@noxsoft/anima 2.0.2 → 2.0.4

package/dist/pairing-cli-BH1KQtNV.js

@@ -1,121 +0,0 @@
-import "./paths-C6VCWKo3.js";
-import { B as theme, u as defaultRuntime } from "./subsystem-Dowf8fSU.js";
-import "./utils-Bsw__U-F.js";
-import "./exec-Bv3pyjeM.js";
-import "./agent-scope-V1bi9OYL.js";
-import "./model-selection-YcSr9CgC.js";
-import { t as formatCliCommand } from "./command-format-DELazozB.js";
-import "./boolean-Wzu0-e0P.js";
-import "./env-0lJfCPsw.js";
-import { i as loadConfig } from "./config-SY8M0kM_.js";
-import "./manifest-registry-CW1zCyRF.js";
-import "./logging-54nXj81z.js";
-import "./accounts-Cc5E4IDO.js";
-import { r as normalizeChannelId } from "./plugins-CmSUIUNi.js";
-import { c as listPairingChannels, l as notifyPairingApproved, n as approveChannelPairingCode, r as listChannelPairingRequests, s as getPairingAdapter } from "./pairing-store-DJz_9Gv0.js";
-import { t as formatDocsLink } from "./links-DPGe0OHw.js";
-import { t as renderTable } from "./table-BL0lJzsm.js";
-
-//#region src/pairing/pairing-labels.ts
-function resolvePairingIdLabel(channel) {
-	return getPairingAdapter(channel)?.idLabel ?? "userId";
-}
-
-//#endregion
-//#region src/cli/pairing-cli.ts
-/** Parse channel, allowing extension channels not in core registry. */
-function parseChannel(raw, channels) {
-	const value = (typeof raw === "string" ? raw : typeof raw === "number" || typeof raw === "boolean" ? String(raw) : "").trim().toLowerCase();
-	if (!value) throw new Error("Channel required");
-	const normalized = normalizeChannelId(value);
-	if (normalized) {
-		if (!channels.includes(normalized)) throw new Error(`Channel ${normalized} does not support pairing`);
-		return normalized;
-	}
-	if (/^[a-z][a-z0-9_-]{0,63}$/.test(value)) return value;
-	throw new Error(`Invalid channel: ${value}`);
-}
-async function notifyApproved(channel, id) {
-	await notifyPairingApproved({
-		channelId: channel,
-		id,
-		cfg: loadConfig()
-	});
-}
-function registerPairingCli(program) {
-	const channels = listPairingChannels();
-	const pairing = program.command("pairing").description("Secure DM pairing (approve inbound requests)").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/pairing", "docs.openclaw.ai/cli/pairing")}\n`);
-	pairing.command("list").description("List pending pairing requests").option("--channel <channel>", `Channel (${channels.join(", ")})`).argument("[channel]", `Channel (${channels.join(", ")})`).option("--json", "Print JSON", false).action(async (channelArg, opts) => {
-		const channelRaw = opts.channel ?? channelArg;
-		if (!channelRaw) throw new Error(`Channel required. Use --channel <channel> or pass it as the first argument (expected one of: ${channels.join(", ")})`);
-		const channel = parseChannel(channelRaw, channels);
-		const requests = await listChannelPairingRequests(channel);
-		if (opts.json) {
-			defaultRuntime.log(JSON.stringify({
-				channel,
-				requests
-			}, null, 2));
-			return;
-		}
-		if (requests.length === 0) {
-			defaultRuntime.log(theme.muted(`No pending ${channel} pairing requests.`));
-			return;
-		}
-		const idLabel = resolvePairingIdLabel(channel);
-		const tableWidth = Math.max(60, (process.stdout.columns ?? 120) - 1);
-		defaultRuntime.log(`${theme.heading("Pairing requests")} ${theme.muted(`(${requests.length})`)}`);
-		defaultRuntime.log(renderTable({
-			width: tableWidth,
-			columns: [
-				{
-					key: "Code",
-					header: "Code",
-					minWidth: 10
-				},
-				{
-					key: "ID",
-					header: idLabel,
-					minWidth: 12,
-					flex: true
-				},
-				{
-					key: "Meta",
-					header: "Meta",
-					minWidth: 8,
-					flex: true
-				},
-				{
-					key: "Requested",
-					header: "Requested",
-					minWidth: 12
-				}
-			],
-			rows: requests.map((r) => ({
-				Code: r.code,
-				ID: r.id,
-				Meta: r.meta ? JSON.stringify(r.meta) : "",
-				Requested: r.createdAt
-			}))
-		}).trimEnd());
-	});
-	pairing.command("approve").description("Approve a pairing code and allow that sender").option("--channel <channel>", `Channel (${channels.join(", ")})`).argument("<codeOrChannel>", "Pairing code (or channel when using 2 args)").argument("[code]", "Pairing code (when channel is passed as the 1st arg)").option("--notify", "Notify the requester on the same channel", false).action(async (codeOrChannel, code, opts) => {
-		const channelRaw = opts.channel ?? codeOrChannel;
