hyperclaw 5.4.0 → 5.4.2

package/dist/config-FejpHHTz.js

@@ -0,0 +1,261 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const require_paths = require('./paths-AIyBxIzm.js');
+const require_paths$1 = require('./paths-DPovhojT.js');
+const require_env_resolve = require('./env-resolve--MaE2kFF.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+
+//#region src/cli/config.ts
+require_paths$1.init_paths();
+require_env_resolve.init_env_resolve();
+const getHC_DIR = () => require_paths.getHyperClawDir();
+const getCFG_FILE = () => require_paths.getConfigPath();
+var ConfigStore = class {
+	/** Load raw config from disk (no hydration). Use for persistence to avoid writing resolved secrets back. */
+	async loadRaw() {
+		try {
+			return await fs_extra.default.readJson(getCFG_FILE());
+		} catch (e) {
+			if (e?.code === "ENOENT") return {};
+			console.error("[config] Failed to load config:", e?.message ?? String(e));
+			throw e;
+		}
+	}
+	/** Load config with env/credentials hydration for runtime use. Do NOT pass the result to save — use patch/save with explicit values only. */
+	async load() {
+		try {
+			const cfg = await fs_extra.default.readJson(getCFG_FILE());
+			if (cfg.channelConfigs) for (const [chId, ch] of Object.entries(cfg.channelConfigs)) {
+				const tok = require_env_resolve.resolveChannelToken(chId, ch?.token || ch?.botToken);
+				if (tok && !ch?.token) ch.token = tok;
+				if (tok && !ch?.botToken) ch.botToken = tok;
+			}
+			if (cfg.provider && !cfg.provider.apiKey) {
+				const key = await require_env_resolve.getProviderCredentialAsync(cfg);
+				if (key) cfg.provider.apiKey = key;
+			}
+			return cfg;
+		} catch (e) {
+			if (e?.code === "ENOENT") return {};
+			console.error("[config] Failed to load config:", e?.message ?? String(e));
+			throw e;
+		}
+	}
+	async save(cfg) {
+		const target = getCFG_FILE();
+		const tmp = target + ".tmp";
+		await fs_extra.default.ensureDir(getHC_DIR());
+		await fs_extra.default.writeJson(tmp, cfg, { spaces: 2 });
+		await fs_extra.default.chmod(tmp, 384);
+		await fs_extra.default.rename(tmp, target);
+	}
+	/** Merge patch into raw config and save. Uses loadRaw() so hydrated secrets from env/store are never written back. */
+	async patch(patch) {
+		const raw = await this.loadRaw();
+		await this.save(deepMerge(raw, patch));
+	}
+	async setProviderKey(providerId, apiKey) {
+		const cfg = await this.load();
+		await this.patch({ provider: {
+			...cfg.provider,
+			providerId,
+			apiKey
+		} });
+		console.log(chalk.default.green(`  ✅ API key saved for ${providerId}`));
+	}
+	async setModel(modelId) {
+		const cfg = await this.load();
+		await this.patch({ provider: {
+			...cfg.provider,
+			modelId
+		} });
+		console.log(chalk.default.green(`  ✅ Model: ${modelId}`));
+	}
+	async setServiceApiKey(serviceId, apiKey) {
+		const cfg = await this.load();
+		const apiKeys = {
+			...cfg.skills?.apiKeys || {},
+			[serviceId]: apiKey
+		};
+		await this.patch({ skills: {
+			...cfg.skills,
+			installed: cfg.skills?.installed || [],
+			apiKeys
+		} });
+		console.log(chalk.default.green(`  ✅ Service API key saved for ${serviceId}`));
+	}
+	async enableChannel(channelId, channelConfig) {
+		const cfg = await this.load();
+		const gwBase = cfg.gateway ?? {
+			port: 18789,
+			bind: "127.0.0.1",
+			authToken: "",
+			runtime: "node",
+			enabledChannels: [],
+			hooks: true,
+			tailscaleExposure: "off"
+		};
+		const channels = gwBase.enabledChannels ?? [];
+		if (!channels.includes(channelId)) channels.push(channelId);
+		const patch = { gateway: {
+			...gwBase,
+			enabledChannels: channels
+		} };
+		if (channelConfig) patch.channelConfigs = {
+			...cfg.channelConfigs,
+			[channelId]: channelConfig
+		};
+		await this.patch(patch);
+		console.log(chalk.default.green(`  ✅ Channel enabled: ${channelId}`));
+	}
+	async disableChannel(channelId) {
+		const cfg = await this.load();
+		const gwBase = cfg.gateway ?? {
+			port: 18789,
+			bind: "127.0.0.1",
+			authToken: "",
+			runtime: "node",
+			enabledChannels: [],
+			hooks: true,
+			tailscaleExposure: "off"
+		};
+		const channels = (gwBase.enabledChannels ?? []).filter((c) => c !== channelId);
+		await this.patch({ gateway: {
