hyperclaw 5.2.0 → 5.2.2

package/dist/connector-l7UmCYaL.js

@@ -0,0 +1,225 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const child_process = require_chunk.__toESM(require("child_process"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/imessage-native/src/connector.ts
+const STATE_FILE = path.default.join(os.default.homedir(), ".hyperclaw", "imessage-native-state.json");
+const PAIRING_TTL_MS = 60 * 60 * 1e3;
+var IMessageNativeConnector = class extends events.EventEmitter {
+	config;
+	rpcProc = null;
+	running = false;
+	lastMessageTs = 0;
+	rpcSeq = 1;
+	pending = /* @__PURE__ */ new Map();
+	buf = "";
+	constructor(config = {}) {
+		super();
+		this.config = {
+			cliPath: config.cliPath || process.env.IMSG_PATH || "imsg",
+			dbPath: config.dbPath || path.default.join(os.default.homedir(), "Library", "Messages", "chat.db"),
+			dmPolicy: config.dmPolicy ?? "pairing",
+			allowFrom: config.allowFrom ?? [],
+			approvedPairings: config.approvedPairings ?? [],
+			pendingPairings: config.pendingPairings ?? {},
+			pendingPairingTs: config.pendingPairingTs ?? {}
+		};
+	}
+	async connect() {
+		if (process.platform !== "darwin") throw new Error("imessage-native is macOS only. For new deployments use BlueBubbles.");
+		await this.loadState();
+		this.running = true;
+		this.emit("connected", {});
+		this.startRpc();
+	}
+	startRpc() {
+		if (!this.running) return;
+		const bin = this.config.cliPath;
+		const args = ["rpc"];
+		if (this.config.dbPath) args.push("--db", this.config.dbPath);
+		this.rpcProc = (0, child_process.spawn)(bin, args, { stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		] });
+		this.rpcProc.stdout?.on("data", (chunk) => {
+			this.buf += chunk.toString();
+			const lines = this.buf.split("\n");
+			this.buf = lines.pop() || "";
+			for (const line of lines) {
+				if (!line.trim()) continue;
+				try {
+					this.handleRpcLine(JSON.parse(line));
+				} catch {}
+			}
+		});
+		this.rpcProc.stderr?.on("data", () => {});
+		this.rpcProc.on("error", () => {});
+		this.rpcProc.on("exit", (code) => {
+			this.rpcProc = null;
+			this.buf = "";
+			for (const [, cb] of this.pending) cb.reject(new Error("imsg rpc exited"));
+			this.pending.clear();
+			if (this.running && code !== 0) setTimeout(() => this.startRpc(), 5e3);
+		});
+		this.rpcSend("messages.watch", {}).catch(() => {});
+	}
+	handleRpcLine(msg) {
+		if (!msg.id && msg.method === "message" && msg.params) {
+			this.onIncomingMessage(msg.params);
+			return;
+		}
+		if (msg.id != null) {
+			const cb = this.pending.get(msg.id);
+			if (!cb) return;
+			this.pending.delete(msg.id);
+			if (msg.error) cb.reject(new Error(msg.error.message));
+			else cb.resolve(msg.result);
+		}
+	}
+	onIncomingMessage(params) {
+		if (params.isFromMe) return;
+		const handle = params.handle?.address || params.sender || params.chatId || params.from;
+		const text = params.text || params.body || params.message;
+		if (!handle || !text) return;
+		const ts = params.dateCreated || params.timestamp || Date.now();
+		if (ts <= this.lastMessageTs) return;
+		this.lastMessageTs = ts;
+		this.saveState();
+		this.checkDMPolicyAndEmit(handle, text);
+	}
+	pruneExpiredCodes() {
+		const now = Date.now();
+		const ts = this.config.pendingPairingTs;
+		for (const code of Object.keys(ts)) if (now - ts[code] > PAIRING_TTL_MS) {
+			delete this.config.pendingPairings[code];
+			delete ts[code];
+		}
+	}
+	async checkDMPolicyAndEmit(from, text) {
+		if (this.config.dmPolicy === "disabled") return;
