@aliwey/bmo 2.0.0

package/main.py

@@ -0,0 +1,125 @@
+"""
+Main entry point for the OpenCode Telegram Bot.
+"""
+
+import logging, os, sys
+
+_BMO_ROOT = os.path.dirname(os.path.abspath(__file__))
+if _BMO_ROOT not in sys.path:
+    sys.path.insert(0, _BMO_ROOT)
+
+_PARENT_ROOT = os.path.dirname(_BMO_ROOT)
+if _PARENT_ROOT not in sys.path:
+    sys.path.insert(0, _PARENT_ROOT)
+
+try:
+    from config.settings import TELEGRAM_TOKEN, LOG_FORMAT, LOG_LEVEL
+except ImportError as exc:
+    print(f"FATAL: Cannot import config.settings — {exc}", file=sys.stderr)
+    print(f"  sys.path = {sys.path}", file=sys.stderr)
+    print(f"  _BMO_ROOT = {_BMO_ROOT}", file=sys.stderr)
+    print(f"  _PARENT_ROOT = {_PARENT_ROOT}", file=sys.stderr)
+    print("  Ensure you're running from the project root and config/settings.py exists.", file=sys.stderr)
+    sys.exit(1)
+
+from telegram import Update
+from telegram.ext import (
+    Application,
+    CallbackQueryHandler,
+    CommandHandler,
+    MessageHandler,
+    filters,
+)
+
+from handlers.messages import (
+    start_command,
+    menu_command,
+    choose_model_callback,
+    use_skill_callback,
+    session_select_callback,
+    handle_message,
+    handle_file,
+    mode_callback,
+    cancel_callback,
+    settings_callback,
+    agent_callback,
+    inline_action_callback,
+)
+
+logging.basicConfig(format=LOG_FORMAT, level=getattr(logging, LOG_LEVEL, logging.INFO))
+logger = logging.getLogger(__name__)
+
+
+def main():
+    if not TELEGRAM_TOKEN:
+        logger.error("TELEGRAM_TOKEN is not set. Create a .env file based on .env.example")
+        sys.exit(1)
+
+    # --- LOCK FILE MECHANISM: Prevent multiple instances ---
+    import os, psutil
+    lock_file = ".bot.lock"
+    pid = os.getpid()
+    
+    if os.path.exists(lock_file):
+        try:
+            with open(lock_file, "r") as f:
+                old_pid = int(f.read().strip())
+            if psutil.pid_exists(old_pid):
+                logger.warning(f"⚠️ Conflict detected: Another BMO (PID {old_pid}) is already running!")
+                logger.warning("Terminating old instance to resolve conflict...")
+                try:
+                    p = psutil.Process(old_pid)
+                    p.terminate()
+                    p.wait(timeout=3)
+                except Exception as e:
+                    logger.error(f"Failed to kill old instance: {e}")
+                    sys.exit(1)
+        except Exception:
+            pass # Stale or invalid lock
+            
+    with open(lock_file, "w") as f:
+        f.write(str(pid))
+    # --------------------------------------------------------
+
+    logger.info("Starting OpenCode Telegram Bot (BMO)...")
+
+    app = Application.builder().token(TELEGRAM_TOKEN).build()
+
+    # ── Commands ──────────────────────────────────────────────────────────────
+    app.add_handler(CommandHandler("start", start_command))
+    app.add_handler(CommandHandler("menu", menu_command))
+
+    # ── Inline keyboard callbacks ─────────────────────────────────────────────
+    app.add_handler(CallbackQueryHandler(choose_model_callback, pattern=r"^(m|mp):"))
+    app.add_handler(CallbackQueryHandler(use_skill_callback,    pattern=r"^skill:"))
+    app.add_handler(CallbackQueryHandler(cancel_callback,       pattern=r"^cancel$"))
+    app.add_handler(CallbackQueryHandler(mode_callback,         pattern=r"^mode_set:"))
+    app.add_handler(CallbackQueryHandler(session_select_callback, pattern=r"^session:"))
+    app.add_handler(CallbackQueryHandler(settings_callback,       pattern=r"^(set_keys|admin_stats|back_settings|setup_p_.*|ttl_.*|perm_.*)$"))
+    app.add_handler(CallbackQueryHandler(agent_callback,          pattern=r"^agent_"))
+    app.add_handler(CallbackQueryHandler(inline_action_callback,   pattern=r"^(action:|back_to_menu|history_page:|session_load:)"))
+
+    # ── Plain text messages & Documents & Photos ───────────────────────────────────────
+    app.add_handler(MessageHandler(filters.Document.ALL | filters.PHOTO, handle_file))
+    app.add_handler(MessageHandler(filters.TEXT & ~filters.COMMAND, handle_message))
+
+    # ── Start MCP Server in Background ──
+    import threading
+    import uvicorn
+    from tools.mcp_server import mcp
+
+    def start_mcp():
+        uvicorn.run(mcp.sse_app, host="127.0.0.1", port=4097, log_level="error")
+
+    logger.info("Starting BMO MCP Server on port 4097...")
+    threading.Thread(target=start_mcp, daemon=True).start()
+
+    logger.info("BMO is online and polling...")
+    app.run_polling(allowed_updates=Update.ALL_TYPES)
+
+
+if __name__ == "__main__":
+    try:
+        main()
+    except KeyboardInterrupt:
+        print("Bot stopped.")