-		const resolvedCode = opts.channel ? codeOrChannel : code;
-		if (!opts.channel && !code) throw new Error(`Usage: ${formatCliCommand("openclaw pairing approve <channel> <code>")} (or: ${formatCliCommand("openclaw pairing approve --channel <channel> <code>")})`);
-		if (opts.channel && code != null) throw new Error(`Too many arguments. Use: ${formatCliCommand("openclaw pairing approve --channel <channel> <code>")}`);
-		const channel = parseChannel(channelRaw, channels);
-		const approved = await approveChannelPairingCode({
-			channel,
-			code: String(resolvedCode)
-		});
-		if (!approved) throw new Error(`No pending pairing request found for code: ${String(resolvedCode)}`);
-		defaultRuntime.log(`${theme.success("Approved")} ${theme.muted(channel)} sender ${theme.command(approved.id)}.`);
-		if (!opts.notify) return;
-		await notifyApproved(channel, approved.id).catch((err) => {
-			defaultRuntime.log(theme.warn(`Failed to notify requester: ${String(err)}`));
-		});
-	});
-}
-
-//#endregion
-export { registerPairingCli };

package/dist/pairing-store-DJz_9Gv0.js

@@ -1,388 +0,0 @@
-import { g as resolveStateDir, m as resolveOAuthDir, y as resolveRequiredHomeDir } from "./paths-C6VCWKo3.js";
-import { x as safeParseJson } from "./utils-Bsw__U-F.js";
-import { St as withFileLock$1 } from "./model-selection-YcSr9CgC.js";
-import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-CmSUIUNi.js";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import crypto from "node:crypto";
-
-//#region src/channels/plugins/pairing.ts
-function listPairingChannels() {
-	return listChannelPlugins().filter((plugin) => plugin.pairing).map((plugin) => plugin.id);
-}
-function getPairingAdapter(channelId) {
-	return getChannelPlugin(channelId)?.pairing ?? null;
-}
-function requirePairingAdapter(channelId) {
-	const adapter = getPairingAdapter(channelId);
-	if (!adapter) throw new Error(`Channel ${channelId} does not support pairing`);
-	return adapter;
-}
-async function notifyPairingApproved(params) {
-	const adapter = params.pairingAdapter ?? requirePairingAdapter(params.channelId);
-	if (!adapter.notifyApproval) return;
-	await adapter.notifyApproval({
-		cfg: params.cfg,
-		id: params.id,
-		runtime: params.runtime
-	});
-}
-
-//#endregion
-//#region src/pairing/pairing-store.ts
-const PAIRING_CODE_LENGTH = 8;
-const PAIRING_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
-const PAIRING_PENDING_TTL_MS = 3600 * 1e3;
-const PAIRING_PENDING_MAX = 3;
-const PAIRING_STORE_LOCK_OPTIONS = {
-	retries: {
-		retries: 10,
-		factor: 2,
-		minTimeout: 100,
-		maxTimeout: 1e4,
-		randomize: true
-	},
-	stale: 3e4
-};
-function resolveCredentialsDir(env = process.env) {
-	return resolveOAuthDir(env, resolveStateDir(env, () => resolveRequiredHomeDir(env, os.homedir)));
-}
-/** Sanitize channel ID for use in filenames (prevent path traversal). */
-function safeChannelKey(channel) {
-	const raw = String(channel).trim().toLowerCase();
-	if (!raw) throw new Error("invalid pairing channel");
-	const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
-	if (!safe || safe === "_") throw new Error("invalid pairing channel");
-	return safe;
-}
-function resolvePairingPath(channel, env = process.env) {
-	return path.join(resolveCredentialsDir(env), `${safeChannelKey(channel)}-pairing.json`);
-}
-function resolveAllowFromPath(channel, env = process.env) {
-	return path.join(resolveCredentialsDir(env), `${safeChannelKey(channel)}-allowFrom.json`);
-}
-async function readJsonFile(filePath, fallback) {
-	try {
-		const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
-		if (parsed == null) return {
-			value: fallback,
-			exists: true
-		};
-		return {
-			value: parsed,
-			exists: true
-		};
-	} catch (err) {
-		if (err.code === "ENOENT") return {
-			value: fallback,
-			exists: false
-		};
-		return {
-			value: fallback,
-			exists: false
-		};
-	}
-}
-async function writeJsonFile(filePath, value) {
-	const dir = path.dirname(filePath);
-	await fs.promises.mkdir(dir, {
-		recursive: true,
-		mode: 448
-	});
-	const tmp = path.join(dir, `${path.basename(filePath)}.${crypto.randomUUID()}.tmp`);
-	await fs.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
-	await fs.promises.chmod(tmp, 384);
-	await fs.promises.rename(tmp, filePath);
-}
-async function ensureJsonFile(filePath, fallback) {
