@openclaw/crabline 0.1.9 → 0.1.10

package/dist/src/config/schema.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
+import { inboundRegexSafetyError } from "../core/safe-regex.js";
 export const FIXTURE_MODES = ["probe", "send", "roundtrip", "agent"];
 const FIXTURE_ID_PATTERN = /^[a-z0-9-]+$/i;
+const MAX_TIMER_MS = 2_147_483_647;
 export const INBOUND_AUTHORS = ["assistant", "user", "system", "any"];
 export const INBOUND_STRATEGIES = ["contains", "exact", "regex"];
 export const INBOUND_NONCE_MODES = ["contains", "exact", "ignore"];
@@ -44,66 +46,115 @@ export const PROVIDER_PLATFORMS = [
     "zalo",
     "zalouser",
 ];
+const HttpUrlSchema = z
+    .string()
+    .url()
+    .refine((value) => {
+    try {
+        const protocol = new URL(value).protocol;
+        return protocol === "http:" || protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}, "URL must use http or https");
 function inferProviderPlatform(adapter) {
     if (adapter === "script") {
         return undefined;
     }
     return adapter;
 }
-const TargetSchema = z.object({
+const TargetSchema = z.strictObject({
     id: z.string().min(1),
     channelId: z.string().min(1).optional(),
     threadId: z.string().min(1).optional(),
     behavior: z.enum(["agent", "echo", "sink"]).optional(),
     metadata: z.record(z.string(), z.string()).default({}),
 });
-const InboundMatchSchema = z.object({
+const InboundMatchSchema = z
+    .strictObject({
     author: z.enum(INBOUND_AUTHORS).default("assistant"),
     nonce: z.enum(INBOUND_NONCE_MODES).default("contains"),
     pattern: z.string().min(1).optional(),
     strategy: z.enum(INBOUND_STRATEGIES).default("contains"),
+})
+    .superRefine((value, ctx) => {
+    if (value.strategy === "exact" && value.pattern && value.nonce !== "ignore") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "inboundMatch.strategy=exact requires inboundMatch.nonce=ignore",
+            path: ["nonce"],
+        });
+    }
+    if (value.strategy !== "regex" || !value.pattern) {
+        return;
+    }
+    try {
+        RegExp(value.pattern, "u");
+    }
+    catch {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "inboundMatch.pattern must be a valid Unicode regular expression",
+            path: ["pattern"],
+        });
+        return;
+    }
+    const safetyError = inboundRegexSafetyError(value.pattern);
+    if (safetyError) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: `inboundMatch.pattern ${safetyError}`,
+            path: ["pattern"],
+        });
+    }
 });
-const ScriptCommandsSchema = z.object({
-    probe: z.string().min(1).optional(),
-    send: z.string().min(1).optional(),
-    waitForInbound: z.string().min(1).optional(),
-    watch: z.string().min(1).optional(),
+const ScriptCommandSchema = z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0, "script command must not be blank");
+const ScriptCommandsSchema = z.strictObject({
+    probe: ScriptCommandSchema.optional(),
+    send: ScriptCommandSchema.optional(),
+    waitForInbound: ScriptCommandSchema.optional(),
+    watch: ScriptCommandSchema.optional(),
 });
-const LoopbackConfigSchema = z.object({
-    delayMs: z.number().int().min(0).default(25),
+const LoopbackConfigSchema = z.strictObject({
+    delayMs: z.number().int().min(0).max(MAX_TIMER_MS).default(25),
 });
-const ScriptConfigSchema = z.object({
+const ScriptConfigSchema = z.strictObject({
     commands: ScriptCommandsSchema,
     cwd: z.string().min(1).optional(),
     shell: z.string().min(1).optional(),
 });
-const SlackRecorderSchema = z.object({
+const SlackRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const SlackWebhookSchema = z.object({
+const SlackWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/slack/events"),
     port: z.number().int().min(0).max(65_535).default(8787),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const SlackConfigSchema = z.object({
+const SlackConfigSchema = z.strictObject({
     recorder: SlackRecorderSchema.default({}),
+    signingSecret: z.string().min(1).optional(),
     webhook: SlackWebhookSchema.default({
         host: "127.0.0.1",
         path: "/slack/events",
         port: 8787,
     }),
 });
-const DiscordRecorderSchema = z.object({
+const DiscordRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const DiscordWebhookSchema = z.object({
+const DiscordWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/discord/interactions"),
     port: z.number().int().min(0).max(65_535).default(8788),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const DiscordConfigSchema = z.object({
+const DiscordConfigSchema = z.strictObject({
