@openclaw/feishu 2026.9.3 → 2026.9.5

package/node_modules/zod/v4/core/errors.js

@@ -1,30 +1,85 @@
 import { $constructor } from "./core.js";
 import * as util from "./util.js";
+/* Computing the message eagerly is expensive (pretty-printed JSON of all
+ * issues), so defer it until first read. The accessor functions and
+ * descriptors are shared across instances to keep error construction
+ * cheap; the computed message is cached on the internals object. The
+ * setter preserves plain assignment semantics for consumers that
+ * overwrite `message`. */
+function _getMessage() {
+    const internals = this._zod;
+    internals.message ?? (internals.message = JSON.stringify(internals.def, util.jsonStringifyReplacer, 2));
+    return internals.message;
+}
+function _setMessage(value) {
+    this._zod.message = value;
+}
+const _messageDesc = {
+    get: _getMessage,
+    set: _setMessage,
+    enumerable: true,
+    configurable: true,
+};
+const _zodDesc = { value: undefined, enumerable: false };
+const _issuesDesc = { value: undefined, enumerable: false };
+/* Prototypes that already carry the lazy `toString`. Seeded with the
+ * intrinsics so that `init` on a foreign object — it accepts any object —
+ * can never install an accessor onto a prototype we do not own. */
+const _installedToString = /* @__PURE__ */ new WeakSet([Object.prototype, Error.prototype]);
 const initializer = (inst, def) => {
     inst.name = "$ZodError";
-    Object.defineProperty(inst, "_zod", {
-        value: inst._zod,
-        enumerable: false,
-    });
-    Object.defineProperty(inst, "issues", {
-        value: def,
-        enumerable: false,
-    });
-    inst.message = JSON.stringify(def, util.jsonStringifyReplacer, 2);
-    Object.defineProperty(inst, "toString", {
-        value: () => inst.message,
-        enumerable: false,
-    });
+    _zodDesc.value = inst._zod;
+    Object.defineProperty(inst, "_zod", _zodDesc);
+    _issuesDesc.value = def;
+    Object.defineProperty(inst, "issues", _issuesDesc);
+    // Clear the shared slots; a retained `value` pins the last error's issues.
+    _zodDesc.value = undefined;
+    _issuesDesc.value = undefined;
+    Object.defineProperty(inst, "message", _messageDesc);
+    /* `toString` lives as a non-enumerable lazy getter on the shared
+     * prototype; on first access it caches a per-instance closure so
+     * detached usage still works. */
+    const proto = Object.getPrototypeOf(inst);
+    if (!_installedToString.has(proto)) {
+        _installedToString.add(proto);
+        Object.defineProperty(proto, "toString", {
+            configurable: true,
+            enumerable: false,
+            get() {
+                const value = () => this.message;
+                Object.defineProperty(this, "toString", { value, configurable: true, writable: true });
+                return value;
+            },
+            set(value) {
+                Object.defineProperty(this, "toString", { value, configurable: true, writable: true });
+            },
+        });
+    }
 };
 export const $ZodError = $constructor("$ZodError", initializer);
-export const $ZodRealError = $constructor("$ZodError", initializer, { Parent: Error });
+export const $ZodRealError = $constructor("$ZodError", initializer, undefined, {
+    Parent: Error,
+});
+/** Get-or-create `obj[key]` as an own data property. A path segment naming an inherited member
+ * ("toString", "constructor") would otherwise read through to the prototype, and assigning
+ * "__proto__" would hit the setter instead of creating a key. */
+function node(obj, key, make) {
+    if (!Object.prototype.hasOwnProperty.call(obj, key)) {
+        if (key === "__proto__") {
+            Object.defineProperty(obj, key, { value: make(), writable: true, enumerable: true, configurable: true });
+        }
+        else {
+            obj[key] = make();
+        }
+    }
+    return obj[key];
+}
 export function flattenError(error, mapper = (issue) => issue.message) {
     const fieldErrors = {};
     const formErrors = [];
     for (const sub of error.issues) {
         if (sub.path.length > 0) {
-            fieldErrors[sub.path[0]] = fieldErrors[sub.path[0]] || [];
-            fieldErrors[sub.path[0]].push(mapper(sub));
+            node(fieldErrors, sub.path[0], () => []).push(mapper(sub));
         }
         else {
             formErrors.push(mapper(sub));