-	try {
-		await fs.promises.access(filePath);
-	} catch {
-		await writeJsonFile(filePath, fallback);
-	}
-}
-async function withFileLock(filePath, fallback, fn) {
-	await ensureJsonFile(filePath, fallback);
-	return await withFileLock$1(filePath, PAIRING_STORE_LOCK_OPTIONS, async () => {
-		return await fn();
-	});
-}
-function parseTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	if (!Number.isFinite(parsed)) return null;
-	return parsed;
-}
-function isExpired(entry, nowMs) {
-	const createdAt = parseTimestamp(entry.createdAt);
-	if (!createdAt) return true;
-	return nowMs - createdAt > PAIRING_PENDING_TTL_MS;
-}
-function pruneExpiredRequests(reqs, nowMs) {
-	const kept = [];
-	let removed = false;
-	for (const req of reqs) {
-		if (isExpired(req, nowMs)) {
-			removed = true;
-			continue;
-		}
-		kept.push(req);
-	}
-	return {
-		requests: kept,
-		removed
-	};
-}
-function resolveLastSeenAt(entry) {
-	return parseTimestamp(entry.lastSeenAt) ?? parseTimestamp(entry.createdAt) ?? 0;
-}
-function pruneExcessRequests(reqs, maxPending) {
-	if (maxPending <= 0 || reqs.length <= maxPending) return {
-		requests: reqs,
-		removed: false
-	};
-	return {
-		requests: reqs.slice().toSorted((a, b) => resolveLastSeenAt(a) - resolveLastSeenAt(b)).slice(-maxPending),
-		removed: true
-	};
-}
-function randomCode() {
-	let out = "";
-	for (let i = 0; i < PAIRING_CODE_LENGTH; i++) {
-		const idx = crypto.randomInt(0, 32);
-		out += PAIRING_CODE_ALPHABET[idx];
-	}
-	return out;
-}
-function generateUniqueCode(existing) {
-	for (let attempt = 0; attempt < 500; attempt += 1) {
-		const code = randomCode();
-		if (!existing.has(code)) return code;
-	}
-	throw new Error("failed to generate unique pairing code");
-}
-function normalizeId(value) {
-	return String(value).trim();
-}
-function normalizeAllowEntry(channel, entry) {
-	const trimmed = entry.trim();
-	if (!trimmed) return "";
-	if (trimmed === "*") return "";
-	const adapter = getPairingAdapter(channel);
-	const normalized = adapter?.normalizeAllowEntry ? adapter.normalizeAllowEntry(trimmed) : trimmed;
-	return String(normalized).trim();
-}
-function normalizeAllowFromList(channel, store) {
-	return (Array.isArray(store.allowFrom) ? store.allowFrom : []).map((v) => normalizeAllowEntry(channel, String(v))).filter(Boolean);
-}
-function normalizeAllowFromInput(channel, entry) {
-	return normalizeAllowEntry(channel, normalizeId(entry));
-}
-async function readAllowFromState(params) {
-	const { value } = await readJsonFile(params.filePath, {
-		version: 1,
-		allowFrom: []
-	});
-	return {
-		current: normalizeAllowFromList(params.channel, value),
-		normalized: normalizeAllowFromInput(params.channel, params.entry) || null
-	};
-}
-async function writeAllowFromState(filePath, allowFrom) {
-	await writeJsonFile(filePath, {
-		version: 1,
-		allowFrom
-	});
-}
-async function updateAllowFromStoreEntry(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolveAllowFromPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		allowFrom: []
-	}, async () => {
-		const { current, normalized } = await readAllowFromState({
-			channel: params.channel,
-			entry: params.entry,
-			filePath
-		});
-		if (!normalized) return {
-			changed: false,
-			allowFrom: current
-		};
-		const next = params.apply(current, normalized);
-		if (!next) return {
-			changed: false,
-			allowFrom: current
-		};
-		await writeAllowFromState(filePath, next);
-		return {
-			changed: true,
-			allowFrom: next
-		};
-	});
-}
-async function readChannelAllowFromStore(channel, env = process.env) {
-	const { value } = await readJsonFile(resolveAllowFromPath(channel, env), {
-		version: 1,
-		allowFrom: []
-	});
-	return normalizeAllowFromList(channel, value);
-}
-async function addChannelAllowFromStoreEntry(params) {
-	return await updateAllowFromStoreEntry({
-		channel: params.channel,
-		entry: params.entry,
-		env: params.env,
-		apply: (current, normalized) => {
-			if (current.includes(normalized)) return null;
-			return [...current, normalized];
-		}
-	});
-}
-async function removeChannelAllowFromStoreEntry(params) {
-	return await updateAllowFromStoreEntry({
-		channel: params.channel,
-		entry: params.entry,
-		env: params.env,
-		apply: (current, normalized) => {
-			const next = current.filter((entry) => entry !== normalized);
-			if (next.length === current.length) return null;
