hyperclaw 5.0.0 → 5.0.2

package/dist/connector-vV89hsyd.js

@@ -0,0 +1,218 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const events = require_chunk.__toESM(require("events"));
+const irc = require_chunk.__toESM(require("irc"));
+
+//#region extensions/irc/src/connector.ts
+function resolveEnvConfig(cfg) {
+	return {
+		server: cfg.server || process.env["IRC_HOST"] || "",
+		port: cfg.port ?? (process.env["IRC_PORT"] ? parseInt(process.env["IRC_PORT"], 10) : void 0),
+		tls: cfg.tls ?? (process.env["IRC_TLS"] === "true" || process.env["IRC_TLS"] === "1"),
+		nick: cfg.nick || process.env["IRC_NICK"] || "hyperclaw-bot",
+		username: cfg.username || process.env["IRC_USERNAME"],
+		realname: cfg.realname || process.env["IRC_REALNAME"],
+		password: cfg.password || process.env["IRC_PASSWORD"],
+		channels: cfg.channels?.length ? cfg.channels : process.env["IRC_CHANNELS"]?.split(",").map((c) => c.trim()).filter(Boolean) ?? [],
+		nickserv: cfg.nickserv ?? (process.env["IRC_NICKSERV_PASSWORD"] ? {
+			enabled: true,
+			service: "NickServ",
+			password: process.env["IRC_NICKSERV_PASSWORD"],
+			registerEmail: process.env["IRC_NICKSERV_REGISTER_EMAIL"]
+		} : void 0),
+		dmPolicy: cfg.dmPolicy ?? "pairing",
+		allowFrom: cfg.allowFrom ?? [],
+		groupPolicy: cfg.groupPolicy ?? "allowlist",
+		groupAllowFrom: cfg.groupAllowFrom ?? [],
+		groups: cfg.groups ?? {},
+		dangerouslyAllowNameMatching: cfg.dangerouslyAllowNameMatching ?? false
+	};
+}
+/** Match a sender (nick!user@host or bare nick) against an allowFrom entry. */
+function matchSender(sender, pattern, allowBareNick) {
+	if (pattern === "*") return true;
+	if (pattern.startsWith("id:")) {
+		const id = pattern.slice(3);
+		return sender === id || sender.startsWith(id + "!");
+	}
+	if (pattern === sender) return true;
+	if (allowBareNick) {
+		const nick = sender.split("!")[0];
+		return nick === pattern;
+	}
+	return false;
+}
+function senderAllowed(sender, allowList, allowBareNick) {
+	if (!allowList.length) return false;
+	return allowList.some((p) => matchSender(sender, p, allowBareNick));
+}
+/** Return the first matching ToolsBySender policy for a sender. */
+function resolveToolsBySender(sender, toolsBySender, allowBareNick) {
+	for (const [pattern, policy] of Object.entries(toolsBySender)) {
+		const pat = pattern.startsWith("id:") ? pattern : `id:${pattern}`;
+		if (matchSender(sender, pat === "id:*" ? "*" : pat, allowBareNick)) return policy;
+	}
+	return void 0;
+}
+/** Resolve effective tool policy for a sender in a channel. */
+function resolveToolPolicy(sender, channelCfg, allowBareNick) {
+	if (!channelCfg) return void 0;
+	if (channelCfg.toolsBySender) {
+		const byS = resolveToolsBySender(sender, channelCfg.toolsBySender, allowBareNick);
+		if (byS) return byS;
+	}
+	return channelCfg.tools;
+}
+/** Find the best group config for a channel name. */
+function getGroupConfig(channel, groups) {
+	return groups[channel] ?? groups["*"];
+}
+var IrcConnector = class extends events.EventEmitter {
+	client = null;
+	config;
+	constructor(rawConfig) {
+		super();
+		this.config = resolveEnvConfig(rawConfig);
+	}
+	async connect() {
+		return new Promise((resolve, reject) => {
+			const cfg = this.config;
+			const useTls = cfg.tls ?? false;
+			const port = cfg.port ?? (useTls ? 6697 : 6667);
+			const channels = (cfg.channels ?? []).map((c) => c.startsWith("#") ? c : `#${c}`);
+			this.client = new irc.default.Client(cfg.server, cfg.nick, {
+				port,
+				secure: useTls,
+				channels,
+				userName: cfg.username ?? cfg.nick,
+				realName: cfg.realname ?? "HyperClaw IRC Bot",
+				password: cfg.password,
+				autoConnect: true,
+				debug: false,
+				showErrors: true,
+				stripColors: true
+			});
+			this.client.on("registered", () => {
+				console.log(chalk.default.green(`  🦅 IRC: ${cfg.nick} on ${cfg.server}:${port}${useTls ? " (TLS)" : ""} connected`));
+				this._handleNickServ();
+				this.emit("connected", {