+			...gwBase,
+			enabledChannels: channels
+		} });
+		console.log(chalk.default.green(`  ✅ Channel disabled: ${channelId}`));
+	}
+	async setGatewayPort(port) {
+		const cfg = await this.load();
+		const gwBase = cfg.gateway ?? {
+			port: 18789,
+			bind: "127.0.0.1",
+			authToken: "",
+			runtime: "node",
+			enabledChannels: [],
+			hooks: true,
+			tailscaleExposure: "off"
+		};
+		await this.patch({ gateway: {
+			...gwBase,
+			port
+		} });
+	}
+	async setGatewayBind(bind) {
+		const cfg = await this.load();
+		const gwBase = cfg.gateway ?? {
+			port: 18789,
+			bind: "127.0.0.1",
+			authToken: "",
+			runtime: "node",
+			enabledChannels: [],
+			hooks: true,
+			tailscaleExposure: "off"
+		};
+		await this.patch({ gateway: {
+			...gwBase,
+			bind
+		} });
+	}
+	async generateToken() {
+		const token = require("crypto").randomBytes(32).toString("base64url");
+		const cfg = await this.load();
+		const gwBase = cfg.gateway ?? {
+			port: 18789,
+			bind: "127.0.0.1",
+			authToken: "",
+			runtime: "node",
+			enabledChannels: [],
+			hooks: true,
+			tailscaleExposure: "off"
+		};
+		await this.patch({ gateway: {
+			...gwBase,
+			authToken: token
+		} });
+		return token;
+	}
+	async show(scrub = true) {
+		const cfg = await this.load();
+		const display = scrub ? scrubSecrets(cfg) : cfg;
+		console.log(chalk.default.bold.cyan("\n  🦅 HYPERCLAW CONFIGURATION\n"));
+		printSection("Provider", display.provider);
+		printSection("Gateway", display.gateway);
+		printSection("Identity", display.identity);
+		printSection("PC Access", display.pcAccess);
+		if (display.channelConfigs && Object.keys(display.channelConfigs).length > 0) {
+			console.log(chalk.default.bold.white("  Channel Configs:"));
+			for (const [ch, v] of Object.entries(display.channelConfigs)) {
+				const scrubbed = scrubChannelConfig(v);
+				console.log(`    ${chalk.default.cyan(ch)}: ${JSON.stringify(scrubbed).slice(0, 80)}`);
+			}
+			console.log();
+		}
+		if (display.skills?.installed?.length) {
+			console.log(chalk.default.bold.white("  Skills:"));
+			display.skills.installed.forEach((s) => console.log(`    • ${s}`));
+			console.log();
+		}
+		console.log(chalk.default.gray(`  Config file: ${getCFG_FILE()}`));
+		console.log();
+	}
+};
+function deepMerge(base, patch) {
+	const result = { ...base };
+	for (const key of Object.keys(patch || {})) {
+		if (patch[key] === void 0) continue;
+		if (patch[key] !== null && typeof patch[key] === "object" && !Array.isArray(patch[key])) result[key] = deepMerge(base[key] || {}, patch[key]);
+		else result[key] = patch[key];
+	}
+	return result;
+}
+function scrubSecrets(cfg) {
+	const s = JSON.parse(JSON.stringify(cfg));
+	if (s.provider?.apiKey) s.provider.apiKey = "●●●●●●●●";
+	if (Array.isArray(s.providers)) for (const p of s.providers) {
+		if (p.apiKey) p.apiKey = "●●●●●●●●";
+		if (Array.isArray(p.apiKeys)) p.apiKeys = p.apiKeys.map(() => "●●●●●●●●");
+	}
+	if (s.gateway?.authToken) s.gateway.authToken = "●●●●●●●●";
+	if (s.gateway?.remote?.token) s.gateway.remote.token = "●●●●●●●●";
+	if (s.gateway?.remote?.password) s.gateway.remote.password = "●●●●●●●●";
+	if (s.talkMode?.apiKey) s.talkMode.apiKey = "●●●●●●●●";
+	if (s.skills?.apiKeys) {
+		const keys = Object.keys(s.skills.apiKeys);
+		s.skills.apiKeys = Object.fromEntries(keys.map((k) => [k, "●●●●●●●●"]));
+	}
+	return s;
+}
+function scrubChannelConfig(ch) {
+	const s = { ...ch };
+	const secretFields = [
+		"token",
+		"accessToken",
+		"apiKey",
+		"appSecret",
+		"appPassword",
+		"signingSecret",
+		"channelSecret",
+		"secretKey",
+		"password",
+		"verifyToken"
+	];
+	for (const f of secretFields) if (s[f]) s[f] = "●●●●●●●●";
+	return s;
+}
+function printSection(label, data) {
+	if (!data || Object.keys(data).length === 0) return;
+	console.log(chalk.default.bold.white(`  ${label}:`));
+	for (const [k, v] of Object.entries(data)) if (Array.isArray(v)) console.log(`    ${chalk.default.gray(k)}: ${v.join(", ") || "(none)"}`);
+	else console.log(`    ${chalk.default.gray(k)}: ${v}`);
+	console.log();
+}
+
+//#endregion
+Object.defineProperty(exports, 'ConfigStore', {
+  enumerable: true,
+  get: function () {
+    return ConfigStore;
+  }
+});

