hyperclaw 5.2.0 → 5.2.2

package/dist/connector-BZ_-UPUL.js

@@ -0,0 +1,305 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const http = require_chunk.__toESM(require("http"));
+const https = require_chunk.__toESM(require("https"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/synology-chat/src/connector.ts
+function resolveAllowedIds(raw, envVal) {
+	if (Array.isArray(raw) && raw.length) return raw;
+	if (typeof raw === "string" && raw.trim()) return raw.split(",").map((s) => s.trim()).filter(Boolean);
+	if (envVal) return envVal.split(",").map((s) => s.trim()).filter(Boolean);
+	return [];
+}
+function resolveAccount(id, raw, state) {
+	const token = raw.token || process.env["SYNOLOGY_CHAT_TOKEN"] || "";
+	const incomingUrl = raw.incomingUrl || process.env["SYNOLOGY_CHAT_INCOMING_URL"] || "";
+	const allowedUserIds = resolveAllowedIds(raw.allowedUserIds, process.env["SYNOLOGY_ALLOWED_USER_IDS"]);
+	const rateLimitPerMinute = raw.rateLimitPerMinute ?? (process.env["SYNOLOGY_RATE_LIMIT"] ? parseInt(process.env["SYNOLOGY_RATE_LIMIT"], 10) : 30);
+	return {
+		id,
+		name: raw.name ?? process.env["OPENCLAW_BOT_NAME"] ?? id,
+		token,
+		incomingUrl,
+		webhookPath: raw.webhookPath ?? "/webhook/synology",
+		dmPolicy: raw.dmPolicy ?? "allowlist",
+		allowedUserIds,
+		rateLimitPerMinute,
+		allowInsecureSsl: raw.allowInsecureSsl ?? false,
+		approvedPairings: state.approved,
+		pendingPairings: state.pending
+	};
+}
+var RateLimiter = class {
+	windows = /* @__PURE__ */ new Map();
+	constructor(limitPerMinute) {
+		this.limitPerMinute = limitPerMinute;
+	}
+	allow(senderId) {
+		if (this.limitPerMinute <= 0) return true;
+		const now = Date.now();
+		const cutoff = now - 6e4;
+		const timestamps = (this.windows.get(senderId) ?? []).filter((t) => t > cutoff);
+		if (timestamps.length >= this.limitPerMinute) return false;
+		timestamps.push(now);
+		this.windows.set(senderId, timestamps);
+		return true;
+	}
+};
+function postToSynology(incomingUrl, text, userId, allowInsecureSsl = false) {
+	return new Promise((resolve, reject) => {
+		const u = new URL(incomingUrl);
+		const isHttps = u.protocol === "https:";
+		const mod = isHttps ? https.default : http.default;
+		const payloadObj = { text };
+		if (userId) payloadObj.user_ids = [parseInt(userId, 10)].filter((n) => !isNaN(n));
+		const encoded = `payload=${encodeURIComponent(JSON.stringify(payloadObj))}`;
+		const options = {
+			hostname: u.hostname,
+			port: u.port || (isHttps ? 443 : 80),
+			path: u.pathname + u.search,
+			method: "POST",
+			headers: {
+				"Content-Type": "application/x-www-form-urlencoded",
+				"Content-Length": Buffer.byteLength(encoded)
+			}
+		};
+		if (isHttps && allowInsecureSsl) options.rejectUnauthorized = false;
+		const req = (isHttps ? https.default : http.default).request(options, (res) => {
+			res.resume();
+			res.on("end", resolve);
+		});
+		req.on("error", reject);
+		req.write(encoded);
+		req.end();
+	});
+}
+const STATE_DIR = path.default.join(os.default.homedir(), ".hyperclaw");
+var SingleAccountConnector = class extends events.EventEmitter {
+	acc;
+	rateLimiter;
+	constructor(acc) {
+		super();
+		this.acc = acc;
+		this.rateLimiter = new RateLimiter(acc.rateLimitPerMinute);
+	}
+	validate() {
+		const { dmPolicy, allowedUserIds, token, incomingUrl } = this.acc;
+		if (!token) throw new Error(`Synology Chat[${this.acc.id}]: 'token' is required (set SYNOLOGY_CHAT_TOKEN or config)`);
+		if (!incomingUrl) throw new Error(`Synology Chat[${this.acc.id}]: 'incomingUrl' is required`);
+		if (dmPolicy === "allowlist" && allowedUserIds.length === 0) throw new Error(`Synology Chat[${this.acc.id}]: dmPolicy="allowlist" requires at least one allowedUserId. Use dmPolicy="open" to allow all senders.`);
+	}
+	async handleWebhook(body) {
+		let params;
+		try {
+			params = new URLSearchParams(body);
+		} catch {
+			return {
+				status: 400,
+				body: "Bad Request"
+			};
+		}
+		const inboundToken = params.get("token");
+		if (inboundToken !== this.acc.token) {
+			console.log(chalk.default.yellow(`  ⚠ Synology Chat[${this.acc.id}]: invalid token`));
+			return {
+				status: 403,
+				body: "Forbidden"
+			};
+		}
+		const text = (params.get("text") ?? "").trim();