+					server: cfg.server,
+					nick: cfg.nick,
+					port,
+					tls: useTls
+				});
+				resolve();
+			});
+			this.client.on("error", (err) => {
+				console.log(chalk.default.yellow(`  ⚠ IRC error: ${err.message}`));
+				reject(err);
+			});
+			this.client.on("message", (from, to, message) => {
+				const isChannel = to.startsWith("#");
+				if (isChannel) this._handleChannelMessage(from, to, message);
+				else this._handleDm(from, message);
+			});
+			this.client.on("pm", (from, message) => {
+				this._handleDm(from, message);
+			});
+		});
+	}
+	_handleNickServ() {
+		const ns = this.config.nickserv;
+		if (!ns?.enabled) return;
+		const service = ns.service ?? "NickServ";
+		const nsPassword = ns.password ?? process.env["IRC_NICKSERV_PASSWORD"];
+		if (ns.register && ns.registerEmail) {
+			console.log(chalk.default.gray(`  IRC NickServ: attempting REGISTER`));
+			this.client.say(service, `REGISTER ${nsPassword} ${ns.registerEmail}`);
+		} else if (nsPassword) {
+			console.log(chalk.default.gray(`  IRC NickServ: identifying`));
+			this.client.say(service, `IDENTIFY ${nsPassword}`);
+		}
+	}
+	_handleChannelMessage(from, channel, message) {
+		const cfg = this.config;
+		const text = message.trim();
+		if (!text) return;
+		const groupCfg = getGroupConfig(channel, cfg.groups ?? {});
+		if (cfg.groupPolicy === "allowlist") {
+			const defined = cfg.groups && (cfg.groups[channel] !== void 0 || cfg.groups["*"] !== void 0);
+			if (!defined) {
+				console.log(chalk.default.gray(`  irc: drop channel ${channel} (groupPolicy=allowlist, not in groups)`));
+				return;
+			}
+		}
+		const allowBareNick = cfg.dangerouslyAllowNameMatching ?? false;
+		const perChannelAllow = groupCfg?.allowFrom ?? [];
+		const globalGroupAllow = cfg.groupAllowFrom ?? [];
+		const effectiveAllow = perChannelAllow.length ? perChannelAllow : globalGroupAllow;
+		if (effectiveAllow.length && !senderAllowed(from, effectiveAllow, allowBareNick)) {
+			console.log(chalk.default.gray(`  irc: drop group sender ${from} (policy=allowlist)`));
+			return;
+		}
+		const requireMention = groupCfg?.requireMention ?? true;
+		if (requireMention) {
+			const mentionPatterns = [
+				cfg.nick,
+				`${cfg.nick}:`,
+				`@${cfg.nick}`,
+				`${cfg.nick},`
+			];
+			const mentioned = mentionPatterns.some((p) => text.toLowerCase().startsWith(p.toLowerCase()));
+			if (!mentioned) {
+				console.log(chalk.default.gray(`  irc: drop channel ${channel} (missing-mention)`));
+				return;
+			}
+		}
+		const toolPolicy = resolveToolPolicy(from, groupCfg, allowBareNick);
+		const payload = {
+			chatId: channel,
+			text,
+			from,
+			to: channel,
+			isChannel: true,
+			...toolPolicy ? { toolPolicy } : {}
+		};
+		this.emit("message", payload);
+	}
+	_handleDm(from, message) {
+		const cfg = this.config;
+		const text = message.trim();
+		if (!text) return;
+		if (cfg.dmPolicy === "none") return;
+		if (cfg.dmPolicy === "allowlist") {
+			const allowBareNick = cfg.dangerouslyAllowNameMatching ?? false;
+			const allowList = cfg.allowFrom ?? [];
+			if (!senderAllowed(from, allowList, allowBareNick)) {
+				console.log(chalk.default.gray(`  irc: drop DM from ${from} (dmPolicy=allowlist)`));
+				return;
+			}
+		}
+		const payload = {
+			chatId: from,
+			text,
+			from,
+			to: from,
+			isChannel: false
+		};
+		this.emit("message", payload);
+	}
+	async sendMessage(chatId, text) {
+		if (!this.client) throw new Error("IRC not connected");
+		const lines = text.split("\n").filter(Boolean);
+		for (const line of lines) this.client.say(chatId, line);
+	}
+	async disconnect() {
+		if (this.client) {
+			this.client.disconnect();
+			this.client = null;
+		}
+	}
+	getToolPolicy(sender, channel) {
+		const groupCfg = getGroupConfig(channel, this.config.groups ?? {});
+		return resolveToolPolicy(sender, groupCfg, this.config.dangerouslyAllowNameMatching ?? false);
+	}
+};
+
+//#endregion
+exports.IrcConnector = IrcConnector;

