@0xmaxma/claude-gateway 1.4.9 → 1.5.0

package/dist/ui/cli-viewer-ui.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Slim, agent-scoped webview for the `/cli` command. This is deliberately NOT
+ * the admin dashboard (`web-ui.ts`): the dashboard exposes every agent, the
+ * process tree, and cross-agent PTY injection behind an admin key. The `/cli`
+ * viewer shows exactly ONE agent's interactive (pty-shell) session, unlocked by
+ * a chat approval or a verified Telegram initData — never an admin credential.
+ *
+ * Three pages:
+ *   - device page: "waiting for approval" (Discord/LINE) or auto-initData
+ *     submit (Telegram), polling until the browser is granted an access session.
+ *   - viewer page: xterm.js attached to the agent's live PTY over the existing
+ *     ticket→WebSocket path.
+ *   - message page: terminal states (expired, opened elsewhere, denied).
+ *
+ * All API/WebSocket URLs are built relative to `basePath` (the path portion of
+ * gateway.publicUrl, e.g. "/gateway" behind an ingress prefix) so the viewer
+ * works whether the gateway is mounted at the origin root or under a prefix.
+ */
+/** A plain centered message page for terminal/error states. */
+export declare function generateCliMessagePage(title: string, message: string, tone?: 'err' | 'ok' | 'muted'): string;
+export interface CliDevicePageOpts {
+    pairingId: string;
+    agentId: string;
+    code: string;
+    channel: 'telegram' | 'discord' | 'line';
+    basePath: string;
+}
+/** "Waiting for approval" device page (or Telegram initData auto-submit). */
+export declare function generateCliDevicePage(opts: CliDevicePageOpts): string;
+export interface CliViewerPageOpts {
+    pairingId: string;
+    agentId: string;
+    basePath: string;
+}
+/** The xterm.js viewer, scoped to a single agent's PTY sessions. */
+export declare function generateCliViewerPage(opts: CliViewerPageOpts): string;
+//# sourceMappingURL=cli-viewer-ui.d.ts.map

package/dist/ui/cli-viewer-ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-viewer-ui.d.ts","sourceRoot":"","sources":["../../src/ui/cli-viewer-ui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAyDH,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,KAAK,GAAG,IAAI,GAAG,OAAiB,GAAG,MAAM,CAMrH;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CA4DrE;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CA+HrE"}