package/dist/config-SiLqEezw.js

@@ -0,0 +1,7 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+require('./paths-AIyBxIzm.js');
+require('./paths-DPovhojT.js');
+require('./env-resolve-C0R8R7pb.js');
+const require_config = require('./config-BzK_Xl4Y.js');
+
+exports.ConfigStore = require_config.ConfigStore;

package/dist/config-Tq_GJHf7.js

@@ -0,0 +1,7 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+require('./paths-AIyBxIzm.js');
+require('./paths-DPovhojT.js');
+require('./env-resolve--MaE2kFF.js');
+const require_config = require('./config-FejpHHTz.js');
+
+exports.ConfigStore = require_config.ConfigStore;

package/dist/config-n4qy5jIy.js

@@ -0,0 +1,7 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+require('./paths-AIyBxIzm.js');
+require('./paths-DPovhojT.js');
+require('./env-resolve-Buos635Y.js');
+const require_config = require('./config-BAwkTUJC.js');
+
+exports.ConfigStore = require_config.ConfigStore;

package/dist/config-qJUYRMzx.js

@@ -0,0 +1,7 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+require('./paths-AIyBxIzm.js');
+require('./paths-DPovhojT.js');
+require('./env-resolve-Bop7KbNq.js');
+const require_config = require('./config-CYPw2v4l.js');
+
+exports.ConfigStore = require_config.ConfigStore;

