@opencoredev/social-sdk 0.3.0 → 0.4.0

package/dist/platforms/threads.js

@@ -1,9 +1,11 @@
-/* oxlint-disable anti-slop/no-chained-type-assertions, anti-slop/no-conditional-empty-object-spread, anti-slop/no-runtime-typeof, anti-slop/require-readable-spacing, anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract. */
 import { connectedAccountRef, defineAdapter, platformPostRef, profileRef, } from "../core/index.js";
 import { SocialError } from "../core/errors.js";
-import { managedHttp, publicFields } from "../cloud/common.js";
-import { object, array, optionalNumber, optionalString } from "../transport/validation.js";
+import { managedHttp, optionsObject, publicFields } from "../cloud/common.js";
+import { definedFields } from "../core/fields.js";
+import { object, array, isJsonArray, isJsonObject, isString, optionalArray, optionalNumber, optionalObject, optionalString, } from "../transport/validation.js";
 import { httpsUrl } from "../transport/upload.js";
+import { verifyMetaWebhook } from "../server/webhooks.js";
+import { directWebhooks, webhookCapability } from "./webhook-adapter.js";
 export class MemoryThreadsWorkflowStore {
     rows = new Map();
     claims = new Set();
@@ -47,14 +49,12 @@ export function threads(options) {
     const backend = options.backend ?? "default", version = options.graphVersion ?? "v1.0", auth = options.auth, store = options.workflowStore ?? new MemoryThreadsWorkflowStore(), now = () => (options.clock?.() ?? new Date()).toISOString();
     const http = managedHttp(`https://graph.threads.net/${version}`, {
         apiKey: auth.accessToken,
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        ...(options.fetch ? { fetch: options.fetch } : {}),
+        ...definedFields({ fetch: options.fetch }),
     });
     async function request(path, init, operation, context) {
         const [raw = "", qs] = path.split("?", 2);
         const query = Object.fromEntries(new URLSearchParams(qs ?? ""));
         try {
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await http(`/${raw.replace(/^\//, "")}`, context, init.method === "POST" ? {} : undefined, query, init.method === "POST" || init.method === "DELETE" || init.method === "PUT"
                 ? init.method
                 : "GET"));
@@ -71,37 +71,24 @@ export function threads(options) {
     }
     const account = accountRef(backend, auth.userId);
     function pageFrom(result) {
-        const items = array(result["data"]).map((entry) => {
-            // SAFETY: object() validates each provider data entry as a JSON object.
-            return object(entry);
-        });
+        const items = array(result["data"]).map((entry) => object(entry));
         const paging = result["paging"] === undefined ? {} : object(result["paging"]);
         const cursors = paging["cursors"] === undefined ? {} : object(paging["cursors"]);
         // Graph omits paging.next on the last page even when cursors.after is present.
-        const nextCursor = typeof paging["next"] === "string" && paging["next"].length > 0
+        const nextCursor = isString(paging["next"]) && paging["next"].length > 0
             ? optionalString(cursors["after"])
             : undefined;
-        return { items, ...(nextCursor === undefined ? {} : { nextCursor }) };
+        return { items, ...definedFields({ nextCursor }) };
     }
     async function readAccount(context) {
         const v = await request("/me?fields=id,username,threads_profile_picture_url,threads_biography", { method: "GET" }, "threads.accounts.read", context);
         const id = v["id"], username = v["username"];
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        if (typeof id !== "string" || id !== auth.userId)
+        if (!isString(id) || id !== auth.userId)
             fail("threads.accounts.read", "Threads returned an unauthorized account.", "unauthorized");
         return {
             ref: account,
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            displayName: typeof username === "string" ? username : (auth.handle ?? auth.userId),
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-            ...(typeof username === "string" ? { handle: username } : {}),
+            displayName: optionalString(username) ?? auth.handle ?? auth.userId,
+            ...definedFields({ handle: optionalString(username) }),
             status: "connected",
         };
     }
@@ -121,15 +108,11 @@ export function threads(options) {
         const items = array(result["data"]).map((entry) => publicFields(entry, ["id", "text", "username", "media_type", "permalink", "timestamp"]));
         const paging = result["paging"] === undefined ? {} : object(result["paging"]);
         const cursors = paging["cursors"] === undefined ? {} : object(paging["cursors"]);
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        const hasNext = typeof paging["next"] === "string" && paging["next"].length > 0;
-        const nextCursor = 
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        hasNext && typeof cursors["after"] === "string" ? cursors["after"] : undefined;
+        const hasNext = isString(paging["next"]) && paging["next"].length > 0;
+        const nextCursor = hasNext ? optionalString(cursors["after"]) : undefined;
         return {
             items,
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            ...(nextCursor === undefined ? {} : { nextCursor }),
+            ...definedFields({ nextCursor }),