package/dist/ui/cli-viewer-ui.js

@@ -0,0 +1,274 @@
+"use strict";
+/**
+ * Slim, agent-scoped webview for the `/cli` command. This is deliberately NOT
+ * the admin dashboard (`web-ui.ts`): the dashboard exposes every agent, the
+ * process tree, and cross-agent PTY injection behind an admin key. The `/cli`
+ * viewer shows exactly ONE agent's interactive (pty-shell) session, unlocked by
+ * a chat approval or a verified Telegram initData — never an admin credential.
+ *
+ * Three pages:
+ *   - device page: "waiting for approval" (Discord/LINE) or auto-initData
+ *     submit (Telegram), polling until the browser is granted an access session.
+ *   - viewer page: xterm.js attached to the agent's live PTY over the existing
+ *     ticket→WebSocket path.
+ *   - message page: terminal states (expired, opened elsewhere, denied).
+ *
+ * All API/WebSocket URLs are built relative to `basePath` (the path portion of
+ * gateway.publicUrl, e.g. "/gateway" behind an ingress prefix) so the viewer
+ * works whether the gateway is mounted at the origin root or under a prefix.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCliMessagePage = generateCliMessagePage;
+exports.generateCliDevicePage = generateCliDevicePage;
+exports.generateCliViewerPage = generateCliViewerPage;
+const XTERM_CSS = 'https://cdn.jsdelivr.net/npm/@xterm/xterm@6.0.0/css/xterm.min.css';
+const XTERM_JS = 'https://cdn.jsdelivr.net/npm/@xterm/xterm@6.0.0/lib/xterm.min.js';
+const TG_WEBAPP_JS = 'https://telegram.org/js/telegram-web-app.js';
+function htmlEscape(s) {
+    return s
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+const BASE_STYLE = `
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  body {
+    margin: 0; background: #0b0e14; color: #c8d3f5;
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
+    height: 100vh; display: flex; flex-direction: column;
+  }
+  .center { flex: 1; display: flex; align-items: center; justify-content: center; padding: 24px; }
+  .card {
+    max-width: 460px; width: 100%; text-align: center;
+    background: #131722; border: 1px solid #232a3b; border-radius: 14px; padding: 28px 24px;
+  }
+  h1 { font-size: 17px; margin: 0 0 6px; font-weight: 600; }
+  .muted { color: #7a88a8; font-size: 13px; line-height: 1.5; }
+  .agent { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; color: #82aaff; }
+  .code {
+    font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+    font-size: 40px; letter-spacing: 10px; font-weight: 700; color: #c3e88d;
+    margin: 18px 0 8px; padding-left: 10px;
+  }
+  .spinner {
+    width: 26px; height: 26px; margin: 18px auto 0;
+    border: 3px solid #232a3b; border-top-color: #82aaff; border-radius: 50%;
+    animation: spin 0.9s linear infinite;
+  }
+  @keyframes spin { to { transform: rotate(360deg); } }
+  .err { color: #ff757f; }
+  .ok { color: #c3e88d; }
+`;
+/** Shared page shell. `body` is raw HTML; `head` optional extra tags. */
+function page(title, style, body, head = '') {
+    return `<!doctype html><html lang="en"><head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+  <title>${htmlEscape(title)}</title>
+  ${head}
+  <style>${style}</style>
+  </head><body>${body}</body></html>`;
+}
+/** A plain centered message page for terminal/error states. */
+function generateCliMessagePage(title, message, tone = 'muted') {
+    return page(title, BASE_STYLE, `
+    <div class="center"><div class="card">
+      <h1>${htmlEscape(title)}</h1>
+      <p class="${tone === 'muted' ? 'muted' : tone}">${htmlEscape(message)}</p>
+    </div></div>`);
+}
+/** "Waiting for approval" device page (or Telegram initData auto-submit). */
+function generateCliDevicePage(opts) {
+    const cfg = JSON.stringify({
+        pairingId: opts.pairingId,
+        basePath: opts.basePath,
+        channel: opts.channel,
+    });
+    const isTelegram = opts.channel === 'telegram';
+    const head = isTelegram ? `<script src="${TG_WEBAPP_JS}"></script>` : '';
+    const body = `
+  <div class="center"><div class="card">
+    <h1>Terminal viewer</h1>
+    <p class="muted">Agent <span class="agent">${htmlEscape(opts.agentId)}</span></p>
+    ${isTelegram
+        ? `<p class="muted" id="msg">Verifying with Telegram…</p><div class="spinner" id="spin"></div>`
+        : `<div class="code">${htmlEscape(opts.code)}</div>
+         <p class="muted">Confirm this code matches your chat, then tap <b>Approve</b> there.</p>
+         <p class="muted" id="msg">Waiting for approval…</p><div class="spinner" id="spin"></div>`}
+  </div></div>
+  <script>
+  (function(){
+    var CFG = ${cfg};
+    var msg = document.getElementById('msg');
+    var spin = document.getElementById('spin');
+    function base(p){ return CFG.basePath + '/cli/' + CFG.pairingId + p; }
+    function fail(t){ if(msg){msg.textContent=t; msg.className='err';} if(spin) spin.style.display='none'; }
+    function done(){ if(msg){msg.textContent='Approved — opening…'; msg.className='ok';} location.replace(base('/view')); }
+
+    if (CFG.channel === 'telegram') {
+      var tg = window.Telegram && window.Telegram.WebApp;
+      var initData = tg && tg.initData;
+      if (tg && tg.ready) { try { tg.ready(); tg.expand && tg.expand(); } catch(e){} }
+      if (!initData) { fail('Please open this from the Telegram button.'); return; }
+      fetch(base('/tg-init'), {
+        method:'POST', headers:{'Content-Type':'application/json'},
+        credentials:'same-origin', body: JSON.stringify({ initData: initData })
+      }).then(function(r){ return r.ok ? r.json() : r.json().then(function(e){ throw new Error(e.error||('HTTP '+r.status)); }); })
+        .then(function(d){ if(d.status==='ready') done(); else fail('Could not verify.'); })
+        .catch(function(e){ fail(e.message || 'Verification failed.'); });
+      return;
+    }
+
+    // Discord / LINE: poll until the chat approval lands.
+    var tries = 0;
+    function poll(){
+      if (tries++ > 160) { fail('Timed out. Send /cli again.'); return; }
+      fetch(base('/status'), { credentials:'same-origin' })
+        .then(function(r){ return r.json(); })
+        .then(function(d){