package/dist/connector-BYPxgmsD.js

@@ -0,0 +1,312 @@
+const require_chunk = require('./chunk-jS-bbMI5.js');
+const chalk = require_chunk.__toESM(require("chalk"));
+const fs_extra = require_chunk.__toESM(require("fs-extra"));
+const path = require_chunk.__toESM(require("path"));
+const os = require_chunk.__toESM(require("os"));
+const https = require_chunk.__toESM(require("https"));
+const events = require_chunk.__toESM(require("events"));
+
+//#region extensions/telegram/src/connector.ts
+function tgDownloadFile(token, filePath) {
+	return new Promise((resolve, reject) => {
+		const req = https.default.request({
+			hostname: "api.telegram.org",
+			port: 443,
+			path: `/file/bot${token}/${filePath}`,
+			method: "GET"
+		}, (res) => {
+			const chunks = [];
+			res.on("data", (c) => chunks.push(c));
+			res.on("end", () => resolve(Buffer.concat(chunks)));
+		});
+		req.on("error", reject);
+		req.setTimeout(3e4, () => {
+			req.destroy();
+			reject(new Error("Download timeout"));
+		});
+		req.end();
+	});
+}
+function tgRequest(token, method, body) {
+	return new Promise((resolve, reject) => {
+		const payload = body ? JSON.stringify(body) : null;
+		const req = https.default.request({
+			hostname: "api.telegram.org",
+			port: 443,
+			path: `/bot${token}/${method}`,
+			method: payload ? "POST" : "GET",
+			headers: payload ? {
+				"Content-Type": "application/json",
+				"Content-Length": Buffer.byteLength(payload)
+			} : {}
+		}, (res) => {
+			let data = "";
+			res.on("data", (c) => data += c);
+			res.on("end", () => {
+				try {
+					const r = JSON.parse(data);
+					if (r.ok) resolve(r.result);
+					else reject(new Error(r.description || "Telegram API error"));
+				} catch {
+					reject(new Error("Invalid JSON"));
+				}
+			});
+		});
+		req.on("error", reject);
+		req.setTimeout(35e3, () => {
+			req.destroy();
+			reject(new Error("Timeout"));
+		});
+		if (payload) req.write(payload);
+		req.end();
+	});
+}
+const STATE_FILE = path.default.join(os.default.homedir(), ".hyperclaw", "telegram-state.json");
+function sleep(ms) {
+	return new Promise((r) => setTimeout(r, ms));
+}
+function generateCode() {
+	const chars = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+	return Array.from({ length: 6 }, () => chars[Math.floor(Math.random() * chars.length)]).join("");
+}
+function chunkText(text, max) {
+	if (text.length <= max) return [text];
+	const chunks = [];
+	let i = 0;
+	while (i < text.length) {
+		let end = Math.min(i + max, text.length);
+		if (end < text.length) {
+			const nl = text.lastIndexOf("\n", end);
+			if (nl > i) end = nl + 1;
+		}
+		chunks.push(text.slice(i, end));
+		i = end;
+	}
+	return chunks;
+}
+var TelegramConnector = class extends events.EventEmitter {
+	token;
+	config;
+	offset = 0;
+	running = false;
+	botInfo = null;
+	constructor(token, config) {
+		super();
+		this.token = token;
+		this.config = {
+			token,
+			dmPolicy: "allowlist",
+			allowFrom: [],
+			pendingPairings: {},
+			approvedPairings: [],
+			...config
+		};
+	}
+	async connect() {
+		this.botInfo = await tgRequest(this.token, "getMe");
+		console.log(chalk.default.green(`  🦅 Telegram: @${this.botInfo?.username} connected`));
+		await this.loadState();
+		this.running = true;
+		this.pollLoop();
+		this.emit("connected", this.botInfo);
+	}
+	async disconnect() {
+		this.running = false;
+		await this.saveState();
+	}
+	async pollLoop() {
