@switchbot/openapi-cli 3.2.0 → 3.2.1

package/dist/api/client.d.ts

@@ -0,0 +1,31 @@
+import { type AxiosInstance } from 'axios';
+import { CircuitBreaker, CircuitOpenError } from '../utils/retry.js';
+/** Thrown by the request interceptor when --dry-run intercepts a mutating call. */
+export declare class DryRunSignal extends Error {
+    readonly method: string;
+    readonly url: string;
+    constructor(method: string, url: string);
+}
+/**
+ * Module-level circuit breaker for the SwitchBot API. Shared across all
+ * client instances in the process. Opens after 5 consecutive 5xx / network
+ * errors; resets to half-open after 60 s.
+ * Exported for health-check inspection.
+ */
+export declare const apiCircuitBreaker: CircuitBreaker;
+export { CircuitOpenError };
+export declare function createClient(): AxiosInstance;
+export interface ApiErrorMeta {
+    retryable?: boolean;
+    hint?: string;
+    retryAfterMs?: number;
+    transient?: boolean;
+}
+export declare class ApiError extends Error {
+    readonly code: number;
+    readonly retryable: boolean;
+    readonly hint?: string;
+    readonly retryAfterMs?: number;
+    readonly transient: boolean;
+    constructor(message: string, code: number, meta?: ApiErrorMeta);
+}

package/dist/api/client.js

@@ -0,0 +1,236 @@
+import axios from 'axios';
+import chalk from 'chalk';
+import { buildAuthHeaders } from '../auth.js';
+import { loadConfig } from '../config.js';
+import { isVerbose, isDryRun, getTimeout, getRetryOn429, getRetryOn5xx, getBackoffStrategy, isQuotaDisabled, } from '../utils/flags.js';
+import { nextRetryDelayMs, sleep, CircuitBreaker, CircuitOpenError } from '../utils/retry.js';
+import { recordRequest, checkDailyCap } from '../utils/quota.js';
+import { readProfileMeta } from '../config.js';
+import { getActiveProfile } from '../lib/request-context.js';
+import { redactHeaders, warnOnceIfUnsafe } from '../utils/redact.js';
+class DailyCapExceededError extends Error {
+    cap;
+    total;
+    profile;
+    constructor(cap, total, profile) {
+        super(`Local daily cap reached: ${total}/${cap} SwitchBot API calls used today${profile ? ` for profile "${profile}"` : ''}. ` +
+            `Raise with: switchbot ${profile ? `--profile ${profile} ` : ''}config set-token --daily-cap <N>`);
+        this.cap = cap;
+        this.total = total;
+        this.profile = profile;
+        this.name = 'DailyCapExceededError';
+    }
+}
+const API_ERROR_MESSAGES = {
+    151: 'Device type does not support this command',
+    152: 'Device ID does not exist',
+    160: 'This device does not support this command',
+    161: 'Device offline (check Wi-Fi / Bluetooth connection)',
+    171: 'Hub device offline (BLE devices require a Hub to communicate)',
+    190: 'Device internal error — often an invalid deviceId, unsupported parameter, or device busy',
+};
+/** Thrown by the request interceptor when --dry-run intercepts a mutating call. */
+export class DryRunSignal extends Error {
+    method;
+    url;
+    constructor(method, url) {
+        super('dry-run');
+        this.method = method;
+        this.url = url;
+        this.name = 'DryRunSignal';
+    }
+}
+/**
+ * Module-level circuit breaker for the SwitchBot API. Shared across all
+ * client instances in the process. Opens after 5 consecutive 5xx / network
+ * errors; resets to half-open after 60 s.
+ * Exported for health-check inspection.
+ */
+export const apiCircuitBreaker = new CircuitBreaker('switchbot-api', {
+    failureThreshold: 5,
+    resetTimeoutMs: 60_000,
+});
+export { CircuitOpenError };
+export function createClient() {
+    const { token, secret } = loadConfig();
+    const verbose = isVerbose();
+    const dryRun = isDryRun();
+    const maxRetries = getRetryOn429();
+    const max5xxRetries = getRetryOn5xx();
+    const backoff = getBackoffStrategy();
+    const quotaEnabled = !isQuotaDisabled();
+    const profile = getActiveProfile();
+    const profileMeta = readProfileMeta(profile);
+    const dailyCap = profileMeta?.limits?.dailyCap;
+    const client = axios.create({
+        baseURL: 'https://api.switch-bot.com',
+        timeout: getTimeout(),
+    });
+    // Inject auth headers; optionally log the request; short-circuit on --dry-run.