+          if (d.status==='ready') return done();
+          if (d.status==='denied') return fail('Request denied.');
+          if (d.status==='gone') return fail('Link expired. Send /cli again.');
+          if (d.status==='foreign') return fail('This link was opened in another browser.');
+          setTimeout(poll, 1500);
+        })
+        .catch(function(){ setTimeout(poll, 2000); });
+    }
+    poll();
+  })();
+  </script>`;
+    return page('Terminal viewer', BASE_STYLE, body, head);
+}
+/** The xterm.js viewer, scoped to a single agent's PTY sessions. */
+function generateCliViewerPage(opts) {
+    const cfg = JSON.stringify({
+        pairingId: opts.pairingId,
+        agentId: opts.agentId,
+        basePath: opts.basePath,
+    });
+    const style = `${BASE_STYLE}
+    body { background:#000; }
+    header {
+      display:flex; align-items:center; gap:10px; padding:8px 12px;
+      background:#0b0e14; border-bottom:1px solid #232a3b; font-size:13px; flex:0 0 auto;
+    }
+    header .agent { font-weight:600; }
+    header .status { color:#7a88a8; margin-left:auto; }
+    select, button {
+      background:#131722; color:#c8d3f5; border:1px solid #2b3450; border-radius:8px;
+      padding:6px 10px; font-size:13px; cursor:pointer;
+    }
+    button.on { background:#1f6feb; border-color:#1f6feb; color:#fff; }
+    #term { flex:1; min-height:0; padding:6px; }
+    .hint { color:#7a88a8; padding:16px; font-size:13px; }
+  `;
+    const body = `
+  <header>
+    <span class="agent">${htmlEscape(opts.agentId)}</span>
+    <select id="sess" title="Session" style="display:none"></select>
+    <button id="toggle" title="Toggle input">🔒 Read-only</button>
+    <span class="status" id="status">connecting…</span>
+  </header>
+  <div id="term"></div>
+  <link rel="stylesheet" href="${XTERM_CSS}">
+  <script src="${XTERM_JS}"></script>
+  <script>
+  (function(){
+    var CFG = ${cfg};
+    function api(p){ return CFG.basePath + '/cli/' + CFG.pairingId + p; }
+    var statusEl = document.getElementById('status');
+    var sel = document.getElementById('sess');
+    var toggleBtn = document.getElementById('toggle');
+    function setStatus(t){ statusEl.textContent = t; }
+
+    var term = new Terminal({
+      cols: 200, rows: 50, scrollback: 0, disableStdin: true, convertEol: false,
+      fontSize: 12, fontFamily: 'ui-monospace, SFMono-Regular, Menlo, monospace',
+      theme: { background: '#000000' }
+    });
+    term.open(document.getElementById('term'));
+
+    var ws = null, inputMode = false, onDataDisposable = null, currentSession = null, reconnectT = null;
+
+    function setInputMode(on){
+      inputMode = on;
+      term.options.disableStdin = !on;
+      toggleBtn.className = on ? 'on' : '';
+      toggleBtn.textContent = on ? '⌨️ Input ON' : '🔒 Read-only';
+      if (onDataDisposable) { onDataDisposable.dispose(); onDataDisposable = null; }
+      if (on) { onDataDisposable = term.onData(function(d){ if (ws && ws.readyState===1) ws.send(d); }); }
+    }
+    toggleBtn.addEventListener('click', function(){ setInputMode(!inputMode); });
+
+    function wsUrl(ticket){
+      var proto = location.protocol === 'https:' ? 'wss:' : 'ws:';
+      return proto + '//' + location.host + CFG.basePath +
+        '/api/v1/agents/' + encodeURIComponent(CFG.agentId) + '/pty-stream?ticket=' + encodeURIComponent(ticket);
+    }
+
+    function connect(sessionId){
+      currentSession = sessionId;
+      if (ws) { try { ws.close(); } catch(e){} ws = null; }
+      setStatus('authorizing…');
+      fetch(api('/pty-ticket'), {
+        method:'POST', headers:{'Content-Type':'application/json'},
+        credentials:'same-origin', body: JSON.stringify({ sessionId: sessionId })
+      }).then(function(r){
+        if (r.status===401){ setStatus('session expired — send /cli again'); throw new Error('unauth'); }
+        return r.json();
+      }).then(function(d){
+        if (!d.ticket) throw new Error('no ticket');
+        ws = new WebSocket(wsUrl(d.ticket));
+        ws.binaryType = 'arraybuffer';
+        var dec = new TextDecoder();
+        ws.onopen = function(){ setStatus('live'); };
+        ws.onmessage = function(ev){
+          var data = typeof ev.data === 'string' ? ev.data : dec.decode(ev.data, { stream:true });
+          term.write(data);
+        };
+        ws.onclose = function(ev){
+          setStatus('disconnected');
+          if (ev.code === 4404) { setStatus('session ended'); return; }
+          if (sessionId === currentSession) { clearTimeout(reconnectT); reconnectT = setTimeout(function(){ connect(sessionId); }, 2000); }
+        };
+        ws.onerror = function(){ try { ws.close(); } catch(e){} };
+      }).catch(function(){ /* status already set */ });
+    }
+
+    function loadSessions(){
+      setStatus('finding session…');
+      fetch(api('/sessions'), { credentials:'same-origin' })
+        .then(function(r){ if(r.status===401){ setStatus('session expired'); throw new Error('unauth'); } return r.json(); })
+        .then(function(d){
+          var list = (d && d.sessions) || [];
+          if (!list.length) {
+            setStatus('');
+            document.getElementById('term').innerHTML = '<div class="hint">No interactive session to view. The agent must be running with headless=false to expose a live terminal.</div>';
+            return;
+          }
+          if (list.length > 1) {
+            sel.style.display = '';
+            sel.innerHTML = '';
+            list.forEach(function(s){
+              var o = document.createElement('option');
+              o.value = s.sessionId;
+              o.textContent = (s.source||'session') + ' · ' + s.sessionId.slice(0,8);
+              sel.appendChild(o);
+            });
+            sel.addEventListener('change', function(){ connect(sel.value); });
+          }
+          setInputMode(false);
+          connect(list[0].sessionId);
+        })
+        .catch(function(){ /* status set */ });
+    }
+
+    loadSessions();
+  })();
+  </script>`;
+    return page('Terminal viewer', style, body);
+}
+//# sourceMappingURL=cli-viewer-ui.js.map

