@switchbot/openapi-cli 3.2.0 → 3.2.1

package/dist/config.js

@@ -0,0 +1,259 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { getConfigPath } from './utils/flags.js';
+import { getActiveProfile } from './lib/request-context.js';
+import { emitJsonError, isJsonMode } from './utils/output.js';
+import { getPrimedCredentials } from './credentials/prime.js';
+function sanitizeOptionalString(v) {
+    if (typeof v !== 'string')
+        return undefined;
+    const trimmed = v.trim();
+    return trimmed ? trimmed : undefined;
+}
+/**
+ * Credential file resolution priority:
+ *   1. --config <path> (absolute override — wins over everything)
+ *   2. active profile (ALS request context, else --profile flag) → ~/.switchbot/profiles/<name>.json
+ *   3. default        → ~/.switchbot/config.json
+ *
+ * Env SWITCHBOT_TOKEN+SWITCHBOT_SECRET still take priority inside loadConfig.
+ */
+export function configFilePath() {
+    const override = getConfigPath();
+    if (override)
+        return path.resolve(override);
+    const profile = getActiveProfile();
+    if (profile) {
+        return path.join(os.homedir(), '.switchbot', 'profiles', `${profile}.json`);
+    }
+    return path.join(os.homedir(), '.switchbot', 'config.json');
+}
+export function profileFilePath(profile) {
+    return path.join(os.homedir(), '.switchbot', 'profiles', `${profile}.json`);
+}
+export function listProfiles() {
+    const dir = path.join(os.homedir(), '.switchbot', 'profiles');
+    if (!fs.existsSync(dir))
+        return [];
+    return fs.readdirSync(dir)
+        .filter((f) => f.endsWith('.json'))
+        .map((f) => f.slice(0, -5))
+        .sort();
+}
+export function loadConfig() {
+    const envToken = process.env.SWITCHBOT_TOKEN;
+    const envSecret = process.env.SWITCHBOT_SECRET;
+    if (envToken && envSecret) {
+        return { token: envToken, secret: envSecret };
+    }
+    // After env, try the OS keychain (via the priming cache populated at
+    // command start). When --config is passed we skip the keychain so the
+    // override remains authoritative.
+    if (!getConfigPath()) {
+        const primed = getPrimedCredentials(getActiveProfile() ?? 'default');
+        if (primed)
+            return primed;
+    }
+    const file = configFilePath();
+    if (!fs.existsSync(file)) {
+        const profile = getActiveProfile();
+        const hint = profile
+            ? `No credentials configured for profile "${profile}". Run: switchbot --profile ${profile} config set-token <token> <secret>`
+            : 'No credentials configured. Run: switchbot config set-token <token> <secret>';
+        const msg = `${hint}\nOr set SWITCHBOT_TOKEN and SWITCHBOT_SECRET environment variables.`;
+        if (isJsonMode()) {
+            emitJsonError({ code: 1, kind: 'runtime', message: hint });
+        }
+        else {
+            console.error(msg);
+        }
+        process.exit(1);
+    }
+    try {
+        const raw = fs.readFileSync(file, 'utf-8');
+        const cfg = JSON.parse(raw);
+        if (!cfg.token || !cfg.secret) {
+            if (isJsonMode()) {
+                emitJsonError({ code: 1, kind: 'runtime', message: 'Invalid config format. Please re-run: switchbot config set-token' });
+            }
+            else {
+                console.error('Invalid config format. Please re-run: switchbot config set-token');
+            }
+            process.exit(1);
+        }
+        return cfg;
+    }
+    catch {
+        if (isJsonMode()) {
+            emitJsonError({ code: 1, kind: 'runtime', message: 'Failed to read config file. Please re-run: switchbot config set-token' });
+        }
+        else {
+            console.error('Failed to read config file. Please re-run: switchbot config set-token');
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Like loadConfig but returns null instead of exiting. Use this in code paths
+ * that want graceful degradation (e.g. optional MQTT init in `mcp serve`).
+ */
+export function tryLoadConfig() {
+    const envToken = process.env.SWITCHBOT_TOKEN;
+    const envSecret = process.env.SWITCHBOT_SECRET;
+    if (envToken && envSecret)
+        return { token: envToken, secret: envSecret };
+    if (!getConfigPath()) {
+        const primed = getPrimedCredentials(getActiveProfile() ?? 'default');
+        if (primed)
+            return primed;
+    }
+    const file = configFilePath();
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const raw = fs.readFileSync(file, 'utf-8');
+        const cfg = JSON.parse(raw);
+        if (!cfg.token || !cfg.secret)
+            return null;
+        return cfg;
+    }
+    catch {
+        return null;
+    }
+}
+export function saveConfig(token, secret, extras) {
+    const file = configFilePath();
+    const dir = path.dirname(file);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    // Merge with existing file so label/limits/defaults aren't dropped when the
+    // user just rotates the token.
+    let existing = {};
+    if (fs.existsSync(file)) {
+        try {
+            existing = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        }
+        catch {
+            existing = {};
+        }
+    }
+    const cfg = {
+        token,
+        secret,
+        ...(existing.label ? { label: existing.label } : {}),
+        ...(existing.description ? { description: existing.description } : {}),