+    client.interceptors.request.use((config) => {
+        // Circuit breaker check — fail fast when the API is consistently down.
+        apiCircuitBreaker.checkAndAllow();
+        // Pre-flight cap check: refuse the call before it touches the network.
+        if (dailyCap) {
+            const check = checkDailyCap(dailyCap);
+            if (check.over) {
+                throw new DailyCapExceededError(dailyCap, check.total, profile);
+            }
+        }
+        const authHeaders = buildAuthHeaders(token, secret);
+        Object.assign(config.headers, authHeaders);
+        const method = (config.method ?? 'get').toUpperCase();
+        const url = `${config.baseURL ?? ''}${config.url ?? ''}`;
+        if (verbose) {
+            warnOnceIfUnsafe();
+            process.stderr.write(chalk.grey(`[verbose] ${method} ${url}\n`));
+            const { safe, redactedCount } = redactHeaders(config.headers);
+            process.stderr.write(chalk.grey(`[verbose] headers: ${JSON.stringify(safe)}\n`));
+            if (redactedCount > 0) {
+                process.stderr.write(chalk.grey(`[verbose] 🔒 ${redactedCount} sensitive header(s) redacted.\n`));
+            }
+            if (config.data !== undefined) {
+                process.stderr.write(chalk.grey(`[verbose] body: ${JSON.stringify(config.data)}\n`));
+            }
+        }
+        if (dryRun && method !== 'GET') {
+            process.stderr.write(chalk.yellow(`[dry-run] Would ${method} ${url}\n`));
+            if (config.data !== undefined) {
+                process.stderr.write(chalk.yellow(`[dry-run] body: ${JSON.stringify(config.data)}\n`));
+            }
+            throw new DryRunSignal(method, url);
+        }
+        // P8: record the quota attempt BEFORE the request is dispatched so
+        // failures (timeouts / DNS errors / 5xx / aborted) also count. Only
+        // pre-flight refusals (daily-cap, --dry-run) above skip recording
+        // since they never touch the network. Retries re-enter this
+        // interceptor and record again, which matches the SwitchBot API
+        // billing model (every dispatched HTTP request consumes quota).
+        if (quotaEnabled) {
+            recordRequest(method, url);
+        }
+        return config;
+    });
+    // Handle API-level errors (HTTP 200 but statusCode !== 100)
+    client.interceptors.response.use((response) => {
+        if (verbose) {
+            process.stderr.write(chalk.grey(`[verbose] ${response.status} ${response.statusText}\n`));
+        }
+        const data = response.data;
+        if (data.statusCode !== undefined && data.statusCode !== 100) {
+            const msg = API_ERROR_MESSAGES[data.statusCode] ??
+                data.message ??
+                `API error code: ${data.statusCode}`;
+            throw new ApiError(msg, data.statusCode);
+        }
+        // Successful HTTP response — record for circuit breaker.
+        apiCircuitBreaker.recordSuccess();
+        return response;
+    }, (error) => {
+        if (error instanceof DryRunSignal)
+            throw error;
+        if (axios.isAxiosError(error)) {
+            const config = error.config;
+            const method = (config?.method ?? 'get').toUpperCase();
+            const isIdempotentRead = method === 'GET';
+            if (error.code === 'ECONNABORTED' || error.code === 'ETIMEDOUT') {
+                // Retry idempotent GETs on timeout up to `max5xxRetries` times.
+                if (isIdempotentRead && config && max5xxRetries > 0) {
+                    const attempt = config.__retryCount ?? 0;
+                    if (attempt < max5xxRetries) {
+                        config.__retryCount = attempt + 1;
+                        const delay = nextRetryDelayMs(attempt, backoff, undefined);
+                        if (verbose) {
+                            process.stderr.write(chalk.grey(`[verbose] timeout — retry ${attempt + 1}/${max5xxRetries} in ${delay}ms\n`));
+                        }
+                        return sleep(delay).then(() => client.request(config));
+                    }
+                }
+                // Network-level failure — record for circuit breaker.