+		if (this.config.dmPolicy === "open") {
+			this.emit("message", {
+				chatId: from,
+				text
+			});
+			return;
+		}
+		if (this.config.dmPolicy === "allowlist") {
+			if (this.config.allowFrom.includes(from)) this.emit("message", {
+				chatId: from,
+				text
+			});
+			else await this.sendMessage(from, "HyperClaw: Not on allowlist.");
+			return;
+		}
+		this.pruneExpiredCodes();
+		if (this.config.approvedPairings.includes(from)) {
+			this.emit("message", {
+				chatId: from,
+				text
+			});
+			return;
+		}
+		const code = (text.trim().toUpperCase().match(/[A-Z0-9]{6}/) || [])[0];
+		if (code && this.config.pendingPairings[code]) {
+			this.config.approvedPairings.push(from);
+			delete this.config.pendingPairings[code];
+			delete this.config.pendingPairingTs[code];
+			await this.saveState();
+			await this.sendMessage(from, "Paired!");
+			this.emit("pairing:approved", {
+				userId: from,
+				channelId: "imessage-native"
+			});
+			this.emit("message", {
+				chatId: from,
+				text
+			});
+			return;
+		}
+		const newCode = Array.from({ length: 6 }, () => "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"[Math.floor(Math.random() * 32)]).join("");
+		this.config.pendingPairings[newCode] = from;
+		this.config.pendingPairingTs[newCode] = Date.now();
+		await this.saveState();
+		await this.sendMessage(from, `Pairing code: ${newCode}\nApprove: hyperclaw pairing approve imessage-native ${newCode}\n(expires in 1 hour)`);
+	}
+	async sendMessage(chatId, text) {
+		const to = String(chatId).trim();
+		if (!to) return;
+		if (!this.rpcProc) throw new Error("imsg rpc not running");
+		await this.rpcSend("messages.send", {
+			to,
+			text
+		});
+	}
+	rpcSend(method, params) {
+		return new Promise((resolve, reject) => {
+			if (!this.rpcProc?.stdin) {
+				reject(new Error("imsg rpc stdin unavailable"));
+				return;
+			}
+			const id = this.rpcSeq++;
+			const req = {
+				jsonrpc: "2.0",
+				id,
+				method,
+				params
+			};
+			this.pending.set(id, {
+				resolve,
+				reject
+			});
+			this.rpcProc.stdin.write(JSON.stringify(req) + "\n");
+			const timer = setTimeout(() => {
+				if (this.pending.has(id)) {
+					this.pending.delete(id);
+					reject(new Error(`imsg rpc timeout for method ${method}`));
+				}
+			}, 15e3);
+			const orig = this.pending.get(id);
+			this.pending.set(id, {
+				resolve: (v) => {
+					clearTimeout(timer);
+					orig.resolve(v);
+				},
+				reject: (e) => {
+					clearTimeout(timer);
+					orig.reject(e);
+				}
+			});
+		});
+	}
+	disconnect() {
+		this.running = false;
+		this.rpcProc?.kill();
+		this.rpcProc = null;
+		this.buf = "";
+		for (const [, cb] of this.pending) cb.reject(new Error("disconnected"));
+		this.pending.clear();
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(STATE_FILE);
+			this.lastMessageTs = s.lastTs || 0;
+			if (s.p) this.config.pendingPairings = s.p;
+			if (s.a) this.config.approvedPairings = s.a;
+			if (s.pts) this.config.pendingPairingTs = s.pts;
+		} catch {}
+	}
+	async saveState() {
+		await fs_extra.default.ensureDir(path.default.dirname(STATE_FILE));
+		await fs_extra.default.writeJson(STATE_FILE, {
+			lastTs: this.lastMessageTs,
+			p: this.config.pendingPairings,
+			a: this.config.approvedPairings,
+			pts: this.config.pendingPairingTs
+		}, { spaces: 2 });
+	}
+};
+
+//#endregion
+exports.IMessageNativeConnector = IMessageNativeConnector;

package/dist/connector-n2YnOJYZ.js

@@ -0,0 +1,305 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const http = require_chunk.__toESM(require("http"));
