@deadragdoll/tellymcp 0.0.13 → 0.0.14

package/.env.example.client

@@ -29,7 +29,7 @@ GATEWAY_WS_URL=wss://your-domain.example/api/gateway/ws
 GATEWAY_WS_PATH=/api/gateway/ws
 GATEWAY_TOKEN=change_me_gateway_token
 GATEWAY_USER_UUID=
-# GATEWAY_AUTH_TOKEN=
+GATEWAY_AUTH_TOKEN=
 
 TERMINAL_SHELL=bash
 TERMINAL_COLS=120
@@ -71,6 +71,10 @@ BROWSER_WAIT_UNTIL=load
 # BROWSER_EXECUTABLE_PATH=
 # BROWSER_CHANNEL=chrome
 BROWSER_SLOW_MO_MS=0
+# BROWSER_ATTACH_ENABLED=true
+# BROWSER_ATTACH_WS_HOST=127.0.0.1
+# BROWSER_ATTACH_WS_PORT=9999
+# BROWSER_ATTACH_WS_PATH=/browser-attach/ws
 
 NAMESPACE=mcp
 NODE_ID=agent

package/.env.example.gateway

@@ -29,12 +29,27 @@ MCP_HTTP_PATH=/mcp
 MCP_HTTP_ENABLE_DEBUG_ROUTES=false
 MCP_HTTP_ENABLE_PRUNE_ROUTE=false
 
+# ChatGPT / Claude OAuth connector. Setting any OAuth value enables the facade.
+# TELLYMCP_PUBLIC_URL=https://your-domain.example/api
+# TELLYMCP_OAUTH_ISSUER=https://your-domain.example/api
+# TELLYMCP_OAUTH_AUDIENCE=https://your-domain.example/api
+# TELLYMCP_MAGIC_TOKEN=change_me_private_connector_token
+# TELLYMCP_MAGIC_TOKEN_HASH=sha256:<hex>
+# TELLYMCP_OAUTH_CLIENT_ID=tellymcp
+# TELLYMCP_OAUTH_CLIENT_SECRET=
+# TELLYMCP_ALLOWED_REDIRECT_URIS=https://chatgpt.com/connector/oauth/...,https://claude.ai/api/mcp/auth_callback
+# TELLYMCP_OAUTH_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
+# TELLYMCP_AUTH_CODE_TTL_SECONDS=300
+# TELLYMCP_OAUTH_SCOPES=tellymcp:read tellymcp:write
+# TELLYMCP_OAUTH_KEY_ID=tellymcp-oauth
+
 DISTRIBUTED_MODE=gateway
+# Also used to derive short-lived file URLs under /api/files/.
 GATEWAY_PUBLIC_URL=https://your-domain.example/api/gateway
 GATEWAY_WS_URL=wss://your-domain.example/api/gateway/ws
 GATEWAY_WS_PATH=/api/gateway/ws
 GATEWAY_TOKEN=change_me_gateway_token
-# GATEWAY_AUTH_TOKEN=
+GATEWAY_AUTH_TOKEN=
 
 ROOT_PREFIX=/api
 PORT=8080

package/CHANGELOG.md

@@ -3,6 +3,27 @@
 ## Unreleased
 
 ### Added
+
+- Добавлены связанные MCP tools `get_file_list` и `get_file` для получения
+  файлов из workspace выбранной live-консоли через gateway. Первый возвращает
+  список managed files и точные пути, второй принимает `file_path` либо
+  `selector=latest_screenshot`. По умолчанию `get_file(type="url")` возвращает
+  короткоживущую download-ссылку в `data`; временная gateway-копия хранится в
+  `.tellymcp/tmp/file-links`, а `type="base64"` остаётся fallback.
+- Добавлен явный режим `get_file(type="image")`: download URL остаётся в
+  `structuredContent.data`, сам structured type равен `image`, а изображение
+  возвращается отдельным нативным MCP-блоком, чтобы Claude и другие совместимые
+  клиенты могли рендерить его inline.
+- Для Claude.ai сохранён совместимый `type="base64"`: полный JSON вместе с raw
+  base64 в `data` возвращается обычным MCP text-блоком без native image, поскольку
+  некоторые MCP-host адаптеры заменяют изображение на `[image]` и скрывают
+  structured output от модели.
+- Добавлен `get_file(type="text")` для прямого чтения UTF-8 Markdown и исходников
+  через native MCP text-блок. Для `.ts`, `.tsx` и других source-расширений добавлены
+  текстовые MIME overrides.
+- Доступ к live `.env`, credential stores, private-key расширениям и чувствительным
+  директориям теперь блокируется на клиенте до чтения или отправки файла; выход
+  за workspace и через symlink по-прежнему запрещён.
 - Перенос `telegram_mcp` на сервисную архитектуру `Moleculer`:
   - `telegramMcp.runtime`
   - `telegramMcp.http`
@@ -74,6 +95,14 @@
   - безопасные packaged templates для `.env`
 