package/dist/ui/cli-viewer-ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-viewer-ui.js","sourceRoot":"","sources":["../../src/ui/cli-viewer-ui.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AA0DH,wDAMC;AAWD,sDA4DC;AASD,sDA+HC;AA7QD,MAAM,SAAS,GAAG,mEAAmE,CAAC;AACtF,MAAM,QAAQ,GAAG,kEAAkE,CAAC;AACpF,MAAM,YAAY,GAAG,6CAA6C,CAAC;AAEnE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BlB,CAAC;AAEF,yEAAyE;AACzE,SAAS,IAAI,CAAC,KAAa,EAAE,KAAa,EAAE,IAAY,EAAE,IAAI,GAAG,EAAE;IACjE,OAAO;;;WAGE,UAAU,CAAC,KAAK,CAAC;IACxB,IAAI;WACG,KAAK;iBACC,IAAI,gBAAgB,CAAC;AACtC,CAAC;AAED,+DAA+D;AAC/D,SAAgB,sBAAsB,CAAC,KAAa,EAAE,OAAe,EAAE,OAA+B,OAAO;IAC3G,OAAO,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE;;YAErB,UAAU,CAAC,KAAK,CAAC;kBACX,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,CAAC;iBAC1D,CAAC,CAAC;AACnB,CAAC;AAUD,6EAA6E;AAC7E,SAAgB,qBAAqB,CAAC,IAAuB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAgB,YAAY,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG;;;iDAGkC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;MACnE,UAAU;QACV,CAAC,CAAC,6FAA6F;QAC/F,CAAC,CAAC,qBAAqB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;;kGAEgD;;;;gBAIlF,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAsCP,CAAC;IACX,OAAO,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC;AAQD,oEAAoE;AACpE,SAAgB,qBAAqB,CAAC,IAAuB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,GAAG,UAAU;;;;;;;;;;;;;;;GAe1B,CAAC;IACF,MAAM,IAAI,GAAG;;0BAEW,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;;iCAMjB,SAAS;iBACzB,QAAQ;;;gBAGT,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA2FP,CAAC;IACX,OAAO,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC"}

package/mcp/tools/discord/module.ts

@@ -33,6 +33,18 @@ import type { DiscordMessageContext } from './types';
 
 const MAX_ATTACHMENT_BYTES = 50 * 1024 * 1024;
 
