@openclaw/line 2026.8.1-beta.3 → 2026.8.1

package/dist/{setup-surface-W0Dbgu58.js → setup-surface-DSJ92oJ5.js}

@@ -1,19 +1,9 @@
 import { i as resolveLineAccount, n as normalizeAccountId, r as resolveDefaultLineAccountId, t as listLineAccountIds } from "./accounts-BqEVsDoB.js";
+import { n as parseLineAllowFromId, t as hasLineCredentials } from "./account-helpers-BSUyZwLm.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
 import { DEFAULT_ACCOUNT_ID, createAllowFromSection, createPromptParsedAllowFromForAccount, createSetupInputPresenceValidator, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, formatDocsLink, parseSetupEntriesWithParser, patchScopedAccountConfig, setSetupChannelEnabled, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
-//#region extensions/line/src/account-helpers.ts
-function hasLineCredentials(account) {
-	if (account.tokenStatus && account.signingSecretStatus) return account.tokenStatus !== "missing" && account.signingSecretStatus !== "missing";
-	return Boolean(account.channelAccessToken?.trim() && account.channelSecret?.trim());
-}
-function parseLineAllowFromId(raw) {
-	const trimmed = raw.trim().replace(/^line:(?:user:)?/i, "");
-	if (!/^U[a-f0-9]{32}$/i.test(trimmed)) return null;
-	return trimmed;
-}
-//#endregion
 //#region extensions/line/src/setup-core.ts
 function patchLineAccountConfig(params) {
 	return patchScopedAccountConfig({
@@ -62,6 +52,26 @@ const lineSetupAdapter = {
 		const accessToken = typedInput.channelAccessToken ?? typedInput.token;
 		const normalizedAccountId = normalizeAccountId(accountId);
 		const useEnv = normalizedAccountId === DEFAULT_ACCOUNT_ID && Boolean(typedInput.useEnv);
+		const credentials = [{
+			fileKey: "tokenFile",
+			file: typedInput.tokenFile,
+			inlineKey: "channelAccessToken",
+			inline: accessToken
+		}, {
+			fileKey: "secretFile",
+			file: typedInput.secretFile,
+			inlineKey: "channelSecret",
+			inline: typedInput.channelSecret
+		}];
+		const patch = {};
+		const retired = [];
+		for (const credential of credentials) if (credential.file) {
+			patch[credential.fileKey] = credential.file;
+			retired.push(credential.inlineKey);
+		} else if (credential.inline) {
+			patch[credential.inlineKey] = credential.inline;
+			retired.push(credential.fileKey);
+		}
 		return patchLineAccountConfig({
 			cfg,
 			accountId: normalizedAccountId,
@@ -71,11 +81,8 @@ const lineSetupAdapter = {
 				"channelSecret",
 				"tokenFile",
 				"secretFile"
-			] : void 0,
-			patch: useEnv ? {} : {
-				...typedInput.tokenFile ? { tokenFile: typedInput.tokenFile } : accessToken ? { channelAccessToken: accessToken } : {},
-				...typedInput.secretFile ? { secretFile: typedInput.secretFile } : typedInput.channelSecret ? { channelSecret: typedInput.channelSecret } : {}
-			}
+			] : retired.length > 0 ? retired : void 0,
+			patch: useEnv ? {} : patch
 		});
 	}
 };
@@ -295,4 +302,4 @@ const lineSetupWizard = {
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
 };
 //#endregion
-export { hasLineCredentials as i, lineSetupAdapter as n, lineSetupContract as r, lineSetupWizard as t };
+export { lineSetupAdapter as n, lineSetupContract as r, lineSetupWizard as t };

