@openclaw/feishu 2026.7.1-beta.2 → 2026.7.1-beta.5

package/node_modules/@types/node/vm.d.ts

@@ -35,7 +35,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?:
@@ -81,7 +81,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?:
@@ -95,7 +95,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?:
@@ -115,7 +115,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?:
@@ -159,7 +159,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?:
@@ -363,9 +363,9 @@ declare module "node:vm" {
     }
     /**
      * If the given `contextObject` is an object, the `vm.createContext()` method will
-     * [prepare that object](https://nodejs.org/docs/latest-v25.x/api/vm.html#what-does-it-mean-to-contextify-an-object)
+     * [prepare that object](https://nodejs.org/docs/latest-v26.x/api/vm.html#what-does-it-mean-to-contextify-an-object)
      * and return a reference to it so that it can be used in calls to {@link runInContext} or
-     * [`script.runInContext()`](https://nodejs.org/docs/latest-v25.x/api/vm.html#scriptrunincontextcontextifiedobject-options).
+     * [`script.runInContext()`](https://nodejs.org/docs/latest-v26.x/api/vm.html#scriptrunincontextcontextifiedobject-options).
      * Inside such scripts, the global object will be wrapped by the `contextObject`, retaining all of its
      * existing properties but also having the built-in objects and functions any standard
      * [global object](https://es5.github.io/#x15.1) has. Outside of scripts run by the vm module, global
@@ -837,7 +837,7 @@ declare module "node:vm" {
         /**
          * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
          * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
-         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @experimental
          */
         importModuleDynamically?: DynamicModuleLoader<SourceTextModule> | undefined;
@@ -1112,7 +1112,7 @@ declare module "node:vm" {
          * and `vm.compileFunction()` so that Node.js uses the default ESM loader from the main
          * context to load the requested module.
          *
-         * For detailed information, see [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v25.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         * For detailed information, see [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v26.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          * @since v21.7.0, v20.12.0
          */
         const USE_MAIN_CONTEXT_DEFAULT_LOADER: number;

package/node_modules/@types/node/web-globals/domexception.d.ts

@@ -65,4 +65,19 @@ declare global {
             readonly INVALID_NODE_TYPE_ERR: 24;
             readonly DATA_CLONE_ERR: 25;
         };
+
+    // Not conditional, as this is not yet exposed by the DOM lib generator.
+    interface QuotaExceededError extends DOMException {
+        readonly quota: number | null;
+        readonly requested: number | null;
+    }
+    var QuotaExceededError: {
+        prototype: QuotaExceededError;
+        new(message?: string, options?: QuotaExceededErrorOptions): QuotaExceededError;
+    };
+
+    interface QuotaExceededErrorOptions {
+        quota?: number;
+        requested?: number;
+    }
 }