@@ -56,14 +111,32 @@ export function formatError(error, mapper = (issue) => issue.message) {
                     while (i < fullpath.length) {
                         const el = fullpath[i];
                         const terminal = i === fullpath.length - 1;
-                        if (!terminal) {
-                            curr[el] = curr[el] || { _errors: [] };
+                        // `_errors` is reserved by this legacy format, so merge a matching path segment into the current node instead of treating its array as a child.
+                        if (el === "_errors") {
+                            if (terminal)
+                                curr._errors.push(mapper(issue));
+                            i++;
+                            continue;
                         }
-                        else {
-                            curr[el] = curr[el] || { _errors: [] };
-                            curr[el]._errors.push(mapper(issue));
+                        // A path element may collide with an inherited property name such as
+                        // "__proto__" or "constructor". Truthiness checks read the prototype
+                        // (so no node is created, then ._errors.push throws), and bracket
+                        // assignment of "__proto__" hits the setter instead of creating an
+                        // own key. Guard the read with hasOwnProperty and create the node
+                        // with defineProperty so any path element becomes a real own key.
+                        if (!Object.prototype.hasOwnProperty.call(curr, el)) {
+                            Object.defineProperty(curr, el, {
+                                value: { _errors: [] },
+                                enumerable: true,
+                                writable: true,
+                                configurable: true,
+                            });
                         }
-                        curr = curr[el];
+                        const node = curr[el];
+                        if (terminal) {
+                            node._errors.push(mapper(issue));
+                        }
+                        curr = node;
                         i++;
                     }
                 }
@@ -76,7 +149,7 @@ export function formatError(error, mapper = (issue) => issue.message) {
 export function treeifyError(error, mapper = (issue) => issue.message) {
     const result = { errors: [] };
     const processError = (error, path = []) => {
-        var _a, _b;
+        var _a;
         for (const issue of error.issues) {
             if (issue.code === "invalid_union" && issue.errors.length) {
                 // regular union error
@@ -101,12 +174,24 @@ export function treeifyError(error, mapper = (issue) => issue.message) {
                     const terminal = i === fullpath.length - 1;
                     if (typeof el === "string") {
                         curr.properties ?? (curr.properties = {});
-                        (_a = curr.properties)[el] ?? (_a[el] = { errors: [] });
+                        // el may collide with an inherited property name ("__proto__",
+                        // "constructor", ...); ??= reads the prototype so the node is never
+                        // created and curr.errors.push throws. Guard with hasOwnProperty and
+                        // create the node with defineProperty so "__proto__" becomes a real
+                        // own key rather than invoking the prototype setter.
+                        if (!Object.prototype.hasOwnProperty.call(curr.properties, el)) {
+                            Object.defineProperty(curr.properties, el, {
+                                value: { errors: [] },
+                                enumerable: true,
+                                writable: true,
+                                configurable: true,
+                            });
+                        }
                         curr = curr.properties[el];
                     }
                     else {
                         curr.items ?? (curr.items = []);
-                        (_b = curr.items)[el] ?? (_b[el] = { errors: [] });
+                        (_a = curr.items)[el] ?? (_a[el] = { errors: [] });
                         curr = curr.items[el];
                     }
                     if (terminal) {