package/dist/webhook-spool-contract-CNe2h1I2.js

@@ -0,0 +1,58 @@
+import { isRecord, normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
+//#region extensions/line/src/webhook-spool-contract.ts
+/** Message the canonical decoder attaches when it rejects a spool payload. The
+*  upgrade migration matches this signature to recover rows the pre-fix decoder
+*  dead-lettered; the identity fence writes a different message on purpose. */
+const LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE = "LINE webhook spool payload is invalid.";
+/** Dead-letter reason for undecodable events; shared so the migration's
+*  recovery signature can never drift from what the spool writes. */
+const LINE_WEBHOOK_SPOOL_INVALID_EVENT_REASON = "invalid-event";
+/** Defined locally (not via createChannelIngressError) because this module sits
+*  in the doctor contract closure, which must stay off the channel-outbound
+*  runtime barrel; the spool's permanent-failure classifier matches by class. */
+var LineWebhookPayloadError = class extends Error {
+	constructor(message, options) {
+		super(message, options);
+		this.name = "LineWebhookPayloadError";
+	}
+};
+/** Message ids preserve the shipped replay-guard keyspace; other events use LINE's delivery id. */
+function eventIdFor(event) {
+	if (!isRecord(event)) throw new LineWebhookPayloadError("LINE webhook event must be an object.");
+	if (event.type === "message") {
+		const messageId = normalizeNullableString((isRecord(event.message) ? event.message : void 0)?.id);
+		if (messageId) return `message:${messageId}`;
+	}
+	const webhookEventId = normalizeNullableString(event.webhookEventId);
+	if (webhookEventId) return `event:${webhookEventId}`;
+	throw new LineWebhookPayloadError("LINE webhook event is missing a stable delivery id.");
+}
+/** Pre-drain (#109655) rows were keyed by the raw webhookEventId, before the
+*  message:/event: keyspace. The upgrade migration uses this prior derivation as its
+*  identity fence so a genuinely changed event still dead-letters. */
+function legacyEventIdFor(event) {
+	if (!isRecord(event)) return null;
+	return normalizeNullableString(event.webhookEventId);
+}
+function laneKeyFor(event, eventId) {
+	if (!isRecord(event)) return eventId;
+	const source = isRecord(event.source) ? event.source : void 0;
+	if (source?.type === "group") {
+		const groupId = normalizeNullableString(source.groupId);
+		if (groupId) return `group:${groupId}`;
+	}
+	if (source?.type === "room") {
+		const roomId = normalizeNullableString(source.roomId);
+		if (roomId) return `room:${roomId}`;
+	}
+	if (source?.type === "user") {
+		const userId = normalizeNullableString(source.userId);
+		if (userId) return `user:${userId}`;
+	}
+	return eventId;
+}
+function errorText(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+export { eventIdFor as a, errorText as i, LINE_WEBHOOK_SPOOL_INVALID_PAYLOAD_MESSAGE as n, laneKeyFor as o, LineWebhookPayloadError as r, legacyEventIdFor as s, LINE_WEBHOOK_SPOOL_INVALID_EVENT_REASON as t };

package/node_modules/typebox/build/format/date.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a ISO8601 Date component string
- * @source ajv-formats
+ * @description https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12`
  */
 export declare function IsDate(value: string): boolean;

package/node_modules/typebox/build/format/date.mjs

@@ -5,7 +5,7 @@ function IsLeapYear(year) {
 }
 /**
  * Returns true if the value is a ISO8601 Date component string
- * @source ajv-formats
+ * @description https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12`
  */
 export function IsDate(value) {

package/node_modules/typebox/build/format/date_time.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a ISO8601 DateTime string
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12T20:20:40+00:00`
  */
-export declare function IsDateTime(value: string, strictTimeZone?: boolean): boolean;
+export declare function IsDateTime(value: string): boolean;

package/node_modules/typebox/build/format/date_time.mjs

@@ -2,10 +2,10 @@ import { IsDate } from './date.mjs';
 import { IsTime } from './time.mjs';
 /**
  * Returns true if the value is a ISO8601 DateTime string
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12T20:20:40+00:00`
  */
-export function IsDateTime(value, strictTimeZone = true) {
+export function IsDateTime(value) {
     const dateTime = value.split(/T/i);
-    return dateTime.length === 2 && IsDate(dateTime[0]) && IsTime(dateTime[1], strictTimeZone);
+    return dateTime.length === 2 && IsDate(dateTime[0]) && IsTime(dateTime[1]);
 }

package/node_modules/typebox/build/format/email.d.mts

@@ -1,5 +1,5 @@
 /**
  * Returns true if the value is an Email
- * @specification ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc5322
  */
 export declare function IsEmail(value: string): boolean;