package/node_modules/@types/node/worker_threads.d.ts

@@ -10,7 +10,7 @@ declare module "node:worker_threads" {
     import { Readable, Writable } from "node:stream";
     import { ReadableStream, TransformStream, WritableStream } from "node:stream/web";
     import { URL } from "node:url";
-    import { CPUProfileHandle, HeapInfo, HeapProfileHandle } from "node:v8";
+    import { CPUProfileHandle, CPUProfileOptions, HeapInfo, HeapProfileHandle, HeapProfileOptions } from "node:v8";
     import { Context } from "node:vm";
     import { MessageEvent } from "undici-types";
     const isInternalThread: boolean;
@@ -22,9 +22,6 @@ declare module "node:worker_threads" {
     const threadName: string | null;
     const workerData: any;
     interface WorkerPerformance extends Pick<Performance, "eventLoopUtilization"> {}
-    /** @deprecated Use `import { Transferable } from "node:worker_threads"` instead. */
-    // TODO: remove in a future major @types/node version.
-    type TransferListItem = Transferable;
     interface WorkerOptions {
         /**
          * List of arguments which would be stringified and appended to
@@ -262,7 +259,7 @@ declare module "node:worker_threads" {
          *   `, { eval: true });
          *
          * worker.on('online', async () => {
-         *   const handle = await worker.startCpuProfile();
+         *   const handle = await worker.startCpuProfile({ sampleInterval: 1 });
          *   const profile = await handle.stop();
          *   console.log(profile);
          *   worker.terminate();
@@ -286,16 +283,16 @@ declare module "node:worker_threads" {
          * ```
          * @since v24.8.0
          */
-        startCpuProfile(): Promise<CPUProfileHandle>;
+        startCpuProfile(options?: CPUProfileOptions): Promise<CPUProfileHandle>;
         /**
          * Starting a Heap profile then return a Promise that fulfills with an error
          * or an `HeapProfileHandle` object. This API supports `await using` syntax.
          *
          * ```js
-         * const { Worker } = require('node:worker_threads');
+         * import { Worker } from 'node:worker_threads';
          *
          * const worker = new Worker(`
-         *   const { parentPort } = require('worker_threads');
+         *   const { parentPort } = require('node:worker_threads');
          *   parentPort.on('message', () => {});
          *   `, { eval: true });
          *
@@ -310,7 +307,7 @@ declare module "node:worker_threads" {
          * `await using` example.
          *
          * ```js
-         * const { Worker } = require('node:worker_threads');
+         * import { Worker } from 'node:worker_threads';
          *
          * const w = new Worker(`
          *   const { parentPort } = require('node:worker_threads');
@@ -322,8 +319,9 @@ declare module "node:worker_threads" {
          *   await using handle = await w.startHeapProfile();
          * });
          * ```
+         * @since v24.9.0
          */
-        startHeapProfile(): Promise<HeapProfileHandle>;
+        startHeapProfile(options?: HeapProfileOptions): Promise<HeapProfileHandle>;
         /**
          * Calls `worker.terminate()` when the dispose scope is exited.
          *
@@ -340,13 +338,13 @@ declare module "node:worker_threads" {
     interface Worker extends InternalEventEmitter<WorkerEventMap> {}
     /**
      * Mark an object as not transferable. If `object` occurs in the transfer list of
-     * a [`port.postMessage()`](https://nodejs.org/docs/latest-v25.x/api/worker_threads.html#portpostmessagevalue-transferlist) call, an error is thrown. This is a no-op if
+     * a [`port.postMessage()`](https://nodejs.org/docs/latest-v26.x/api/worker_threads.html#portpostmessagevalue-transferlist) call, an error is thrown. This is a no-op if
      * `object` is a primitive value.
      *
      * In particular, this makes sense for objects that can be cloned, rather than
      * transferred, and which are used by other objects on the sending side.
      * For example, Node.js marks the `ArrayBuffer`s it uses for its
-     * [`Buffer` pool](https://nodejs.org/docs/latest-v25.x/api/buffer.html#static-method-bufferallocunsafesize) with this.
+     * [`Buffer` pool](https://nodejs.org/docs/latest-v26.x/api/buffer.html#static-method-bufferallocunsafesize) with this.
      * `ArrayBuffer.prototype.transfer()` is disallowed on such array buffer
      * instances.
      *

package/node_modules/@types/node/zlib.d.ts

@@ -55,7 +55,7 @@ declare module "node:zlib" {
             }
             | undefined;
         /**
-         * Limits output size when using [convenience methods](https://nodejs.org/docs/latest-v25.x/api/zlib.html#convenience-methods).
+         * Limits output size when using [convenience methods](https://nodejs.org/docs/latest-v26.x/api/zlib.html#convenience-methods).
          * @default buffer.kMaxLength
          */
         maxOutputLength?: number | undefined;
@@ -79,12 +79,12 @@ declare module "node:zlib" {
         chunkSize?: number | undefined;
         /**
          * Key-value object containing indexed
-         * [Zstd parameters](https://nodejs.org/docs/latest-v25.x/api/zlib.html#zstd-constants).
+         * [Zstd parameters](https://nodejs.org/docs/latest-v26.x/api/zlib.html#zstd-constants).
          */
         params?: { [key: number]: number | boolean } | undefined;
         /**
          * Limits output size when using
-         * [convenience methods](https://nodejs.org/docs/latest-v25.x/api/zlib.html#convenience-methods).
+         * [convenience methods](https://nodejs.org/docs/latest-v26.x/api/zlib.html#convenience-methods).
          * @default buffer.kMaxLength
          */
         maxOutputLength?: number | undefined;