package/node_modules/zod/v4/core/index.cjs

@@ -26,18 +26,22 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JSONSchema = exports.JSONSchemaGenerator = exports.toJSONSchema = exports.locales = exports.regexes = exports.util = void 0;
+exports.JSONSchema = exports.JSONSchemaGenerator = exports.toJSONSchema = exports.locales = exports.regexes = exports.toZod = exports.util = void 0;
 __exportStar(require("./core.cjs"), exports);
 __exportStar(require("./parse.cjs"), exports);
 __exportStar(require("./errors.cjs"), exports);
 __exportStar(require("./schemas.cjs"), exports);
+__exportStar(require("./memoizer.cjs"), exports);
 __exportStar(require("./checks.cjs"), exports);
 __exportStar(require("./versions.cjs"), exports);
 exports.util = __importStar(require("./util.cjs"));
+var util_js_1 = require("./util.cjs");
+Object.defineProperty(exports, "toZod", { enumerable: true, get: function () { return util_js_1.toZod; } });
 exports.regexes = __importStar(require("./regexes.cjs"));
 exports.locales = __importStar(require("../locales/index.cjs"));
 __exportStar(require("./registries.cjs"), exports);
 __exportStar(require("./doc.cjs"), exports);
+__exportStar(require("./compile.cjs"), exports);
 __exportStar(require("./api.cjs"), exports);
 __exportStar(require("./to-json-schema.cjs"), exports);
 var json_schema_processors_js_1 = require("./json-schema-processors.cjs");

package/node_modules/zod/v4/core/index.d.cts

@@ -2,13 +2,16 @@ export * from "./core.cjs";
 export * from "./parse.cjs";
 export * from "./errors.cjs";
 export * from "./schemas.cjs";
+export * from "./memoizer.cjs";
 export * from "./checks.cjs";
 export * from "./versions.cjs";
 export * as util from "./util.cjs";
+export { toZod } from "./util.cjs";
 export * as regexes from "./regexes.cjs";
 export * as locales from "../locales/index.cjs";
 export * from "./registries.cjs";
 export * from "./doc.cjs";
+export * from "./compile.cjs";
 export * from "./api.cjs";
 export * from "./to-json-schema.cjs";
 export { toJSONSchema } from "./json-schema-processors.cjs";

package/node_modules/zod/v4/core/index.d.ts

@@ -2,13 +2,16 @@ export * from "./core.js";
 export * from "./parse.js";
 export * from "./errors.js";
 export * from "./schemas.js";
+export * from "./memoizer.js";
 export * from "./checks.js";
 export * from "./versions.js";
 export * as util from "./util.js";
+export { toZod } from "./util.js";
 export * as regexes from "./regexes.js";
 export * as locales from "../locales/index.js";
 export * from "./registries.js";
 export * from "./doc.js";
+export * from "./compile.js";
 export * from "./api.js";
 export * from "./to-json-schema.js";
 export { toJSONSchema } from "./json-schema-processors.js";

package/node_modules/zod/v4/core/index.js

@@ -2,13 +2,16 @@ export * from "./core.js";
 export * from "./parse.js";
 export * from "./errors.js";
 export * from "./schemas.js";
+export * from "./memoizer.js";
 export * from "./checks.js";
 export * from "./versions.js";
 export * as util from "./util.js";
+export { toZod } from "./util.js";
 export * as regexes from "./regexes.js";
 export * as locales from "../locales/index.js";
 export * from "./registries.js";
 export * from "./doc.js";
+export * from "./compile.js";
 export * from "./api.js";
 export * from "./to-json-schema.js";
 export { toJSONSchema } from "./json-schema-processors.js";

package/node_modules/zod/v4/core/json-schema-generator.cjs

@@ -29,6 +29,7 @@ class JSONSchemaGenerator {
     get target() {
         return this.ctx.target;
     }
+    // annotated so the .d.cts emits an indexed access rather than an inline `import()` of an ESM path
     /** @deprecated Access via ctx instead */
     get unrepresentable() {
         return this.ctx.unrepresentable;
@@ -89,6 +90,9 @@ class JSONSchemaGenerator {
             if (_params.external)
                 this.ctx.external = _params.external;
         }
+        // extractDefs/finalize skip their whole-map passes when they have already run for this `external`, but they also branch on `cycles`, `reused`, `seen.count` and the metadata registry — any of which can change between emits, including with no params at all. Drop the guards so the passes re-run. The registry conversion calls extractDefs/finalize directly and never routes through here, so it keeps skipping them.
+        this.ctx.sharedDefsExtractedFor = undefined;
+        this.ctx.sharedEmitDoneFor = undefined;
         (0, to_json_schema_js_1.extractDefs)(this.ctx, schema);
         const result = (0, to_json_schema_js_1.finalize)(this.ctx, schema);
         // Strip ~standard property to match old implementation's return type