+        ...(existing.limits ? { limits: existing.limits } : {}),
+        ...(existing.defaults ? { defaults: existing.defaults } : {}),
+    };
+    if (extras) {
+        const label = sanitizeOptionalString(extras.label);
+        const description = sanitizeOptionalString(extras.description);
+        if (label !== undefined)
+            cfg.label = label;
+        if (description !== undefined)
+            cfg.description = description;
+        if (extras.limits)
+            cfg.limits = { ...(cfg.limits ?? {}), ...extras.limits };
+        if (extras.defaults)
+            cfg.defaults = { ...(cfg.defaults ?? {}), ...extras.defaults };
+    }
+    fs.writeFileSync(file, JSON.stringify(cfg, null, 2), { mode: 0o600 });
+}
+/**
+ * Read a profile's metadata (label / description / limits / defaults) without
+ * exposing the token/secret. Returns null when the file is missing or invalid.
+ */
+export function readProfileMeta(profile) {
+    const file = profile
+        ? profileFilePath(profile)
+        : path.join(os.homedir(), '.switchbot', 'config.json');
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const raw = fs.readFileSync(file, 'utf-8');
+        const cfg = JSON.parse(raw);
+        return {
+            label: cfg.label,
+            description: cfg.description,
+            limits: cfg.limits,
+            defaults: cfg.defaults,
+            path: file,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function showConfig() {
+    const summary = getConfigSummary();
+    if (summary.source === 'env') {
+        console.log('Credential source: environment variables');
+        console.log(`token : ${summary.token ?? ''}`);
+        console.log(`secret: ${summary.secret ?? ''}`);
+        return;
+    }
+    if (summary.source === 'none') {
+        console.log('No credentials configured');
+        return;
+    }
+    if (summary.source === 'invalid') {
+        console.error('Failed to read config file');
+        return;
+    }
+    console.log(`Credential source: ${summary.path}`);
+    if (summary.label)
+        console.log(`label : ${summary.label}`);
+    if (summary.description)
+        console.log(`desc  : ${summary.description}`);
+    console.log(`token : ${summary.token ?? ''}`);
+    console.log(`secret: ${summary.secret ?? ''}`);
+    if (summary.dailyCap)
+        console.log(`limits: dailyCap=${summary.dailyCap}`);
+    if (summary.defaultFlags?.length)
+        console.log(`defaults: ${summary.defaultFlags.join(' ')}`);
+}
+export function getConfigSummary() {
+    const envToken = process.env.SWITCHBOT_TOKEN;
+    const envSecret = process.env.SWITCHBOT_SECRET;
+    if (envToken && envSecret) {
+        return {
+            source: 'env',
+            token: maskCredential(envToken),
+            secret: maskSecret(envSecret),
+        };
+    }
+    const file = configFilePath();
+    if (!fs.existsSync(file)) {
+        return { source: 'none' };
+    }
+    try {
+        const raw = fs.readFileSync(file, 'utf-8');
+        const cfg = JSON.parse(raw);
+        return {
+            source: 'file',
+            path: file,
+            label: cfg.label,
+            description: cfg.description,
+            token: maskCredential(cfg.token),
+            secret: maskSecret(cfg.secret),
+            dailyCap: cfg.limits?.dailyCap,
+            defaultFlags: cfg.defaults?.flags,
+        };
+    }
+    catch {
+        return { source: 'invalid', path: file };
+    }
+}
+function maskCredential(token) {
+    if (token.length <= 8)
+        return '*'.repeat(Math.max(4, token.length));
+    return token.slice(0, 4) + '*'.repeat(token.length - 8) + token.slice(-4);
+}
+function maskSecret(secret) {
+    if (secret.length <= 4)
+        return '****';
+    return secret.slice(0, 2) + '*'.repeat(secret.length - 4) + secret.slice(-2);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAsB9D,SAAS,sBAAsB,CAAC,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC/C,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,kCAAkC;IAClC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,0CAA0C,OAAO,+BAA+B,OAAO,oCAAoC;YAC7H,CAAC,CAAC,6EAA6E,CAAC;QAClF,MAAM,GAAG,GAAG,GAAG,IAAI,sEAAsE,CAAC;QAC1F,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kEAAkE,EAAE,CAAC,CAAC;YAC3H,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC;QAChI,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC/C,IAAI,QAAQ,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAEzE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,MAAiC;IACzF,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,4EAA4E;IAC5E,+BAA+B;IAC/B,IAAI,QAAQ,GAA6B,EAAE,CAAC;IAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA6B,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAoB;QAC3B,KAAK;QACL,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3C,IAAI,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ;YAAE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACtF,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB;IAO9C,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAE/C,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC;YAC/B,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC/C,OAAO;YACL,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAChC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ;YAC9B,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK;SAClC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/credentials/backends/file.d.ts