package/node_modules/side-channel/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v1.1.1](https://github.com/ljharb/side-channel/compare/v1.1.0...v1.1.1) - 2026-06-08
+
+### Commits
+
+- [Fix] `assert`: do not observably access object keys when throwing [`fc17361`](https://github.com/ljharb/side-channel/commit/fc173615136e6a6c3194656e6088afbc0bd6f9b8)
+- [actions] update workflows [`35b18c0`](https://github.com/ljharb/side-channel/commit/35b18c0bced5769d59226cd44a7e4003ad0aee81)
+- [Dev Deps] update `@arethetypeswrong/cli`, `@ljharb/eslint-config`, `@ljharb/tsconfig`, `@types/tape`, `auto-changelog`, `eslint`, `npmignore` [`b456a01`](https://github.com/ljharb/side-channel/commit/b456a01396cfdd028e5d39ea84885fe9178a72cf)
+- [Deps] update `object-inspect`, `side-channel-list` [`accf1a1`](https://github.com/ljharb/side-channel/commit/accf1a1a2767a22b1f5eeb5769a1db4c35a78090)
+- [readme] replace runkit CI badge with shields.io check-runs badge [`7e0c956`](https://github.com/ljharb/side-channel/commit/7e0c956411cc29267197a49a155a3d9bd01bacac)
+
 ## [v1.1.0](https://github.com/ljharb/side-channel/compare/v1.0.6...v1.1.0) - 2024-12-11
 
 ### Commits

package/node_modules/side-channel/README.md

@@ -57,5 +57,5 @@ Clone the repo, `npm install`, and run `npm test`
 [downloads-url]: https://npm-stat.com/charts.html?package=side-channel
 [codecov-image]: https://codecov.io/gh/ljharb/side-channel/branch/main/graphs/badge.svg
 [codecov-url]: https://app.codecov.io/gh/ljharb/side-channel/
-[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/side-channel
+[actions-image]: https://img.shields.io/github/check-runs/ljharb/side-channel/main
 [actions-url]: https://github.com/ljharb/side-channel/actions

package/node_modules/side-channel/index.js

@@ -18,7 +18,10 @@ module.exports = function getSideChannel() {
 	var channel = {
 		assert: function (key) {
 			if (!channel.has(key)) {
-				throw new $TypeError('Side channel does not contain ' + inspect(key));
+				var keyDesc = key && Object(key) === key
+					? 'the given object key'
+					: inspect(key);
+				throw new $TypeError('Side channel does not contain ' + keyDesc);
 			}
 		},
 		'delete': function (key) {
@@ -38,6 +41,6 @@ module.exports = function getSideChannel() {
 			$channelData.set(key, value);
 		}
 	};
-	// @ts-expect-error TODO: figure out why this is erroring
+
 	return channel;
 };

package/node_modules/side-channel/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "side-channel",
-	"version": "1.1.0",
+	"version": "1.1.1",
 	"description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
 	"main": "index.js",
 	"exports": {
@@ -44,23 +44,23 @@
 	"homepage": "https://github.com/ljharb/side-channel#readme",
 	"dependencies": {
 		"es-errors": "^1.3.0",
-		"object-inspect": "^1.13.3",
-		"side-channel-list": "^1.0.0",
+		"object-inspect": "^1.13.4",
+		"side-channel-list": "^1.0.1",
 		"side-channel-map": "^1.0.1",
 		"side-channel-weakmap": "^1.0.2"
 	},
 	"devDependencies": {
-		"@arethetypeswrong/cli": "^0.17.1",
-		"@ljharb/eslint-config": "^21.1.1",
-		"@ljharb/tsconfig": "^0.2.2",
+		"@arethetypeswrong/cli": "^0.18.3",
+		"@ljharb/eslint-config": "^22.2.3",
+		"@ljharb/tsconfig": "^0.3.2",
 		"@types/object-inspect": "^1.13.0",
-		"@types/tape": "^5.6.5",
-		"auto-changelog": "^2.5.0",
+		"@types/tape": "^5.8.1",
+		"auto-changelog": "^2.6.0",
 		"eclint": "^2.8.1",
 		"encoding": "^0.1.13",
-		"eslint": "=8.8.0",
+		"eslint": "^8.57.1",
 		"in-publish": "^2.0.1",
-		"npmignore": "^0.3.1",
+		"npmignore": "^0.3.5",
 		"nyc": "^10.3.2",
 		"safe-publish-latest": "^2.0.0",
 		"tape": "^5.9.0",

package/node_modules/side-channel/test/index.js

@@ -28,6 +28,22 @@ test('getSideChannel', function (t) {
 		channel.set(o, 'data');
 		st.doesNotThrow(function () { channel.assert(o); }, 'existent value noops');
 