+		while (this.running) try {
+			const allowed = this.config.inlineMode ? ["message", "inline_query"] : ["message"];
+			const updates = await tgRequest(this.token, "getUpdates", {
+				offset: this.offset,
+				timeout: 30,
+				allowed_updates: allowed
+			});
+			for (const u of updates) {
+				this.offset = u.update_id + 1;
+				await this.handleUpdate(u).catch((e) => console.log(chalk.default.yellow(`  ⚠  ${e.message}`)));
+			}
+		} catch (e) {
+			if (this.running) {
+				console.log(chalk.default.yellow(`  ⚠  Telegram poll: ${e.message}`));
+				await sleep(5e3);
+			}
+		}
+	}
+	async handleUpdate(u) {
+		if (u.inline_query) {
+			this.emit("inline_query", {
+				id: u.inline_query.id,
+				from: String(u.inline_query.from?.id),
+				query: u.inline_query.query,
+				username: u.inline_query.from?.username
+			});
+			return;
+		}
+		const msg = u.message || u.edited_message;
+		if (!msg) return;
+		const text = msg.text?.trim() || "";
+		if (!text && !msg.voice) return;
+		const userId = String(msg.from?.id || "");
+		const isDM = msg.chat.type === "private";
+		const isGroup = msg.chat.type === "group" || msg.chat.type === "supergroup";
+		if (isDM && !await this.checkDMPolicy(userId, msg.chat.id, text || "[voice note]")) return;
+		let finalText = text || "[voice note]";
+		if (isGroup) {
+			const groupAllowFrom = this.config.groupAllowFrom ?? [];
+			if (groupAllowFrom.length > 0 && !groupAllowFrom.includes(String(msg.chat.id))) return;
+			const activation = this.config.groupActivation ?? "mention";
+			if (activation === "mention") {
+				const botUsername = this.botInfo?.username ? `@${this.botInfo.username}`.toLowerCase() : "";
+				const mentioned = botUsername && text.toLowerCase().includes(botUsername);
+				const isReplyToBot = msg.reply_to_message?.from?.is_bot && msg.reply_to_message.from.id === this.botInfo?.id;
+				if (!mentioned && !isReplyToBot) return;
+				if (mentioned && botUsername) finalText = text.replace(new RegExp(botUsername, "gi"), "").trim() || finalText;
+			}
+		}
+		let audioBuffer;
+		if (msg?.voice?.file_id) try {
+			const file = await tgRequest(this.token, "getFile", { file_id: msg.voice.file_id });
+			audioBuffer = await tgDownloadFile(this.token, file.file_path);
+		} catch (e) {
+			console.log(chalk.default.yellow(`  ⚠  Telegram voice download failed: ${e.message}`));
+		}
+		this.emit("message", {
+			id: String(msg.message_id),
+			channelId: "telegram",
+			from: userId,
+			fromUsername: msg.from?.username,
+			chatId: msg.chat.id,
+			text: finalText,
+			audioBuffer,
+			timestamp: new Date(msg.date * 1e3).toISOString(),
+			isDM,
+			isGroup,
+			threadId: msg.message_thread_id != null ? String(msg.message_thread_id) : void 0
+		});
+	}
+	async checkDMPolicy(userId, chatId, text) {
+		if (this.config.dmPolicy === "none") return false;
+		if (this.config.dmPolicy === "open") return true;
+		if (this.config.dmPolicy === "allowlist") {
+			if (this.config.allowFrom.includes(userId)) return true;
+			await this.sendMessage(chatId, `🦅 *HyperClaw*\n\nYou are not on the allowlist.`);
+			return false;
+		}
+		if (this.config.dmPolicy === "pairing") {
+			if (this.config.approvedPairings.includes(userId)) return true;
+			const upper = text.trim().toUpperCase();
+			if (this.config.pendingPairings[upper]) {
+				this.config.approvedPairings.push(userId);
+				delete this.config.pendingPairings[upper];