         };
     }
     async function getAccountMetrics(selected, context) {
@@ -147,8 +130,7 @@ export function threads(options) {
         const allowed = new Set([...metricNames, "link_total_values"]);
         return array(result["data"]).flatMap((entry) => {
             const row = object(entry);
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            const name = typeof row["name"] === "string" ? row["name"] : undefined;
+            const name = optionalString(row["name"]);
             if (name === undefined || !allowed.has(name))
                 return [];
             const total = row["total_value"] === undefined ? undefined : object(row["total_value"]);
@@ -179,8 +161,7 @@ export function threads(options) {
                     value,
                     unit: "count",
                     period,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(totalValue === undefined && latestEnd !== undefined ? { measuredAt: latestEnd } : {}),
+                    ...definedFields({ measuredAt: totalValue === undefined ? latestEnd : undefined }),
                     fetchedAt: now(),
                     freshness: "unknown",
                     source: `threads:${version}`,
@@ -189,180 +170,123 @@ export function threads(options) {
         });
     }
     async function status(id, c) {
-        return request(`${encodeURIComponent(id)}?fields=id,status,error_message`, 
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        { method: "GET", ...(c.signal ? { signal: c.signal } : {}) }, "threads.container.status", c);
+        return request(`${encodeURIComponent(id)}?fields=id,status,error_message`, { method: "GET", ...definedFields({ signal: c.signal }) }, "threads.container.status", c);
     }
-    const base = (a, id, state, backendState) => 
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- provider payload is validated at this adapter boundary.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    ({
-        state,
-        targetIndex: 0,
-        account: a,
-        observedAt: now(),
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        ...(backendState ? { backendState } : {}),
-        delivery: {
+    function outcomeFields(a, id, backendState) {
+        const delivery = {
             kind: "delivery",
             version: 1,
             backend: a.backend,
             platform: "threads",
             accountId: a.accountId,
             deliveryId: id,
-        },
+        };
+        return {
+            targetIndex: 0,
+            account: a,
+            observedAt: now(),
+            ...definedFields({ backendState: backendState === "" ? undefined : backendState }),
+            delivery,
+        };
+    }
+    const processing = (a, id, backendState) => ({
+        state: "processing",
+        ...outcomeFields(a, id, backendState),
+    });
+    const published = (a, id, postId) => ({
+        state: "published",
+        ...outcomeFields(a, id, "PUBLISHED"),
+        post: platformPostRef({ backend, platform: "threads", accountId: a.accountId, postId }),
     });
-    const terminalFailure = (a, id, state) => 
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-    ({
-        ...base(a, id, "failed", state),
+    const ambiguous = (a, id, backendState, diagnostic) => ({
+        state: "unknown",
+        ...outcomeFields(a, id, backendState),
+        reason: "ambiguous-submission",
+        ...definedFields({ diagnostic }),
+    });
+    const terminalFailure = (a, id, state) => ({
+        state: "failed",
+        ...outcomeFields(a, id, state),
         code: "media_error",
         message: "Threads container failed or expired before publication.",
         retryDisposition: { kind: "never" },
     });
+    function replyControlParam(value) {
+        if (value === "accountsYouFollow")
+            return "accounts_you_follow";
+        if (value === "mentionedOnly")
+            return "mentioned_only";
+        return "everyone";
+    }
+    function parentMediaType(childCount, singleKind) {
+        if (childCount)
+            return "CAROUSEL";
+        if (singleKind === "video")
+            return "VIDEO";
+        if (singleKind === "image")
+            return "IMAGE";
+        return "TEXT";
+    }
     async function resume(w, a, c) {
         if (w.nativeId)
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            return {
-                ...base(a, w.id, "published", "PUBLISHED"),
-                post: platformPostRef({
-                    backend,
-                    platform: "threads",
-                    accountId: a.accountId,
-                    postId: w.nativeId,
-                }),
-            };
+            return published(a, w.id, w.nativeId);
         if (w.stage === "unknown")
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            return {
-                ...base(a, w.id, "unknown", w.backendState),
-                reason: "ambiguous-submission",
-                diagnostic: "Threads publish acceptance is unknown; no replay was attempted.",
-            };
+            return ambiguous(a, w.id, w.backendState, "Threads publish acceptance is unknown; no replay was attempted.");
         let cur = w;
-        const items = Array.isArray(cur.options["_mediaItems"]) ? cur.options["_mediaItems"] : [];
+        const items = optionalArray(cur.options["_mediaItems"]) ?? [];
         while (cur.childIds.length < items.length) {