+		var accessed = false;
+		var trap = {};
+		Object.defineProperty(trap, 'foo', {
+			enumerable: true,
+			get: function () {
+				accessed = true;
+				return 1;
+			}
+		});
+		st['throws'](
+			function () { channel.assert(trap); },
+			TypeError,
+			'missing object key throws'
+		);
+		st.equal(accessed, false, 'a missing object key is not observably accessed');
+
 		st.end();
 	});
 

package/node_modules/typebox/build/compile/validator.d.mts

@@ -1,7 +1,7 @@
 import { type TLocalizedValidationError } from '../error/index.mjs';
-import { type StaticDecode, type StaticEncode, type TProperties, type TSchema, Base } from '../type/index.mjs';
+import { type StaticDecode, type StaticEncode, type TProperties, type TSchema } from '../type/index.mjs';
 import { BuildResult, EvaluateResult } from '../schema/index.mjs';
-export declare class Validator<Context extends TProperties = TProperties, Type extends TSchema = TSchema, Encode extends unknown = StaticEncode<Type, Context>, Decode extends unknown = StaticDecode<Type, Context>> extends Base<Encode> {
+export declare class Validator<Context extends TProperties = TProperties, Type extends TSchema = TSchema, Encode extends unknown = StaticEncode<Type, Context>, Decode extends unknown = StaticDecode<Type, Context>> {
     private readonly hasCodec;
     private readonly buildResult;
     private readonly evaluateResult;
@@ -35,9 +35,4 @@ export declare class Validator<Context extends TProperties = TProperties, Type e
     Decode(value: unknown): Decode;
     /** Encodes a value */
     Encode(value: unknown): Encode;
-    /**
-     * @deprecated Validator instances should not support Clone because they are owners of JIT evaluated functions. This function will be
-     * removed in the next version of TypeBox (relates to Type.Base deprecation)
-     */
-    Clone(): Validator<Context, Type>;
 }

package/node_modules/typebox/build/compile/validator.mjs

@@ -1,36 +1,16 @@
 // deno-fmt-ignore-file
 import { Settings } from '../system/settings/index.mjs';
-import { Arguments } from '../system/arguments/index.mjs';
-import { Base } from '../type/index.mjs';
 import { Errors, Clean, Convert, Create, Default, Decode, Encode, HasCodec, Parser, ParseError } from '../value/index.mjs';
-import { Build, BuildResult, EvaluateResult } from '../schema/index.mjs';
+import { Build } from '../schema/index.mjs';
 // ------------------------------------------------------------------
 // Validator<...>
 // ------------------------------------------------------------------
-export class Validator extends Base {
+export class Validator {
     /** Constructs a Validator. */
-    constructor(...args) {
-        super();
-        const matched = Arguments.Match(args, {
-            3: (hasCodec, buildResult, evaluateResult) => [hasCodec, buildResult, evaluateResult],
-            2: (context, type) => [context, type]
-        });
-        // Note: The Base type requires this Validator to be Clone, but where we cannot safely clone
-        // the BuildResult or the EvaluateResult. For now we pass the Validator constructor a shared 
-        // reference of BuildResult and EvaluateResult to mitigate re-compile on Clone. We must remove 
-        // this overload when Base is removed (memory-gc-ref)
-        if (matched.length === 3 && matched[1] instanceof BuildResult && matched[2] instanceof EvaluateResult) {
-            const [hasCodec, buildResult, evaluateResult] = matched;
-            this.hasCodec = hasCodec;
-            this.buildResult = buildResult;
-            this.evaluateResult = evaluateResult;
-        }
-        else {
-            const [context, type] = matched;
-            this.hasCodec = HasCodec(context, type);
-            this.buildResult = Build(context, type);
-            this.evaluateResult = this.buildResult.Evaluate();
-        }
+    constructor(context, type) {
+        this.hasCodec = HasCodec(context, type);
+        this.buildResult = Build(context, type);
+        this.evaluateResult = this.buildResult.Evaluate();
     }
     // ----------------------------------------------------------------
     // IsAccelerated
@@ -108,14 +88,4 @@ export class Validator extends Base {
         const result = this.hasCodec ? Encode(this.Context(), this.Type(), value) : this.Parse(value);
         return result;
     }
-    // ----------------------------------------------------------------
-    // Deprecations
-    // ----------------------------------------------------------------
-    /**
-     * @deprecated Validator instances should not support Clone because they are owners of JIT evaluated functions. This function will be
-     * removed in the next version of TypeBox (relates to Type.Base deprecation)
-     */
-    Clone() {
-        return new Validator(this.hasCodec, this.buildResult, this.evaluateResult);
-    }
 }