+				await this.saveState();
+				await this.sendMessage(chatId, `🦅 *Paired!* You can now send messages.`);
+				this.emit("pairing:approved", {
+					userId,
+					channelId: "telegram"
+				});
+				return true;
+			}
+			const code = generateCode();
+			this.config.pendingPairings[code] = userId;
+			await this.saveState();
+			await this.sendMessage(chatId, `🦅 *HyperClaw Pairing*\n\nSend the owner this code:\n\`${code}\`\n\nApprove with:\n\`hyperclaw pairing approve telegram ${code}\``);
+			console.log(chalk.default.cyan(`  🦅 Telegram pairing from ${userId} — code: ${code}`));
+			return false;
+		}
+		return false;
+	}
+	async sendMessage(chatId, text, opts = {}) {
+		const chunks = chunkText(text, 4096);
+		let last = null;
+		for (const chunk of chunks) last = await tgRequest(this.token, "sendMessage", {
+			chat_id: chatId,
+			text: chunk,
+			parse_mode: opts.parse_mode || "Markdown",
+			disable_web_page_preview: opts.disable_web_page_preview ?? true,
+			...opts.reply_to_message_id ? { reply_to_message_id: opts.reply_to_message_id } : {},
+			...opts.message_thread_id != null ? { message_thread_id: opts.message_thread_id } : {}
+		});
+		return last;
+	}
+	async sendTyping(chatId) {
+		await tgRequest(this.token, "sendChatAction", {
+			chat_id: chatId,
+			action: "typing"
+		}).catch(() => {});
+	}
+	/** Answer inline query (Telegram inline mode). Results shown when user types @botname &lt;query&gt; in any chat. */
+	async answerInlineQuery(queryId, results, opts) {
+		try {
+			const articles = results.map((r) => ({
+				type: "article",
+				id: r.id,
+				title: r.title,
+				description: r.description,
+				input_message_content: {
+					message_text: r.message_text,
+					parse_mode: r.parse_mode || "Markdown"
+				}
+			}));
+			await tgRequest(this.token, "answerInlineQuery", {
+				inline_query_id: queryId,
+				results: articles,
+				cache_time: opts?.cache_time ?? 60
+			});
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	approvePairing(code) {
+		const upper = code.toUpperCase();
+		if (!this.config.pendingPairings[upper]) return false;
+		const userId = this.config.pendingPairings[upper];
+		this.config.approvedPairings.push(userId);
+		delete this.config.pendingPairings[upper];
+		this.saveState();
+		return true;
+	}
+	addToAllowlist(userId) {
+		if (!this.config.allowFrom.includes(userId)) {
+			this.config.allowFrom.push(userId);
+			this.saveState();
+		}
+	}
+	listPendingPairings() {
+		return Object.entries(this.config.pendingPairings).map(([code, userId]) => ({
+			code,
+			userId
+		}));
+	}
+	handleWebhookPayload(body) {
+		try {
+			this.handleUpdate(JSON.parse(body));
+		} catch {}
+	}
+	async loadState() {
+		try {
+			const s = await fs_extra.default.readJson(STATE_FILE);
+			this.offset = s.offset || 0;
+			if (s.pendingPairings) this.config.pendingPairings = s.pendingPairings;
+			if (s.approvedPairings) this.config.approvedPairings = s.approvedPairings;
+		} catch {}
+	}
+	async saveState() {
+		await fs_extra.default.ensureDir(path.default.dirname(STATE_FILE));
+		await fs_extra.default.writeJson(STATE_FILE, {
+			offset: this.offset,
+			pendingPairings: this.config.pendingPairings,
+			approvedPairings: this.config.approvedPairings
+		}, { spaces: 2 });
+	}
+	isRunning() {
+		return this.running;
+	}
+	getBotInfo() {
+		return this.botInfo;
+	}
+};
+
+//#endregion
+exports.TelegramConnector = TelegramConnector;