@switchbot/openapi-cli 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 chenliuyun
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,278 @@
+# switchbot-openapi-cli
+
+Command-line interface for the [SwitchBot API v1.1](https://github.com/OpenWonderLabs/SwitchBotAPI).
+List devices, query status, send control commands, run scenes, and manage webhooks from your terminal or shell scripts.
+
+## Requirements
+
+- Node.js ≥ 18
+- A SwitchBot account with Developer Options enabled (see [Credentials](#credentials))
+
+## Installation
+
+```bash
+git clone <repo-url>
+cd switchbot-openapi-cli
+npm install
+npm run build
+# Optional: make it globally available as `switchbot`
+npm link
+```
+
+During development you can run directly from sources without building:
+
+```bash
+npm run dev -- devices list
+```
+
+## Credentials
+
+The CLI reads credentials in this order (first match wins):
+
+1. **Environment variables** — `SWITCHBOT_TOKEN` and `SWITCHBOT_SECRET`
+2. **Config file** — `~/.switchbot/config.json` (written by `config set-token`, mode `0600`)
+
+Obtain the token and secret from the SwitchBot mobile app:
+**Profile → Preferences → Developer Options → Get Token**.
+
+```bash
+# One-time setup (writes ~/.switchbot/config.json)
+switchbot config set-token <token> <secret>
+
+# Or export environment variables (e.g. in CI)
+export SWITCHBOT_TOKEN=...
+export SWITCHBOT_SECRET=...
+
+# Confirm which source is active and see the masked secret
+switchbot config show
+```
+
+## Global options
+
+| Option              | Description                                                        |
+| ------------------- | ------------------------------------------------------------------ |
+| `--json`            | Print the raw JSON response instead of a formatted table           |
+| `-v`, `--verbose`   | Log HTTP request/response details to stderr                        |
+| `--dry-run`         | Print mutating requests (POST/PUT/DELETE) without sending them     |
+| `--timeout <ms>`    | HTTP request timeout in milliseconds (default: `30000`)            |
+| `--config <path>`   | Override credential file location (default: `~/.switchbot/config.json`) |
+| `-V`, `--version`   | Print the CLI version                                              |
+| `-h`, `--help`      | Show help for any command or subcommand                            |
+
+Every subcommand supports `--help`, and most include a parameter-format reference and examples.
+
+```bash
+switchbot --help
+switchbot devices command --help
+```
+
+### `--dry-run`
+
+Intercepts every non-GET request: the CLI prints the URL/body it would have
+sent, then exits `0` without contacting the API. `GET` requests (list, status,
+query) are still executed so you can preview the state involved.
+
+```bash
+switchbot devices command ABC123 turnOn --dry-run
+# [dry-run] Would POST https://api.switch-bot.com/v1.1/devices/ABC123/commands
+# [dry-run] body: {"command":"turnOn","parameter":"default","commandType":"command"}
+```
+
+## Commands
+
+### `config` — credential management
+
+```bash
+switchbot config set-token <token> <secret>   # Save to ~/.switchbot/config.json
+switchbot config show                          # Print current source + masked secret
+```
+
+### `devices` — list, status, control
+
+```bash
+# List all physical devices and IR remote devices
+# Columns: deviceId, deviceName, type, controlType, family, roomID, room, hub, cloud
+switchbot devices list
+switchbot devices list --json | jq '.deviceList[].deviceId'
+
+# Filter by family / room (family & room info requires the 'src: OpenClaw'
+# header, which this CLI sends on every request)
+switchbot devices list --json | jq '.deviceList[] | select(.familyName == "Home")'
+switchbot devices list --json | jq '[.deviceList[], .infraredRemoteList[]] | group_by(.familyName)'
+
+# Query real-time status of a physical device
+switchbot devices status <deviceId>
+switchbot devices status <deviceId> --json
+
+# Send a control command
+switchbot devices command <deviceId> <cmd> [parameter] [--type command|customize]
+
+# Describe a specific device (1 API call): metadata + supported commands + status fields
+switchbot devices describe <deviceId>
+switchbot devices describe <deviceId> --json
+
+# Discover what's supported (offline reference, no API call)
+switchbot devices types                 # List all device types + IR remote types
+switchbot devices commands <type>       # Show commands, parameter formats, and status fields
+switchbot devices commands Bot
+switchbot devices commands "Smart Lock"
+switchbot devices commands curtain      # Case-insensitive, substring match
+```
+
+#### Parameter formats
+
+`parameter` is optional — omit it for commands like `turnOn`/`turnOff` (auto-defaults to `"default"`).
+Numeric-only and JSON-object parameters are auto-parsed; strings with colons / commas / semicolons pass through as-is.
+
+For the exact commands and parameter formats a specific device supports, query the built-in catalog:
+
+```bash
+switchbot devices commands <type>       # e.g. Bot, Curtain, "Smart Lock", "Robot Vacuum Cleaner S10"
+```
+
+Generic parameter shapes (which one applies is decided by the device — see the catalog):
+
+| Shape               | Example                                                  |
+| ------------------- | -------------------------------------------------------- |
+| _(none)_            | `devices command <id> turnOn`                            |
+| `<integer>`         | `devices command <id> setBrightness 75`                  |
+| `<R:G:B>`           | `devices command <id> setColor "255:0:0"`                |