package/node_modules/typebox/build/error/errors.d.mts

@@ -1,4 +1,4 @@
-export type TValidationError = TAdditionalPropertiesError | TAnyOfError | TBooleanError | TConstError | TContainsError | TDependenciesError | TDependentRequiredError | TEnumError | TExclusiveMaximumError | TExclusiveMinimumError | TFormatError | TGuardError | TIfError | TMaximumError | TMaxItemsError | TMaxLengthError | TMaxPropertiesError | TMinimumError | TMinItemsError | TMinLengthError | TMinPropertiesError | TMultipleOfError | TNotError | TOneOfError | TPatternError | TPropertyNamesError | TRefineError | TRequiredError | TTypeError | TUnevaluatedItemsError | TUnevaluatedPropertiesError | TUniqueItemsError;
+export type TValidationError = TAdditionalPropertiesError | TAnyOfError | TBooleanError | TConstError | TContainsError | TDependenciesError | TDependentRequiredError | TEnumError | TExclusiveMaximumError | TExclusiveMinimumError | TFormatError | TIfError | TMaximumError | TMaxItemsError | TMaxLengthError | TMaxPropertiesError | TMinimumError | TMinItemsError | TMinLengthError | TMinPropertiesError | TMultipleOfError | TNotError | TOneOfError | TPatternError | TPropertyNamesError | TRefineError | TRequiredError | TTypeError | TUnevaluatedItemsError | TUnevaluatedPropertiesError | TUniqueItemsError;
 export declare function IsValidationError(value: unknown): value is TValidationError;
 export type TLocalizedValidationError = TValidationError & {
     message: string;
@@ -78,12 +78,6 @@ export interface TFormatError extends TValidationErrorBase {
         format: string;
     };
 }
-export interface TGuardError extends TValidationErrorBase {
-    keyword: '~guard';
-    params: {
-        errors: object[];
-    };
-}
 export interface TIfError extends TValidationErrorBase {
     keyword: 'if';
     params: {