package/dist/cost-tracker-Ca1UPZ33.js

@@ -0,0 +1,103 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/infra/cost-tracker.ts
+/** Rough cost per 1M tokens by provider/model (Claude Sonnet ballpark). */
+const DEFAULT_COST_PER_1M_INPUT = 3;
+const DEFAULT_COST_PER_1M_OUTPUT = 15;
+function estimateCost(usage, model) {
+	if (!usage) return 0;
+	const inp = (usage.input || 0) + (usage.cacheRead || 0);
+	const inputCost = inp / 1e6 * DEFAULT_COST_PER_1M_INPUT;
+	const outputCost = (usage.output || 0) / 1e6 * DEFAULT_COST_PER_1M_OUTPUT;
+	return inputCost + outputCost;
+}
+/** Path to cost log file for a session. */
+function getCostLogPath(baseDir, sessionId) {
+	return path.default.join(baseDir, "costs", `session-${sessionId}.jsonl`);
+}
+/** Append a cost entry for a session. */
+async function recordUsage(baseDir, sessionId, usage, opts) {
+	const costUsd = estimateCost(usage, opts?.model);
+	const entry = {
+		sessionId,
+		source: opts?.source,
+		tenantId: opts?.tenantId,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		usage,
+		costUsd,
+		model: opts?.model
+	};
+	const dir = path.default.join(baseDir, "costs");
+	await fs_extra.default.ensureDir(dir);
+	const fp = getCostLogPath(baseDir, sessionId);
+	await fs_extra.default.appendFile(fp, JSON.stringify(entry) + "\n");
+}
+/** Read and aggregate all entries for a session. */
+async function getSessionSummary(baseDir, sessionId) {
+	const fp = getCostLogPath(baseDir, sessionId);
+	if (!await fs_extra.default.pathExists(fp)) return {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		costUsd: 0,
+		runs: 0
+	};
+	const lines = (await fs_extra.default.readFile(fp, "utf8")).trim().split("\n").filter(Boolean);
+	let input = 0, output = 0, cacheRead = 0, costUsd = 0;
+	for (const line of lines) try {
+		const e = JSON.parse(line);
+		input += e.usage.input || 0;
+		output += e.usage.output || 0;
+		cacheRead += e.usage.cacheRead || 0;
+		costUsd += e.costUsd || 0;
+	} catch {}
+	return {
+		input,
+		output,
+		cacheRead,
+		costUsd,
+		runs: lines.length
+	};
+}
+/** Get global summary across all sessions. */
+async function getGlobalSummary(baseDir) {
+	const dir = path.default.join(baseDir, "costs");
+	if (!await fs_extra.default.pathExists(dir)) return {
+		sessions: 0,
+		totalInput: 0,
+		totalOutput: 0,
+		totalCacheRead: 0,
+		totalCostUsd: 0,
+		totalRuns: 0
+	};
+	const files = (await fs_extra.default.readdir(dir)).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+	let totalInput = 0, totalOutput = 0, totalCacheRead = 0, totalCostUsd = 0, totalRuns = 0;
+	for (const f of files) {
+		const fp = path.default.join(dir, f);
+		const content = await fs_extra.default.readFile(fp, "utf8").catch(() => "");
+		for (const line of content.trim().split("\n").filter(Boolean)) try {
+			const e = JSON.parse(line);
+			totalInput += e.usage.input || 0;
+			totalOutput += e.usage.output || 0;
+			totalCacheRead += e.usage.cacheRead || 0;
+			totalCostUsd += e.costUsd || 0;
+			totalRuns++;
+		} catch {}
+	}
+	return {
+		sessions: files.length,
+		totalInput,
+		totalOutput,
+		totalCacheRead,
+		totalCostUsd,
+		totalRuns
+	};
+}
+
+//#endregion
+exports.estimateCost = estimateCost;
+exports.getGlobalSummary = getGlobalSummary;
+exports.getSessionSummary = getSessionSummary;
+exports.recordUsage = recordUsage;

