hyperclaw 5.2.0 → 5.2.1

package/dist/connector-tZgn5_Fk.js

@@ -0,0 +1,85 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const http = require_chunk.__toESM(require("http"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/google-chat/src/connector.ts
+var GoogleChatConnector = class extends events.EventEmitter {
+	config;
+	constructor(config) {
+		super();
+		this.config = config;
+	}
+	async connect() {
+		console.log(chalk.default.green(`  🦅 Google Chat: HTTP app listening at ${this.config.baseUrl}/webhook/gchat`));
+		this.emit("connected", {});
+	}
+	disconnect() {}
+	/**
+	
+	* Handle incoming Chat event. Returns JSON string for sync reply, or void.
+	
+	*/
+	async handleWebhook(body) {
+		let event;
+		try {
+			event = JSON.parse(body);
+		} catch {
+			return;
+		}
+		const type = event.type;
+		if (type === "ADDED_TO_SPACE" || type === "REMOVED_FROM_SPACE") return JSON.stringify({ text: type === "ADDED_TO_SPACE" ? "🦅 HyperClaw connected." : "Goodbye." });
+		if (type !== "MESSAGE") return;
+		const msg = event.message;
+		const text = (msg?.argumentText || msg?.text || "").trim();
+		if (!text) return JSON.stringify({ text: "" });
+		const spaceName = event.space?.name || "unknown";
+		const userName = event.user?.displayName || event.user?.name || "User";
+		try {
+			const response = await this.postChat(text);
+			return JSON.stringify({ text: response || "(no response)" });
+		} catch (e) {
+			console.error(chalk.default.yellow(`  ⚠ Google Chat: ${e.message}`));
+			return JSON.stringify({ text: `Error: ${e.message}` });
+		}
+	}
+	postChat(message) {
+		return new Promise((resolve, reject) => {
+			const payload = JSON.stringify({ message });
+			const url = new URL(`${this.config.baseUrl}/api/chat`);
+			const req = http.default.request({
+				hostname: url.hostname,
+				port: url.port || 80,
+				path: url.pathname,
+				method: "POST",
+				headers: {
+					"Content-Type": "application/json",
+					"Content-Length": String(Buffer.byteLength(payload)),
+					"X-HyperClaw-Source": "gchat"
+				}
+			}, (res) => {
+				let data = "";
+				res.on("data", (c) => data += c);
+				res.on("end", () => {
+					try {
+						const j = JSON.parse(data);
+						if (j.error) reject(new Error(j.error));
+						else resolve(j.response || "");
+					} catch {
+						reject(new Error("Invalid response"));
+					}
+				});
+			});
+			req.on("error", reject);
+			req.setTimeout(6e4, () => {
+				req.destroy();
+				reject(new Error("Timeout"));
+			});
+			req.write(payload);
+			req.end();
+		});
+	}
+};
+
+//#endregion
+exports.GoogleChatConnector = GoogleChatConnector;