             const item = object(items[cur.childIds.length]);
+            const url = String(item["url"]);
+            const isVideo = item["kind"] === "video";
             const p = new URLSearchParams({
-                media_type: item["kind"] === "video" ? "VIDEO" : "IMAGE",
+                media_type: isVideo ? "VIDEO" : "IMAGE",
                 is_carousel_item: "true",
-                ...(item["kind"] === "video"
-                    ? { video_url: String(item["url"]) }
-                    : { image_url: String(item["url"]) }),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                ...(typeof item["altText"] === "string" ? { alt_text: item["altText"] } : {}),
+                ...definedFields({
+                    video_url: isVideo ? url : undefined,
+                    image_url: isVideo ? undefined : url,
+                    alt_text: optionalString(item["altText"]),
+                }),
             });
             await store.update(cur.id, { stage: "unknown", backendState: "CREATING_CHILD" });
-            const child = await request(`${a.accountId}/threads?${p}`, 
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            { method: "POST", ...(c.signal ? { signal: c.signal } : {}) }, "threads.container.child", c);
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            if (typeof child["id"] !== "string")
+            const child = await request(`${a.accountId}/threads?${p}`, { method: "POST", ...definedFields({ signal: c.signal }) }, "threads.container.child", c);
+            const childId = optionalString(child["id"]);
+            if (childId === undefined)
                 fail("threads.container.child", "Threads did not return a child container ID.");
             cur = await store.update(cur.id, {
-                childIds: [...cur.childIds, child["id"]],
+                childIds: [...cur.childIds, childId],
                 stage: "children",
             });
         }
         for (const id of cur.childIds) {
             const s = await status(id, c);
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            const st = typeof s["status"] === "string" ? s["status"] : "";
+            const st = optionalString(s["status"]) ?? "";
             if (st === "ERROR" || st === "EXPIRED")
                 return terminalFailure(a, w.id, st);
             if (st !== "FINISHED" && st !== "PUBLISHED")
-                return base(a, w.id, "processing", st || "PROCESSING");
+                return processing(a, w.id, st || "PROCESSING");
         }
         if (!cur.parentId) {
             const singleKind = cur.options["_mediaKind"];
-            const singleUrl = cur.options["_mediaUrl"];
+            const singleUrl = optionalString(cur.options["_mediaUrl"]);
+            const replyControl = optionalString(cur.options["replyControl"]);
             const p = new URLSearchParams({
-                media_type: cur.childIds.length
-                    ? "CAROUSEL"
-                    : singleKind === "video"
-                        ? "VIDEO"
-                        : singleKind === "image"
-                            ? "IMAGE"
-                            : "TEXT",
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(cur.childIds.length ? { children: cur.childIds.join(",") } : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                ...(typeof singleUrl === "string"
-                    ? singleKind === "video"
-                        ? { video_url: singleUrl }
-                        : { image_url: singleUrl }
-                    : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                ...(typeof cur.options["_altText"] === "string"
-                    ? { alt_text: cur.options["_altText"] }
-                    : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(cur.caption ? { text: cur.caption } : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                ...(typeof cur.options["replyControl"] === "string"
-                    ? {
-                        reply_control: cur.options["replyControl"] === "accountsYouFollow"
-                            ? "accounts_you_follow"
-                            : cur.options["replyControl"] === "mentionedOnly"
-                                ? "mentioned_only"
-                                : "everyone",
-                    }
-                    : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                ...(typeof cur.options["_replyToId"] === "string"
-                    ? { reply_to_id: cur.options["_replyToId"] }
-                    : {}),
+                media_type: parentMediaType(cur.childIds.length, singleKind),
+                ...definedFields({
+                    children: cur.childIds.length ? cur.childIds.join(",") : undefined,
+                    video_url: singleKind === "video" ? singleUrl : undefined,
+                    image_url: singleKind === "video" ? undefined : singleUrl,
+                    alt_text: optionalString(cur.options["_altText"]),
+                    text: cur.caption === "" ? undefined : cur.caption,
+                    reply_control: replyControl === undefined ? undefined : replyControlParam(replyControl),
+                    reply_to_id: optionalString(cur.options["_replyToId"]),
+                }),
             });
             // Persist ambiguity before dispatch so a process crash cannot recreate a
             // possibly accepted container under the same continuation handle.