+                apiCircuitBreaker.recordFailure();
+                throw new ApiError(`Request timed out after ${getTimeout()}ms (override with --timeout <ms>)`, 0, { transient: true, retryable: isIdempotentRead });
+            }
+            const status = error.response?.status;
+            // 429 → transparent retry with Retry-After / exponential backoff.
+            // Skipped when: no config (shouldn't happen for real axios errors),
+            // retries disabled, or we've already used our budget.
+            if (status === 429 && config && maxRetries > 0) {
+                const attempt = config.__retryCount ?? 0;
+                if (attempt < maxRetries) {
+                    config.__retryCount = attempt + 1;
+                    const delay = nextRetryDelayMs(attempt, backoff, error.response?.headers?.['retry-after']);
+                    if (verbose) {
+                        process.stderr.write(chalk.grey(`[verbose] 429 received — retry ${attempt + 1}/${maxRetries} in ${delay}ms\n`));
+                    }
+                    return sleep(delay).then(() => client.request(config));
+                }
+            }
+            // 502/503/504 on idempotent GETs → transparent retry. Mutating calls
+            // never auto-retry; use --idempotency-key for safe POST retries.
+            if (isIdempotentRead &&
+                status !== undefined &&
+                (status === 502 || status === 503 || status === 504) &&
+                config &&
+                max5xxRetries > 0) {
+                const attempt = config.__retryCount ?? 0;
+                if (attempt < max5xxRetries) {
+                    config.__retryCount = attempt + 1;
+                    const delay = nextRetryDelayMs(attempt, backoff, error.response?.headers?.['retry-after']);
+                    if (verbose) {
+                        process.stderr.write(chalk.grey(`[verbose] ${status} received — retry ${attempt + 1}/${max5xxRetries} in ${delay}ms\n`));
+                    }
+                    return sleep(delay).then(() => client.request(config));
+                }
+            }
+            // Record 5xx and network errors for circuit breaker. 4xx errors are
+            // expected business responses — don't count toward circuit threshold.
+            if (status === undefined || status >= 500) {
+                apiCircuitBreaker.recordFailure();
+            }
+            // P8: quota already recorded in the request interceptor before
+            // dispatch — no extra bookkeeping needed here on the error path.
+            // Timeouts, DNS failures, 5xx, and exhausted retries all counted
+            // when the attempt was first made.
+            if (status === 401) {
+                throw new ApiError('Authentication failed: invalid token or daily 10,000-request quota exceeded', 401, {
+                    transient: false,
+                    retryable: false,
+                    hint: 'Run `switchbot config set-token <token> <secret>` to re-enter credentials, or `switchbot quota status` to check today\'s local count.'
+                });
+            }
+            if (status === 429) {
+                const retryAfter = error.response?.headers?.['retry-after'];
+                const retryAfterMs = nextRetryDelayMs(maxRetries - 1, backoff, retryAfter);
+                throw new ApiError('Request rate too high: daily 10,000-request quota exceeded (retries exhausted)', 429, {
+                    retryable: true,
+                    transient: true,
+                    retryAfterMs,
+                    hint: 'Use `switchbot quota status` to see today\'s usage; raise `--retry-on-429 <n>` for more retries.'