package/dist/connector-wm4Oe1DK.js

@@ -0,0 +1,181 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const http = require_chunk.__toESM(require("http"));
+const ws = require_chunk.__toESM(require("ws"));
+const https = require_chunk.__toESM(require("https"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/bluebubbles/src/connector.ts
+const STATE_FILE = path.default.join(os.default.homedir(), ".hyperclaw", "bluebubbles-state.json");
+function bbReq(serverUrl, password, method, endpoint, body) {
+	return new Promise((resolve, reject) => {
+		const url = new URL(`${serverUrl}/api/v1${endpoint}`);
+		url.searchParams.set("password", password);
+		const isHttps = url.protocol === "https:";
+		const mod = isHttps ? https.default : http.default;
+		const payload = body ? JSON.stringify(body) : null;
+		const req = mod.request({
+			hostname: url.hostname,
+			port: url.port || (isHttps ? 443 : 1234),
+			path: url.pathname + url.search,
+			method,
+			headers: payload ? {
+				"Content-Type": "application/json",
+				"Content-Length": Buffer.byteLength(payload)
+			} : {},
+			rejectUnauthorized: false
+		}, (res) => {
+			let data = "";
+			res.on("data", (c) => data += c);
+			res.on("end", () => {
+				try {
+					const r = JSON.parse(data);
+					if (r.status !== 200) reject(new Error(r.error?.message || "BB error"));
+					else resolve(r.data);
+				} catch {
+					reject(new Error("Invalid JSON"));
+				}
+			});
+		});
+		req.on("error", reject);
+		if (payload) req.write(payload);
+		req.end();
+	});
+}
+var BlueBubblesConnector = class extends events.EventEmitter {
+	config;
+	running = false;
+	ws = null;
+	lastMessageTs = 0;
+	constructor(config) {
+		super();
+		this.config = {
+			dmPolicy: "allowlist",
+			allowFrom: [],
+			approvedPairings: [],
+			pendingPairings: {},
+			...config
+		};
+	}
+	async connect() {
+		const info = await bbReq(this.config.serverUrl, this.config.password, "GET", "/server/info");
+		await this.loadState();
+		this.running = true;
+		console.log(chalk.default.green(`  🦅 BlueBubbles (iMessage): ${info?.os_version || "macOS"} server connected`));
+		this.emit("connected", { serverInfo: info });
+		this.connectWebSocket();
+	}
+	connectWebSocket() {
+		const url = new URL(this.config.serverUrl);
+		const wsUrl = `${url.protocol === "https:" ? "wss" : "ws"}://${url.hostname}:${url.port || 1234}`;
+		this.ws = new ws.WebSocket(`${wsUrl}?password=${encodeURIComponent(this.config.password)}`, { rejectUnauthorized: false });
+		this.ws.on("message", async (data) => {
+			try {
+				const event = JSON.parse(data.toString());
+				if (event.type === "new-message" || event.type === "updated-message") await this.handleMessage(event.data);
+			} catch {}
+		});
+		this.ws.on("close", () => {
+			if (this.running) setTimeout(() => this.connectWebSocket(), 5e3);
+		});
+		this.ws.on("error", () => {});
+		setInterval(() => {
+			if (this.ws?.readyState === ws.WebSocket.OPEN) this.ws.send(JSON.stringify({ type: "ping" }));
+		}, 3e4);
+	}
+	async handleMessage(msg) {
+		if (!msg || msg.isFromMe) return;
+		const text = msg.text;
+		const from = msg.handle?.address;
+		if (!text || !from) return;
+		const ts = msg.dateCreated || 0;
+		if (ts <= this.lastMessageTs) return;
+		this.lastMessageTs = ts;
+		await this.saveState();
+		const allowed = await this.checkDMPolicy(from, text);
+		if (!allowed) return;
+		this.emit("message", {
+			id: msg.guid,
+			channelId: "bluebubbles",
+			from,
+			chatId: msg.chats?.[0]?.guid || from,
+			text,
+			timestamp: new Date(ts).toISOString(),
+			isDM: !msg.isGroup
+		});
+	}
+	async checkDMPolicy(from, text) {
+		if (this.config.dmPolicy === "none") return false;
+		if (this.config.dmPolicy === "open") return true;
+		if (this.config.dmPolicy === "allowlist") {
+			if (this.config.allowFrom.includes(from)) return true;
+			await this.sendMessage(from, "🦅 HyperClaw: Not on allowlist.");
+			return false;
+		}
+		if (this.config.dmPolicy === "pairing") {
+			if (this.config.approvedPairings.includes(from)) return true;
+			const upper = text.trim().toUpperCase();
+			if (this.config.pendingPairings[upper]) {
+				this.config.approvedPairings.push(from);
+				delete this.config.pendingPairings[upper];
+				await this.saveState();
+				await this.sendMessage(from, "🦅 Paired!");
+				this.emit("pairing:approved", {
+					userId: from,
+					channelId: "bluebubbles"
+				});
+				return true;
+			}
+			const code = Array.from({ length: 6 }, () => "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"[Math.floor(Math.random() * 32)]).join("");
+			this.config.pendingPairings[code] = from;
+			await this.saveState();
+			await this.sendMessage(from, `🦅 Pairing code: ${code}\nApprove: hyperclaw pairing approve bluebubbles ${code}`);
+			return false;
+		}
+		return false;
+	}
+	async sendMessage(address, text) {
+		await bbReq(this.config.serverUrl, this.config.password, "POST", "/message/text", {
+			chatGuid: `iMessage;-;${address}`,
+			message: text.slice(0, 65536),
+			method: "apple-script"
+		});
+	}
+	disconnect() {
+		this.running = false;
+		this.ws?.close();
+	}
+	approvePairing(code) {
+		const upper = code.toUpperCase();
+		if (!this.config.pendingPairings[upper]) return false;
+		this.config.approvedPairings.push(this.config.pendingPairings[upper]);
+		delete this.config.pendingPairings[upper];
+		this.saveState();
+		return true;
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(STATE_FILE);
+			this.lastMessageTs = s.lastTs || 0;
+			if (s.p) this.config.pendingPairings = s.p;
+			if (s.a) this.config.approvedPairings = s.a;
+		} catch {}
+	}
+	async saveState() {
+		await fs_extra.default.ensureDir(path.default.dirname(STATE_FILE));
+		await fs_extra.default.writeJson(STATE_FILE, {
+			lastTs: this.lastMessageTs,
+			p: this.config.pendingPairings,
+			a: this.config.approvedPairings
+		}, { spaces: 2 });
+	}
+	isRunning() {
+		return this.running;
+	}
+};
+
+//#endregion
+exports.BlueBubblesConnector = BlueBubblesConnector;