             await store.update(cur.id, { stage: "unknown", backendState: "CREATING_PARENT" });
-            const parent = await request(`${a.accountId}/threads?${p}`, 
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            { method: "POST", ...(c.signal ? { signal: c.signal } : {}) }, "threads.container.create", c);
-            const parentId = parent["id"];
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            if (typeof parentId !== "string")
+            const parent = await request(`${a.accountId}/threads?${p}`, { method: "POST", ...definedFields({ signal: c.signal }) }, "threads.container.create", c);
+            const parentId = optionalString(parent["id"]);
+            if (parentId === undefined)
                 fail("threads.container.create", "Threads did not return a container ID.");
             cur = await store.update(cur.id, { parentId, stage: "parent" });
         }
@@ -370,57 +294,30 @@ export function threads(options) {
         if (!parentId)
             fail("threads.container.create", "Missing parent container ID.");
         const ps = await status(parentId, c);
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        const pst = typeof ps["status"] === "string" ? ps["status"] : "";
+        const pst = optionalString(ps["status"]) ?? "";
         if (pst === "ERROR" || pst === "EXPIRED")
             return terminalFailure(a, cur.id, pst);
         if (pst === "PUBLISHED") {
             await store.update(cur.id, { stage: "unknown", backendState: "PUBLISHED_WITHOUT_NATIVE_ID" });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            return {
-                ...base(a, cur.id, "unknown", pst),
-                reason: "ambiguous-submission",
-            };
+            return ambiguous(a, cur.id, pst);
         }
         if (pst !== "FINISHED")
-            return base(a, cur.id, "processing", pst || "PROCESSING");
+            return processing(a, cur.id, pst || "PROCESSING");
         await store.update(cur.id, { stage: "unknown", backendState: "PUBLISHING" });
         try {
-            const pub = await request(`${a.accountId}/threads_publish?creation_id=${encodeURIComponent(parentId)}`, 
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            { method: "POST", ...(c.signal ? { signal: c.signal } : {}) }, "threads.publish", c);
-            const nativeId = pub["id"];
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            if (typeof nativeId !== "string") {
+            const pub = await request(`${a.accountId}/threads_publish?creation_id=${encodeURIComponent(parentId)}`, { method: "POST", ...definedFields({ signal: c.signal }) }, "threads.publish", c);
+            const nativeId = optionalString(pub["id"]);
+            if (nativeId === undefined) {
                 await store.update(cur.id, { stage: "unknown", backendState: "MISSING_ID" });
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                return {
-                    ...base(a, cur.id, "unknown", "MISSING_ID"),
-                    reason: "ambiguous-submission",
-                    diagnostic: "Threads accepted publish without a native post ID.",
-                };
+                return ambiguous(a, cur.id, "MISSING_ID", "Threads accepted publish without a native post ID.");
             }
             await store.update(cur.id, { nativeId, stage: "published", backendState: "PUBLISHED" });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            return {
-                ...base(a, cur.id, "published", "PUBLISHED"),
-                post: platformPostRef({
-                    backend,
-                    platform: "threads",
-                    accountId: a.accountId,
-                    postId: nativeId,
-                }),
-            };
+            return published(a, cur.id, nativeId);
         }
         catch (e) {
             await store.update(cur.id, { stage: "unknown", backendState: "AMBIGUOUS" });
             if (e instanceof SocialError)
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                return {
-                    ...base(a, cur.id, "unknown", "AMBIGUOUS"),
-                    reason: "ambiguous-submission",