+                });
+            }
+            throw new ApiError(`HTTP ${status ?? '?'}: ${error.message}`, status ?? 0, {
+                retryable: status !== undefined && status >= 500,
+                transient: status !== undefined && (status >= 500 || status === 0) // 5xx, 0 = connection error
+            });
+        }
+        throw error;
+    });
+    return client;
+}
+export class ApiError extends Error {
+    code;
+    retryable;
+    hint;
+    retryAfterMs;
+    transient;
+    constructor(message, code, meta = {}) {
+        super(message);
+        this.code = code;
+        this.name = 'ApiError';
+        this.retryable = meta.retryable ?? false;
+        this.hint = meta.hint;
+        this.retryAfterMs = meta.retryAfterMs;
+        this.transient = meta.transient ?? false;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAIN,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,QAAQ,EACR,UAAU,EACV,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAErE,MAAM,qBAAsB,SAAQ,KAAK;IACX;IAA6B;IAA+B;IAAxF,YAA4B,GAAW,EAAkB,KAAa,EAAkB,OAAgB;QACtG,KAAK,CACH,4BAA4B,KAAK,IAAI,GAAG,kCAAkC,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YACxH,yBAAyB,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,kCAAkC,CAClG,CAAC;QAJwB,QAAG,GAAH,GAAG,CAAQ;QAAkB,UAAK,GAAL,KAAK,CAAQ;QAAkB,YAAO,GAAP,OAAO,CAAS;QAKtG,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,kBAAkB,GAA2B;IACjD,GAAG,EAAE,2CAA2C;IAChD,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,2CAA2C;IAChD,GAAG,EAAE,qDAAqD;IAC1D,GAAG,EAAE,+DAA+D;IACpE,GAAG,EAAE,0FAA0F;CAChG,CAAC;AAEF,mFAAmF;AACnF,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAAgC;IAA5D,YAA4B,MAAc,EAAkB,GAAW;QACrE,KAAK,CAAC,SAAS,CAAC,CAAC;QADS,WAAM,GAAN,MAAM,CAAQ;QAAkB,QAAG,GAAH,GAAG,CAAQ;QAErE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,cAAc,CAAC,eAAe,EAAE;IACnE,gBAAgB,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AAEH,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAI5B,MAAM,UAAU,YAAY;IAC1B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,aAAa,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC;IAE/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,4BAA4B;QACrC,OAAO,EAAE,UAAU,EAAE;KACtB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAkC,EAAE,EAAE;QACrE,uEAAuE;QACvE,iBAAiB,CAAC,aAAa,EAAE,CAAC;QAElC,uEAAuE;QACvE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QAEzD,IAAI,OAAO,EAAE,CAAC;YACZ,gBAAgB,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YACjE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,OAA6C,CAAC,CAAC;YACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,aAAa,kCAAkC,CAAC,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YACzE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,4DAA4D;QAC5D,gEAAgE;QAChE,gEAAgE;QAChE,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAC9B,CAAC,QAAuB,EAAE,EAAE;QAC1B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiD,CAAC;QACxE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,GAAG,GACP,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;gBACnC,IAAI,CAAC,OAAO;gBACZ,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,yDAAyD;QACzD,iBAAiB,CAAC,aAAa,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAqC,CAAC;YAC3D,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,gBAAgB,GAAG,MAAM,KAAK,KAAK,CAAC;YAE1C,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChE,gEAAgE;gBAChE,IAAI,gBAAgB,IAAI,MAAM,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACpD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;oBACzC,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;wBAC5B,MAAM,CAAC,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;wBAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;wBAC5D,IAAI,OAAO,EAAE,CAAC;4BACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,GAAG,CAAC,IAAI,aAAa,OAAO,KAAK,MAAM,CAC5E,CACF,CAAC;wBACJ,CAAC;wBACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,sDAAsD;gBACtD,iBAAiB,CAAC,aAAa,EAAE,CAAC;gBAClC,MAAM,IAAI,QAAQ,CAChB,2BAA2B,UAAU,EAAE,mCAAmC,EAC1E,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;YAEtC,kEAAkE;YAClE,oEAAoE;YACpE,sDAAsD;YACtD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;gBACzC,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,CAAC,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;oBAClC,MAAM,KAAK,GAAG,gBAAgB,CAC5B,OAAO,EACP,OAAO,EACP,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,CACzC,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,IAAI,CACR,kCAAkC,OAAO,GAAG,CAAC,IAAI,UAAU,OAAO,KAAK,MAAM,CAC9E,CACF,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,iEAAiE;YACjE,IACE,gBAAgB;gBAChB,MAAM,KAAK,SAAS;gBACpB,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;gBACpD,MAAM;gBACN,aAAa,GAAG,CAAC,EACjB,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;gBACzC,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;oBAC5B,MAAM,CAAC,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;oBAClC,MAAM,KAAK,GAAG,gBAAgB,CAC5B,OAAO,EACP,OAAO,EACP,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,CACzC,CAAC;oBACF,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,qBAAqB,OAAO,GAAG,CAAC,IAAI,aAAa,OAAO,KAAK,MAAM,CACvF,CACF,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,sEAAsE;YACtE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC1C,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACpC,CAAC;YAED,+DAA+D;YAC/D,iEAAiE;YACjE,iEAAiE;YACjE,mCAAmC;YAEnC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,MAAM,IAAI,QAAQ,CAChB,6EAA6E,EAC7E,GAAG,EACH;oBACE,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,KAAK;oBAChB,IAAI,EAAE,uIAAuI;iBAC9I,CACF,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC3E,MAAM,IAAI,QAAQ,CAChB,gFAAgF,EAChF,GAAG,EACH;oBACE,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI;oBACf,YAAY;oBACZ,IAAI,EAAE,kGAAkG;iBACzG,CACF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,QAAQ,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,OAAO,EAAE,EACzC,MAAM,IAAI,CAAC,EACX;gBACE,SAAS,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG;gBAChD,SAAS,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,4BAA4B;aAChG,CACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AASD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAOf;IANF,SAAS,CAAU;IACnB,IAAI,CAAU;IACd,YAAY,CAAU;IACtB,SAAS,CAAU;IACnC,YACE,OAAe,EACC,IAAY,EAC5B,OAAqB,EAAE;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QAI5B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;CACF"}

package/dist/auth.d.ts

@@ -0,0 +1 @@
+export declare function buildAuthHeaders(token: string, secret: string): Record<string, string>;

package/dist/auth.js

@@ -0,0 +1,21 @@
+import crypto from 'node:crypto';
+import { v4 as uuidv4 } from 'uuid';
+export function buildAuthHeaders(token, secret) {
+    const t = String(Date.now()); // 13-digit millisecond timestamp
+    const nonce = uuidv4(); // unique per request
+    const data = token + t + nonce;
+    const sign = crypto
+        .createHmac('sha256', secret)
+        .update(data)
+        .digest('base64')
+        .toUpperCase(); // API requires uppercase
+    return {
+        Authorization: token,
+        t,
+        sign,
+        nonce,
+        src: 'OpenClaw',
+        'Content-Type': 'application/json',
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,iCAAiC;IAChE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAQ,qBAAqB;IACpD,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,QAAQ,CAAC;SAChB,WAAW,EAAE,CAAC,CAAc,yBAAyB;IAExD,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,CAAC;QACD,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,UAAU;QACf,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC"}

package/dist/commands/agent-bootstrap.d.ts

@@ -0,0 +1,10 @@
+import { Command } from 'commander';
+/**
+ * Schema version of the agent-bootstrap payload. Must stay in lockstep
+ * with the catalog schema — bootstrap consumers (AI agents) reason about
+ * catalog-derived fields (safetyTier, destructive flag), so a drift
+ * between the two would silently break their assumptions. `doctor`
+ * fails the `catalog-schema` check when these differ.
+ */
+export declare const AGENT_BOOTSTRAP_SCHEMA_VERSION = "1.0";
+export declare function registerAgentBootstrapCommand(program: Command): void;

package/dist/commands/agent-bootstrap.js

@@ -0,0 +1,200 @@
+import { printJson, exitWithError } from '../utils/output.js';
+import { loadCache } from '../devices/cache.js';
+import { getEffectiveCatalog, deriveSafetyTier, CATALOG_SCHEMA_VERSION, } from '../devices/catalog.js';
+import { readProfileMeta } from '../config.js';
+import { todayUsage, DAILY_QUOTA } from '../utils/quota.js';
+import { ALL_STRATEGIES } from '../utils/name-resolver.js';
+import { IDENTITY } from './identity.js';
+import { resolvePolicyPath, loadPolicyFile, PolicyFileNotFoundError, PolicyYamlParseError, } from '../policy/load.js';
+import { validateLoadedPolicy } from '../policy/validate.js';
+import { selectCredentialStore } from '../credentials/keychain.js';
+import { VERSION as pkgVersion } from '../version.js';
+/**
+ * Schema version of the agent-bootstrap payload. Must stay in lockstep
+ * with the catalog schema — bootstrap consumers (AI agents) reason about
+ * catalog-derived fields (safetyTier, destructive flag), so a drift
+ * between the two would silently break their assumptions. `doctor`
+ * fails the `catalog-schema` check when these differ.