     applicationId: z.string().min(1).optional(),
     botToken: z.string().min(1).optional(),
     gatewayDurationMs: z.number().int().min(1000).default(180_000),
@@ -116,18 +167,18 @@ const DiscordConfigSchema = z.object({
         port: 8788,
     }),
 });
-const WhatsAppRecorderSchema = z.object({
+const WhatsAppRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const WhatsAppWebhookSchema = z.object({
+const WhatsAppWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/whatsapp/webhook"),
     port: z.number().int().min(0).max(65_535).default(8789),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const WhatsAppConfigSchema = z.object({
+const WhatsAppConfigSchema = z.strictObject({
     accessToken: z.string().min(1).optional(),
-    apiUrl: z.string().url().optional(),
+    apiUrl: HttpUrlSchema.optional(),
     apiVersion: z.string().min(1).optional(),
     appSecret: z.string().min(1).optional(),
     phoneNumberId: z.string().min(1).optional(),
@@ -140,21 +191,21 @@ const WhatsAppConfigSchema = z.object({
         port: 8789,
     }),
 });
-const MsTeamsFederatedSchema = z.object({
+const MsTeamsFederatedSchema = z.strictObject({
     clientAudience: z.string().min(1).optional(),
     clientId: z.string().min(1),
 });
-const MsTeamsRecorderSchema = z.object({
+const MsTeamsRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const MsTeamsWebhookSchema = z.object({
+const MsTeamsWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/msteams/webhook"),
     port: z.number().int().min(0).max(65_535).default(8791),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const MsTeamsConfigSchema = z.object({
-    apiUrl: z.string().url().optional(),
+const MsTeamsConfigSchema = z.strictObject({
+    apiUrl: HttpUrlSchema.optional(),
     appId: z.string().min(1).optional(),
     appPassword: z.string().min(1).optional(),
     appTenantId: z.string().min(1).optional(),
@@ -176,23 +227,24 @@ const GoogleChatCredentialsSchema = z
     project_id: z.string().min(1).optional(),
 })
     .passthrough();
-const GoogleChatRecorderSchema = z.object({
+const GoogleChatRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const GoogleChatWebhookSchema = z.object({
+const GoogleChatWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/googlechat/webhook"),
     port: z.number().int().min(0).max(65_535).default(8792),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const GoogleChatConfigSchema = z.object({
-    apiUrl: z.string().url().optional(),
+const GoogleChatConfigSchema = z.strictObject({
+    apiUrl: HttpUrlSchema.optional(),
     credentials: GoogleChatCredentialsSchema.optional(),
     disableSignatureVerification: z.boolean().optional(),
-    endpointUrl: z.string().url().optional(),
+    endpointUrl: HttpUrlSchema.optional(),
     googleChatProjectNumber: z.string().min(1).optional(),
     impersonateUser: z.string().min(1).optional(),
     pubsubAudience: z.string().min(1).optional(),
+    pubsubServiceAccountEmail: z.string().min(1).optional(),
     pubsubTopic: z.string().min(1).optional(),
     recorder: GoogleChatRecorderSchema.default({}),
     useApplicationDefaultCredentials: z.boolean().optional(),
@@ -203,7 +255,7 @@ const GoogleChatConfigSchema = z.object({
         port: 8792,
     }),
 });
-const TelegramLongPollingSchema = z.object({
+const TelegramLongPollingSchema = z.strictObject({
     allowedUpdates: z.array(z.string().min(1)).optional(),
     deleteWebhook: z.boolean().optional(),
     dropPendingUpdates: z.boolean().optional(),
@@ -211,17 +263,17 @@ const TelegramLongPollingSchema = z.object({
     retryDelayMs: z.number().int().min(0).optional(),
     timeout: z.number().int().min(0).optional(),
 });
-const TelegramRecorderSchema = z.object({
+const TelegramRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const TelegramWebhookSchema = z.object({
+const TelegramWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/telegram/webhook"),
     port: z.number().int().min(0).max(65_535).default(8790),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const TelegramConfigSchema = z.object({
-    apiUrl: z.string().url().optional(),
+const TelegramConfigSchema = z.strictObject({
+    apiUrl: HttpUrlSchema.optional(),
     botToken: z.string().min(1).optional(),
     longPolling: TelegramLongPollingSchema.optional(),
     mode: z.enum(["auto", "polling", "webhook"]).default("auto"),
@@ -234,17 +286,19 @@ const TelegramConfigSchema = z.object({
         port: 8790,
     }),
 });
-const FeishuConfigSchema = z.object({
+const FeishuConfigSchema = z.strictObject({
     appId: z.string().min(1).optional(),