-                    diagnostic: e.message,
-                };
+                return ambiguous(a, cur.id, "AMBIGUOUS", e.message);
             throw e;
         }
     }
@@ -431,6 +328,7 @@ export function threads(options) {
         runtime: ["node>=22.12", "bun"],
         capabilities: [
             { operation: "accounts.read", platform: "threads", availability: "available" },
+            webhookCapability("threads", "Verifies Meta X-Hub-Signature-256 with the app secret and decodes replies, mentions, publish, and delete deliveries. Answer the GET handshake with answerMetaWebhookChallenge."),
             {
                 operation: "posts.publish",
                 platform: "threads",
@@ -438,6 +336,12 @@ export function threads(options) {
                 formats: ["text", "image", "video", "carousel"],
                 requiredScopes: ["threads_basic", "threads_content_publish"],
             },
+            {
+                operation: "posts.schedule",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "Threads publishing endpoints have no publish-time parameter; threads_publish publishes immediately.",
+            },
             { operation: "posts.read", platform: "threads", availability: "available" },
             { operation: "posts.list", platform: "threads", availability: "available" },
             { operation: "posts.status", platform: "threads", availability: "available" },
@@ -472,6 +376,13 @@ export function threads(options) {
                 requiredScopes: ["threads_manage_replies"],
                 notes: "Hiding replies and pending-reply moderation require Threads reply-management permissions.",
             },
+            {
+                operation: "comments.delete",
+                platform: "threads",
+                availability: "available",
+                requiredScopes: ["threads_basic", "threads_delete"],
+                notes: "Deletes only replies published by the authenticated user. Threads allows 100 deletions per account per day. Use hideReply for other users' replies.",
+            },
             {
                 operation: "posts.quote",
                 platform: "threads",
@@ -496,7 +407,20 @@ export function threads(options) {
                 availability: "available",
                 requiredScopes: ["threads_basic", "threads_delete"],
             },
+            // Source, accessed 2026-09-24: https://developers.facebook.com/docs/threads/posts
+            {
+                operation: "posts.update",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "The Threads API has no endpoint to edit a published post; text and attachments are set when the container is created.",
+            },
             { operation: "profile.read", platform: "threads", availability: "available" },
+            {
+                operation: "profile.update",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "The Threads API exposes profile reads only. It has no profile write endpoint.",
+            },
             {
                 operation: "search.keyword",
                 platform: "threads",
@@ -510,6 +434,24 @@ export function threads(options) {
                 requiredScopes: ["threads_basic"],
                 notes: "The profile endpoint reads the authorized app-scoped user; profile lookup requires threads_profile_discovery.",
             },
+            {
+                // https://developers.facebook.com/docs/threads/threads-profiles and
+                // https://developers.facebook.com/docs/threads/reference/user (accessed 2026-09-24):
+                // profile_lookup requires an exact username match; there is no profile search endpoint.
+                operation: "profiles.search",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "Threads has no profile search endpoint. Profile discovery only looks up an exact username, which profiles.read covers.",
+            },
+            {
+                // https://developers.facebook.com/docs/threads/reference/user and
+                // https://developers.facebook.com/docs/threads/insights (accessed 2026-09-24): the user
+                // node has no followers or following edge; follower data is aggregate counts only.