-			return next;
-		}
-	});
-}
-async function listChannelPairingRequests(channel, env = process.env) {
-	const filePath = resolvePairingPath(channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const { value } = await readJsonFile(filePath, {
-			version: 1,
-			requests: []
-		});
-		const { requests: prunedExpired, removed: expiredRemoved } = pruneExpiredRequests(Array.isArray(value.requests) ? value.requests : [], Date.now());
-		const { requests: pruned, removed: cappedRemoved } = pruneExcessRequests(prunedExpired, PAIRING_PENDING_MAX);
-		if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
-			version: 1,
-			requests: pruned
-		});
-		return pruned.filter((r) => r && typeof r.id === "string" && typeof r.code === "string" && typeof r.createdAt === "string").slice().toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));
-	});
-}
-async function upsertChannelPairingRequest(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolvePairingPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const { value } = await readJsonFile(filePath, {
-			version: 1,
-			requests: []
-		});
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const nowMs = Date.now();
-		const id = normalizeId(params.id);
-		const meta = params.meta && typeof params.meta === "object" ? Object.fromEntries(Object.entries(params.meta).map(([k, v]) => [k, String(v ?? "").trim()]).filter(([_, v]) => Boolean(v))) : void 0;
-		let reqs = Array.isArray(value.requests) ? value.requests : [];
-		const { requests: prunedExpired, removed: expiredRemoved } = pruneExpiredRequests(reqs, nowMs);
-		reqs = prunedExpired;
-		const existingIdx = reqs.findIndex((r) => r.id === id);
-		const existingCodes = new Set(reqs.map((req) => String(req.code ?? "").trim().toUpperCase()));
-		if (existingIdx >= 0) {
-			const existing = reqs[existingIdx];
-			const code = (existing && typeof existing.code === "string" ? existing.code.trim() : "") || generateUniqueCode(existingCodes);
-			const next = {
-				id,
-				code,
-				createdAt: existing?.createdAt ?? now,
-				lastSeenAt: now,
-				meta: meta ?? existing?.meta
-			};
-			reqs[existingIdx] = next;
-			const { requests: capped } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-			await writeJsonFile(filePath, {
-				version: 1,
-				requests: capped
-			});
-			return {
-				code,
-				created: false
-			};
-		}
-		const { requests: capped, removed: cappedRemoved } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-		reqs = capped;
-		if (PAIRING_PENDING_MAX > 0 && reqs.length >= PAIRING_PENDING_MAX) {
-			if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
-				version: 1,
-				requests: reqs
-			});
-			return {
-				code: "",
-				created: false
-			};
-		}
-		const code = generateUniqueCode(existingCodes);
-		const next = {
-			id,
-			code,
-			createdAt: now,
-			lastSeenAt: now,
-			...meta ? { meta } : {}
-		};
-		await writeJsonFile(filePath, {
-			version: 1,
-			requests: [...reqs, next]
-		});
-		return {
-			code,
-			created: true
-		};
-	});
-}
-async function approveChannelPairingCode(params) {
-	const env = params.env ?? process.env;
-	const code = params.code.trim().toUpperCase();
-	if (!code) return null;
-	const filePath = resolvePairingPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const { value } = await readJsonFile(filePath, {
-			version: 1,
-			requests: []
-		});
-		const { requests: pruned, removed } = pruneExpiredRequests(Array.isArray(value.requests) ? value.requests : [], Date.now());
-		const idx = pruned.findIndex((r) => String(r.code ?? "").toUpperCase() === code);
-		if (idx < 0) {
-			if (removed) await writeJsonFile(filePath, {
-				version: 1,
-				requests: pruned
-			});
-			return null;
-		}
-		const entry = pruned[idx];
-		if (!entry) return null;
-		pruned.splice(idx, 1);
-		await writeJsonFile(filePath, {
-			version: 1,
-			requests: pruned
-		});
-		await addChannelAllowFromStoreEntry({
-			channel: params.channel,
-			entry: entry.id,
-			env
-		});
-		return {
-			id: entry.id,
-			entry
-		};
-	});
-}
-
-//#endregion
-export { removeChannelAllowFromStoreEntry as a, listPairingChannels as c, readChannelAllowFromStore as i, notifyPairingApproved as l, approveChannelPairingCode as n, upsertChannelPairingRequest as o, listChannelPairingRequests as r, getPairingAdapter as s, addChannelAllowFromStoreEntry as t };