package/node_modules/typebox/build/format/email.mjs

@@ -1,7 +1,7 @@
-const Email = /^(?!.*\.\.)[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/i;
+const Email = /^(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[^"\\]|\\.)*")@(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*|\[(?:IPv6:[a-f0-9:]+|(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3})\])$/i;
 /**
  * Returns true if the value is an Email
- * @specification ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc5322
  */
 export function IsEmail(value) {
     return Email.test(value);

package/node_modules/typebox/build/format/hostname.mjs

@@ -1,4 +1,4 @@
-import * as Idna from './_idna.mjs';
+import * as Idna from './idna/index.mjs';
 /**
  * Returns true if the value is a valid hostname.
  * @specification https://tools.ietf.org/html/rfc1123
@@ -6,13 +6,5 @@ import * as Idna from './_idna.mjs';
  * @specification https://tools.ietf.org/html/rfc5892
  */
 export function IsHostname(value) {
-    if (value.length === 0 || value.length > 253)
-        return false;
-    if (value.charCodeAt(value.length - 1) === 46)
-        return false;
-    for (const label of value.split('.')) {
-        if (!Idna.IsLabel(label))
-            return false;
-    }
-    return true;
+    return Idna.IsHostname(value);
 }

package/node_modules/typebox/build/format/idn_email.d.mts

@@ -1,5 +1,5 @@
 /**
  * Returns true if the value is an IdnEmail
- * @specification ajv-formats (unicode-extension)
+ * @specification https://datatracker.ietf.org/doc/html/rfc4952
  */
 export declare function IsIdnEmail(value: string): boolean;

package/node_modules/typebox/build/format/idn_email.mjs

@@ -1,8 +1,8 @@
-const IdnEmail = /^(?!.*\.\.)[\p{L}\p{N}!#$%&'*+/=?^_`{|}~-]+(?:\.[\p{L}\p{N}!#$%&'*+/=?^_`{|}~-]+)*@[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,61}[\p{L}\p{N}])?(?:\.[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,61}[\p{L}\p{N}])?)*$/iu;
+const IdnEmail = /^(?:[A-Za-z0-9!#$%&'*+\/=?^_`{|}~\u{0080}-\u{10FFFF}-]+(?:\.[A-Za-z0-9!#$%&'*+\/=?^_`{|}~\u{0080}-\u{10FFFF}-]+)*|"(?:[^"\\]|\\.)*")@[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,62})(?<!-)(?:\.[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,62})(?<!-))*$/iu;
 /**
  * Returns true if the value is an IdnEmail
- * @specification ajv-formats (unicode-extension)
+ * @specification https://datatracker.ietf.org/doc/html/rfc4952
  */
 export function IsIdnEmail(value) {
-    return IdnEmail.test(value);
+    return IdnEmail.test(value.normalize('NFC'));
 }

package/node_modules/typebox/build/format/idn_hostname.d.mts

@@ -3,5 +3,6 @@
  * @specification https://tools.ietf.org/html/rfc3490
  * @specification https://tools.ietf.org/html/rfc5891
  * @specification https://tools.ietf.org/html/rfc5892
+ * @specification https://tools.ietf.org/html/rfc5893
  */
 export declare function IsIdnHostname(value: string): boolean;

package/node_modules/typebox/build/format/idn_hostname.mjs

@@ -1,19 +1,11 @@
-import { IsIdnLabel } from './_idna.mjs';
+import * as Idna from './idna/index.mjs';
 /**
  * Returns true if the value is a valid internationalized (IDN) hostname.
  * @specification https://tools.ietf.org/html/rfc3490
  * @specification https://tools.ietf.org/html/rfc5891
  * @specification https://tools.ietf.org/html/rfc5892
+ * @specification https://tools.ietf.org/html/rfc5893
  */
 export function IsIdnHostname(value) {
-    if (value.length === 0 || value.includes(' '))
-        return false;
-    const canonical = value.normalize('NFC').replace(/[\u002E\u3002\uFF0E\uFF61]/g, '.');
-    if (canonical.length > 253)
-        return false;
-    for (const label of canonical.split('.')) {
-        if (!IsIdnLabel(label))
-            return false;
-    }
-    return true;
+    return Idna.IsIdnHostname(value);
 }

package/node_modules/typebox/build/format/idna/format/bidi.d.mts

@@ -0,0 +1,3 @@
+export declare function HasBidiChars(value: string): boolean;
+export declare function HasRightToLeftCharacters(value: string): boolean;
+export declare function SatisfiesBidiRule(value: string): boolean;