@@ -0,0 +1,18 @@
+/**
+ * File-backed credential store.
+ *
+ * Reads/writes the same `~/.switchbot/config.json` shape the CLI has
+ * used since v1.0, so a fresh install on a machine without a keychain
+ * still works and legacy users can migrate in-place via
+ * `switchbot auth keychain migrate` without data loss.
+ *
+ * Profile layout (inherited from `src/config.ts`):
+ *   - default profile → `~/.switchbot/config.json`
+ *   - named profile   → `~/.switchbot/profiles/<name>.json`
+ *
+ * This backend only owns the `token` and `secret` fields — label /
+ * description / limits / defaults are preserved on write by merging
+ * with the existing JSON, keeping parity with `saveConfig()`.
+ */
+import { CredentialStore } from '../keychain.js';
+export declare function createFileBackend(): CredentialStore;

package/dist/credentials/backends/file.js

@@ -0,0 +1,102 @@
+/**
+ * File-backed credential store.
+ *
+ * Reads/writes the same `~/.switchbot/config.json` shape the CLI has
+ * used since v1.0, so a fresh install on a machine without a keychain
+ * still works and legacy users can migrate in-place via
+ * `switchbot auth keychain migrate` without data loss.
+ *
+ * Profile layout (inherited from `src/config.ts`):
+ *   - default profile → `~/.switchbot/config.json`
+ *   - named profile   → `~/.switchbot/profiles/<name>.json`
+ *
+ * This backend only owns the `token` and `secret` fields — label /
+ * description / limits / defaults are preserved on write by merging
+ * with the existing JSON, keeping parity with `saveConfig()`.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { KeychainError, } from '../keychain.js';
+function profilePath(profile) {
+    if (profile === 'default') {
+        return path.join(os.homedir(), '.switchbot', 'config.json');
+    }
+    return path.join(os.homedir(), '.switchbot', 'profiles', `${profile}.json`);
+}
+function readJson(file) {
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const raw = fs.readFileSync(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function createFileBackend() {
+    return {
+        name: 'file',
+        async get(profile) {
+            const file = profilePath(profile);
+            const data = readJson(file);
+            if (!data)
+                return null;
+            const token = typeof data.token === 'string' ? data.token : '';
+            const secret = typeof data.secret === 'string' ? data.secret : '';
+            if (!token || !secret)
+                return null;
+            return { token, secret };
+        },
+        async set(profile, creds) {
+            const file = profilePath(profile);
+            const dir = path.dirname(file);
+            try {
+                fs.mkdirSync(dir, { recursive: true });
+                const existing = readJson(file) ?? {};
+                const next = { ...existing, token: creds.token, secret: creds.secret };
+                fs.writeFileSync(file, JSON.stringify(next, null, 2), { mode: 0o600 });
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                throw new KeychainError('file', 'set', msg);
+            }
+        },
+        async delete(profile) {
+            const file = profilePath(profile);
+            try {
+                if (!fs.existsSync(file))
+                    return;
+                const existing = readJson(file);
+                if (existing) {
+                    delete existing.token;
+                    delete existing.secret;
+                    if (Object.keys(existing).length === 0) {
+                        fs.unlinkSync(file);
+                    }
+                    else {
+                        fs.writeFileSync(file, JSON.stringify(existing, null, 2), { mode: 0o600 });
+                    }
+                }
+                else {
+                    fs.unlinkSync(file);
+                }
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                throw new KeychainError('file', 'delete', msg);
+            }
+        },
+        describe() {
+            return {
+                backend: 'File (~/.switchbot/)',
+                tag: 'file',
+                writable: true,
+                notes: 'Last-resort fallback; credentials stored in a 0600 JSON file.',
+            };
+        },
+    };
+}
+//# sourceMappingURL=file.js.map