 ### Changed
+
+- Общее чтение workspace-файлов теперь проверяет реальный путь после разрешения
+  symlink и не позволяет выйти за пределы workspace.
+- Telegram Mini App Live Console переведена на WS-only rendering:
+  - HTTP polling и `/api/view` удалены
+  - после разрыва WebSocket автоматически восстанавливается с exponential backoff
+  - размеры xterm рассчитываются официальным `@xterm/addon-fit`
+  - resize колонок и строк передаётся локальным и relay PTY
 - Полностью убран legacy standalone MCP transport. `telegram_mcp` работает только через REST/MCP over HTTP.
 - Локальный standalone HTTP listener убран; `telegram_mcp` больше не поднимает отдельный сервер вне Moleculer gateway.
 - UI Telegram переосмыслен по двум режимам:
@@ -113,6 +142,7 @@
 - старый `go/node terminal-proxy` path полностью удалён, поддерживается только прямой локальный terminal runtime
 
 ### Fixed
+
 - Исправлен `Headers have already sent` при работе MCP/WebApp через общий HTTP runtime.
 - Исправлены route/alias проблемы после перехода под `${ROOT_PREFIX}`.
 - Исправлены зависания Mini App bootstrap и проблемы с relative WebApp routes.

package/README-ru.md

@@ -27,6 +27,7 @@
 
 - даёт MCP tools для human-in-the-loop через Telegram
 - позволяет одной консоли агента ставить задачу другой консоли
+- позволяет MCP chat-клиенту получать проектный текст, изображения и артефакты выбранной консоли
 - хранит structured xchange records в `.mcp-xchange`
 - поддерживает browser automation через Playwright
 - умеет attach к уже открытому Firefox или Chrome через bundled local extensions
@@ -66,6 +67,7 @@ Gateway
 - `telegram_message`
 - `notify_telegram`
 - `browser_screenshot(send_to_telegram=true)`
+- `get_file` для возврата скриншотов и артефактов в MCP chat-клиент
 
 Для agent-to-agent:
 
@@ -87,6 +89,15 @@ Gateway
 - `browser_recording_stop`
 - `browser_recording_status`
 
+Файлы:
+
+- `get_file_list(source=..., limit=...)`
+- `get_file(file_path=..., type="url")`
+- `get_file(file_path=..., type="image")`
+- `get_file(file_path=..., type="text")`
+- `get_file(file_path=..., type="base64")`
+- `get_file(selector="latest_screenshot")`
+
 Синхронизация инструкций:
 
 - `refresh_tools_markdown`
@@ -157,6 +168,7 @@ tellymcp init gateway
 - `GATEWAY_PUBLIC_URL`
 - `GATEWAY_WS_URL`
 - `GATEWAY_TOKEN`
+- `GATEWAY_AUTH_TOKEN`
 
 Запуск:
 
@@ -183,6 +195,7 @@ tellymcp init client
 - `GATEWAY_PUBLIC_URL`
 - `GATEWAY_WS_URL`
 - `GATEWAY_TOKEN`
+- `GATEWAY_AUTH_TOKEN` (тот же transport-токен, который задан на gateway)
 - `GATEWAY_USER_UUID`, если консоль должна быть видна конкретному владельцу в gateway-боте
 
 Рекомендуется:
@@ -375,6 +388,7 @@ tellymcp system-prune --env .env --yes
 - [README.md](./README.md)
 - [STANDALONE.md](./docs/STANDALONE.md)
 - [STANDALONE-ru.md](./docs/STANDALONE-ru.md)
+- [CHAT_CONNECTOR.md](./docs/CHAT_CONNECTOR.md) — OAuth-коннектор ChatGPT/Claude
 - [TOOLS.md](./TOOLS.md)
 - [screenshots/README.md](./screenshots/README.md)
 

package/README.md

@@ -27,6 +27,7 @@ The current model is gateway-first:
 