package/dist/cost-tracker-DHTv6zpR.js

@@ -0,0 +1,103 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/infra/cost-tracker.ts
+/** Rough cost per 1M tokens by provider/model (Claude Sonnet ballpark). */
+const DEFAULT_COST_PER_1M_INPUT = 3;
+const DEFAULT_COST_PER_1M_OUTPUT = 15;
+function estimateCost(usage, model) {
+	if (!usage) return 0;
+	const inp = (usage.input || 0) + (usage.cacheRead || 0);
+	const inputCost = inp / 1e6 * DEFAULT_COST_PER_1M_INPUT;
+	const outputCost = (usage.output || 0) / 1e6 * DEFAULT_COST_PER_1M_OUTPUT;
+	return inputCost + outputCost;
+}
+/** Path to cost log file for a session. */
+function getCostLogPath(baseDir, sessionId) {
+	return path.default.join(baseDir, "costs", `session-${sessionId}.jsonl`);
+}
+/** Append a cost entry for a session. */
+async function recordUsage(baseDir, sessionId, usage, opts) {
+	const costUsd = estimateCost(usage, opts?.model);
+	const entry = {
+		sessionId,
+		source: opts?.source,
+		tenantId: opts?.tenantId,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		usage,
+		costUsd,
+		model: opts?.model
+	};
+	const dir = path.default.join(baseDir, "costs");
+	await fs_extra.default.ensureDir(dir);
+	const fp = getCostLogPath(baseDir, sessionId);
+	await fs_extra.default.appendFile(fp, JSON.stringify(entry) + "\n");
+}
+/** Read and aggregate all entries for a session. */
+async function getSessionSummary(baseDir, sessionId) {
+	const fp = getCostLogPath(baseDir, sessionId);
+	if (!await fs_extra.default.pathExists(fp)) return {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		costUsd: 0,
+		runs: 0
+	};
+	const lines = (await fs_extra.default.readFile(fp, "utf8")).trim().split("\n").filter(Boolean);
+	let input = 0, output = 0, cacheRead = 0, costUsd = 0;
+	for (const line of lines) try {
+		const e = JSON.parse(line);
+		input += e.usage.input || 0;
+		output += e.usage.output || 0;
+		cacheRead += e.usage.cacheRead || 0;
+		costUsd += e.costUsd || 0;
+	} catch {}
+	return {
+		input,
+		output,
+		cacheRead,
+		costUsd,
+		runs: lines.length
+	};
+}
+/** Get global summary across all sessions. */
+async function getGlobalSummary(baseDir) {
+	const dir = path.default.join(baseDir, "costs");
+	if (!await fs_extra.default.pathExists(dir)) return {
+		sessions: 0,
+		totalInput: 0,
+		totalOutput: 0,
+		totalCacheRead: 0,
+		totalCostUsd: 0,
+		totalRuns: 0
+	};
+	const files = (await fs_extra.default.readdir(dir)).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+	let totalInput = 0, totalOutput = 0, totalCacheRead = 0, totalCostUsd = 0, totalRuns = 0;
+	for (const f of files) {
+		const fp = path.default.join(dir, f);
+		const content = await fs_extra.default.readFile(fp, "utf8").catch(() => "");
+		for (const line of content.trim().split("\n").filter(Boolean)) try {
+			const e = JSON.parse(line);
+			totalInput += e.usage.input || 0;
+			totalOutput += e.usage.output || 0;
+			totalCacheRead += e.usage.cacheRead || 0;
+			totalCostUsd += e.costUsd || 0;
+			totalRuns++;
+		} catch {}
+	}
+	return {
+		sessions: files.length,
+		totalInput,
+		totalOutput,
+		totalCacheRead,
+		totalCostUsd,
+		totalRuns
+	};
+}
+
+//#endregion
+exports.estimateCost = estimateCost;
+exports.getGlobalSummary = getGlobalSummary;
+exports.getSessionSummary = getSessionSummary;
+exports.recordUsage = recordUsage;