+const https = require_chunk.__toESM(require("https"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/synology-chat/src/connector.ts
+function resolveAllowedIds(raw, envVal) {
+	if (Array.isArray(raw) && raw.length) return raw;
+	if (typeof raw === "string" && raw.trim()) return raw.split(",").map((s) => s.trim()).filter(Boolean);
+	if (envVal) return envVal.split(",").map((s) => s.trim()).filter(Boolean);
+	return [];
+}
+function resolveAccount(id, raw, state) {
+	const token = raw.token || process.env["SYNOLOGY_CHAT_TOKEN"] || "";
+	const incomingUrl = raw.incomingUrl || process.env["SYNOLOGY_CHAT_INCOMING_URL"] || "";
+	const allowedUserIds = resolveAllowedIds(raw.allowedUserIds, process.env["SYNOLOGY_ALLOWED_USER_IDS"]);
+	const rateLimitPerMinute = raw.rateLimitPerMinute ?? (process.env["SYNOLOGY_RATE_LIMIT"] ? parseInt(process.env["SYNOLOGY_RATE_LIMIT"], 10) : 30);
+	return {
+		id,
+		name: raw.name ?? process.env["OPENCLAW_BOT_NAME"] ?? id,
+		token,
+		incomingUrl,
+		webhookPath: raw.webhookPath ?? "/webhook/synology",
+		dmPolicy: raw.dmPolicy ?? "allowlist",
+		allowedUserIds,
+		rateLimitPerMinute,
+		allowInsecureSsl: raw.allowInsecureSsl ?? false,
+		approvedPairings: state.approved,
+		pendingPairings: state.pending
+	};
+}
+var RateLimiter = class {
+	windows = /* @__PURE__ */ new Map();
+	constructor(limitPerMinute) {
+		this.limitPerMinute = limitPerMinute;
+	}
+	allow(senderId) {
+		if (this.limitPerMinute <= 0) return true;
+		const now = Date.now();
+		const cutoff = now - 6e4;
+		const timestamps = (this.windows.get(senderId) ?? []).filter((t) => t > cutoff);
+		if (timestamps.length >= this.limitPerMinute) return false;
+		timestamps.push(now);
+		this.windows.set(senderId, timestamps);
+		return true;
+	}
+};
+function postToSynology(incomingUrl, text, userId, allowInsecureSsl = false) {
+	return new Promise((resolve, reject) => {
+		const u = new URL(incomingUrl);
+		const isHttps = u.protocol === "https:";
+		const mod = isHttps ? https.default : http.default;
+		const payloadObj = { text };
+		if (userId) payloadObj.user_ids = [parseInt(userId, 10)].filter((n) => !isNaN(n));
+		const encoded = `payload=${encodeURIComponent(JSON.stringify(payloadObj))}`;
+		const options = {
+			hostname: u.hostname,
+			port: u.port || (isHttps ? 443 : 80),
+			path: u.pathname + u.search,
+			method: "POST",
+			headers: {
+				"Content-Type": "application/x-www-form-urlencoded",
+				"Content-Length": Buffer.byteLength(encoded)
+			}
+		};
+		if (isHttps && allowInsecureSsl) options.rejectUnauthorized = false;
+		const req = (isHttps ? https.default : http.default).request(options, (res) => {
+			res.resume();
+			res.on("end", resolve);
+		});
+		req.on("error", reject);
+		req.write(encoded);
+		req.end();
+	});
+}
+const STATE_DIR = path.default.join(os.default.homedir(), ".hyperclaw");
+var SingleAccountConnector = class extends events.EventEmitter {
+	acc;
+	rateLimiter;
+	constructor(acc) {
+		super();
+		this.acc = acc;
+		this.rateLimiter = new RateLimiter(acc.rateLimitPerMinute);
+	}
+	validate() {
+		const { dmPolicy, allowedUserIds, token, incomingUrl } = this.acc;
+		if (!token) throw new Error(`Synology Chat[${this.acc.id}]: 'token' is required (set SYNOLOGY_CHAT_TOKEN or config)`);
+		if (!incomingUrl) throw new Error(`Synology Chat[${this.acc.id}]: 'incomingUrl' is required`);