package/dist/cost-tracker-fnaj_6M9.js

@@ -0,0 +1,103 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/infra/cost-tracker.ts
+/** Rough cost per 1M tokens by provider/model (Claude Sonnet ballpark). */
+const DEFAULT_COST_PER_1M_INPUT = 3;
+const DEFAULT_COST_PER_1M_OUTPUT = 15;
+function estimateCost(usage, model) {
+	if (!usage) return 0;
+	const inp = (usage.input || 0) + (usage.cacheRead || 0);
+	const inputCost = inp / 1e6 * DEFAULT_COST_PER_1M_INPUT;
+	const outputCost = (usage.output || 0) / 1e6 * DEFAULT_COST_PER_1M_OUTPUT;
+	return inputCost + outputCost;
+}
+/** Path to cost log file for a session. */
+function getCostLogPath(baseDir, sessionId) {
+	return path.default.join(baseDir, "costs", `session-${sessionId}.jsonl`);
+}
+/** Append a cost entry for a session. */
+async function recordUsage(baseDir, sessionId, usage, opts) {
+	const costUsd = estimateCost(usage, opts?.model);
+	const entry = {
+		sessionId,
+		source: opts?.source,
+		tenantId: opts?.tenantId,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		usage,
+		costUsd,
+		model: opts?.model
+	};
+	const dir = path.default.join(baseDir, "costs");
+	await fs_extra.default.ensureDir(dir);
+	const fp = getCostLogPath(baseDir, sessionId);
+	await fs_extra.default.appendFile(fp, JSON.stringify(entry) + "\n");
+}
+/** Read and aggregate all entries for a session. */
+async function getSessionSummary(baseDir, sessionId) {
+	const fp = getCostLogPath(baseDir, sessionId);
+	if (!await fs_extra.default.pathExists(fp)) return {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		costUsd: 0,
+		runs: 0
+	};
+	const lines = (await fs_extra.default.readFile(fp, "utf8")).trim().split("\n").filter(Boolean);
+	let input = 0, output = 0, cacheRead = 0, costUsd = 0;
+	for (const line of lines) try {
+		const e = JSON.parse(line);
+		input += e.usage.input || 0;
+		output += e.usage.output || 0;
+		cacheRead += e.usage.cacheRead || 0;
+		costUsd += e.costUsd || 0;
+	} catch {}
+	return {
+		input,
+		output,
+		cacheRead,
+		costUsd,
+		runs: lines.length
+	};
+}
+/** Get global summary across all sessions. */
+async function getGlobalSummary(baseDir) {
+	const dir = path.default.join(baseDir, "costs");
+	if (!await fs_extra.default.pathExists(dir)) return {
+		sessions: 0,
+		totalInput: 0,
+		totalOutput: 0,
+		totalCacheRead: 0,
+		totalCostUsd: 0,
+		totalRuns: 0
+	};
+	const files = (await fs_extra.default.readdir(dir)).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+	let totalInput = 0, totalOutput = 0, totalCacheRead = 0, totalCostUsd = 0, totalRuns = 0;
+	for (const f of files) {
+		const fp = path.default.join(dir, f);
+		const content = await fs_extra.default.readFile(fp, "utf8").catch(() => "");
+		for (const line of content.trim().split("\n").filter(Boolean)) try {
+			const e = JSON.parse(line);
+			totalInput += e.usage.input || 0;
+			totalOutput += e.usage.output || 0;
+			totalCacheRead += e.usage.cacheRead || 0;
+			totalCostUsd += e.costUsd || 0;
+			totalRuns++;
+		} catch {}
+	}
+	return {
+		sessions: files.length,
+		totalInput,
+		totalOutput,
+		totalCacheRead,
+		totalCostUsd,
+		totalRuns
+	};
+}
+
+//#endregion
+exports.estimateCost = estimateCost;
+exports.getGlobalSummary = getGlobalSummary;
+exports.getSessionSummary = getSessionSummary;
+exports.recordUsage = recordUsage;