     appSecret: z.string().min(1).optional(),
-    recorder: z.object({ path: z.string().min(1).optional() }).default({}),
+    encryptKey: z.string().min(1).optional(),
+    recorder: z.strictObject({ path: z.string().min(1).optional() }).default({}),
     userName: z.string().min(1).optional(),
+    verificationToken: z.string().min(1).optional(),
     webhook: z
-        .object({
+        .strictObject({
         host: z.string().min(1).default("127.0.0.1"),
         path: z.string().min(1).default("/feishu/webhook"),
         port: z.number().int().min(0).max(65_535).default(8795),
-        publicUrl: z.string().url().optional(),
+        publicUrl: HttpUrlSchema.optional(),
     })
         .default({
         host: "127.0.0.1",
@@ -252,24 +306,24 @@ const FeishuConfigSchema = z.object({
         port: 8795,
     }),
 });
-const MattermostRecorderSchema = z.object({
+const MattermostRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const MattermostWebhookSchema = z.object({
+const MattermostWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/mattermost/webhook"),
     port: z.number().int().min(0).max(65_535).default(8793),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const MattermostWebsocketSchema = z.object({
+const MattermostWebsocketSchema = z.strictObject({
     enabled: z.boolean().optional(),
     maxReconnectDelayMs: z.number().int().min(0).optional(),
     reconnectDelayMs: z.number().int().min(0).optional(),
 });
-const MattermostConfigSchema = z.object({
-    baseUrl: z.string().url().optional(),
+const MattermostConfigSchema = z.strictObject({
+    baseUrl: HttpUrlSchema.optional(),
     botToken: z.string().min(1).optional(),
-    callbackUrl: z.string().url().optional(),
+    callbackUrl: HttpUrlSchema.optional(),
     recorder: MattermostRecorderSchema.default({}),
     userName: z.string().min(1).optional(),
     webhook: MattermostWebhookSchema.default({
@@ -279,16 +333,16 @@ const MattermostConfigSchema = z.object({
     }),
     websocket: MattermostWebsocketSchema.optional(),
 });
-const ZaloRecorderSchema = z.object({
+const ZaloRecorderSchema = z.strictObject({
     path: z.string().min(1).optional(),
 });
-const ZaloWebhookSchema = z.object({
+const ZaloWebhookSchema = z.strictObject({
     host: z.string().min(1).default("127.0.0.1"),
     path: z.string().min(1).default("/zalo/webhook"),
     port: z.number().int().min(0).max(65_535).default(8794),
-    publicUrl: z.string().url().optional(),
+    publicUrl: HttpUrlSchema.optional(),
 });
-const ZaloConfigSchema = z.object({
+const ZaloConfigSchema = z.strictObject({
     botToken: z.string().min(1).optional(),
     recorder: ZaloRecorderSchema.default({}),
     userName: z.string().min(1).optional(),
@@ -299,30 +353,30 @@ const ZaloConfigSchema = z.object({
     }),
     webhookSecret: z.string().min(1).optional(),
 });
-const MatrixAccessTokenAuthSchema = z.object({
+const MatrixAccessTokenAuthSchema = z.strictObject({
     accessToken: z.string().min(1),
     type: z.literal("accessToken"),
     userID: z.string().min(1).optional(),
 });
-const MatrixPasswordAuthSchema = z.object({
+const MatrixPasswordAuthSchema = z.strictObject({
     password: z.string().min(1),
     type: z.literal("password"),
     userID: z.string().min(1).optional(),
     username: z.string().min(1),
 });
-const MatrixConfigSchema = z.object({
+const MatrixConfigSchema = z.strictObject({
     auth: z.union([MatrixAccessTokenAuthSchema, MatrixPasswordAuthSchema]).optional(),
-    baseURL: z.string().url().optional(),
+    baseURL: HttpUrlSchema.optional(),
     commandPrefix: z.string().min(1).optional(),
-    recorder: z.object({ path: z.string().min(1).optional() }).default({}),
+    recorder: z.strictObject({ path: z.string().min(1).optional() }).default({}),
     recoveryKey: z.string().min(1).optional(),
     roomAllowlist: z.array(z.string().min(1)).optional(),
     webhook: z
-        .object({
+        .strictObject({
         host: z.string().min(1).default("127.0.0.1"),
         path: z.string().min(1).default("/matrix/webhook"),
         port: z.number().int().min(0).max(65_535).default(8797),
-        publicUrl: z.string().url().optional(),
+        publicUrl: HttpUrlSchema.optional(),
     })
         .default({
         host: "127.0.0.1",
@@ -330,18 +384,18 @@ const MatrixConfigSchema = z.object({
         port: 8797,
     }),
 });
-const IMessageConfigSchema = z.object({
+const IMessageConfigSchema = z.strictObject({
     apiKey: z.string().min(1).optional(),
     gatewayDurationMs: z.number().int().min(1000).default(180_000),