package/dist/credentials/backends/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../../src/credentials/backends/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAIL,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,CAAC,GAAG,CAAC,OAAe;YACvB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,KAAuB;YAChD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACvE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAe;YAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO;gBACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,QAAQ,CAAC,KAAK,CAAC;oBACtB,OAAO,QAAQ,CAAC,MAAM,CAAC;oBACvB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACN,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,QAAQ;YACN,OAAO;gBACL,OAAO,EAAE,sBAAsB;gBAC/B,GAAG,EAAE,MAAM;gBACX,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,+DAA+D;aACvE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/credentials/backends/linux.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Linux libsecret backend.
+ *
+ * Shells out to `secret-tool(1)` — the libsecret CLI shipped by most
+ * distros when GNOME Keyring or KWallet is available. We intentionally
+ * avoid a native binding so `npm install` doesn't drag in a build
+ * toolchain on minimal CI images.
+ *
+ * On a fresh Linux box without secret-tool installed (or without a
+ * secret service daemon running), `linuxAvailable()` returns false and
+ * `selectCredentialStore()` falls back to the file backend. We do NOT
+ * try to `apt install libsecret-tools` on the user's behalf.
+ */
+import { CredentialStore } from '../keychain.js';
+export declare function linuxAvailable(): Promise<boolean>;
+export declare function createLinuxBackend(): CredentialStore;

package/dist/credentials/backends/linux.js

@@ -0,0 +1,130 @@
+/**
+ * Linux libsecret backend.
+ *
+ * Shells out to `secret-tool(1)` — the libsecret CLI shipped by most
+ * distros when GNOME Keyring or KWallet is available. We intentionally
+ * avoid a native binding so `npm install` doesn't drag in a build
+ * toolchain on minimal CI images.
+ *
+ * On a fresh Linux box without secret-tool installed (or without a
+ * secret service daemon running), `linuxAvailable()` returns false and
+ * `selectCredentialStore()` falls back to the file backend. We do NOT
+ * try to `apt install libsecret-tools` on the user's behalf.
+ */
+import { spawn } from 'node:child_process';
+import { accountFor, CREDENTIAL_SERVICE, KeychainError, } from '../keychain.js';
+function run(cmd, args, stdin) {
+    return new Promise((resolve) => {
+        const proc = spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        proc.stdout.on('data', (buf) => {
+            stdout += buf.toString('utf-8');
+        });
+        proc.stderr.on('data', (buf) => {
+            stderr += buf.toString('utf-8');
+        });
+        proc.on('error', () => resolve({ code: 127, stdout, stderr }));
+        proc.on('close', (code) => resolve({ code: code ?? 0, stdout, stderr }));
+        if (stdin !== undefined) {
+            proc.stdin.write(stdin);
+        }
+        proc.stdin.end();
+    });
+}
+export async function linuxAvailable() {
+    if (process.platform !== 'linux')
+        return false;
+    const which = await run('which', ['secret-tool']);
+    if (which.code !== 0 || which.stdout.trim().length === 0)
+        return false;
+    // Probe the secret service is actually running. `secret-tool search`
+    // with a bogus attribute returns 0 on miss but 1 when the D-Bus
+    // service isn't reachable — so we use the exit code to distinguish.
+    const probe = await run('secret-tool', ['search', 'service', CREDENTIAL_SERVICE]);
+    return probe.code === 0 || probe.code === 1;
+}
+async function readField(profile, field) {
+    const account = accountFor(profile, field);
+    const res = await run('secret-tool', [
+        'lookup',
+        'service', CREDENTIAL_SERVICE,
+        'account', account,
+    ]);
+    if (res.code !== 0)
+        return null;
+    const value = res.stdout.replace(/\n$/, '');
+    return value.length > 0 ? value : null;
+}
+async function writeField(profile, field, value) {
+    const account = accountFor(profile, field);
+    const label = `SwitchBot CLI (${account})`;
+    // `secret-tool store` reads the password from stdin.
+    const res = await run('secret-tool', ['store', '--label', label, 'service', CREDENTIAL_SERVICE, 'account', account], value);
+    if (res.code !== 0) {
+        throw new KeychainError('secret-service', 'set', `secret-tool exit ${res.code}`);
+    }
+}
+async function deleteField(profile, field) {
+    const account = accountFor(profile, field);
+    const res = await run('secret-tool', [
+        'clear',
+        'service', CREDENTIAL_SERVICE,
+        'account', account,
+    ]);
+    // secret-tool returns 0 even when nothing matched, so we tolerate
+    // both 0 and the "nothing to clear" path transparently.
+    if (res.code !== 0) {
+        throw new KeychainError('secret-service', 'delete', `secret-tool exit ${res.code}`);
+    }
+}
+async function restoreField(profile, field, value) {
+    try {
+        if (value === null) {
+            await deleteField(profile, field);
+            return;
+        }
+        await writeField(profile, field, value);
+    }
+    catch {
+        // Best effort only. The original write error is the actionable failure.
+    }
+}
+export function createLinuxBackend() {
+    return {
+        name: 'secret-service',
+        async get(profile) {
+            const token = await readField(profile, 'token');
+            const secret = await readField(profile, 'secret');
+            if (!token || !secret)
+                return null;
+            return { token, secret };
+        },
+        async set(profile, creds) {
+            const previousToken = await readField(profile, 'token');
+            const previousSecret = await readField(profile, 'secret');
+            try {
+                await writeField(profile, 'token', creds.token);
+                await writeField(profile, 'secret', creds.secret);
+            }
+            catch (err) {
+                await restoreField(profile, 'token', previousToken);
+                await restoreField(profile, 'secret', previousSecret);
+                throw err;
+            }
+        },
+        async delete(profile) {
+            await deleteField(profile, 'token');
+            await deleteField(profile, 'secret');
+        },
+        describe() {
+            return {
+                backend: 'Secret Service (libsecret)',
+                tag: 'secret-service',
+                writable: true,
+                notes: `Stored under service "${CREDENTIAL_SERVICE}" via secret-tool.`,
+            };
+        },
+    };
+}
+//# sourceMappingURL=linux.js.map