package/node_modules/typebox/build/format/idna/format/bidi.mjs

@@ -0,0 +1,98 @@
+// deno-fmt-ignore-file
+import * as FormatPuny from './puny.mjs';
+import * as Pattern from '../pattern/pattern.mjs';
+// ------------------------------------------------------------------
+// LOCAL REGEX: Allowed Bidi classes per direction (RFC 5893)
+// ------------------------------------------------------------------
+const RE_RTL_ALLOWED = /^(?:R|AL|AN|EN|ES|CS|ET|ON|BN|NSM)$/;
+const RE_LTR_ALLOWED = /^(?:L|EN|ES|CS|ET|ON|BN|NSM)$/;
+const RE_RTL_CLASSES = /^(?:R|AL|AN)$/;
+// ------------------------------------------------------------------
+// HasBidiChars
+//
+// Decodes a punycode label to its Unicode form (if it is one) and
+// checks whether the result is an RTL label per RFC 5893 §1.4.
+// ------------------------------------------------------------------
+export function HasBidiChars(value) {
+    if (FormatPuny.IsAcePrefixed(value)) {
+        try {
+            return HasRightToLeftCharacters(FormatPuny.Decode(value.slice(4).toLowerCase()));
+        }
+        catch {
+            return false;
+        }
+    }
+    return HasRightToLeftCharacters(value);
+}
+// ------------------------------------------------------------------
+// GetBidiClass
+// ------------------------------------------------------------------
+function GetBidiClass(codePoint) {
+    const char = String.fromCodePoint(codePoint);
+    return (Pattern.RE_EUROPEAN_NUMBER.test(char) ? 'EN' :
+        Pattern.RE_ARABIC_INDIC_DIGIT.test(char) ? 'AN' :
+            // Pattern.RE_EUROPEAN_SEPARATOR.test(char) ? 'ES' : // (no-spec-coverage)
+            // Pattern.RE_COMMON_SEPARATOR.test(char) ? 'CS' : // (no-spec-coverage)
+            Pattern.RE_MARK_NONSPACING.test(char) ? 'NSM' :
+                Pattern.RE_SCRIPT_HEBREW.test(char) ? 'R' :
+                    Pattern.RE_SCRIPT_ARABIC_LETTER.test(char) ? 'AL' :
+                        Pattern.RE_LETTER.test(char) ? 'L' :
+                            'ON');
+}
+// ------------------------------------------------------------------
+// HasRightToLeftCharacters
+//
+// Per RFC 5893 §1.4: "An RTL label is a label that contains at least
+// one character of type R, AL, or AN." Used to determine whether a
+// domain name is a "Bidi domain name" (RFC 5893 §1.4), in which case
+// the Bidi Rule applies to every label in the domain.
+// ------------------------------------------------------------------
+export function HasRightToLeftCharacters(value) {
+    for (const ch of value)
+        if (RE_RTL_CLASSES.test(GetBidiClass(ch.codePointAt(0))))
+            return true;
+    return false;
+}
+// ------------------------------------------------------------------
+// SatisfiesBidiRule
+// ------------------------------------------------------------------
+export function SatisfiesBidiRule(value) {
+    let isRtl = false;
+    let allowed = RE_LTR_ALLOWED;
+    let sawEN = false;
+    let sawAN = false;
+    let isFirst = true;
+    // let lastClass: string | null = null // (no-spec-coverage)
+    for (const ch of value) {
+        const bidiClass = GetBidiClass(ch.codePointAt(0));
+        if (isFirst) {
+            // 1. The first character must be a character with Bidi property L, R, or AL.
+            if (bidiClass !== 'L' && bidiClass !== 'R' && bidiClass !== 'AL')
+                return false;
+            isRtl = bidiClass === 'R' || bidiClass === 'AL';
+            allowed = isRtl ? RE_RTL_ALLOWED : RE_LTR_ALLOWED;
+            isFirst = false;
+        }
+        // 2 / 5. Only characters in the allowed set for this direction may appear.
+        if (!allowed.test(bidiClass))
+            return false;
+        if (bidiClass === 'EN')
+            sawEN = true;
+        else if (bidiClass === 'AN')
+            sawAN = true;
+        // if (bidiClass !== 'NSM') lastClass = bidiClass // (no-spec-coverage)
+    }
+    if (isRtl && sawEN && sawAN)
+        return false; // spec coverage path
+    // (no-spec-coverage)
+    // if (isRtl) {
+    //   // 3. The end of the label must be R, AL, EN, or AN (ignoring trailing NSM).
+    //   // if (lastClass !== 'R' && lastClass !== 'AL' && lastClass !== 'EN' && lastClass !== 'AN') return false
+    //   // 4. If an EN is present, no AN may be present, and vice versa.
+    //   if (sawEN && sawAN) return false
+    // } else {
+    //   // 6. The end of the label must be L or EN (ignoring trailing NSM).
+    //   // if (lastClass !== 'L' && lastClass !== 'EN') return false
+    // }
+    return true;
+}