package/node_modules/zod/v4/core/json-schema-generator.d.cts

@@ -1,7 +1,7 @@
 import type * as JSONSchema from "./json-schema.cjs";
 import type { $ZodRegistry } from "./registries.cjs";
 import type * as schemas from "./schemas.cjs";
-import { type JSONSchemaGeneratorParams, type ProcessParams, type Seen } from "./to-json-schema.cjs";
+import { type JSONSchemaGeneratorParams, type ProcessParams, type Seen, type ToJSONSchemaContext } from "./to-json-schema.cjs";
 /**
  * Parameters for the emit method of JSONSchemaGenerator.
  * @deprecated Use toJSONSchema function instead
@@ -36,7 +36,7 @@ export declare class JSONSchemaGenerator {
     /** @deprecated Access via ctx instead */
     get target(): ({} & string) | "draft-2020-12" | "draft-07" | "openapi-3.0" | "draft-04";
     /** @deprecated Access via ctx instead */
-    get unrepresentable(): "any" | "throw";
+    get unrepresentable(): ToJSONSchemaContext["unrepresentable"];
     /** @deprecated Access via ctx instead */
     get override(): (ctx: {
         zodSchema: schemas.$ZodType;

package/node_modules/zod/v4/core/json-schema-generator.d.ts

@@ -1,7 +1,7 @@
 import type * as JSONSchema from "./json-schema.js";
 import type { $ZodRegistry } from "./registries.js";
 import type * as schemas from "./schemas.js";
-import { type JSONSchemaGeneratorParams, type ProcessParams, type Seen } from "./to-json-schema.js";
+import { type JSONSchemaGeneratorParams, type ProcessParams, type Seen, type ToJSONSchemaContext } from "./to-json-schema.js";
 /**
  * Parameters for the emit method of JSONSchemaGenerator.
  * @deprecated Use toJSONSchema function instead
@@ -36,7 +36,7 @@ export declare class JSONSchemaGenerator {
     /** @deprecated Access via ctx instead */
     get target(): ({} & string) | "draft-2020-12" | "draft-07" | "openapi-3.0" | "draft-04";
     /** @deprecated Access via ctx instead */
-    get unrepresentable(): "any" | "throw";
+    get unrepresentable(): ToJSONSchemaContext["unrepresentable"];
     /** @deprecated Access via ctx instead */
     get override(): (ctx: {
         zodSchema: schemas.$ZodType;

package/node_modules/zod/v4/core/json-schema-generator.js

@@ -26,6 +26,7 @@ export class JSONSchemaGenerator {
     get target() {
         return this.ctx.target;
     }
+    // annotated so the .d.cts emits an indexed access rather than an inline `import()` of an ESM path
     /** @deprecated Access via ctx instead */
     get unrepresentable() {
         return this.ctx.unrepresentable;
@@ -86,6 +87,9 @@ export class JSONSchemaGenerator {
             if (_params.external)
                 this.ctx.external = _params.external;
         }
+        // extractDefs/finalize skip their whole-map passes when they have already run for this `external`, but they also branch on `cycles`, `reused`, `seen.count` and the metadata registry — any of which can change between emits, including with no params at all. Drop the guards so the passes re-run. The registry conversion calls extractDefs/finalize directly and never routes through here, so it keeps skipping them.
+        this.ctx.sharedDefsExtractedFor = undefined;
+        this.ctx.sharedEmitDoneFor = undefined;
         extractDefs(this.ctx, schema);
         const result = finalize(this.ctx, schema);
         // Strip ~standard property to match old implementation's return type