 - exposes MCP tools for human Telegram interaction
 - lets one agent ask another agent to do work and return files or notes
+- lets MCP chat clients retrieve project text, images, and artifacts from a selected console
 - stores structured xchange records in `.mcp-xchange`
 - supports browser automation with Playwright
 - can attach to an already running Firefox or Chrome tab through bundled local extensions
@@ -66,6 +67,7 @@ Human-facing:
 - `telegram_message` records
 - `notify_telegram`
 - `browser_screenshot(send_to_telegram=true)`
+- `get_file` for returning screenshots and artifacts to MCP chat clients
 
 Agent-to-agent:
 
@@ -87,6 +89,15 @@ Browser:
 - `browser_recording_stop`
 - `browser_recording_status`
 
+Files:
+
+- `get_file_list(source=..., limit=...)`
+- `get_file(file_path=..., type="url")`
+- `get_file(file_path=..., type="image")`
+- `get_file(file_path=..., type="text")`
+- `get_file(file_path=..., type="base64")`
+- `get_file(selector="latest_screenshot")`
+
 Tools sync:
 
 - `refresh_tools_markdown`
@@ -157,6 +168,7 @@ Required gateway values:
 - `GATEWAY_PUBLIC_URL`
 - `GATEWAY_WS_URL`
 - `GATEWAY_TOKEN`
+- `GATEWAY_AUTH_TOKEN`
 
 Then run:
 
@@ -183,6 +195,7 @@ Required client values:
 - `GATEWAY_PUBLIC_URL`
 - `GATEWAY_WS_URL`
 - `GATEWAY_TOKEN`
+- `GATEWAY_AUTH_TOKEN` (the same transport token configured on the gateway)
 - `GATEWAY_USER_UUID` if this console should be scoped to a specific Telegram owner
 
 Recommended:
@@ -374,6 +387,7 @@ tellymcp system-prune --env .env --yes
 - [README-ru.md](./README-ru.md)
 - [STANDALONE.md](./docs/STANDALONE.md)
 - [STANDALONE-ru.md](./docs/STANDALONE-ru.md)
+- [CHAT_CONNECTOR.md](./docs/CHAT_CONNECTOR.md) — ChatGPT/Claude OAuth connector
 - [TOOLS.md](./TOOLS.md)
 - [screenshots/README.md](./screenshots/README.md)
 

package/TOOLS.md

@@ -1,6 +1,6 @@
 # Tools
 
-Version: `2026-06-06.1`
+Version: `2026-06-06.2`
 
 Gateway/client runtime compatibility:
 
@@ -18,6 +18,9 @@ Browser tools:
 
 - `browser_list_attached_instances`
 - `browser_list_tabs`
+- `browser_attach_active_tab`
+- `browser_attach_tab`
+- `browser_detach_tab`
 - `browser_recording_start`
 - `browser_recording_stop`
 - `browser_recording_status`
@@ -44,8 +47,8 @@ Browser runtime rule:
   - attached browser tab backend for a real user Firefox or Chrome session
   - isolated Playwright Chromium backend
 - `browser_open` is only for the isolated Playwright backend.
-- `browser_list_attached_instances` and `browser_list_tabs` are for the attached browser backend.
-- if the local attach extension is connected and a tab was selected from the browser control panel, `browser_click`, `browser_fill`, `browser_inject_script`, `browser_press`, `browser_dom`, and `browser_screenshot` use that attached browser tab for the current session without requiring `browser_open`
+- `browser_list_attached_instances`, `browser_list_tabs`, `browser_attach_active_tab`, `browser_attach_tab`, and `browser_detach_tab` are for the attached browser backend.
+- after a tab is attached for the current session, `browser_click`, `browser_fill`, `browser_inject_script`, `browser_press`, `browser_wait_for`, `browser_wait_for_url`, `browser_dom`, `browser_computed_style`, `browser_reload`, `browser_screenshot`, `browser_console`, `browser_errors`, `browser_network_failures`, `browser_clear_logs`, and `browser_close` use that attached browser tab without requiring `browser_open`
 - `browser_recording_start`, `browser_recording_stop`, and `browser_recording_status` are also for the attached browser backend
 - browser recordings are written under `.mcp-xchange/web/{tab-title-slug}-{timestamp}/`
 - each recording bundle contains `session.json`, `timeline.ndjson`, `pages/`, `network/`, and `console/`
@@ -80,13 +83,16 @@ Collaboration tools:
 