+ */
+export const AGENT_BOOTSTRAP_SCHEMA_VERSION = CATALOG_SCHEMA_VERSION;
+const SAFETY_TIERS = {
+    read: 'No state mutation; safe to call freely.',
+    action: 'Mutates device/cloud state but reversible (turnOn, setColor).',
+    destructive: 'Hard to reverse / physical-world side effects (unlock). Requires confirmation.',
+};
+const QUICK_REFERENCE = {
+    discovery: ['devices list', 'devices describe <id>', 'devices status <id>'],
+    action: ['devices command <id> <cmd>', 'devices command --name <q> <cmd>', 'scenes execute <id>'],
+    safety: ['--dry-run', '--idempotency-key <k>', '--audit-log', '--no-quota'],
+    observability: ['doctor --json', 'quota status', 'cache status', 'events mqtt-tail'],
+    history: ['history range <id> --since 7d', 'history stats <id>'],
+    meta: ['devices meta set <id> --alias <name>', 'devices meta list', 'devices meta get <id>'],
+    policy: ['policy validate', 'policy new', 'policy migrate'],
+    auth: ['auth keychain describe', 'auth keychain migrate', 'auth keychain get'],
+};
+function readPolicyStatus() {
+    // Lightweight read — used by the bootstrap payload so agents know whether
+    // a policy file exists and is healthy without shelling out to
+    // `switchbot policy validate`. Parallel to `checkPolicy` in doctor but
+    // returns a more compact shape (no first-error drill-down; agents who
+    // want that run the dedicated command).
+    const policyPath = resolvePolicyPath();
+    try {
+        const loaded = loadPolicyFile(policyPath);
+        const result = validateLoadedPolicy(loaded);
+        return {
+            present: true,
+            valid: result.valid,
+            path: policyPath,
+            schemaVersion: result.schemaVersion,
+            errorCount: result.valid ? 0 : result.errors.length,
+        };
+    }
+    catch (err) {
+        if (err instanceof PolicyFileNotFoundError) {
+            return { present: false, valid: null, path: policyPath };
+        }
+        if (err instanceof PolicyYamlParseError) {
+            return { present: true, valid: false, path: policyPath, errorCount: 1 };
+        }
+        return { present: false, valid: null, path: policyPath };
+    }
+}
+async function readCredentialsBackend() {
+    try {
+        const store = await selectCredentialStore();
+        const desc = store.describe();
+        return { name: store.name, label: desc.backend, writable: desc.writable };
+    }
+    catch {
+        return { name: 'file', label: 'File (~/.switchbot/config.json)', writable: true };
+    }
+}
+export function registerAgentBootstrapCommand(program) {
+    program
+        .command('agent-bootstrap')
+        .description('Print a compact, aggregate JSON snapshot for agent onboarding — combines identity, cached devices, catalog summary, quota usage, and profile in a single call. Offline-safe; does not hit the API.')
+        .option('--compact', 'Emit an even smaller payload by dropping catalog descriptions and non-essential fields (target: <20 KB).')
+        .option('--sections <csv>', 'Comma-separated top-level sections to include (e.g. identity,devices,catalog). Omit for all sections.')
+        .addHelpText('after', `
+Output is always JSON (this command ignores --format). It is a one-shot
+orientation document for an agent/LLM to understand what's available without
+spending quota. It reads from local cache (devices + quota + profile) and the
+bundled catalog — no network calls.
