPP_WA_ID_RULE,\n    channelLabel: \"WhatsApp wa_id\",\n  }),\n  zalo: createNativeTargetCodec({\n    channel: ZALO_ID_RULE,\n    channelLabel: \"Zalo user_id or oa_id\",\n  }),\n} satisfies Record<BuiltinProviderAdapterId, LocalMockTargetCodec>;\n\nexport function getBuiltinTargetCodec(adapter: BuiltinProviderAdapterId): LocalMockTargetCodec {\n  return BUILTIN_TARGET_CODECS[adapter];\n}\n\nexport function normalizeBuiltinTarget(\n  adapter: BuiltinProviderAdapterId,\n  target: FixtureDefinition[\"target\"],\n): NormalizedTarget {\n  return getBuiltinTargetCodec(adapter).normalize(target);\n}\n"]}

package/dist/src/providers/types.d.ts

@@ -35,6 +35,7 @@ export type ProviderContext = {
     fixture: FixtureDefinition;
     manifestPath: string;
     providerId: string;
+    signal?: AbortSignal | undefined;
     userName: string;
 };
 export type SendContext = ProviderContext & {
@@ -43,12 +44,14 @@ export type SendContext = ProviderContext & {
     text: string;
 };
 export type WaitContext = ProviderContext & {
+    excludeIds?: readonly string[] | undefined;
     nonce: string;
     since: string;
     threadId?: string | undefined;
     timeoutMs: number;
 };
 export type WatchContext = ProviderContext & {
+    signal?: AbortSignal | undefined;
     since?: string;
 };
 export interface ProviderAdapter {
@@ -61,6 +64,8 @@ export interface ProviderAdapter {
     send(context: SendContext): Promise<SendResult>;
     waitForInbound(context: WaitContext): Promise<InboundEnvelope | null>;
     watch?(context: WatchContext): AsyncIterable<InboundEnvelope>;
+    /** Stops external admission synchronously before cleanup drains accepted work. */
+    beginCleanup?(): void;
     cleanup?(): Promise<void>;
 }
 export type LoopbackMessage = {