package/node_modules/typebox/build/format/idna/format/puny.d.mts

@@ -0,0 +1,3 @@
+export declare function IsAcePrefixed(value: string): boolean;
+export declare function Decode(value: string): string;
+export declare function Encode(input: string): string;

package/node_modules/typebox/build/format/idna/format/puny.mjs

@@ -0,0 +1,144 @@
+import * as Pattern from '../pattern/pattern.mjs';
+// ------------------------------------------------------------------
+// PunyCode (RFC 3492)
+// ------------------------------------------------------------------
+const PUNYCODE_BASE = 36;
+const PUNYCODE_TMIN = 1;
+const PUNYCODE_TMAX = 26;
+const PUNYCODE_SKEW = 38;
+const PUNYCODE_DAMP = 700;
+const PUNYCODE_INITIAL_BIAS = 72;
+const PUNYCODE_INITIAL_N = 128;
+// ------------------------------------------------------------------
+// ThrowDontCare
+// ------------------------------------------------------------------
+function ThrowDontCare() {
+    throw null;
+}
+// ------------------------------------------------------------------
+// IsAcePrefixed
+// ------------------------------------------------------------------
+export function IsAcePrefixed(value) {
+    return value.toLowerCase().startsWith('xn--');
+}
+// ------------------------------------------------------------------
+// Adapt
+// ------------------------------------------------------------------
+function Adapt(delta, numPoints, firstTime) {
+    delta = firstTime ? Math.floor(delta / PUNYCODE_DAMP) : delta >> 1;
+    delta += Math.floor(delta / numPoints);
+    let k = 0;
+    while (delta > (((PUNYCODE_BASE - PUNYCODE_TMIN) * PUNYCODE_TMAX) >> 1)) {
+        delta = Math.floor(delta / (PUNYCODE_BASE - PUNYCODE_TMIN));
+        k += PUNYCODE_BASE;
+    }
+    return k + Math.floor(((PUNYCODE_BASE - PUNYCODE_TMIN + 1) * delta) / (delta + PUNYCODE_SKEW));
+}
+// ------------------------------------------------------------------
+// Decode
+// ------------------------------------------------------------------
+export function Decode(value) {
+    const output = [];
+    let n = PUNYCODE_INITIAL_N;
+    let i = 0;
+    let bias = PUNYCODE_INITIAL_BIAS;
+    const delimIdx = value.lastIndexOf('-');
+    if (delimIdx > 0) {
+        for (let j = 0; j < delimIdx; j++) {
+            const cp = value.charCodeAt(j);
+            if (cp >= 128)
+                ThrowDontCare(); // throw new Error('Invalid punycode: non-basic before delimiter')
+            output.push(cp);
+        }
+    }
+    let inIdx = delimIdx < 0 ? 0 : delimIdx + 1;
+    while (inIdx < value.length) {
+        const oldi = i;
+        let w = 1;
+        let k = PUNYCODE_BASE;
+        while (true) {
+            if (inIdx >= value.length)
+                ThrowDontCare(); // throw new Error('Invalid punycode: unexpected end of input')
+            const ch = value.charCodeAt(inIdx++);
+            let digit;
+            if (ch >= 0x61 && ch <= 0x7a)
+                digit = ch - 0x61; // a-z => 0-25
+            else if (ch >= 0x30 && ch <= 0x39)
+                digit = ch - 0x30 + 26; // 0-9 => 26-35
+            // else if (ch >= 0x41 && ch <= 0x5a) digit = ch - 0x41 // A-Z => 0-25 // (no-spec-coverage)
+            else
+                ThrowDontCare(); // throw new Error('Invalid punycode: bad digit character')
+            i += digit * w;
+            const t = k <= bias ? PUNYCODE_TMIN : k >= bias + PUNYCODE_TMAX ? PUNYCODE_TMAX : k - bias;
+            if (digit < t)
+                break;
+            w *= PUNYCODE_BASE - t;
+            k += PUNYCODE_BASE;