+
+For fresher device state, have the agent follow up with:
+  $ switchbot devices list --json               # refreshes cache
+  $ switchbot devices status <id> --json
+
+Examples:
+  $ switchbot agent-bootstrap --compact | wc -c   # fit in agent context window
+  $ switchbot agent-bootstrap | jq '.devices | length'
+  $ switchbot agent-bootstrap --compact | jq '.quickReference'
+`)
+        .action(async (opts) => {
+        const compact = Boolean(opts.compact);
+        const cache = loadCache();
+        const catalog = getEffectiveCatalog();
+        const usage = todayUsage();
+        const meta = readProfileMeta(undefined);
+        const credentialsBackend = await readCredentialsBackend();
+        const cachedDevices = cache
+            ? Object.entries(cache.devices).map(([id, d]) => ({
+                deviceId: id,
+                type: d.type,
+                name: d.name,
+                category: d.category,
+                roomName: d.roomName ?? null,
+            }))
+            : [];
+        const usedTypes = new Set(cachedDevices.map((d) => d.type.toLowerCase()));
+        const relevantCatalog = cachedDevices.length > 0
+            ? catalog.filter((e) => usedTypes.has(e.type.toLowerCase()) ||
+                (e.aliases ?? []).some((a) => usedTypes.has(a.toLowerCase())))
+            : catalog;
+        const catalogTypes = relevantCatalog.map((e) => {
+            if (compact) {
+                return {
+                    type: e.type,
+                    category: e.category,
+                    role: e.role ?? null,
+                    readOnly: e.readOnly ?? false,
+                    commands: e.commands.map((c) => c.command),
+                    statusFields: e.statusFields ?? [],
+                };
+            }
+            return {
+                type: e.type,
+                category: e.category,
+                role: e.role ?? null,
+                readOnly: e.readOnly ?? false,
+                commands: e.commands.map((c) => {
+                    const tier = deriveSafetyTier(c, e);
+                    return {
+                        command: c.command,
+                        parameter: c.parameter,
+                        safetyTier: tier,
+                        idempotent: Boolean(c.idempotent),
+                    };
+                }),
+                statusFields: e.statusFields ?? [],
+            };
+        });
+        const payload = {
+            schemaVersion: AGENT_BOOTSTRAP_SCHEMA_VERSION,
+            generatedAt: new Date().toISOString(),
+            cliVersion: pkgVersion,
+            identity: IDENTITY,
+            quickReference: QUICK_REFERENCE,
+            safetyTiers: SAFETY_TIERS,
+            nameStrategies: [...ALL_STRATEGIES],
+            profile: meta
+                ? {
+                    label: meta.label ?? null,
+                    description: meta.description ?? null,
+                    dailyCap: meta.limits?.dailyCap ?? null,
+                    defaultFlags: meta.defaults?.flags ?? null,
+                }
+                : null,
+            quota: {
+                date: usage.date,
+                total: usage.total,
+                remaining: usage.remaining,
+                dailyLimit: DAILY_QUOTA,
+            },
+            policyStatus: readPolicyStatus(),
+            credentialsBackend,
+            devices: cachedDevices,
+            catalog: {
+                scope: cachedDevices.length > 0 ? 'used' : 'all',
+                types: catalogTypes,
+            },
+            // hints: empty array means no hints to report; always emitted, never null.
+            // An empty array signals "nothing to act on" — agents should not treat
+            // it as a disabled or missing field.
+            hints: cachedDevices.length === 0
+                ? ['Run `switchbot devices list` once to populate the device cache for richer bootstrap output.']
+                : [],
+        };
+        const VALID_SECTIONS = new Set([
+            'schemaVersion', 'generatedAt', 'cliVersion', 'identity', 'quickReference',
+            'safetyTiers', 'nameStrategies', 'profile', 'quota', 'policyStatus',
+            'credentialsBackend', 'devices', 'catalog', 'hints',
+        ]);
+        let finalPayload = payload;
+        if (opts.sections) {
+            const requested = opts.sections.split(',').map((s) => s.trim()).filter(Boolean);
+            const unknown = requested.filter((s) => !VALID_SECTIONS.has(s));
+            if (unknown.length > 0) {
+                exitWithError({
+                    code: 2,
+                    kind: 'usage',
+                    message: `Unknown section(s): ${unknown.join(', ')}. Valid sections: ${[...VALID_SECTIONS].join(', ')}.`,