package/memory.md

@@ -0,0 +1,43 @@
+# BMO Core Profile
+
+## User Profile
+
+- Name: Aliwey
+- Role: Developer / System Owner
+- Preference: Direct and expert-level communication.
+
+## Learned Preferences
+
+- Language: English only (never respond in Arabic).
+- Communication: Concise, professional, and autonomous.
+- Telegram Format: **Markdown** (integrated with CLI markdown output) — Telegram wire format uses MarkdownV2 parse mode, converted from standard markdown at send-time
+- Project: BMO Telegram Bot (OpenCode Ecosystem).
+
+## Knowledge Index
+
+This index summarizes technical achievements stored in `data/experience/`. BMO should read these files to reuse past solutions.
+
+- **bmo_rebranding.md**: Full identity migration from NOVA to BMO (Core, Handlers, Web UI).
+- **auto_summarization.md**: Implementation of idle-triggered session summaries with database persistence.
+- **file_archival_system.md**: Session-linked file detection, copy, and indexing logic.
+- **excel_inventory_automation.md**: Creation of multi-sheet Excel workbooks with cross-references for store management.
+- **inline_menu_sessions.md**: Inline keyboard menu system with session history pagination and loading.
+- **model_switching.md**: Model change with full session continuity — clears OpenCode session ID, creates fresh backend, injects SQLite history as context.
+- **auto_title_summary.md**: Auto-summary now generates both summary + title after inactivity; new user guidance in system prompt to explain keyboard buttons.
+- **webchat_public_default.md**: Webchat is always public — start server + cloudflared tunnel automatically. Never localhost-only unless user explicitly requests it. Full workflow: start_web_task → tunnel_webchat → wait 15s → check_task_status → send URL.
+- **background_task_registry.md**: Full background task management system with JSON registry, MCP tools (start_web_task, list_background_tasks, check_task_status, stop_background_task, tunnel_webchat), auto-cleanup of dead processes, port conflict detection, and centralized logging. Prevents all bot freezing from servers/tunnels.
+- **soft_new_session.md**: `/new` rewritten with Claude Code-style soft-reset — wipes model context via `delete_messages` but preserves `opencode_session_id` for warm system-prompt cache. Inherits provider/model/agent/mode from old session. Fixes 60s+ first-token latency on every `/new`.
+- **cli_hang_timeout.md**: Fixed 20-min CLI hang — lowered `OPENCODE_TIMEOUT` 1200→120, wrapped `_do_send` POST in `asyncio.wait_for`, installed real OS-level `signal.SIGINT` handler in `cli.py` so Ctrl+C cancels the active streaming task even inside `rich.Live` + `prompt_toolkit.patch_stdout(raw=True)`.