 Utility tools:
 
+- `get_file_list`
+- `get_file`
 - `refresh_tools_markdown`
 
 ## Console model
 
 Gateway-first runtime model:
 
-- agents register themselves on the gateway automatically through `GATEWAY_TOKEN`
+- agents authenticate the gateway HTTP/WS transport through `GATEWAY_AUTH_TOKEN`
+  and register into their gateway scope through `GATEWAY_TOKEN`
 - Telegram no longer links sessions with pair codes
 - `/menu` in the gateway bot shows available remote consoles directly
 - one running agent console is one logical session/console target
@@ -111,7 +117,18 @@ Preferred order for cross-console work:
    - `send_partner_note`
    - `send_partner_file`
    - browser tools
-   with explicit `session_id` for the current console or explicit target routing fields for another console.
+     with explicit `session_id` for the current console or explicit target routing fields for another console.
+
+Preferred file-return flow for MCP chat clients:
+
+1. Resolve the selected live console and keep its canonical `session_id`.
+2. If the user refers to an existing managed file without an exact path, call `get_file_list` and select the matching `file_path`.
+3. If creating a screenshot now, call `browser_screenshot` and keep its returned `file_path`.
+4. For an exact Markdown, source-code, or other UTF-8 project path, call `get_file(type = "text")`; arbitrary project files are not discovered by `get_file_list`.
+5. For binary files, call `get_file` with the selected or newly returned `file_path`; default to `type = "url"`.
+6. If the chat cannot fetch an image URL, repeat the same call with `type = "image"` for a native inline MCP image block.
+7. If a host such as Claude.ai replaces the native block with `[image]`, retry with `type = "base64"`; this host-independent fallback returns the complete JSON, including raw `data`, in a regular MCP text block.
+8. If the user asks for the most recent existing screenshot, `get_file(selector = "latest_screenshot")` is the direct shortcut.
 
 ## `set_session_context`
 
@@ -190,6 +207,99 @@ Output:
 - `terminal?`
   Terminal runtime metadata for the console.
 
+## `get_file_list`
+
+Purpose:
+
+- List managed files available in a selected console workspace before calling `get_file`.
+- Return exact `file_path` values accepted by `get_file`.
+
+Input:
+
+- `session_id`
+- `source?`
+  - `telegram-upload`
+  - `browser-screenshot`
+  - `partner-artifact`
+- `limit?`
+  - default: `50`
+  - maximum: `200`
+
+Output:
+
+- `total`
+- `files[]`
+  - `file_path`
+  - `filename`
+  - `mimetype`
+  - `source`
+  - `size_bytes?`
+  - `created_at`
+
+Behavior:
+
+- results are ordered newest first
+- `total` is the number of matching managed files before `limit` is applied
+- this tool lists TellyMCP-managed Telegram uploads, browser screenshots, and partner artifacts; it does not recursively enumerate arbitrary source files in the workspace
+- in gateway mode, always pass the canonical `session_id = client_uuid:local_session_id`
+- pass the chosen `files[].file_path` unchanged to `get_file`
+
+## `get_file`
+
+Purpose:
+
+- Return the actual content of a file from a selected console workspace to an MCP chat client.
+- URL mode creates a bounded temporary gateway copy; text and base64 modes relay content directly.
+
+Input:
+
+- `session_id`
+- `type?`
+  - `url` (default)
+  - `image` (native inline image plus download URL)
+  - `text` (native UTF-8 MCP text content)
+  - `base64` (fallback)
+- exactly one of:
+  - `file_path`
+  - `selector = "latest_screenshot"`
+
+Output:
+
+- `type`
+- `data`
+  - short-lived HTTPS URL when `type = "url"`
+  - short-lived HTTPS URL when `type = "image"`; the actual pixels are in the native MCP image content block
+  - decoded UTF-8 file content when `type = "text"`
+  - base64 payload when `type = "base64"`
+- `mimetype`
+- `filename`
+- `size_bytes`
+- `expires_at?`
+
+Behavior:
+
+- in gateway mode, always pass the canonical `session_id = client_uuid:local_session_id` returned by `list_gateway_sessions`
+- `file_path` may be the exact path returned by `browser_screenshot`, so the human does not need to know generated filenames
+- `selector = "latest_screenshot"` selects the newest file metadata with `source = "browser-screenshot"` for that session
+- file reads are limited to the selected console workspace, including after symlink resolution
+- exact project-relative paths such as `README.md` or `src/test.ts` are accepted even though `get_file_list` only discovers managed artifacts
+- text mode returns the decoded file directly as a native MCP text content block and rejects invalid UTF-8 or binary NUL content
+- source extensions such as `.ts` and `.tsx` use text MIME overrides instead of the generic MPEG/octet-stream mappings
+- sensitive paths including live `.env` files, credential stores, private-key extensions, and secret directories are rejected server-side; documented `.env.example`/`.env.sample`/`.env.template` files remain readable
+- URL mode uploads the file as a binary stream to `.tellymcp/tmp/file-links` on the gateway and returns a link valid for 10 minutes
+- image mode is explicit: `structuredContent.type` is `image`, `structuredContent.data` contains the URL, and the native top-level MCP `image` is the first content block without duplicating base64 into structured output
+- image mode accepts only `image/*` files up to the safe native-inline limit; use `url` for larger images
+- URL links allow up to three GET downloads; HEAD requests do not consume the limit
+- if URL fetching fails for an image, retry with `type = "image"`
+- base64 mode is the compatibility fallback for hosts that replace native images with `[image]` or hide `structuredContent`: it returns the complete JSON payload, including raw base64 in `data`, as a regular MCP text block and does not emit a native image
+- base64 mode is bounded by the final MCP response body limit
+- do not attempt to bypass the sensitive-file policy or retrieve renamed secrets
+
+Screenshot examples:
+
+- "take a screenshot and send it": call `browser_screenshot`, then pass its returned `file_path` to `get_file`
+- "send the latest screenshot": call `get_file` with `selector = "latest_screenshot"`
+
 ## `refresh_tools_markdown`
 