+		if (dmPolicy === "allowlist" && allowedUserIds.length === 0) throw new Error(`Synology Chat[${this.acc.id}]: dmPolicy="allowlist" requires at least one allowedUserId. Use dmPolicy="open" to allow all senders.`);
+	}
+	async handleWebhook(body) {
+		let params;
+		try {
+			params = new URLSearchParams(body);
+		} catch {
+			return {
+				status: 400,
+				body: "Bad Request"
+			};
+		}
+		const inboundToken = params.get("token");
+		if (inboundToken !== this.acc.token) {
+			console.log(chalk.default.yellow(`  ⚠ Synology Chat[${this.acc.id}]: invalid token`));
+			return {
+				status: 403,
+				body: "Forbidden"
+			};
+		}
+		const text = (params.get("text") ?? "").trim();
+		const userId = params.get("user_id") ?? "";
+		const username = params.get("username") ?? userId;
+		const channelId = params.get("channel_id") ?? "";
+		const timestamp = params.get("timestamp") ?? String(Date.now());
+		if (!text || !userId) return {
+			status: 200,
+			body: "{}"
+		};
+		if (!this.rateLimiter.allow(userId)) {
+			console.log(chalk.default.gray(`  synology-chat[${this.acc.id}]: rate-limited sender ${userId}`));
+			return {
+				status: 429,
+				body: "Too Many Requests"
+			};
+		}
+		const allowed = await this._checkPolicy(userId, channelId, text);
+		if (!allowed) return {
+			status: 200,
+			body: "{}"
+		};
+		const msg = {
+			accountId: this.acc.id,
+			id: `syno-${timestamp}-${Math.random().toString(36).slice(2, 7)}`,
+			from: username,
+			userId,
+			chatId: userId,
+			text,
+			timestamp: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		this.emit("message", msg);
+		return {
+			status: 200,
+			body: "{}"
+		};
+	}
+	async _checkPolicy(userId, channelId, text) {
+		const acc = this.acc;
+		if (acc.dmPolicy === "disabled") return false;
+		if (acc.dmPolicy === "open") return true;
+		if (acc.dmPolicy === "allowlist") {
+			if (acc.allowedUserIds.includes(userId)) return true;
+			console.log(chalk.default.gray(`  synology-chat[${acc.id}]: drop sender ${userId} (dmPolicy=allowlist)`));
+			return false;
+		}
+		if (acc.dmPolicy === "pairing") {
+			if (acc.approvedPairings.includes(userId)) return true;
+			const upper = text.trim().toUpperCase();
+			if (acc.pendingPairings[upper] === userId) {
+				acc.approvedPairings.push(userId);
+				delete acc.pendingPairings[upper];
+				await this._saveState();
+				await this.sendMessage(userId, "🦅 Paired! You can now send messages to the assistant.");
+				this.emit("pairing:approved", {
+					accountId: acc.id,
+					userId
+				});
+				return true;
+			}
+			const code = Array.from({ length: 6 }, () => "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"[Math.floor(Math.random() * 32)]).join("");
+			acc.pendingPairings[code] = userId;
+			await this._saveState();
+			await this.sendMessage(userId, `🦅 Pairing required. Your code: \`${code}\`\nApprove: hyperclaw pairing approve synology-chat ${code}`);
+			return false;
+		}
+		return false;
+	}
+	async sendMessage(userId, text) {
+		try {
+			await postToSynology(this.acc.incomingUrl, text, userId, this.acc.allowInsecureSsl);
+		} catch (e) {
+			console.log(chalk.default.yellow(`  ⚠ Synology Chat[${this.acc.id}] send error: ${e.message}`));
+		}
+	}
+	/** Resolve outbound target. Accepts: numeric ID, "synology-chat:<id>", "user:<id>" */
+	resolveTarget(target) {
+		if (target.startsWith("synology-chat:")) return target.slice(14);
+		if (target.startsWith("user:")) return target.slice(5);
+		return target;
+	}
+	approvePairing(code) {
+		const upper = code.toUpperCase();
+		if (!this.acc.pendingPairings[upper]) return false;