+- **cli_worker_kill.md**: Full worker-subprocess Ctrl+C fix — added `cancel_current()` to both `AsyncSubprocessWorker` and `MultiprocessWorker` + `WorkerManager` facade, SIGINT handler now kills the subprocess via `asyncio.run_coroutine_threadsafe(worker.cancel_current(), loop)` BEFORE cancelling the asyncio task (shielded futures would otherwise block propagation). `ensure_worker` checks `is_alive` so cancelled workers respawn on next request. Timeouts set to 900s (15 min) for reasoning-heavy tasks.
+- **name_correction.md**: Fixed stale `Aliwi` → `Aliwey` in both profile files (`memory.md` + `data/memory.md`); reminder that the profile lives in two synced locations.
+- **cli_exit_unclosed_transport.md**: Fixed `/exit` dumping 4 `ValueError: I/O operation on closed pipe` warnings. CLI disabled worker (`client._worker = None`) but `ensure_worker()` still spawned a stranded subprocess. Three-layer fix: skip worker start when client disables it + properly close pipe transports in `shutdown()` + post-loop cleanup in `cli.py`.
+- **telegram_markdown_integration.md**: User preference flip — Telegram now uses Markdown (MarkdownV2 on the wire) integrated with CLI markdown output. Old HTML parser path must be replaced by a `to_markdown_v2()` converter + chunker. `_clean_telegram_html` is obsolete.
+- **portable_distribution.md**: Made BMO distributable — each user runs their own instance. Configurable `OWNER_ID`, generic memory.md templates, path-agnostic build script, setup wizard with owner ID prompt, stripped all personal/dev artifacts, port 4800 default.
+- **cli_spinner_inplace_update.md**: Fixed thinking-counter leaving a vertical trail of past values on screen. `rich.Console.print(..., end="")` does NOT honor `\r` — switched the tick update to `sys.stdout.write + flush` with manual ANSI dim codes, and clear the partial line on completion.
+- **bfp_protocol.md**: BFP (BMO Friendship Protocol) — DID-based identity, A2A-compatible Agent Cards, WebSocket transport, relay discovery, and enterprise A2A bridge. BMO is the reference implementation.
+- **bfp_integration_fix.md**: Fixed 3 critical bugs from parallel subagent isolation: A2A bridge sync/async mismatch calling `send_message()` with wrong args, `bfp.delegate` returning fake stubs. Extracted shared `core/bfp_tasks.py` module used by both transport and A2A bridge. 13 passing tests.
+- **bfp_user_facing.md**: Discovery module (`bfp_discovery.py`), relay WS connector (`bfp_connector.py`), relay WS DID mapping + peer forwarding, CLI `/bfp status/find/delegate/talk` commands, `BFP_RELAY_URL` env var. Relay WS forwarding architecture: `send` action creates pending future, forwards to target's WS, awaits `relay_response`, returns result. All 20 BFP tests pass.
+- **bfp_websocket_http_graceful.md**: Fixed `InvalidUpgrade: Keep-Alive` traceback when HTTP requests hit the BFP WebSocket port 8765. Added `_process_request` callback to `ws_serve()` that returns a 426 "Upgrade Required" response for non-WebSocket connections instead of letting the library crash.
+
+---
+*BMO: Always update this index after adding a new file to the vault.*