+/** AgentRunner callback base (origin of CLAUDE_CHANNEL_CALLBACK, "" when unset).
+ *  Used to mint/approve `/cli` pairings via the runner, the same bridge the
+ *  Telegram receiver uses for /models. */
+function cliCallbackBase(): string {
+  try {
+    const u = new URL(process.env.CLAUDE_CHANNEL_CALLBACK ?? '');
+    return `${u.protocol}//${u.host}`;
+  } catch {
+    return '';
+  }
+}
+
 export class DiscordModule implements ChannelModule {
   id = 'discord' as ChannelId;
   toolVisibility: ToolVisibility = 'current-channel';
@@ -281,6 +293,45 @@ export class DiscordModule implements ChannelModule {
       }
 
       // action === 'deliver'
+      // `/cli` opens the live terminal viewer: mint a pairing (link + Approve
+      // button) instead of forwarding the text to the agent. Only reached after
+      // gate() authorized this user, so it inherits the channel's access control.
+      const cliText = (msg.content ?? '').replace(/<@!?\d+>/g, '').trim().toLowerCase();
+      if (cliText === '/cli') {
+        const base = cliCallbackBase();
+        try {
+          const res = await fetch(base + '/command', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ command: 'cli_pair', payload: { channel: 'discord', user_id: context.userId } }),
+          });
+          const data = (await res.json()) as { success?: boolean; url?: string; code?: string; pairingId?: string; error?: string };
+          if (!data.success || !data.url || !data.pairingId) {
+            await msg.channel.send(
+              data.error === 'not_configured'
+                ? 'Terminal viewer is not configured. Set gateway.publicUrl in config.json first.'
+                : 'Could not open the terminal viewer right now.',
+            ).catch(() => {});
+            return;
+          }
+          const components = [{
+            type: 1,
+            components: [
+              { type: 2, style: 5, label: '\u{1F5A5} Open terminal', url: data.url },
+              { type: 2, style: 2, label: `Approve ${data.code}`, custom_id: `cli:approve:${data.pairingId}` },
+              { type: 2, style: 4, label: 'Deny', custom_id: `cli:deny:${data.pairingId}` },
+            ],
+          }];
+          await msg.channel.send({
+            content: 'Live terminal viewer — open the link, confirm the code matches, then tap **Approve** to unlock (read-only by default).',
+            components,
+          }).catch(() => {});
+        } catch {
+          await msg.channel.send('Could not open the terminal viewer right now.').catch(() => {});
+        }
+        return;
+      }
+
       // Start typing indicator before handing off to runner
       const channelId = context.channelId;
       const typingFileDir = path.join(this.stateDir, 'typing');
@@ -347,12 +398,59 @@ export class DiscordModule implements ChannelModule {
       message?: { id: string };
       client: { user?: { id: string } };
       reply(opts: { content: string; ephemeral: boolean }): Promise<unknown>;
-      update(opts: { components: unknown[] }): Promise<unknown>;
+      update(opts: { components: unknown[]; content?: string }): Promise<unknown>;
     }
     this.client.on('interactionCreate', async (interaction: ButtonInteraction) => {
       try {
         if (!interaction.isButton?.()) return;
 