+		this.acc.approvedPairings.push(this.acc.pendingPairings[upper]);
+		delete this.acc.pendingPairings[upper];
+		this._saveState();
+		return true;
+	}
+	listPendingPairings() {
+		return { ...this.acc.pendingPairings };
+	}
+	_stateFile() {
+		return path.default.join(STATE_DIR, `synology-chat-state-${this.acc.id}.json`);
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(this._stateFile());
+			if (Array.isArray(s.approvedPairings)) this.acc.approvedPairings = s.approvedPairings;
+			if (s.pendingPairings && typeof s.pendingPairings === "object") this.acc.pendingPairings = s.pendingPairings;
+		} catch {}
+	}
+	async _saveState() {
+		await fs_extra.default.ensureDir(STATE_DIR);
+		await fs_extra.default.writeJson(this._stateFile(), {
+			approvedPairings: this.acc.approvedPairings,
+			pendingPairings: this.acc.pendingPairings
+		}, { spaces: 2 });
+	}
+};
+var SynologyChatConnector = class extends events.EventEmitter {
+	accounts = /* @__PURE__ */ new Map();
+	/** webhookPath → accountId index for fast routing */
+	pathIndex = /* @__PURE__ */ new Map();
+	rawConfig;
+	constructor(config) {
+		super();
+		this.rawConfig = config;
+	}
+	async connect() {
+		const cfg = this.rawConfig;
+		const accountDefs = cfg.accounts ?? { default: cfg };
+		for (const [id, rawAcc] of Object.entries(accountDefs)) {
+			const merged = {
+				...cfg,
+				...rawAcc
+			};
+			const state = {
+				approved: cfg.approvedPairings ?? [],
+				pending: cfg.pendingPairings ?? {}
+			};
+			const acc = resolveAccount(id, merged, state);
+			const conn = new SingleAccountConnector(acc);
+			try {
+				conn.validate();
+			} catch (e) {
+				console.log(chalk.default.red(`  ✗ ${e.message} — account skipped`));
+				continue;
+			}
+			await conn.loadState();
+			conn.on("message", (msg) => this.emit("message", msg));
+			conn.on("pairing:approved", (info) => this.emit("pairing:approved", info));
+			this.accounts.set(id, conn);
+			this.pathIndex.set(acc.webhookPath, id);
+			console.log(chalk.default.green(`  🦅 Synology Chat[${id}]: ready — inbound path ${acc.webhookPath}`));
+		}
+		this.emit("connected", { accountIds: Array.from(this.accounts.keys()) });
+	}
+	disconnect() {
+		this.accounts.clear();
+		this.pathIndex.clear();
+	}
+	/** Called by the gateway's HTTP server for inbound POST requests. */
+	async handleWebhook(requestPath, body) {
+		const accountId = this.pathIndex.get(requestPath);
+		if (!accountId) return {
+			status: 404,
+			body: "Not Found"
+		};
+		return this._acc(accountId).handleWebhook(body);
+	}
+	/** Returns all registered webhook paths (for gateway route registration). */
+	getWebhookPaths() {
+		return Array.from(this.pathIndex.keys());
+	}
+	_acc(accountId = "default") {
+		const conn = this.accounts.get(accountId);
+		if (!conn) throw new Error(`Synology Chat: account '${accountId}' not found`);
+		return conn;
+	}
+	async sendMessage(userId, text, accountId) {
+		const conn = this._acc(accountId);
+		const resolved = conn.resolveTarget(userId);
+		return conn.sendMessage(resolved, text);
+	}
+	resolveTarget(target, accountId) {
+		return this._acc(accountId).resolveTarget(target);
+	}
+	approvePairing(code, accountId) {
+		return this._acc(accountId).approvePairing(code);
+	}
+	listPendingPairings(accountId) {
+		return this._acc(accountId).listPendingPairings();
+	}
+	getAccountIds() {
+		return Array.from(this.accounts.keys());
+	}
+	isRunning() {
+		return this.accounts.size > 0;
+	}
+};
+
+//#endregion
+exports.SynologyChatConnector = SynologyChatConnector;