package/dist/credentials-store-BxijEirw.js

@@ -0,0 +1,77 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+
+//#region src/secrets/credentials-store.ts
+var CredentialsStore = class {
+	credsDir;
+	constructor(baseDir) {
+		this.credsDir = path.default.join(baseDir || path.default.join(os.default.homedir(), ".hyperclaw"), "credentials");
+	}
+	filePath(providerId) {
+		const safe = providerId.replace(/[^a-zA-Z0-9_-]/g, "_");
+		return path.default.join(this.credsDir, `${safe}.json`);
+	}
+	async set(providerId, creds) {
+		await fs_extra.default.ensureDir(this.credsDir);
+		await fs_extra.default.chmod(this.credsDir, 448);
+		const record = {
+			...creds,
+			providerId,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		const fpath = this.filePath(providerId);
+		await fs_extra.default.writeJson(fpath, record, { spaces: 2 });
+		await fs_extra.default.chmod(fpath, 384);
+	}
+	async get(providerId) {
+		const fpath = this.filePath(providerId);
+		if (!await fs_extra.default.pathExists(fpath)) return null;
+		const stat = await fs_extra.default.stat(fpath);
+		if ((stat.mode & 63) !== 0) {
+			console.log(chalk.default.yellow(`  ⚠  Unsafe permissions on credentials/${providerId}.json — fixing...`));
+			await fs_extra.default.chmod(fpath, 384);
+		}
+		return fs_extra.default.readJson(fpath);
+	}
+	async remove(providerId) {
+		const fpath = this.filePath(providerId);
+		await fs_extra.default.remove(fpath);
+		console.log(chalk.default.green(`  ✔  Credentials removed: ${providerId}`));
+	}
+	async list() {
+		if (!await fs_extra.default.pathExists(this.credsDir)) return [];
+		const files = await fs_extra.default.readdir(this.credsDir);
+		return files.filter((f) => f.endsWith(".json")).map((f) => f.replace(".json", ""));
+	}
+	async showList() {
+		const providers = await this.list();
+		console.log(chalk.default.bold.cyan("\n  🔐 CREDENTIALS\n"));
+		if (providers.length === 0) {
+			console.log(chalk.default.gray("  No credentials stored.\n"));
+			console.log(chalk.default.gray("  Add with: hyperclaw auth add <service_id>   (for any API key)\n"));
+			console.log(chalk.default.gray("  Or:       hyperclaw secrets set KEY=value   (for .env vars)\n"));
+			return;
+		}
+		for (const p of providers) {
+			const cred = await this.get(p);
+			const hasKey = !!cred?.apiKey;
+			const hasRefresh = !!cred?.refreshToken;
+			const expiry = cred?.expiresAt ? new Date(cred.expiresAt) > /* @__PURE__ */ new Date() ? chalk.default.green("valid") : chalk.default.red("expired") : chalk.default.gray("no expiry");
+			console.log(`  ${chalk.default.green("●")} ${chalk.default.white(p.padEnd(20))} ${hasKey ? chalk.default.cyan("api_key") : ""}${hasRefresh ? chalk.default.yellow(" refresh_token") : ""} ${expiry}`);
+			console.log(`     ${chalk.default.gray(`Updated: ${cred?.updatedAt ? new Date(cred.updatedAt).toLocaleString() : "unknown"}`)}`);
+			console.log();
+		}
+		console.log(chalk.default.gray("  credentials/ — stored at ~/.hyperclaw/credentials/*.json (mode 0600)\n"));
+	}
+};
+
+//#endregion
+Object.defineProperty(exports, 'CredentialsStore', {
+  enumerable: true,
+  get: function () {
+    return CredentialsStore;
+  }
+});