package/dist/cost-tracker-DJ1tiKcx.js

@@ -0,0 +1,103 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/infra/cost-tracker.ts
+/** Rough cost per 1M tokens by provider/model (Claude Sonnet ballpark). */
+const DEFAULT_COST_PER_1M_INPUT = 3;
+const DEFAULT_COST_PER_1M_OUTPUT = 15;
+function estimateCost(usage, model) {
+	if (!usage) return 0;
+	const inp = (usage.input || 0) + (usage.cacheRead || 0);
+	const inputCost = inp / 1e6 * DEFAULT_COST_PER_1M_INPUT;
+	const outputCost = (usage.output || 0) / 1e6 * DEFAULT_COST_PER_1M_OUTPUT;
+	return inputCost + outputCost;
+}
+/** Path to cost log file for a session. */
+function getCostLogPath(baseDir, sessionId) {
+	return path.default.join(baseDir, "costs", `session-${sessionId}.jsonl`);
+}
+/** Append a cost entry for a session. */
+async function recordUsage(baseDir, sessionId, usage, opts) {
+	const costUsd = estimateCost(usage, opts?.model);
+	const entry = {
+		sessionId,
+		source: opts?.source,
+		tenantId: opts?.tenantId,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		usage,
+		costUsd,
+		model: opts?.model
+	};
+	const dir = path.default.join(baseDir, "costs");
+	await fs_extra.default.ensureDir(dir);
+	const fp = getCostLogPath(baseDir, sessionId);
+	await fs_extra.default.appendFile(fp, JSON.stringify(entry) + "\n");
+}
+/** Read and aggregate all entries for a session. */
+async function getSessionSummary(baseDir, sessionId) {
+	const fp = getCostLogPath(baseDir, sessionId);
+	if (!await fs_extra.default.pathExists(fp)) return {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		costUsd: 0,
+		runs: 0
+	};
+	const lines = (await fs_extra.default.readFile(fp, "utf8")).trim().split("\n").filter(Boolean);
+	let input = 0, output = 0, cacheRead = 0, costUsd = 0;
+	for (const line of lines) try {
+		const e = JSON.parse(line);
+		input += e.usage.input || 0;
+		output += e.usage.output || 0;
+		cacheRead += e.usage.cacheRead || 0;
+		costUsd += e.costUsd || 0;
+	} catch {}
+	return {
+		input,
+		output,
+		cacheRead,
+		costUsd,
+		runs: lines.length
+	};
+}
+/** Get global summary across all sessions. */
+async function getGlobalSummary(baseDir) {
+	const dir = path.default.join(baseDir, "costs");
+	if (!await fs_extra.default.pathExists(dir)) return {
+		sessions: 0,
+		totalInput: 0,
+		totalOutput: 0,
+		totalCacheRead: 0,
+		totalCostUsd: 0,
+		totalRuns: 0
+	};
+	const files = (await fs_extra.default.readdir(dir)).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+	let totalInput = 0, totalOutput = 0, totalCacheRead = 0, totalCostUsd = 0, totalRuns = 0;
+	for (const f of files) {
+		const fp = path.default.join(dir, f);
+		const content = await fs_extra.default.readFile(fp, "utf8").catch(() => "");
+		for (const line of content.trim().split("\n").filter(Boolean)) try {
+			const e = JSON.parse(line);
+			totalInput += e.usage.input || 0;
+			totalOutput += e.usage.output || 0;
+			totalCacheRead += e.usage.cacheRead || 0;
+			totalCostUsd += e.costUsd || 0;
+			totalRuns++;
+		} catch {}
+	}
+	return {
+		sessions: files.length,
+		totalInput,
+		totalOutput,
+		totalCacheRead,
+		totalCostUsd,
+		totalRuns
+	};
+}
+
+//#endregion
+exports.estimateCost = estimateCost;
+exports.getGlobalSummary = getGlobalSummary;
+exports.getSessionSummary = getSessionSummary;
+exports.recordUsage = recordUsage;