+        }
+        const outLen = output.length + 1;
+        bias = Adapt(i - oldi, outLen, oldi === 0);
+        n += Math.floor(i / outLen);
+        i %= outLen;
+        output.splice(i, 0, n);
+        i++;
+    }
+    return String.fromCodePoint(...output);
+}
+// ------------------------------------------------------------------
+// DigitToChar
+// ------------------------------------------------------------------
+function DigitToChar(digit) {
+    return digit < 26 ? String.fromCharCode(digit + 0x61) : String.fromCharCode(digit - 26 + 0x30);
+}
+// ------------------------------------------------------------------
+// Encode
+//
+// Encodes a Unicode string into its Punycode payload (the part that
+// follows the 'xn--' ACE prefix). Used to compute the true A-label
+// length of a U-label, since the 63-octet label length limit (RFC
+// 5891 §4.2.4) applies to the encoded form, not the code point count.
+// ------------------------------------------------------------------
+const RE_REPLACE_NON_ASCII = new RegExp(Pattern.RE_NON_ASCII.source, 'gu');
+export function Encode(input) {
+    // Extract basic ASCII characters and set initial output array state
+    const basic = input.replace(RE_REPLACE_NON_ASCII, '');
+    const basicLength = basic.length;
+    const result = basicLength > 0 ? [basic, '-'] : [];
+    // Extract unicode codepoints
+    const codePoints = Array.from(input, (char) => char.codePointAt(0));
+    let n = PUNYCODE_INITIAL_N;
+    let delta = 0;
+    let bias = PUNYCODE_INITIAL_BIAS;
+    let handledCPCount = basicLength;
+    while (handledCPCount < codePoints.length) {
+        let m = Infinity;
+        for (const cp of codePoints) {
+            if (cp >= n && cp < m)
+                m = cp;
+        }
+        delta += (m - n) * (handledCPCount + 1);
+        n = m;
+        for (const cp of codePoints) {
+            if (cp < n)
+                delta++;
+            if (cp === n) {
+                let q = delta;
+                for (let k = PUNYCODE_BASE;; k += PUNYCODE_BASE) {
+                    const t = k <= bias ? PUNYCODE_TMIN : k >= bias + PUNYCODE_TMAX ? PUNYCODE_TMAX : k - bias;
+                    if (q < t)
+                        break;
+                    const digit = t + ((q - t) % (PUNYCODE_BASE - t));
+                    result.push(DigitToChar(digit));
+                    q = Math.floor((q - t) / (PUNYCODE_BASE - t));
+                }
+                result.push(DigitToChar(q));
+                bias = Adapt(delta, handledCPCount + 1, handledCPCount === basicLength);
+                delta = 0;
+                handledCPCount++;
+            }
+        }
+        delta++;
+        n++;
+    }
+    return result.join('');
+}

package/node_modules/typebox/build/format/idna/hostname.d.mts

@@ -0,0 +1 @@
+export declare function IsHostname(value: string): boolean;

package/node_modules/typebox/build/format/idna/hostname.mjs

@@ -0,0 +1,16 @@
+import * as LabelAscii from './label/ascii.mjs';
+import * as LabelPuny from './label/puny.mjs';
+function IsValidLabelLength(value) {
+    return value.length > 0 && value.length <= 63;
+}
+function IsLabel(value) {
+    return IsValidLabelLength(value) && (LabelPuny.IsPunyLabel(value) ||
+        LabelAscii.IsAsciiLabel(value));
+}
+export function IsHostname(value) {
+    if (value.length === 0 || value.length > 253)
+        return false;
+    if (value.charCodeAt(value.length - 1) === 46)
+        return false;
+    return value.split('.').every((label) => IsLabel(label));
+}