+                operation: "graph.read",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "Threads does not expose follower or following lists. The followers_count metric is available through analytics.account.read.",
+            },
             {
                 operation: "search.posts",
                 platform: "threads",
@@ -529,12 +471,16 @@ export function threads(options) {
                 availability: "unsupported-by-platform",
                 notes: "Threads does not expose messaging APIs to standard apps.",
             },
+            {
+                operation: "notifications.read",
+                platform: "threads",
+                availability: "unsupported-by-platform",
+                notes: "The Threads API has no notifications endpoint. Use mentions.read, reply reads, or webhooks instead.",
+            },
         ],
     };
     const native = {
-        getPost: (id, c) => request(`${encodeURIComponent(id)}?fields=id,text,username,media_type,permalink`, 
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        { method: "GET", ...(c.signal ? { signal: c.signal } : {}) }, "threads.posts.get", c),
+        getPost: (id, c) => request(`${encodeURIComponent(id)}?fields=id,text,username,media_type,permalink`, { method: "GET", ...definedFields({ signal: c.signal }) }, "threads.posts.get", c),
         getContainer: (id, c) => status(id, c),
         resumePublication: async (a, id, c) => {
             authorize(a, "threads.posts.resume");
@@ -542,7 +488,7 @@ export function threads(options) {
             if (!w || w.backend !== backend || w.accountId !== a.accountId)
                 fail("threads.posts.resume", "Workflow handle is not authorized for this account.", "unauthorized");
             if (!(await store.claim(id)))
-                return base(a, id, "processing", "CLAIMED");
+                return processing(a, id, "CLAIMED");
             try {
                 return await resume((await store.get(id)) ?? w, a, c);
             }
@@ -607,6 +553,16 @@ export function threads(options) {
             authorize(account, "threads.comments.moderate");
             return request(`${encodeURIComponent(replyId)}/manage_reply?hide=${String(hide)}`, { method: "POST" }, "threads.comments.moderate", context);
         },
+        async deleteComment({ account, commentId, context }) {
+            // Sources (accessed 2026-09-24): https://developers.facebook.com/docs/threads/posts/delete-posts
+            // and https://developers.facebook.com/docs/threads/retrieve-and-manage-replies/create-replies
+            authorize(account, "threads.comments.delete");
+            if (!/^\d+$/.test(commentId))
+                fail("threads.comments.delete", "Provide the numeric Threads reply media ID.", "invalid_input");
+            const result = await request(encodeURIComponent(commentId), { method: "DELETE" }, "threads.comments.delete", context);
+            if (result["success"] !== true)
+                fail("threads.comments.delete", "Threads did not confirm the reply deletion.");
+        },
         async listConversation({ account, mediaId, cursor, context }) {
             authorize(account, "threads.comments.conversation");
             return request(`${encodeURIComponent(mediaId)}/conversation?fields=id,text,username,permalink,timestamp,is_reply,hide_status${cursor ? `&after=${encodeURIComponent(cursor)}` : ""}`, { method: "GET" }, "threads.comments.conversation", context);
@@ -631,6 +587,7 @@ export function threads(options) {
         id: backend,
         capabilities,
         native,
+        webhooks: directWebhooks("threads", (input) => verifyMetaWebhook({ ...input, secret: options.webhookSecret ?? "" }), now),
         accounts: {
             list: async (_input, context) => ({ items: [await readAccount(context)] }),
             get: async (ref, context) => {
@@ -643,7 +600,7 @@ export function threads(options) {
                 authorize(account, "profiles.read");
                 let result;
                 if (input.handle !== undefined) {
-                    result = await request(`profile_lookup?username=${encodeURIComponent(input.handle)}&fields=id,username,name,profile_picture_url,biography,is_verified`, { method: "GET" }, "profiles.read", context);
+                    result = await request(`profile_lookup?username=${encodeURIComponent(input.handle)}&fields=username,name,profile_picture_url,biography,is_verified`, { method: "GET" }, "profiles.read", context);
                 }
                 else {
                     const profileId = input.profileId ?? account.accountId;
@@ -651,7 +608,7 @@ export function threads(options) {
                         fail("profiles.read", "Threads profile reads are limited to the authorized app-scoped user.", "unauthorized");
                     result = await request(`${encodeURIComponent(profileId)}?fields=id,username,name,threads_profile_picture_url,threads_biography,is_verified`, { method: "GET" }, "profiles.read", context);
                 }
-                const returnedProfileId = optionalString(result["id"]);
+                const returnedProfileId = input.handle === undefined ? optionalString(result["id"]) : undefined;
                 const profileId = returnedProfileId ??
                     input.profileId ??