package/node_modules/typebox/build/format/_idna.mjs

@@ -1,3 +1,4 @@
+import { Unreachable } from '../system/unreachable/index.mjs';
 import * as Puny from './_puny.mjs';
 // ------------------------------------------------------------------
 // Unicode General Category Helper (RFC 5892)
@@ -34,7 +35,8 @@ const RFC5892_DISALLOWED = new Set([
 // ------------------------------------------------------------------
 // A set of Virama (halant) code points used to validate CONTEXTJ
 // rules (RFC 5892 Appendix A.1). These characters allow a subsequent
-// Zero Width Joiner (U+200D) to be valid in a label.
+// Zero Width Non-Joiner (U+200C) or Zero Width Joiner (U+200D) to
+// be valid in a label.
 // ------------------------------------------------------------------
 const VIRAMA_CPS = new Set([
     0x094d,
@@ -101,8 +103,10 @@ function IsVirama(cp) {
 // IsUnicodeLabel
 // ------------------------------------------------------------------
 function IsUnicodeLabel(value) {
+    // deno-coverage-ignore-start - unable to reach via format guards
     if (value.length === 0)
-        return false;
+        return Unreachable(); // false
+    // deno-coverage-ignore-stop
     // Use spread to handle surrogate pairs and provide O(1) neighbor access
     const cps = [...value].map((c) => c.codePointAt(0));
     const len = cps.length;
@@ -145,10 +149,17 @@ function IsUnicodeLabel(value) {
                 if (prev === undefined || !IsHebrew(prev))
                     return false;
                 break; // Hebrew GERESH
-            case 0x200d:
+            case 0x200c: // ZWNJ - RFC 5892 Appendix A.1
+                // Note: Full validation requires a Unicode joining type table. We reject
+                // only when preceded by ASCII (U+0000-U+007F), which can never satisfy
+                // the Virama or cursive-joining rules.
+                if (prev === undefined || (prev < 0x0080 && !IsVirama(prev)))
+                    return false;
+                break;
+            case 0x200d: // ZWJ  - RFC 5892 Appendix A.2
                 if (prev === undefined || !IsVirama(prev))
                     return false;
-                break; // ZWJ
+                break;
             case 0x30fb: /* Checked at end via hasJapanese */
                 break; // KATAKANA MIDDLE DOT
         }
@@ -192,10 +203,29 @@ function IsPuny(value) {
 }
 function IsPunyLabel(value) {
     try {
-        return IsUnicodeLabel(Puny.Decode(value.slice(4)));
+        const payload = value.slice(4).toLowerCase();
+        // 1. Structural Validation (RFC 3492 syntax)
+        //
+        // If the payload contains a hyphen, it MUST be a delimiter separating basic
+        // ASCII characters from the variable-length integers. A payload consisting
+        // of ONLY a hyphen or starting with multiple hyphens without basic ASCII
+        // characters (like "-9uc") is fundamentally malformed.
+        //
+        const lastHyphen = payload.lastIndexOf('-');
+        if (lastHyphen === 0) {
+            // Catches "-9uc" right here because the delimiter is at index 0, meaning 0
+            // basic ASCII characters preceded it, which is non-canonical.
+            return false;
+        }
+        // 2. Decode the payload
+        const decoded = Puny.Decode(payload);
+        if (!decoded)
+            return false;
+        // 3. Validate the output rules against RFC 5892
+        return IsUnicodeLabel(decoded);
     }
     catch {
-        return false; // invalid punycode encoding
+        return false;
     }
 }
 // ------------------------------------------------------------------

package/node_modules/typebox/build/format/_puny.mjs

@@ -1,3 +1,4 @@
+import { Unreachable } from '../system/unreachable/index.mjs';
 // ------------------------------------------------------------------
 // PunyCode (RFC 3492)
 // ------------------------------------------------------------------
@@ -52,8 +53,10 @@ export function Decode(value) {
                 digit = ch - 0x61; // a-z => 0-25
             else if (ch >= 0x30 && ch <= 0x39)
                 digit = ch - 0x30 + 26; // 0-9 => 26-35
+            // deno-coverage-ignore-start - _idna.ts maps input to lowercase, so we can't reach here
             else if (ch >= 0x41 && ch <= 0x5a)
-                digit = ch - 0x41; // A-Z => 0-25
+                Unreachable(); // digit = ch - 0x41 // A-Z => 0-25
+            // deno-coverage-ignore-stop
             else
                 throw new Error('Invalid punycode: bad digit character');
             i += digit * w;

package/node_modules/typebox/build/format/uuid.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a uuid
- * @specification
- * @source ajv-formats
+ * @specification https://www.rfc-editor.org/info/rfc4122/
+ * @specification https://www.rfc-editor.org/info/rfc9562/
  */
 export declare function IsUuid(value: string): boolean;

package/node_modules/typebox/build/format/uuid.mjs

@@ -1,8 +1,8 @@
-const Uuid = /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i;
+const Uuid = /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i;
 /**
  * Returns true if the value is a uuid
- * @specification
- * @source ajv-formats
+ * @specification https://www.rfc-editor.org/info/rfc4122/
+ * @specification https://www.rfc-editor.org/info/rfc9562/
  */
 export function IsUuid(value) {
     return Uuid.test(value);

package/node_modules/typebox/build/guard/emit.d.mts

@@ -3,16 +3,12 @@ export declare function Or(left: string, right: string): string;
 export declare function Not(expr: string): string;
 /** Returns true if this value is an array */
 export declare function IsArray(value: string): string;
-/** Returns true if this value is an async iterator */
-export declare function IsAsyncIterator(value: unknown): string;
 /** Returns true if this value is bigint */
 export declare function IsBigInt(value: string): string;
 /** Returns true if this value is a boolean */
 export declare function IsBoolean(value: string): string;
 /** Returns true if this value is integer */
 export declare function IsInteger(value: string): string;
-/** Returns true if this value is an iterator */
-export declare function IsIterator(value: unknown): string;
 /** Returns true if this value is null */
 export declare function IsNull(value: string): string;
 /** Returns true if this value is number */