+| `<direction;angle>` | `devices command <id> setPosition "up;60"`               |
+| `<a,b,c,…>`         | `devices command <id> setAll "26,1,3,on"`                |
+| `<json object>`     | `'{"action":"sweep","param":{"fanLevel":2,"times":1}}'`  |
+| Custom IR button    | `devices command <id> MyButton --type customize`         |
+
+For the complete per-device command reference, see the [SwitchBot API docs](https://github.com/OpenWonderLabs/SwitchBotAPI#send-device-control-commands).
+
+### `scenes` — run manual scenes
+
+```bash
+switchbot scenes list                 # Columns: sceneId, sceneName
+switchbot scenes execute <sceneId>
+```
+
+### `webhook` — receive device events over HTTP
+
+```bash
+# Register a receiver URL for events from ALL devices
+switchbot webhook setup https://your.host/hook
+
+# Query what is currently configured
+switchbot webhook query
+switchbot webhook query --details https://your.host/hook
+
+# Enable / disable / re-submit the registered URL
+switchbot webhook update https://your.host/hook --enable
+switchbot webhook update https://your.host/hook --disable
+
+# Remove the configuration
+switchbot webhook delete https://your.host/hook
+```
+
+The CLI validates that `<url>` is an absolute `http://` or `https://` URL before calling the API. `--enable` and `--disable` are mutually exclusive.
+
+### `completion` — shell tab-completion
+
+```bash
+# Bash: load on every new shell
+echo 'source <(switchbot completion bash)' >> ~/.bashrc
+
+# Zsh
+echo 'source <(switchbot completion zsh)' >> ~/.zshrc
+
+# Fish
+switchbot completion fish > ~/.config/fish/completions/switchbot.fish
+
+# PowerShell (profile)
+switchbot completion powershell >> $PROFILE
+```
+
+Supported shells: `bash`, `zsh`, `fish`, `powershell` (`pwsh` is accepted as an alias).
+
+## Output modes
+
+- **Default** — ANSI-colored tables for `list`/`status`, key-value tables for details.
+- **`--json`** — raw JSON passthrough, ideal for `jq` and scripting.
+
+```bash
+switchbot devices list --json | jq '.deviceList[] | {id: .deviceId, name: .deviceName}'
+```
+
+## Exit codes
+
+| Code | Meaning                                                                             |
+| ---- | ----------------------------------------------------------------------------------- |
+| `0`  | Success (including `--dry-run` intercept)                                           |
+| `1`  | Runtime error — API error, network failure, missing credentials                     |
+| `2`  | Usage error — bad flag, missing/invalid argument, unknown subcommand, unknown device type, invalid URL, conflicting flags |
+
+Typical errors bubble up in the form `Error: <message>` on stderr. The SwitchBot-specific error codes that get mapped to readable English messages:
+
+| Code | Meaning                                     |
+| ---- | ------------------------------------------- |
+| 151  | Device type error                           |
+| 152  | Device not found                            |
+| 160  | Command not supported by this device        |
+| 161  | Device offline (BLE devices need a Hub)     |
+| 171  | Hub offline                                 |
+| 190  | Device internal error / server busy         |
+| 401  | Authentication failed (check token/secret)  |
+| 429  | Request rate too high (10,000 req/day cap)  |
+
+## Environment variables
+
+| Variable            | Description                                                        |
+| ------------------- | ------------------------------------------------------------------ |
+| `SWITCHBOT_TOKEN`   | API token — takes priority over the config file                    |
+| `SWITCHBOT_SECRET`  | API secret — takes priority over the config file                   |
+| `NO_COLOR`          | Disable ANSI colors in all output (automatically respected)        |
+
+## Scripting examples
+
+```bash
+# Turn off every Bot device
+switchbot devices list --json \
+  | jq -r '.deviceList[] | select(.deviceType == "Bot") | .deviceId' \
+  | while read id; do switchbot devices command "$id" turnOff; done
+
+# Dump each scene as `<id> <name>`
+switchbot scenes list --json | jq -r '.[] | "\(.sceneId) \(.sceneName)"'
+```
+
+## Development
+
+```bash
+npm run dev -- <args>      # Run from TypeScript sources via tsx
+npm run build              # Compile to dist/
+npm test                   # Run the Vitest suite (282 tests)
+npm run test:watch         # Watch mode
+npm run test:coverage      # Coverage report (v8, HTML + text)
+```
+
+### Project layout
+
+```
+src/
+├── index.ts              # Commander entry; mounts all subcommands; global flags
+├── auth.ts               # HMAC-SHA256 signature (token + t + nonce → sign)
+├── config.ts             # Credential load/save; env > file priority; --config override
+├── api/client.ts         # axios instance + request/response interceptors;
+│                         # --verbose / --dry-run / --timeout wiring
+├── devices/catalog.ts    # Static catalog powering `devices types`/`devices commands`
+├── commands/
+│   ├── config.ts
+│   ├── devices.ts
+│   ├── scenes.ts
+│   ├── webhook.ts
+│   └── completion.ts     # `switchbot completion bash|zsh|fish|powershell`
+└── utils/
+    ├── flags.ts          # Global flag readers (isVerbose / isDryRun / getTimeout / getConfigPath)
+    └── output.ts         # printTable / printKeyValue / printJson / handleError
+tests/                    # Vitest suite (282 tests, mocked axios, no network)
+```
+
+## References
+
+- [SwitchBot API v1.1 documentation](https://github.com/OpenWonderLabs/SwitchBotAPI)
+- Base URL: `https://api.switch-bot.com`
+- Rate limit: 10,000 requests/day per account