package/dist/credentials-store-CA8UtK0T.js

@@ -0,0 +1,77 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+
+//#region src/secrets/credentials-store.ts
+var CredentialsStore = class {
+	credsDir;
+	constructor(baseDir) {
+		this.credsDir = path.default.join(baseDir || path.default.join(os.default.homedir(), ".hyperclaw"), "credentials");
+	}
+	filePath(providerId) {
+		const safe = providerId.replace(/[^a-zA-Z0-9_-]/g, "_");
+		return path.default.join(this.credsDir, `${safe}.json`);
+	}
+	async set(providerId, creds) {
+		await fs_extra.default.ensureDir(this.credsDir);
+		await fs_extra.default.chmod(this.credsDir, 448);
+		const record = {
+			...creds,
+			providerId,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		const fpath = this.filePath(providerId);
+		await fs_extra.default.writeJson(fpath, record, { spaces: 2 });
+		await fs_extra.default.chmod(fpath, 384);
+	}
+	async get(providerId) {
+		const fpath = this.filePath(providerId);
+		if (!await fs_extra.default.pathExists(fpath)) return null;
+		const stat = await fs_extra.default.stat(fpath);
+		if ((stat.mode & 63) !== 0) {
+			console.log(chalk.default.yellow(`  ⚠  Unsafe permissions on credentials/${providerId}.json — fixing...`));
+			await fs_extra.default.chmod(fpath, 384);
+		}
+		return fs_extra.default.readJson(fpath);
+	}
+	async remove(providerId) {
+		const fpath = this.filePath(providerId);
+		await fs_extra.default.remove(fpath);
+		console.log(chalk.default.green(`  ✔  Credentials removed: ${providerId}`));
+	}
+	async list() {
+		if (!await fs_extra.default.pathExists(this.credsDir)) return [];
+		const files = await fs_extra.default.readdir(this.credsDir);
+		return files.filter((f) => f.endsWith(".json")).map((f) => f.replace(".json", ""));
+	}
+	async showList() {
+		const providers = await this.list();
+		console.log(chalk.default.bold.cyan("\n  🔐 CREDENTIALS\n"));
+		if (providers.length === 0) {
+			console.log(chalk.default.gray("  No credentials stored.\n"));
+			console.log(chalk.default.gray("  Add with: hyperclaw auth add <service_id>   (for any API key)\n"));
+			console.log(chalk.default.gray("  Or:       hyperclaw secrets set KEY=value   (for .env vars)\n"));
+			return;
+		}
+		for (const p of providers) {
+			const cred = await this.get(p);
+			const hasKey = !!cred?.apiKey;
+			const hasRefresh = !!cred?.refreshToken;
+			const expiry = cred?.expiresAt ? new Date(cred.expiresAt) > /* @__PURE__ */ new Date() ? chalk.default.green("valid") : chalk.default.red("expired") : chalk.default.gray("no expiry");
+			console.log(`  ${chalk.default.green("●")} ${chalk.default.white(p.padEnd(20))} ${hasKey ? chalk.default.cyan("api_key") : ""}${hasRefresh ? chalk.default.yellow(" refresh_token") : ""} ${expiry}`);
+			console.log(`     ${chalk.default.gray(`Updated: ${cred?.updatedAt ? new Date(cred.updatedAt).toLocaleString() : "unknown"}`)}`);
+			console.log();
+		}
+		console.log(chalk.default.gray("  credentials/ — stored at ~/.hyperclaw/credentials/*.json (mode 0600)\n"));
+	}
+};
+
+//#endregion
+Object.defineProperty(exports, 'CredentialsStore', {
+  enumerable: true,
+  get: function () {
+    return CredentialsStore;
+  }
+});