package/models/chat_models.py

@@ -0,0 +1,143 @@
+"""
+Data models for chat messages and sessions
+"""
+
+from dataclasses import dataclass, asdict
+from datetime import datetime
+from typing import Optional, List
+import json
+
+
+@dataclass
+class ChatMessage:
+    sender: str
+    content: str
+    timestamp: float
+    message_id: Optional[int] = None
+
+    def to_dict(self):
+        return asdict(self)
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(**data)
+
+
+@dataclass
+class ChatSession:
+    chat_id: int
+    user_id: int
+    username: Optional[str]
+    created_at: float
+    updated_at: float
+    messages: List[dict]
+    metadata: dict
+    title: str = ""
+    session_id: str = ""
+
+    def to_dict(self):
+        return {
+            "chat_id": self.chat_id,
+            "user_id": self.user_id,
+            "username": self.username,
+            "created_at": self.created_at,
+            "updated_at": self.updated_at,
+            "messages": self.messages,
+            "metadata": self.metadata,
+            "title": self.title,
+            "session_id": self.session_id,
+        }
+
+    @classmethod
+    def from_dict(cls, data):
+        for field in ("title", "session_id"):
+            if field not in data:
+                data[field] = ""
+        return cls(**data)
+
+    def add_message(self, sender: str, content: str, message_id: Optional[int] = None):
+        message = ChatMessage(
+            sender=sender,
+            content=content,
+            timestamp=datetime.now().timestamp(),
+            message_id=message_id,
+        )
+        self.messages.append(message.to_dict())
+        self.updated_at = datetime.now().timestamp()
+
+    def get_last_n_messages(self, n: int) -> List[ChatMessage]:
+        return [ChatMessage.from_dict(m) for m in self.messages[-n:]]
+
+    def get_context_text(self, max_messages: int = 10) -> str:
+        recent = self.get_last_n_messages(max_messages)
+        context = []
+        for msg in recent:
+            prefix = "You:" if msg.sender == "user" else "Assistant:"
+            context.append(f"{prefix} {msg.content}")
+        return "\n".join(context)
+
+    def set_title(self, title: str):
+        self.title = title
+        self.updated_at = datetime.now().timestamp()
+
+    def get_title(self) -> str:
+        return self.title
+
+    def set_summary(self, summary: str):
+        self.metadata["session_summary"] = summary
+        self.updated_at = datetime.now().timestamp()
+
+    def get_summary(self) -> Optional[str]:
+        return self.metadata.get("session_summary")
+
+    def set_description(self, description: str):
+        self.metadata["session_description"] = description
+        self.updated_at = datetime.now().timestamp()
+
+    def get_description(self) -> Optional[str]:
+        return self.metadata.get("session_description")
+
+    def get_message_counter(self) -> int:
+        return self.metadata.get("message_counter", 0)
+
+    def increment_message_counter(self) -> int:
+        count = self.metadata.get("message_counter", 0) + 1
+        self.metadata["message_counter"] = count
+        self.updated_at = datetime.now().timestamp()
+        return count
+
+    def reset_message_counter(self):
+        self.metadata["message_counter"] = 0
+        self.updated_at = datetime.now().timestamp()
+
+
+@dataclass
+class UserMemory:
+    user_id: int
+    chat_id: int
+    preferences: dict
+    knowledge: dict
+    created_at: float
+    updated_at: float
+
+    def to_dict(self):
+        return {
+            "user_id": self.user_id,
+            "chat_id": self.chat_id,
+            "preferences": self.preferences,
+            "knowledge": self.knowledge,
+            "created_at": self.created_at,
+            "updated_at": self.updated_at,
+        }
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(**data)
+
+    def update_preference(self, key: str, value):
+        self.preferences[key] = value
+        self.updated_at = datetime.now().timestamp()
+
+    def add_knowledge(self, key: str, value):
+        self.knowledge[key] = value
+        self.updated_at = datetime.now().timestamp()

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@aliwey/bmo",
+  "version": "2.0.0",
+  "description": "BMO — AI coding assistant with Telegram, CLI & Web sync. One command, all frontends.",
+  "keywords": ["ai", "coding-assistant", "telegram-bot", "cli", "opencode", "bfp"],
+  "homepage": "https://github.com/aliwey/bmo",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aliwey/bmo.git"
+  },
+  "license": "MIT",
+  "author": "Aliwey",
+  "bin": {
+    "bmo": "bin/bmo.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/postinstall.js"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "opencode-ai": ">=0.1.0"
+  },
+  "peerDependenciesMeta": {
+    "opencode-ai": {
+      "optional": true
+    }
+  },
+  "files": [
+    "bin/",
+    "scripts/",
+    "registry/",
+    "core/",
+    "handlers/",
+    "config/",
+    "models/",
+    "storage/",
+    "tools/",
+    "webchat/public/",
+    "webchat/server.js",
+    "webchat/package.json",
+    "webchat/package-lock.json",
+    "requirements.txt",
+    "setup.py",
+    "main.py",
+    "cli.py",
+    "memory.md"
+  ]
+}