+		const userId = params.get("user_id") ?? "";
+		const username = params.get("username") ?? userId;
+		const channelId = params.get("channel_id") ?? "";
+		const timestamp = params.get("timestamp") ?? String(Date.now());
+		if (!text || !userId) return {
+			status: 200,
+			body: "{}"
+		};
+		if (!this.rateLimiter.allow(userId)) {
+			console.log(chalk.default.gray(`  synology-chat[${this.acc.id}]: rate-limited sender ${userId}`));
+			return {
+				status: 429,
+				body: "Too Many Requests"
+			};
+		}
+		const allowed = await this._checkPolicy(userId, channelId, text);
+		if (!allowed) return {
+			status: 200,
+			body: "{}"
+		};
+		const msg = {
+			accountId: this.acc.id,
+			id: `syno-${timestamp}-${Math.random().toString(36).slice(2, 7)}`,
+			from: username,
+			userId,
+			chatId: userId,
+			text,
+			timestamp: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		this.emit("message", msg);
+		return {
+			status: 200,
+			body: "{}"
+		};
+	}
+	async _checkPolicy(userId, channelId, text) {
+		const acc = this.acc;
+		if (acc.dmPolicy === "disabled") return false;
+		if (acc.dmPolicy === "open") return true;
+		if (acc.dmPolicy === "allowlist") {
+			if (acc.allowedUserIds.includes(userId)) return true;
+			console.log(chalk.default.gray(`  synology-chat[${acc.id}]: drop sender ${userId} (dmPolicy=allowlist)`));
+			return false;
+		}
+		if (acc.dmPolicy === "pairing") {
+			if (acc.approvedPairings.includes(userId)) return true;
+			const upper = text.trim().toUpperCase();
+			if (acc.pendingPairings[upper] === userId) {
+				acc.approvedPairings.push(userId);
+				delete acc.pendingPairings[upper];
+				await this._saveState();
+				await this.sendMessage(userId, "🦅 Paired! You can now send messages to the assistant.");
+				this.emit("pairing:approved", {
+					accountId: acc.id,
+					userId
+				});
+				return true;
+			}
+			const code = Array.from({ length: 6 }, () => "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"[Math.floor(Math.random() * 32)]).join("");
+			acc.pendingPairings[code] = userId;
+			await this._saveState();
+			await this.sendMessage(userId, `🦅 Pairing required. Your code: \`${code}\`\nApprove: hyperclaw pairing approve synology-chat ${code}`);
+			return false;
+		}
+		return false;
+	}
+	async sendMessage(userId, text) {
+		try {
+			await postToSynology(this.acc.incomingUrl, text, userId, this.acc.allowInsecureSsl);
+		} catch (e) {
+			console.log(chalk.default.yellow(`  ⚠ Synology Chat[${this.acc.id}] send error: ${e.message}`));
+		}
+	}
+	/** Resolve outbound target. Accepts: numeric ID, "synology-chat:<id>", "user:<id>" */
+	resolveTarget(target) {
+		if (target.startsWith("synology-chat:")) return target.slice(14);
+		if (target.startsWith("user:")) return target.slice(5);
+		return target;
+	}
+	approvePairing(code) {
+		const upper = code.toUpperCase();
+		if (!this.acc.pendingPairings[upper]) return false;
+		this.acc.approvedPairings.push(this.acc.pendingPairings[upper]);
+		delete this.acc.pendingPairings[upper];
+		this._saveState();
+		return true;
+	}
+	listPendingPairings() {
+		return { ...this.acc.pendingPairings };
+	}
+	_stateFile() {
+		return path.default.join(STATE_DIR, `synology-chat-state-${this.acc.id}.json`);
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(this._stateFile());
+			if (Array.isArray(s.approvedPairings)) this.acc.approvedPairings = s.approvedPairings;
+			if (s.pendingPairings && typeof s.pendingPairings === "object") this.acc.pendingPairings = s.pendingPairings;
+		} catch {}
+	}
+	async _saveState() {
+		await fs_extra.default.ensureDir(STATE_DIR);
+		await fs_extra.default.writeJson(this._stateFile(), {
+			approvedPairings: this.acc.approvedPairings,
+			pendingPairings: this.acc.pendingPairings
+		}, { spaces: 2 });
+	}
+};
+var SynologyChatConnector = class extends events.EventEmitter {
+	accounts = /* @__PURE__ */ new Map();
+	/** webhookPath → accountId index for fast routing */
+	pathIndex = /* @__PURE__ */ new Map();
+	rawConfig;
+	constructor(config) {
+		super();
+		this.rawConfig = config;
+	}
+	async connect() {
+		const cfg = this.rawConfig;
+		const accountDefs = cfg.accounts ?? { default: cfg };