package/dist/cost-tracker-jbK_AoIV.js

@@ -0,0 +1,103 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/infra/cost-tracker.ts
+/** Rough cost per 1M tokens by provider/model (Claude Sonnet ballpark). */
+const DEFAULT_COST_PER_1M_INPUT = 3;
+const DEFAULT_COST_PER_1M_OUTPUT = 15;
+function estimateCost(usage, model) {
+	if (!usage) return 0;
+	const inp = (usage.input || 0) + (usage.cacheRead || 0);
+	const inputCost = inp / 1e6 * DEFAULT_COST_PER_1M_INPUT;
+	const outputCost = (usage.output || 0) / 1e6 * DEFAULT_COST_PER_1M_OUTPUT;
+	return inputCost + outputCost;
+}
+/** Path to cost log file for a session. */
+function getCostLogPath(baseDir, sessionId) {
+	return path.default.join(baseDir, "costs", `session-${sessionId}.jsonl`);
+}
+/** Append a cost entry for a session. */
+async function recordUsage(baseDir, sessionId, usage, opts) {
+	const costUsd = estimateCost(usage, opts?.model);
+	const entry = {
+		sessionId,
+		source: opts?.source,
+		tenantId: opts?.tenantId,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		usage,
+		costUsd,
+		model: opts?.model
+	};
+	const dir = path.default.join(baseDir, "costs");
+	await fs_extra.default.ensureDir(dir);
+	const fp = getCostLogPath(baseDir, sessionId);
+	await fs_extra.default.appendFile(fp, JSON.stringify(entry) + "\n");
+}
+/** Read and aggregate all entries for a session. */
+async function getSessionSummary(baseDir, sessionId) {
+	const fp = getCostLogPath(baseDir, sessionId);
+	if (!await fs_extra.default.pathExists(fp)) return {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		costUsd: 0,
+		runs: 0
+	};
+	const lines = (await fs_extra.default.readFile(fp, "utf8")).trim().split("\n").filter(Boolean);
+	let input = 0, output = 0, cacheRead = 0, costUsd = 0;
+	for (const line of lines) try {
+		const e = JSON.parse(line);
+		input += e.usage.input || 0;
+		output += e.usage.output || 0;
+		cacheRead += e.usage.cacheRead || 0;
+		costUsd += e.costUsd || 0;
+	} catch {}
+	return {
+		input,
+		output,
+		cacheRead,
+		costUsd,
+		runs: lines.length
+	};
+}
+/** Get global summary across all sessions. */
+async function getGlobalSummary(baseDir) {
+	const dir = path.default.join(baseDir, "costs");
+	if (!await fs_extra.default.pathExists(dir)) return {
+		sessions: 0,
+		totalInput: 0,
+		totalOutput: 0,
+		totalCacheRead: 0,
+		totalCostUsd: 0,
+		totalRuns: 0
+	};
+	const files = (await fs_extra.default.readdir(dir)).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+	let totalInput = 0, totalOutput = 0, totalCacheRead = 0, totalCostUsd = 0, totalRuns = 0;
+	for (const f of files) {
+		const fp = path.default.join(dir, f);
+		const content = await fs_extra.default.readFile(fp, "utf8").catch(() => "");
+		for (const line of content.trim().split("\n").filter(Boolean)) try {
+			const e = JSON.parse(line);
+			totalInput += e.usage.input || 0;
+			totalOutput += e.usage.output || 0;
+			totalCacheRead += e.usage.cacheRead || 0;
+			totalCostUsd += e.costUsd || 0;
+			totalRuns++;
+		} catch {}
+	}
+	return {
+		sessions: files.length,
+		totalInput,
+		totalOutput,
+		totalCacheRead,
+		totalCostUsd,
+		totalRuns
+	};
+}
+
+//#endregion
+exports.estimateCost = estimateCost;
+exports.getGlobalSummary = getGlobalSummary;
+exports.getSessionSummary = getSessionSummary;
+exports.recordUsage = recordUsage;

package/dist/credentials-store-C0R-pQM7.js

@@ -0,0 +1,5 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_credentials_store = require('./credentials-store-DIPxVk51.js');
+
+require_credentials_store.init_credentials_store();
+exports.CredentialsStore = require_credentials_store.CredentialsStore;