package/node_modules/typebox/build/format/idna/idn-hostname.d.mts

@@ -0,0 +1 @@
+export declare function IsIdnHostname(value: string): boolean;

package/node_modules/typebox/build/format/idna/idn-hostname.mjs

@@ -0,0 +1,23 @@
+import * as FormatBidi from './format/bidi.mjs';
+import * as LabelUnicode from './label/unicode.mjs';
+import * as LabelPuny from './label/puny.mjs';
+function IsValidLabelLength(value) {
+    return value.length > 0 && value.length <= 63;
+}
+function IsLabel(value) {
+    return IsValidLabelLength(value) && (LabelPuny.IsPunyLabel(value) ||
+        LabelUnicode.IsUnicodeLabel(value));
+}
+function NormalizeHostname(value) {
+    return value.normalize('NFC').replace(/[\u002E\u3002\uFF0E\uFF61]/g, '.');
+}
+export function IsIdnHostname(value) {
+    if (value.length === 0 || value.includes(' '))
+        return false;
+    const normalized = NormalizeHostname(value);
+    if (normalized.length > 253)
+        return false;
+    const labels = normalized.split('.');
+    const hasBidiChars = labels.some((label) => FormatBidi.HasBidiChars(label));
+    return labels.every((label) => IsLabel(label) && (!hasBidiChars || FormatBidi.SatisfiesBidiRule(label)));
+}

package/node_modules/typebox/build/format/idna/index.d.mts

@@ -0,0 +1,2 @@
+export * from './hostname.mjs';
+export * from './idn-hostname.mjs';

package/node_modules/typebox/build/format/idna/index.mjs

@@ -0,0 +1,2 @@
+export * from './hostname.mjs';
+export * from './idn-hostname.mjs';

package/node_modules/typebox/build/format/idna/label/ascii.d.mts

@@ -0,0 +1 @@
+export declare function IsAsciiLabel(value: string): boolean;

package/node_modules/typebox/build/format/idna/label/ascii.mjs

@@ -0,0 +1,9 @@
+import * as Pattern from '../pattern/pattern.mjs';
+// -------------------------------------------------------------------
+// Validates an ASCII LDH label per RFC 5891 §4.2.3.1
+// -------------------------------------------------------------------
+export function IsAsciiLabel(value) {
+    return (Pattern.RE_RULE_HYPHEN_PLACEMENT.test(value) &&
+        Pattern.RE_RULE_NOT_RESERVED_ACE.test(value) &&
+        Pattern.RE_ASCII_LDH.test(value));
+}

package/node_modules/typebox/build/format/idna/label/puny.d.mts

@@ -0,0 +1 @@
+export declare function IsPunyLabel(value: string): boolean;

package/node_modules/typebox/build/format/idna/label/puny.mjs

@@ -0,0 +1,28 @@
+import * as FormatPuny from '../format/puny.mjs';
+import * as LabelUnicode from './unicode.mjs';
+import * as Pattern from '../pattern/pattern.mjs';
+// ------------------------------------------------------------------
+// IsPunyLabel
+// ------------------------------------------------------------------
+export function IsPunyLabel(value) {
+    if (!FormatPuny.IsAcePrefixed(value))
+        return false;
+    try {
+        const body = value.slice(4).toLowerCase();
+        // A payload consisting of only a hyphen, or starting with the delimiter
+        // (like "-9uc"), has 0 basic ASCII characters preceding it and is malformed.
+        if (body.lastIndexOf('-') === 0)
+            return false;
+        const decoded = FormatPuny.Decode(body);
+        // RFC 5890 §2.3.2.1 - a U-label must contain at least one non-ASCII
+        // character. Code-unit level check: any non-ASCII codepoint has at least
+        // one UTF-16 unit >= 0x80 (surrogate halves included), so no need to
+        // decode codepoints or allocate a character array to answer this.
+        if (!Pattern.RE_NON_ASCII.test(decoded))
+            return false;
+        return LabelUnicode.IsUnicodeLabel(decoded);
+    }
+    catch {
+        return false;
+    }
+}

package/node_modules/typebox/build/format/idna/label/unicode.d.mts

@@ -0,0 +1 @@
+export declare function IsUnicodeLabel(value: string): boolean;