+		for (const [id, rawAcc] of Object.entries(accountDefs)) {
+			const merged = {
+				...cfg,
+				...rawAcc
+			};
+			const state = {
+				approved: cfg.approvedPairings ?? [],
+				pending: cfg.pendingPairings ?? {}
+			};
+			const acc = resolveAccount(id, merged, state);
+			const conn = new SingleAccountConnector(acc);
+			try {
+				conn.validate();
+			} catch (e) {
+				console.log(chalk.default.red(`  ✗ ${e.message} — account skipped`));
+				continue;
+			}
+			await conn.loadState();
+			conn.on("message", (msg) => this.emit("message", msg));
+			conn.on("pairing:approved", (info) => this.emit("pairing:approved", info));
+			this.accounts.set(id, conn);
+			this.pathIndex.set(acc.webhookPath, id);
+			console.log(chalk.default.green(`  🦅 Synology Chat[${id}]: ready — inbound path ${acc.webhookPath}`));
+		}
+		this.emit("connected", { accountIds: Array.from(this.accounts.keys()) });
+	}
+	disconnect() {
+		this.accounts.clear();
+		this.pathIndex.clear();
+	}
+	/** Called by the gateway's HTTP server for inbound POST requests. */
+	async handleWebhook(requestPath, body) {
+		const accountId = this.pathIndex.get(requestPath);
+		if (!accountId) return {
+			status: 404,
+			body: "Not Found"
+		};
+		return this._acc(accountId).handleWebhook(body);
+	}
+	/** Returns all registered webhook paths (for gateway route registration). */
+	getWebhookPaths() {
+		return Array.from(this.pathIndex.keys());
+	}
+	_acc(accountId = "default") {
+		const conn = this.accounts.get(accountId);
+		if (!conn) throw new Error(`Synology Chat: account '${accountId}' not found`);
+		return conn;
+	}
+	async sendMessage(userId, text, accountId) {
+		const conn = this._acc(accountId);
+		const resolved = conn.resolveTarget(userId);
+		return conn.sendMessage(resolved, text);
+	}
+	resolveTarget(target, accountId) {
+		return this._acc(accountId).resolveTarget(target);
+	}
+	approvePairing(code, accountId) {
+		return this._acc(accountId).approvePairing(code);
+	}
+	listPendingPairings(accountId) {
+		return this._acc(accountId).listPendingPairings();
+	}
+	getAccountIds() {
+		return Array.from(this.accounts.keys());
+	}
+	isRunning() {
+		return this.accounts.size > 0;
+	}
+};
+
+//#endregion
+exports.SynologyChatConnector = SynologyChatConnector;

package/dist/connector-Bd0NZ5bT.js

@@ -0,0 +1,189 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const https = require_chunk.__toESM(require("https"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/msteams/src/connector.ts
+const STATE_FILE = path.default.join(os.default.homedir(), ".hyperclaw", "msteams-state.json");
+let cachedToken = null;
+async function getBotToken(appId, appPassword) {
+	if (cachedToken && cachedToken.expiresAt > Date.now() + 6e4) return cachedToken.token;
+	return new Promise((resolve, reject) => {
+		const body = `grant_type=client_credentials&client_id=${encodeURIComponent(appId)}&client_secret=${encodeURIComponent(appPassword)}&scope=https%3A%2F%2Fapi.botframework.com%2F.default`;
+		const req = https.default.request({
+			hostname: "login.microsoftonline.com",
+			port: 443,
+			path: "/botframework.com/oauth2/v2.0/token",
+			method: "POST",
+			headers: {
+				"Content-Type": "application/x-www-form-urlencoded",
+				"Content-Length": Buffer.byteLength(body)
+			}
+		}, (res) => {
+			let data = "";
+			res.on("data", (c) => data += c);
+			res.on("end", () => {
+				try {
+					const r = JSON.parse(data);
+					cachedToken = {
+						token: r.access_token,
+						expiresAt: Date.now() + r.expires_in * 1e3
+					};
+					resolve(r.access_token);
+				} catch {
+					reject(new Error("Token parse error"));
+				}
+			});
+		});
+		req.on("error", reject);
+		req.write(body);
+		req.end();
+	});
+}
+async function sendActivity(token, serviceUrl, conversationId, activity) {
+	const url = new URL(`${serviceUrl}v3/conversations/${conversationId}/activities`);
+	return new Promise((resolve, reject) => {
+		const payload = JSON.stringify(activity);
+		const req = https.default.request({
+			hostname: url.hostname,
+			port: 443,
+			path: url.pathname,
+			method: "POST",
+			headers: {
+				"Authorization": `Bearer ${token}`,
+				"Content-Type": "application/json",
+				"Content-Length": Buffer.byteLength(payload)