package/registry/worker.js

@@ -0,0 +1,108 @@
+/**
+ * BFP Registry — Cloudflare Worker
+ * Deploy: wrangler deploy
+ * URL:    https://bfp-registry.aliwey.workers.dev
+ *
+ * KV namespace: REGISTRY (binding name)
+ * Stores: DID → { endpoint, caps, ts }
+ * Auto-expiry: 1 hour (refreshed every 30min by bmo relay)
+ */
+
+export default {
+  async fetch(req, env) {
+    const url = new URL(req.url);
+    const { pathname } = url;
+
+    // CORS headers for all responses
+    const corsHeaders = {
+      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+      'Access-Control-Allow-Headers': 'Content-Type',
+    };
+
+    if (req.method === 'OPTIONS') {
+      return new Response(null, { headers: corsHeaders });
+    }
+
+    const json = (data, status = 200) =>
+      Response.json(data, { status, headers: corsHeaders });
+
+    const err = (msg, status = 400) =>
+      json({ error: msg }, status);
+
+    // ── POST /register ────────────────────────────────────────────────────────
+    // Body: { did: string, endpoint: string, caps: string[] }
+    if (req.method === 'POST' && pathname === '/register') {
+      let body;
+      try { body = await req.json(); } catch { return err('Invalid JSON'); }
+
+      const { did, endpoint, caps } = body;
+      if (!did || !endpoint) return err('Missing did or endpoint');
+      if (!did.startsWith('did:bfp:')) return err('Invalid DID format');
+      if (!endpoint.startsWith('ws')) return err('Endpoint must be a WebSocket URL');
+
+      await env.REGISTRY.put(
+        did,
+        JSON.stringify({ endpoint, caps: caps || [], ts: Date.now() }),
+        { expirationTtl: 3600 }   // auto-expire in 1 hour
+      );
+
+      return json({ ok: true, did, expires_in: 3600 });
+    }
+
+    // ── POST /unregister ──────────────────────────────────────────────────────
+    // Body: { did: string }
+    if (req.method === 'POST' && pathname === '/unregister') {
+      let body;
+      try { body = await req.json(); } catch { return err('Invalid JSON'); }
+
+      const { did } = body;
+      if (!did) return err('Missing did');
+
+      await env.REGISTRY.delete(did);
+      return json({ ok: true });
+    }
+
+    // ── GET /lookup?did=xxx ───────────────────────────────────────────────────
+    if (req.method === 'GET' && pathname === '/lookup') {
+      const did = url.searchParams.get('did');
+      if (!did) return err('Missing did parameter');
+
+      const val = await env.REGISTRY.get(did);
+      if (!val) return json({ error: 'Agent not found or offline' }, 404);
+
+      return json({ did, ...JSON.parse(val) });
+    }
+
+    // ── GET /list?capability=code ─────────────────────────────────────────────
+    // Returns all online agents, optionally filtered by capability
+    if (req.method === 'GET' && pathname === '/list') {
+      const cap = url.searchParams.get('capability');
+
+      const { keys } = await env.REGISTRY.list({ limit: 500 });
+      const agents = [];
+
+      await Promise.all(keys.map(async key => {
+        const val = await env.REGISTRY.get(key.name);
+        if (!val) return;
+        const data = JSON.parse(val);
+        if (!cap || (data.caps && data.caps.includes(cap))) {
+          agents.push({ did: key.name, ...data });
+        }
+      }));
+
+      // Sort by most recently registered
+      agents.sort((a, b) => (b.ts || 0) - (a.ts || 0));
+
+      return json(agents);
+    }
+
+    // ── GET /health ───────────────────────────────────────────────────────────
+    if (req.method === 'GET' && pathname === '/health') {
+      const { keys } = await env.REGISTRY.list({ limit: 1 });
+      return json({ status: 'ok', online: keys.length });
+    }
+
+    return json({ error: 'Not found' }, 404);
+  }
+};

package/registry/wrangler.toml

@@ -0,0 +1,11 @@
+{
+  "name": "bfp-registry",
+  "main": "worker.js",
+  "compatibility_date": "2025-01-01",
+  "kv_namespaces": [
+    {
+      "binding": "REGISTRY",
+      "id": "REPLACE_WITH_YOUR_KV_NAMESPACE_ID"
+    }
+  ]
+}

package/requirements.txt

@@ -0,0 +1,13 @@
+python-telegram-bot>=20.0
+python-dotenv>=1.0.0
+httpx>=0.28.0
+cryptography>=42.0.0
+fastapi>=0.100.0
+uvicorn>=0.22.0
+mcp>=1.0.0
+prompt-toolkit>=3.0
+rich>=13.0
+psutil
+watchfiles
+PyNaCl>=1.5.0
+base58>=2.1.0