     local: z.boolean().optional(),
-    recorder: z.object({ path: z.string().min(1).optional() }).default({}),
-    serverUrl: z.string().url().optional(),
+    recorder: z.strictObject({ path: z.string().min(1).optional() }).default({}),
+    serverUrl: HttpUrlSchema.optional(),
     webhook: z
-        .object({
+        .strictObject({
         host: z.string().min(1).default("127.0.0.1"),
         path: z.string().min(1).default("/imessage/webhook"),
         port: z.number().int().min(0).max(65_535).default(8796),
-        publicUrl: z.string().url().optional(),
+        publicUrl: HttpUrlSchema.optional(),
     })
         .default({
         host: "127.0.0.1",
@@ -350,7 +404,7 @@ const IMessageConfigSchema = z.object({
     }),
 });
 export const ProviderConfigSchema = z
-    .object({
+    .strictObject({
     adapter: z.enum(BUILTIN_ADAPTERS),
     capabilities: z.array(z.enum(FIXTURE_MODES)).default(["probe", "send", "roundtrip", "agent"]),
     discord: DiscordConfigSchema.optional(),
@@ -373,6 +427,18 @@ export const ProviderConfigSchema = z
 })
     .superRefine((value, ctx) => {
     const platform = value.platform ?? inferProviderPlatform(value.adapter);
+    for (const adapterConfigKey of BUILTIN_ADAPTERS) {
+        if (adapterConfigKey === value.adapter || value[adapterConfigKey] === undefined) {
+            continue;
+        }
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: value.adapter === "script"
+                ? `script adapter cannot use ${adapterConfigKey} configuration; configure provider behavior through script.commands`
+                : `${adapterConfigKey} configuration requires adapter=${adapterConfigKey}, got adapter=${value.adapter}`,
+            path: [adapterConfigKey],
+        });
+    }
     if (value.adapter === "script" && !value.script) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -499,7 +565,7 @@ export const ProviderConfigSchema = z
     ...value,
     platform: value.platform ?? inferProviderPlatform(value.adapter) ?? "loopback",
 }));
-export const FixtureSchema = z.object({
+export const FixtureSchema = z.strictObject({
     accountId: z.string().min(1).optional(),
     env: z.array(z.string().min(1)).default([]),
     id: z
@@ -517,12 +583,52 @@ export const FixtureSchema = z.object({
     retries: z.number().int().min(0).default(0),
     tags: z.array(z.string().min(1)).default([]),
     target: TargetSchema,
-    timeoutMs: z.number().int().min(100).default(30_000),
+    timeoutMs: z.number().int().min(100).max(MAX_TIMER_MS).default(30_000),
 });
-export const ManifestSchema = z.object({
+const MANIFEST_EXTENSION_KEY_PATTERN = /^x-[a-z0-9][a-z0-9._-]*$/u;
+function omitManifestExtensions(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return value;
+    }
+    const entries = Object.entries(value);
+    const manifestEntries = entries.filter(([key]) => !MANIFEST_EXTENSION_KEY_PATTERN.test(key));
+    return manifestEntries.length === entries.length ? value : Object.fromEntries(manifestEntries);
+}
+const StrictManifestSchema = z
+    .strictObject({
     configVersion: z.literal(1).default(1),
     fixtures: z.array(FixtureSchema).default([]),
-    providers: z.record(z.string(), ProviderConfigSchema).default({}),
+    providers: z.record(z.string().min(1), ProviderConfigSchema).default({}),
     userName: z.string().min(1).default("crabline"),
+})
+    .superRefine((manifest, ctx) => {
+    const seenFixtureIds = new Set();
+    for (const [index, fixture] of manifest.fixtures.entries()) {
+        if (seenFixtureIds.has(fixture.id)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `duplicate fixture id: ${fixture.id}`,
+                path: ["fixtures", index, "id"],
+            });
+        }
+        seenFixtureIds.add(fixture.id);
+        if (!Object.hasOwn(manifest.providers, fixture.provider)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `fixture ${fixture.id} references unknown provider ${fixture.provider}`,
+                path: ["fixtures", index, "provider"],
+            });
+            continue;
+        }
+        const provider = manifest.providers[fixture.provider];
+        if (!provider.capabilities.includes(fixture.mode)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `fixture ${fixture.id} uses mode ${fixture.mode}, but provider ${fixture.provider} declares capabilities ${provider.capabilities.join(", ") || "(none)"}`,
+                path: ["fixtures", index, "mode"],
+            });
+        }
+    }
 });
+export const ManifestSchema = z.preprocess(omitManifestExtensions, StrictManifestSchema);
 //# sourceMappingURL=schema.js.map