package/dist/credentials/backends/linux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux.js","sourceRoot":"","sources":["../../../src/credentials/backends/linux.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,kBAAkB,EAIlB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAQxB,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,qEAAqE;IACrE,gEAAgE;IAChE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,KAAyB;IACjE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE;QACnC,QAAQ;QACR,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,OAAO;KACnB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,KAAyB,EAAE,KAAa;IACjF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,OAAO,GAAG,CAAC;IAC3C,qDAAqD;IACrD,MAAM,GAAG,GAAG,MAAM,GAAG,CACnB,aAAa,EACb,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,EAC9E,KAAK,CACN,CAAC;IACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,KAAK,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,KAAyB;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE;QACnC,OAAO;QACP,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,OAAO;KACnB,CAAC,CAAC;IACH,kEAAkE;IAClE,wDAAwD;IACxD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,KAAyB,EAAE,KAAoB;IAC1F,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,GAAG,CAAC,OAAe;YACvB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,KAAuB;YAChD,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAChD,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;gBACpD,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBACtD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAe;YAC1B,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,QAAQ;YACN,OAAO;gBACL,OAAO,EAAE,4BAA4B;gBACrC,GAAG,EAAE,gBAAgB;gBACrB,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,yBAAyB,kBAAkB,oBAAoB;aACvE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/credentials/backends/macos.d.ts

@@ -0,0 +1,18 @@
+/**
+ * macOS Keychain backend.
+ *
+ * Wraps the built-in `security(1)` CLI so `npm install` stays free of
+ * native compile steps. Service name is shared with the Linux and
+ * Windows backends (`com.openclaw.switchbot`), so a user migrating a
+ * config between machines sees the same lookup shape.
+ *
+ * Errors never leak credential material — `add-generic-password`
+ * receives the password via `-w <value>` on argv, which is visible in
+ * `ps` to the current user but not persisted anywhere, and any stderr
+ * we surface back up is bounded to the library's own messages
+ * (`password not found`, `could not be added`, etc.) rather than our
+ * input values.
+ */
+import { CredentialStore } from '../keychain.js';
+export declare function macOsAvailable(): Promise<boolean>;
+export declare function createMacOsBackend(): CredentialStore;