                     (input.handle ? `lookup:${input.handle}` : undefined);
@@ -669,10 +626,7 @@ export function threads(options) {
                         accountId: account.accountId,
                         profileId,
                     }),
-                    ...(displayName === undefined ? {} : { displayName }),
-                    ...(handle === undefined ? {} : { handle }),
-                    ...(avatarUrl === undefined ? {} : { avatarUrl }),
-                    ...(bio === undefined ? {} : { bio }),
+                    ...definedFields({ displayName, handle, avatarUrl, bio }),
                     native: returnedProfileId === undefined ? { ...result, _profileIdUnavailable: true } : result,
                 };
             },
@@ -734,11 +688,13 @@ export function threads(options) {
                         add("media.format", "Threads images must be JPEG or PNG.");
                     if (item.kind === "video" && item.mimeType && item.mimeType !== "video/mp4")
                         add("media.format", "Threads videos must be MP4.");
+                    if (item.kind === "document")
+                        add("media.format", "Threads publishing accepts image and video media only.");
                     if (item.altText && item.altText.length > 1000)
                         add("media.alt_text", "Alt text is limited to 1,000 characters.");
                 }
                 if (target.options !== undefined) {
-                    const o = object(target.options);
+                    const o = optionsObject(target);
                     if (Object.keys(o).some((key) => key !== "replyControl"))
                         add("options.unmapped", "A supplied option has no Threads mapping.");
                     const replyControl = o["replyControl"];
@@ -756,32 +712,23 @@ export function threads(options) {
                 authorize(target.account, "threads.posts.publish");
                 const media = target.content.media ?? [];
                 const item = media.length === 1 ? media[0] : undefined;
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
+                const mediaItems = media.length > 1
+                    ? media.map((entry) => ({
+                        kind: entry.kind,
+                        url: entry.source.kind === "https-url" ? entry.source.url : "",
+                        ...definedFields({ altText: entry.altText === "" ? undefined : entry.altText }),
+                    }))
+                    : undefined;
+                const singleSource = item?.source.kind === "https-url" ? item.source : undefined;
                 const opts = {
-                    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                    ...object(target.options ?? {}),
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(target.replyTo ? { _replyToId: target.replyTo.postId } : {}),
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(media.length > 1
-                        ? {
-                            _mediaItems: media.map((entry) => ({
-                                kind: entry.kind,
-                                url: entry.source.kind === "https-url" ? entry.source.url : "",
-                                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                                ...(entry.altText ? { altText: entry.altText } : {}),
-                            })),
-                        }
-                        : {}),
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(item?.source.kind === "https-url"
-                        ? {
-                            _mediaKind: item.kind,
-                            _mediaUrl: item.source.url,
-                            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                            ...(item.altText ? { _altText: item.altText } : {}),
-                        }
-                        : {}),
+                    ...optionsObject(target),
+                    ...definedFields({
+                        _replyToId: target.replyTo?.postId,
+                        _mediaItems: mediaItems,
+                        _mediaKind: singleSource === undefined ? undefined : item?.kind,
+                        _mediaUrl: singleSource?.url,
+                        _altText: singleSource === undefined || item?.altText === "" ? undefined : item?.altText,
+                    }),
                 };
                 const w = await store.create({
                     backend,
@@ -791,9 +738,8 @@ export function threads(options) {
                     options: opts,
                     stage: "children",
                 });
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
                 if (!(await store.claim(w.id)))
-                    return base(target.account, w.id, "processing", "CLAIMED");
+                    return processing(target.account, w.id, "CLAIMED");
                 try {
                     try {
                         const outcome = await resume((await store.get(w.id)) ?? w, target.account, context);
@@ -802,10 +748,8 @@ export function threads(options) {
                     catch (error) {
                         if (error instanceof SocialError && error.code === "ambiguous_outcome")
                             return {
-                                ...base(target.account, w.id, "unknown", "AMBIGUOUS"),
+                                ...ambiguous(target.account, w.id, "AMBIGUOUS", error.message),
                                 targetIndex: target.targetIndex,
-                                reason: "ambiguous-submission",
-                                diagnostic: error.message,
                             };
                         throw error;
                     }
@@ -831,28 +775,15 @@ export function threads(options) {