+                });
+            }
+            finalPayload = Object.fromEntries(Object.entries(finalPayload).filter(([k]) => requested.includes(k)));
+        }
+        printJson(finalPayload);
+    });
+}
+//# sourceMappingURL=agent-bootstrap.js.map

package/dist/commands/agent-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-bootstrap.js","sourceRoot":"","sources":["../../src/commands/agent-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAyB,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAErE,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,yCAAyC;IAC/C,MAAM,EAAE,+DAA+D;IACvE,WAAW,EAAE,gFAAgF;CAC9F,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,SAAS,EAAE,CAAC,cAAc,EAAE,uBAAuB,EAAE,qBAAqB,CAAC;IAC3E,MAAM,EAAE,CAAC,4BAA4B,EAAE,kCAAkC,EAAE,qBAAqB,CAAC;IACjG,MAAM,EAAE,CAAC,WAAW,EAAE,uBAAuB,EAAE,aAAa,EAAE,YAAY,CAAC;IAC3E,aAAa,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,CAAC;IACpF,OAAO,EAAE,CAAC,+BAA+B,EAAE,oBAAoB,CAAC;IAChE,IAAI,EAAE,CAAC,sCAAsC,EAAE,mBAAmB,EAAE,uBAAuB,CAAC;IAC5F,MAAM,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,CAAC;IAC3D,IAAI,EAAE,CAAC,wBAAwB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC;CAC/E,CAAC;AAUF,SAAS,gBAAgB;IACvB,0EAA0E;IAC1E,8DAA8D;IAC9D,uEAAuE;IACvE,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,UAAU;YAChB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;SACpD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC3D,CAAC;QACD,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAQD,KAAK,UAAU,sBAAsB;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACV,oMAAoM,CACrM;SACA,MAAM,CACL,WAAW,EACX,0GAA0G,CAC3G;SACA,MAAM,CACL,kBAAkB,EAClB,uGAAuG,CACxG;SACA,WAAW,CACV,OAAO,EACP;;;;;;;;;;;;;;CAcL,CACI;SACA,MAAM,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAE1D,MAAM,aAAa,GAAG,KAAK;YACzB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9C,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;aAC7B,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,OAAO,CAAC,MAAM,CACZ,CAAC,CAAC,EAAE,EAAE,CACJ,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAChE;YACH,CAAC,CAAC,OAAO,CAAC;QAEZ,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;oBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;oBAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC1C,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;iBACnC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;gBAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACpC,OAAO;wBACL,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,UAAU,EAAE,IAAI;wBAChB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;qBAClC,CAAC;gBACJ,CAAC,CAAC;gBACF,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAA4B;YACvC,aAAa,EAAE,8BAA8B;YAC7C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,QAAQ;YAClB,cAAc,EAAE,eAAe;YAC/B,WAAW,EAAE,YAAY;YACzB,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;YACnC,OAAO,EAAE,IAAI;gBACX,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI;oBACvC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI;iBAC3C;gBACH,CAAC,CAAC,IAAI;YACR,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,WAAW;aACxB;YACD,YAAY,EAAE,gBAAgB,EAAE;YAChC,kBAAkB;YAClB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE;gBACP,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;gBAChD,KAAK,EAAE,YAAY;aACpB;YACD,2EAA2E;YAC3E,uEAAuE;YACvE,qCAAqC;YACrC,KAAK,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;gBAC/B,CAAC,CAAC,CAAC,6FAA6F,CAAC;gBACjG,CAAC,CAAC,EAAE;SACP,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;YAC7B,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB;YAC1E,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc;YACnE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO;SACpD,CAAC,CAAC;QAEH,IAAI,YAAY,GAA4B,OAAkC,CAAC;QAC/E,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,aAAa,CAAC;oBACZ,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBACzG,CAAC,CAAC;YACL,CAAC;YACD,YAAY,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `switchbot auth` command group (v2.9 preview, part of Phase 3A).
+ *
+ * Surfaces the credential store abstraction added in F1/F2 so users
+ * can introspect, write to, delete from, and migrate into the OS
+ * keychain without editing `~/.switchbot/config.json` by hand.
+ *
+ * All subcommands honour the active `--profile <name>` flag so a user
+ * who runs multiple accounts keeps the keychain entries cleanly
+ * partitioned.
+ *
+ * No credential material is ever printed in plain text. `get` emits
+ * a masked summary only; `set` reads via a TTY prompt (echo-off) or a
+ * file passed via `--stdin-file <path>`. `migrate` never touches the
+ * keychain unless the backend reports `writable: true`.
+ */
+import { Command } from 'commander';
+export declare function registerAuthCommand(program: Command): void;