package/dist/credentials-store-C9HwQSY2.js

@@ -0,0 +1,5 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_credentials_store = require('./credentials-store-z16XvFZ2.js');
+
+require_credentials_store.init_credentials_store();
+exports.CredentialsStore = require_credentials_store.CredentialsStore;

package/dist/credentials-store-D5Xw3F75.js

@@ -0,0 +1,89 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_paths = require('./paths-AIyBxIzm.js');
+const require_paths$1 = require('./paths-DPovhojT.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+
+//#region src/secrets/credentials-store.ts
+var CredentialsStore;
+var init_credentials_store = require_chunk.__esm({ "src/secrets/credentials-store.ts"() {
+	require_paths$1.init_paths();
+	CredentialsStore = class {
+		credsDir;
+		constructor(baseDir) {
+			const base = baseDir ?? require_paths.getHyperClawDir();
+			this.credsDir = path.default.join(base, "credentials");
+		}
+		filePath(providerId) {
+			const safe = providerId.replace(/[^a-zA-Z0-9_-]/g, "_");
+			return path.default.join(this.credsDir, `${safe}.json`);
+		}
+		async set(providerId, creds) {
+			await fs_extra.default.ensureDir(this.credsDir);
+			await fs_extra.default.chmod(this.credsDir, 448);
+			const record = {
+				...creds,
+				providerId,
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			const fpath = this.filePath(providerId);
+			await fs_extra.default.writeJson(fpath, record, { spaces: 2 });
+			await fs_extra.default.chmod(fpath, 384);
+		}
+		async get(providerId) {
+			const fpath = this.filePath(providerId);
+			if (!await fs_extra.default.pathExists(fpath)) return null;
+			const stat = await fs_extra.default.stat(fpath);
+			if (process.platform !== "win32" && (stat.mode & 63) !== 0) {
+				console.log(chalk.default.yellow(`  ⚠  Unsafe permissions on credentials/${providerId}.json — fixing...`));
+				await fs_extra.default.chmod(fpath, 384);
+			}
+			return fs_extra.default.readJson(fpath);
+		}
+		async remove(providerId) {
+			const fpath = this.filePath(providerId);
+			await fs_extra.default.remove(fpath);
+			console.log(chalk.default.green(`  ✔  Credentials removed: ${providerId}`));
+		}
+		async list() {
+			if (!await fs_extra.default.pathExists(this.credsDir)) return [];
+			const files = await fs_extra.default.readdir(this.credsDir);
+			return files.filter((f) => f.endsWith(".json")).map((f) => f.replace(".json", ""));
+		}
+		async showList() {
+			const providers = await this.list();
+			console.log(chalk.default.bold.cyan("\n  🔐 CREDENTIALS\n"));
+			if (providers.length === 0) {
+				console.log(chalk.default.gray("  No credentials stored.\n"));
+				console.log(chalk.default.gray("  Add with: hyperclaw auth add <service_id>  (for any API key)\n"));
+				console.log(chalk.default.gray("  Or:       hyperclaw secrets set KEY=value  (for .env vars)\n"));
+				return;
+			}
+			for (const p of providers) {
+				const cred = await this.get(p);
+				const hasKey = !!cred?.apiKey;
+				const hasRefresh = !!cred?.refreshToken;
+				const expiry = cred?.expiresAt ? new Date(cred.expiresAt) > /* @__PURE__ */ new Date() ? chalk.default.green("valid") : chalk.default.red("expired") : chalk.default.gray("no expiry");
+				console.log(`  ${chalk.default.green("●")} ${chalk.default.white(p.padEnd(20))} ${hasKey ? chalk.default.cyan("api_key") : ""}${hasRefresh ? chalk.default.yellow(" refresh_token") : ""} ${expiry}`);
+				console.log(`     ${chalk.default.gray(`Updated: ${cred?.updatedAt ? new Date(cred.updatedAt).toLocaleString() : "unknown"}`)}`);
+				console.log();
+			}
+			console.log(chalk.default.gray("  credentials/ — stored at ~/.hyperclaw/credentials/*.json (mode 0600)\n"));
+		}
+	};
+} });
+
+//#endregion
+Object.defineProperty(exports, 'CredentialsStore', {
+  enumerable: true,
+  get: function () {
+    return CredentialsStore;
+  }
+});
+Object.defineProperty(exports, 'init_credentials_store', {
+  enumerable: true,
+  get: function () {
+    return init_credentials_store;
+  }
+});