package/node_modules/typebox/build/guard/emit.mjs

@@ -26,10 +26,6 @@ export function Not(expr) {
 export function IsArray(value) {
     return `Array.isArray(${value})`;
 }
-/** Returns true if this value is an async iterator */
-export function IsAsyncIterator(value) {
-    return `Guard.IsAsyncIterator(${value})`;
-}
 /** Returns true if this value is bigint */
 export function IsBigInt(value) {
     return `typeof ${value} === "bigint"`;
@@ -42,10 +38,6 @@ export function IsBoolean(value) {
 export function IsInteger(value) {
     return `Number.isInteger(${value})`;
 }
-/** Returns true if this value is an iterator */
-export function IsIterator(value) {
-    return `Guard.IsIterator(${value})`;
-}
 /** Returns true if this value is null */
 export function IsNull(value) {
     return `${value} === null`;

package/node_modules/typebox/build/guard/guard.d.mts

@@ -1,7 +1,5 @@
 /** Returns true if this value is an array */
 export declare function IsArray(value: unknown): value is unknown[];
-/** Returns true if this value is an async iterator */
-export declare function IsAsyncIterator(value: unknown): value is AsyncIterableIterator<unknown>;
 /** Returns true if this value is bigint */
 export declare function IsBigInt(value: unknown): value is bigint;
 /** Returns true if this value is a boolean */
@@ -12,8 +10,6 @@ export declare function IsConstructor(value: unknown): value is new (...args: ne
 export declare function IsFunction(value: unknown): value is globalThis.Function;
 /** Returns true if this value is integer */
 export declare function IsInteger(value: unknown): value is number;
-/** Returns true if this value is an iterator */
-export declare function IsIterator(value: unknown): value is IterableIterator<unknown>;
 /** Returns true if this value is null */
 export declare function IsNull(value: unknown): value is null;
 /** Returns true if this value is number */
@@ -47,8 +43,8 @@ export declare function IsMinLength(value: string, length: number): boolean;
 export declare function Every<T>(value: T[], offset: number, callback: (value: T, index: number) => boolean): boolean;
 /** Returns true if all elements from offset satisfy the callback, visiting every element regardless of failure */
 export declare function EveryAll<T>(value: T[], offset: number, callback: (value: T, index: number) => boolean): boolean;
-/** Takes the left-most element from an array and dispatches to the true arm, or the false arm if empty */
-export declare function TakeLeft<T, True extends (left: T, right: T[]) => unknown, False extends () => unknown>(array: T[], true_: True, false_: False): ReturnType<True> | ReturnType<False>;
+/** Shifts the left-most element from an array and dispatches to the true arm, or the false arm if empty */
+export declare function ShiftLeft<T, True extends (left: T, right: T[]) => unknown, False extends () => unknown>(array: T[], true_: True, false_: False): ReturnType<True> | ReturnType<False>;
 /** Returns true if the PropertyKey is Unsafe (ref: prototype-pollution). */
 export declare function IsUnsafePropertyKey(key: PropertyKey): boolean;
 /** Returns true if this value has this property key */
@@ -59,9 +55,9 @@ export declare function HasPropertyKey<Key extends PropertyKey>(value: object, k
 export declare function EntriesRegExp<Value extends unknown = unknown>(value: Record<PropertyKey, Value>): [RegExp, Value][];
 /** Returns object entries as `[string, Value][]` */
 export declare function Entries<Value extends unknown = unknown>(value: Record<PropertyKey, Value>): [string, Value][];
-/** Returns property keys for this object via `Object.getOwnPropertyKeys({ ... })` */
+/** Returns property keys for this object via `Object.getOwnPropertyNames({ ... })` */
 export declare function Keys(value: Record<PropertyKey, unknown>): string[];
-/** Returns the property keys for this object via `Object.getOwnPropertyKeys({ ... })` */
+/** Returns the property keys for this object via `Object.getOwnPropertySymbols({ ... })` */
 export declare function Symbols(value: Record<PropertyKey, unknown>): symbol[];
 /** Returns the property values for the given object via `Object.values()` */
 export declare function Values(value: Record<PropertyKey, unknown>): unknown[];