+			}
+		}, (res) => {
+			res.on("data", () => {});
+			res.on("end", resolve);
+		});
+		req.on("error", reject);
+		req.write(payload);
+		req.end();
+	});
+}
+var MSTeamsConnector = class extends events.EventEmitter {
+	config;
+	running = false;
+	constructor(config) {
+		super();
+		this.config = {
+			dmPolicy: "allowlist",
+			allowFrom: [],
+			approvedPairings: [],
+			pendingPairings: {},
+			...config
+		};
+	}
+	async connect() {
+		await getBotToken(this.config.appId, this.config.appPassword);
+		await this.loadState();
+		this.running = true;
+		console.log(chalk.default.green(`  🦅 MS Teams: Bot ${this.config.appId} connected`));
+		this.emit("connected", { appId: this.config.appId });
+	}
+	disconnect() {
+		this.running = false;
+	}
+	async handleWebhook(body) {
+		let activity;
+		try {
+			activity = JSON.parse(body);
+		} catch {
+			return;
+		}
+		if (activity.type !== "message") return;
+		const from = activity.from?.aadObjectId || activity.from?.id;
+		const text = activity.text?.replace(/<at>[^<]+<\/at>/g, "").trim();
+		const serviceUrl = activity.serviceUrl;
+		const conversationId = activity.conversation?.id;
+		if (!from || !text || !serviceUrl || !conversationId) return;
+		const allowed = await this.checkDMPolicy(from, text, serviceUrl, conversationId, activity);
+		if (!allowed) return;
+		this.emit("message", {
+			id: activity.id,
+			channelId: "msteams",
+			from,
+			chatId: conversationId,
+			fromName: activity.from?.name,
+			text,
+			timestamp: activity.timestamp || (/* @__PURE__ */ new Date()).toISOString(),
+			isDM: activity.conversation?.conversationType === "personal",
+			serviceUrl,
+			activity
+		});
+	}
+	async checkDMPolicy(from, text, serviceUrl, convId, activity) {
+		if (this.config.dmPolicy === "none") return false;
+		if (this.config.dmPolicy === "open") return true;
+		if (this.config.dmPolicy === "allowlist") {
+			if (this.config.allowFrom.includes(from)) return true;
+			await this.reply(serviceUrl, convId, activity, "🦅 HyperClaw: Not on allowlist.");
+			return false;
+		}
+		if (this.config.dmPolicy === "pairing") {
+			if (this.config.approvedPairings.includes(from)) return true;
+			const upper = text.trim().toUpperCase();
+			if (this.config.pendingPairings[upper]) {
+				this.config.approvedPairings.push(from);
+				delete this.config.pendingPairings[upper];
+				await this.saveState();
+				await this.reply(serviceUrl, convId, activity, "🦅 Paired!");
+				this.emit("pairing:approved", {
+					userId: from,
+					channelId: "msteams"
+				});
+				return true;
+			}
+			const code = Array.from({ length: 6 }, () => "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"[Math.floor(Math.random() * 32)]).join("");
+			this.config.pendingPairings[code] = from;
+			await this.saveState();
+			await this.reply(serviceUrl, convId, activity, `🦅 Pairing code: ${code}\nApprove: hyperclaw pairing approve msteams ${code}`);
+			return false;
+		}
+		return false;
+	}
+	async reply(serviceUrl, conversationId, originalActivity, text) {
+		const token = await getBotToken(this.config.appId, this.config.appPassword);
+		await sendActivity(token, serviceUrl, conversationId, {
+			type: "message",
+			text: text.slice(0, 4e3),
+			replyToId: originalActivity.id,
+			from: { id: this.config.appId },
+			conversation: originalActivity.conversation,
+			recipient: originalActivity.from
+		});
+	}
+	approvePairing(code) {
+		const upper = code.toUpperCase();
+		if (!this.config.pendingPairings[upper]) return false;
+		this.config.approvedPairings.push(this.config.pendingPairings[upper]);
+		delete this.config.pendingPairings[upper];
+		this.saveState();
+		return true;
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(STATE_FILE);
+			if (s.p) this.config.pendingPairings = s.p;
+			if (s.a) this.config.approvedPairings = s.a;
+		} catch {}
+	}
+	async saveState() {
+		await fs_extra.default.ensureDir(path.default.dirname(STATE_FILE));
+		await fs_extra.default.writeJson(STATE_FILE, {
+			p: this.config.pendingPairings,
+			a: this.config.approvedPairings
+		}, { spaces: 2 });
+	}
+	isRunning() {
+		return this.running;
+	}
+};
+
+//#endregion
+exports.MSTeamsConnector = MSTeamsConnector;