+        // `/cli` approve/deny — unlock (or reject) a pending terminal-viewer
+        // pairing. Re-runs the access gate on the tapping user, then relays the
+        // decision to the runner. The pairing itself checks the user id matches.
+        const cliM = /^cli:(approve|deny):([0-9a-f]{36})$/.exec(interaction.customId ?? '');
+        if (cliM) {
+          const isDM = !interaction.guildId;
+          const isThread = interaction.channel?.isThread?.() ?? false;
+          const context: DiscordMessageContext = {
+            guildId: interaction.guildId ?? null,
+            channelId: interaction.channelId,
+            threadId: isThread ? interaction.channelId : null,
+            userId: interaction.user.id,
+            username: interaction.user.username,
+            messageId: interaction.message?.id ?? '',
+            isDM,
+            isThread,
+            mentionsBot: true,
+          };
+          const access = loadAccessFn();
+          const result = gate(access, context, saveAccessFn, () => randomBytes(3).toString('hex'));
+          if (result.action !== 'deliver') {
+            await interaction.reply({ content: 'Not authorized.', ephemeral: true }).catch(() => {});
+            return;
+          }
+          const deny = cliM[1] === 'deny';
+          const base = cliCallbackBase();
+          let ok = false;
+          try {
+            const res = await fetch(base + '/command', {
+              method: 'POST',
+              headers: { 'Content-Type': 'application/json' },
+              body: JSON.stringify({
+                command: 'cli_approve',
+                payload: { channel: 'discord', pairing_id: cliM[2], user_id: interaction.user.id, deny },
+              }),
+            });
+            ok = !!((await res.json()) as { success?: boolean }).success;
+          } catch {}
+          const content = deny
+            ? '\u{1F6AB} Denied.'
+            : ok
+              ? '✅ Approved — return to the browser.'
+              : '⚠️ Could not approve (the link may have expired). Send /cli again.';
+          await interaction.update({ components: [], content }).catch(() => {});
+          return;
+        }
+
         // Cancel button: send ESC sentinel to dismiss the pending menu cleanly.
         if ((interaction.customId ?? '') === 'menu:cancel') {
           const isDM = !interaction.guildId;

package/mcp/tools/telegram/receiver-server.ts

@@ -881,6 +881,7 @@ const BOT_COMMANDS = [
   { command: 'restart', description: 'Graceful restart session' },
   { command: 'model', description: 'Show current AI model' },
   { command: 'models', description: 'Switch AI model' },
+  { command: 'cli', description: 'Open the live terminal viewer' },
   { command: 'start', description: 'Welcome and setup guide' },
   { command: 'status', description: 'Check your pairing status' },
   { command: 'help', description: 'What this bot can do' },
@@ -1146,7 +1147,8 @@ bot.command('help', async ctx => {
     `/restart — graceful restart session\n\n` +
     `*Agent*\n` +
     `/model — show current AI model\n` +
-    `/models — switch AI model\n\n` +
+    `/models — switch AI model\n` +
+    `/cli — open the live terminal viewer\n\n` +
     `*Account*\n` +
     `/start — pairing instructions\n` +
     `/status — check your pairing state`,
@@ -1238,6 +1240,44 @@ bot.command('models', async ctx => {
   }
 })
 
+// /cli — open the live terminal viewer as a Telegram Mini App. The Mini App
+// page reads Telegram's signed initData and the gateway verifies it (HMAC with
+// this bot's token), so nothing secret rides in the URL. Private chat + allowlist
+// only, matching every other command.
+bot.command('cli', async ctx => {
+  if (ctx.chat?.type !== 'private') return
+  const access = loadAccess()
+  if (!access.allowFrom.includes(String(ctx.from!.id))) return
+  if (!CALLBACK_URL_BASE) return
+
+  try {
+    const res = await fetch(CALLBACK_URL_BASE + '/command', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        command: 'cli_pair',
+        payload: { channel: 'telegram', user_id: String(ctx.from!.id) },
+      }),
+    })
+    const data = (await res.json()) as { success?: boolean; url?: string; error?: string }
+    if (!data.success || !data.url) {
+      if (data.error === 'not_configured') {
+        await ctx.reply('Terminal viewer is not configured. Set gateway.publicUrl in config.json first.')
+      } else {
+        await ctx.reply('Could not open the terminal viewer right now.')
+      }
+      return
+    }
+    // web_app button launches the Mini App; Telegram requires an HTTPS URL.
+    const keyboard = new InlineKeyboard().webApp('\u{1F5A5} Open terminal', data.url)
+    await ctx.reply('Live terminal viewer (read-only by default — toggle input inside):', {
+      reply_markup: keyboard,
+    })
+  } catch {
+    await ctx.reply('Could not open the terminal viewer right now.')
+  }
+})
+
 // /compact — show compact confirmation keyboard (receiver mode only)
 bot.command('compact', async ctx => {
   if (ctx.chat?.type !== 'private') return

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xmaxma/claude-gateway",
-  "version": "1.4.9",
+  "version": "1.5.0",
   "description": "Multi-agent gateway for Claude",
   "repository": {
     "type": "git",