package/scripts/bmo_init.js

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+/**
+ * BMO Setup Wizard — bmo init
+ * Generates ~/.bmo/.env interactively on first run.
+ */
+
+'use strict';
+
+const readline = require('readline');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const BMO_HOME = process.env.BMO_HOME || path.join(os.homedir(), '.bmo');
+const ENV_PATH = path.join(BMO_HOME, '.env');
+
+function mkdirp(p) { fs.mkdirSync(p, { recursive: true }); }
+
+function ask(rl, question, defaultValue) {
+  return new Promise(resolve => {
+    const hint = defaultValue ? ` [${defaultValue}]` : '';
+    rl.question(`  ${question}${hint}: `, answer => {
+      resolve(answer.trim() || defaultValue || '');
+    });
+  });
+}
+
+(async () => {
+  console.log('\n╭───────────────────────────────────────────────────╮');
+  console.log('│            BMO Setup Wizard                       │');
+  console.log('╰───────────────────────────────────────────────────╯\n');
+
+  // Load existing .env values as defaults
+  let existing = {};
+  if (fs.existsSync(ENV_PATH)) {
+    const lines = fs.readFileSync(ENV_PATH, 'utf8').split('\n');
+    for (const line of lines) {
+      const m = line.match(/^([^#=]+)=(.*)$/);
+      if (m) existing[m[1].trim()] = m[2].trim();
+    }
+    console.log(`  ℹ️  Existing config found at ${ENV_PATH} — press Enter to keep values.\n`);
+  }
+
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+
+  // ── Telegram ────────────────────────────────────────────────────────────────
+  console.log('── Telegram ────────────────────────────────────────');
+  console.log('  Get your token from @BotFather on Telegram.');
+  const token = await ask(rl, 'Bot Token', existing.TELEGRAM_TOKEN || existing.TELEGRAM_BOT_TOKEN);
+
+  console.log('\n  Your Telegram User ID (used for admin access):');
+  console.log('  → How to get it: message @userinfobot on Telegram');
+  console.log('    It will reply with your ID number.');
+  const userId = await ask(rl, 'Your Telegram User ID', existing.ALLOWED_USER_IDS);
+
+  // ── OpenCode ─────────────────────────────────────────────────────────────────
+  console.log('\n── OpenCode ─────────────────────────────────────────');
+  const ocPort = await ask(rl, 'OpenCode server port', existing.OPENCODE_PORT || '4800');
+
+  // ── Model ────────────────────────────────────────────────────────────────────
+  console.log('\n── AI Model ─────────────────────────────────────────');
+  console.log('  This is the default model used for conversations.');
+  const model = await ask(rl, 'Default model', existing.OPENCODE_MODEL || 'deepseek-v4-flash-free');
+  const provider = await ask(rl, 'Default provider', existing.OPENCODE_PROVIDER || 'opencode');
+
+  // ── BFP Registry ─────────────────────────────────────────────────────────────
+  console.log('\n── BFP Agent Discovery ──────────────────────────────');
+  console.log('  The registry lets other BMO agents discover yours.');
+  console.log('  Leave blank to use the default public registry.');
+  const bfpRegistry = await ask(
+    rl,
+    'BFP Registry URL',
+    existing.BFP_REGISTRY_URL || 'https://bfp-registry.aliwey.workers.dev'
+  );
+
+  rl.close();
+
+  // ── Write .env ────────────────────────────────────────────────────────────────
+  mkdirp(BMO_HOME);
+  mkdirp(path.join(BMO_HOME, 'data'));
+  mkdirp(path.join(BMO_HOME, 'logs'));
+
+  const envContent = [
+    `# BMO Configuration — generated by bmo init`,
+    `# Location: ${ENV_PATH}`,
+    ``,
+    `# Telegram`,
+    `TELEGRAM_TOKEN=${token}`,
+    `ALLOWED_USER_IDS=${userId}`,
+    ``,
+    `# OpenCode`,
+    `OPENCODE_HOST=127.0.0.1`,
+    `OPENCODE_PORT=${ocPort}`,
+    ``,
+    `# AI Model`,
+    `OPENCODE_MODEL=${model}`,
+    `OPENCODE_PROVIDER=${provider}`,
+    ``,
+    `# BFP Agent Discovery`,
+    `BFP_REGISTRY_URL=${bfpRegistry}`,
+    ``,
+    `# Debug (set to True to enable verbose logging)`,
+    `DEBUG=False`,
+    ``,
+  ].join('\n');
+
+  fs.writeFileSync(ENV_PATH, envContent, 'utf8');
+
+  console.log('\n╭───────────────────────────────────────────────────╮');
+  console.log(`│  ✅ Config saved to ${ENV_PATH.padEnd(27)}│`);
+  console.log('│                                                   │');
+  console.log('│  Run:  bmo        ← start BMO                    │');
+  console.log('│        bmo relay  ← go online for BFP discovery  │');
+  console.log('╰───────────────────────────────────────────────────╯\n');
+})();