                 const w = await store.get(ref.deliveryId);
                 if (!w || w.backend !== backend || w.accountId !== ref.accountId)
                     fail("threads.posts.status", "Workflow handle is not authorized for this account.", "unauthorized");
+                const owner = accountRef(backend, ref.accountId);
                 if (w.nativeId)
-                    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                    return {
-                        ...base(accountRef(backend, ref.accountId), w.id, "published", "PUBLISHED"),
-                        post: platformPostRef({
-                            backend,
-                            platform: "threads",
-                            accountId: ref.accountId,
-                            postId: w.nativeId,
-                        }),
-                    };
+                    return published(owner, w.id, w.nativeId);
                 if (w.stage === "unknown")
-                    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                    return {
-                        ...base(accountRef(backend, ref.accountId), w.id, "unknown", w.backendState),
-                        reason: "ambiguous-submission",
-                        diagnostic: "Explicit resumePublication is required.",
-                    };
+                    return ambiguous(owner, w.id, w.backendState, "Explicit resumePublication is required.");
                 if (!(await store.claim(w.id)))
-                    return base(accountRef(backend, ref.accountId), w.id, "processing", "CLAIMED");
+                    return processing(owner, w.id, "CLAIMED");
                 try {
-                    return await resume((await store.get(w.id)) ?? w, accountRef(backend, ref.accountId), c);
+                    return await resume((await store.get(w.id)) ?? w, owner, c);
                 }
                 finally {
                     await store.release?.(w.id);
@@ -863,35 +794,11 @@ export function threads(options) {
             async list(post, input, context) {
                 authorize(post, "threads.comments.list");
                 const result = await request(`${encodeURIComponent(post.postId)}/replies?fields=id,text,username,timestamp${input.cursor ? `&after=${encodeURIComponent(input.cursor)}` : ""}`, { method: "GET" }, "threads.comments.list", context);
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                const rows = Array.isArray(result["data"]) ? result["data"] : [];
+                const rows = (optionalArray(result["data"]) ?? []).filter(isJsonObject);
+                const cursors = optionalObject(optionalObject(result["paging"])?.["cursors"]);
                 return {
                     items: rows,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- provider payload is validated at this adapter boundary.
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                    ...(typeof result["paging"] === "object" &&
-                        result["paging"] &&
-                        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- provider payload is validated at this adapter boundary.
-                        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated external boundary or fixture contract.
-                        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-                        typeof result["paging"]["cursors"] === "object" &&
-                        result["paging"]["cursors"] !== null &&
-                        typeof result["paging"]["cursors"]["after"] === "string"
-                        ? {
-                            nextCursor: String(result["paging"]["cursors"]["after"]),
-                        }
-                        : {}),
+                    ...definedFields({ nextCursor: optionalString(cursors?.["after"]) }),
                 };
             },
             async reply(comment, content, context) {
@@ -910,21 +817,16 @@ export function threads(options) {
             getAccountMetrics,
             async getPostMetrics(post, c) {
                 authorize(post, "threads.analytics");
-                const r = await request(`${encodeURIComponent(post.postId)}/insights?metric=views,likes,replies,reposts,quotes,shares,link_total_values`, 
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                { method: "GET", ...(c.signal ? { signal: c.signal } : {}) }, "threads.analytics", c);
+                const r = await request(`${encodeURIComponent(post.postId)}/insights?metric=views,likes,replies,reposts,quotes,shares,link_total_values`, { method: "GET", ...definedFields({ signal: c.signal }) }, "threads.analytics", c);
                 return array(r["data"]).flatMap((x) => {
                     const row = object(x);
-                    const first = Array.isArray(row["values"]) ? row["values"][0] : undefined;
-                    const value = 
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                    first && typeof first === "object"
+                    const first = optionalArray(row["values"])?.[0];
+                    const value = isJsonObject(first) || isJsonArray(first)
                         ? optionalNumber(object(first)["value"])
                         : optionalNumber(row["value"]);
-                    const rawName = row["name"];
+                    const rawName = optionalString(row["name"]);
                     const name = rawName === "link_total_values" ? "clicks" : rawName;
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                    return value === undefined || typeof name !== "string"
+                    return value === undefined || name === undefined
                         ? []
                         : [
                             {