package/dist/credentials-store-CPkVO6-z.js

@@ -0,0 +1,4 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_credentials_store = require('./credentials-store-BxijEirw.js');
+
+exports.CredentialsStore = require_credentials_store.CredentialsStore;

package/dist/credentials-store-Cm7DH-kh.js

@@ -0,0 +1,4 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_credentials_store = require('./credentials-store-CA8UtK0T.js');
+
+exports.CredentialsStore = require_credentials_store.CredentialsStore;

package/dist/cron-tasks-L0mz1yyU.js

@@ -0,0 +1,82 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+
+//#region src/services/cron-tasks.ts
+const CRON_TASKS_FILE = path.default.join(os.default.homedir(), ".hyperclaw", "cron-tasks.json");
+let tasks = [];
+async function loadCronTasks() {
+	try {
+		tasks = await fs_extra.default.readJson(CRON_TASKS_FILE);
+	} catch {
+		tasks = [];
+	}
+	return tasks;
+}
+async function saveCronTasks() {
+	await fs_extra.default.ensureDir(path.default.dirname(CRON_TASKS_FILE));
+	await fs_extra.default.writeJson(CRON_TASKS_FILE, tasks, { spaces: 2 });
+}
+function addCronTask(schedule, prompt, name) {
+	const id = `task-${Date.now().toString(36)}`;
+	const task = {
+		id,
+		schedule,
+		prompt,
+		name,
+		enabled: true,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	tasks.push(task);
+	return task;
+}
+function removeCronTask(id) {
+	const i = tasks.findIndex((t) => t.id === id);
+	if (i >= 0) {
+		tasks.splice(i, 1);
+		return true;
+	}
+	return false;
+}
+async function runCronTask(task, port = 18789) {
+	const http = await import("http");
+	return new Promise((resolve, reject) => {
+		const payload = JSON.stringify({ message: task.prompt });
+		const req = http.request({
+			hostname: "127.0.0.1",
+			port,
+			path: "/api/webhook/inbound",
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				"Content-Length": Buffer.byteLength(payload)
+			}
+		}, (res) => {
+			let data = "";
+			res.on("data", (c) => data += c);
+			res.on("end", async () => {
+				task.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
+				await saveCronTasks().catch(() => {});
+				resolve();
+			});
+		});
+		req.on("error", (e) => {
+			console.error(`[cron] task ${task.id} failed:`, e.message);
+			resolve();
+		});
+		req.setTimeout(6e4, () => {
+			req.destroy();
+			resolve();
+		});
+		req.write(payload);
+		req.end();
+	});
+}
+
+//#endregion
+exports.addCronTask = addCronTask;
+exports.loadCronTasks = loadCronTasks;
+exports.removeCronTask = removeCronTask;
+exports.runCronTask = runCronTask;
+exports.saveCronTasks = saveCronTasks;