package/dist/api/client.d.ts

@@ -0,0 +1,12 @@
+import { type AxiosInstance } from 'axios';
+/** Thrown by the request interceptor when --dry-run intercepts a mutating call. */
+export declare class DryRunSignal extends Error {
+    readonly method: string;
+    readonly url: string;
+    constructor(method: string, url: string);
+}
+export declare function createClient(): AxiosInstance;
+export declare class ApiError extends Error {
+    readonly code: number;
+    constructor(message: string, code: number);
+}

package/dist/api/client.js

@@ -0,0 +1,95 @@
+import axios from 'axios';
+import chalk from 'chalk';
+import { buildAuthHeaders } from '../auth.js';
+import { loadConfig } from '../config.js';
+import { isVerbose, isDryRun, getTimeout } from '../utils/flags.js';
+const API_ERROR_MESSAGES = {
+    151: 'Device type does not support this command',
+    152: 'Device ID does not exist',
+    160: 'This device does not support this command',
+    161: 'Device offline (check Wi-Fi / Bluetooth connection)',
+    171: 'Hub device offline (BLE devices require a Hub to communicate)',
+    190: 'Device internal error — often an invalid deviceId, unsupported parameter, or device busy',
+};
+/** Thrown by the request interceptor when --dry-run intercepts a mutating call. */
+export class DryRunSignal extends Error {
+    method;
+    url;
+    constructor(method, url) {
+        super('dry-run');
+        this.method = method;
+        this.url = url;
+        this.name = 'DryRunSignal';
+    }
+}
+export function createClient() {
+    const { token, secret } = loadConfig();
+    const verbose = isVerbose();
+    const dryRun = isDryRun();
+    const client = axios.create({
+        baseURL: 'https://api.switch-bot.com',
+        timeout: getTimeout(),
+    });
+    // Inject auth headers; optionally log the request; short-circuit on --dry-run.
+    client.interceptors.request.use((config) => {
+        const authHeaders = buildAuthHeaders(token, secret);
+        Object.assign(config.headers, authHeaders);
+        const method = (config.method ?? 'get').toUpperCase();
+        const url = `${config.baseURL ?? ''}${config.url ?? ''}`;
+        if (verbose) {
+            process.stderr.write(chalk.grey(`[verbose] ${method} ${url}\n`));
+            if (config.data !== undefined) {
+                process.stderr.write(chalk.grey(`[verbose] body: ${JSON.stringify(config.data)}\n`));
+            }
+        }
+        if (dryRun && method !== 'GET') {
+            console.log(chalk.yellow(`[dry-run] Would ${method} ${url}`));
+            if (config.data !== undefined) {
+                console.log(chalk.yellow(`[dry-run] body: ${JSON.stringify(config.data)}`));
+            }
+            throw new DryRunSignal(method, url);
+        }
+        return config;
+    });
+    // Handle API-level errors (HTTP 200 but statusCode !== 100)
+    client.interceptors.response.use((response) => {
+        if (verbose) {
+            process.stderr.write(chalk.grey(`[verbose] ${response.status} ${response.statusText}\n`));
+        }
+        const data = response.data;
+        if (data.statusCode !== undefined && data.statusCode !== 100) {
+            const msg = API_ERROR_MESSAGES[data.statusCode] ??
+                data.message ??
+                `API error code: ${data.statusCode}`;
+            throw new ApiError(msg, data.statusCode);
+        }
+        return response;
+    }, (error) => {
+        if (error instanceof DryRunSignal)
+            throw error;
+        if (axios.isAxiosError(error)) {
+            if (error.code === 'ECONNABORTED' || error.code === 'ETIMEDOUT') {
+                throw new ApiError(`Request timed out after ${getTimeout()}ms (override with --timeout <ms>)`, 0);
+            }
+            const status = error.response?.status;
+            if (status === 401) {
+                throw new ApiError('Authentication failed: invalid token or daily 10,000-request quota exceeded', 401);
+            }
+            if (status === 429) {
+                throw new ApiError('Request rate too high: daily 10,000-request quota exceeded', 429);
+            }
+            throw new ApiError(`HTTP ${status ?? '?'}: ${error.message}`, status ?? 0);
+        }
+        throw error;
+    });
+    return client;
+}
+export class ApiError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'ApiError';
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAA8D,MAAM,OAAO,CAAC;AACnF,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,kBAAkB,GAA2B;IACjD,GAAG,EAAE,2CAA2C;IAChD,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,2CAA2C;IAChD,GAAG,EAAE,qDAAqD;IAC1D,GAAG,EAAE,+DAA+D;IACpE,GAAG,EAAE,0FAA0F;CAChG,CAAC;AAEF,mFAAmF;AACnF,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAAgC;IAA5D,YAA4B,MAAc,EAAkB,GAAW;QACrE,KAAK,CAAC,SAAS,CAAC,CAAC;QADS,WAAM,GAAN,MAAM,CAAQ;QAAkB,QAAG,GAAH,GAAG,CAAQ;QAErE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,4BAA4B;QACrC,OAAO,EAAE,UAAU,EAAE;KACtB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAkC,EAAE,EAAE;QACrE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QAEzD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAC9B,CAAC,QAAQ,EAAE,EAAE;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiD,CAAC;QACxE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,GAAG,GACP,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;gBACnC,IAAI,CAAC,OAAO;gBACZ,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChE,MAAM,IAAI,QAAQ,CAChB,2BAA2B,UAAU,EAAE,mCAAmC,EAC1E,CAAC,CACF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,MAAM,IAAI,QAAQ,CAAC,6EAA6E,EAAE,GAAG,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,MAAM,IAAI,QAAQ,CAAC,4DAA4D,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,QAAQ,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,OAAO,EAAE,EACzC,MAAM,IAAI,CAAC,CACZ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF"}

package/dist/auth.d.ts

@@ -0,0 +1 @@
+export declare function buildAuthHeaders(token: string, secret: string): Record<string, string>;

package/dist/auth.js

@@ -0,0 +1,21 @@
+import crypto from 'node:crypto';
+import { v4 as uuidv4 } from 'uuid';
+export function buildAuthHeaders(token, secret) {
+    const t = String(Date.now()); // 13-digit millisecond timestamp
+    const nonce = uuidv4(); // unique per request
+    const data = token + t + nonce;
+    const sign = crypto
+        .createHmac('sha256', secret)
+        .update(data)
+        .digest('base64')
+        .toUpperCase(); // API requires uppercase
+    return {
+        Authorization: token,
+        t,
+        sign,
+        nonce,
+        src: 'OpenClaw',
+        'Content-Type': 'application/json',
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,iCAAiC;IAChE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAQ,qBAAqB;IACpD,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,QAAQ,CAAC;SAChB,WAAW,EAAE,CAAC,CAAc,yBAAyB;IAExD,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,CAAC;QACD,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,UAAU;QACf,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC"}

package/dist/commands/completion.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function registerCompletionCommand(program: Command): void;