 Purpose:
@@ -447,7 +557,7 @@ Required agent practice:
   - "tell frontend what changed"
   - "send the error to your teammate"
   - "tell the other agent what's new"
-  then the correct path is `send_partner_note`
+    then the correct path is `send_partner_note`
 
 How to find the partner correctly:
 
@@ -507,7 +617,7 @@ Reply rule for project asks:
   - `Reply project_uuid: ...`
   - `Reply target_client_uuid: ...`
   - `Reply target_local_session_id: ...`
-  or a `Reply Params` section with the same data
+    or a `Reply Params` section with the same data
 - then reply with those exact values
 - if `in_reply_to` is available, prefer `Reply message_uuid`
 - if only the note `share_id` is available, gateway now also accepts that value in `in_reply_to`
@@ -608,7 +718,7 @@ How the receiving agent must react:
   - `проверь xchange records`
   - `telegram_message`
   - `partner_note`
-  then do not start with a legacy inbox-specific tool
+    then do not start with a legacy inbox-specific tool
 - instead:
   1. call `list_xchange_records`
   2. identify the newest relevant record by category:
@@ -836,10 +946,68 @@ Output:
 Notes:
 
 - if only one attached browser instance is connected, `instance_id` can be omitted
-- current tab selection for the attach backend is done from the browser extension control panel
+- tab selection for the attach backend can be done either from the browser extension control panel or through `browser_attach_active_tab` / `browser_attach_tab`
 - `active=true` means the tab is active in its browser window; there may be more than one such tab across multiple windows
 - for the tab currently selected for this MCP session, prefer `selected=true`
 
+## `browser_attach_active_tab`
+
+Purpose:
+
+- attach the current MCP session to the active tab of a connected attached browser instance
+
+Input:
+
+- `session_id?`
+- `instance_id?`
+
+Output:
+
+- `session_id`
+- `backend`
+- `instance_id`
+- `tab_id`
+- `attached_at`
+- `title?`
+- `url?`
+
+## `browser_attach_tab`
+
+Purpose:
+
+- attach the current MCP session to a specific attached browser tab by `tab_id`
+
+Input:
+
+- `session_id?`
+- `instance_id?`
+- `tab_id`
+
+Output:
+
+- `session_id`
+- `backend`
+- `instance_id`
+- `tab_id`
+- `attached_at`
+- `title?`
+- `url?`
+
+## `browser_detach_tab`
+
+Purpose:
+
+- detach the current MCP session from the currently selected attached browser tab
+
+Input:
+
+- `session_id?`
+
+Output:
+
+- `session_id`
+- `detached`
+
 ## `browser_recording_start`
 
 Purpose:
@@ -1227,6 +1395,8 @@ Output:
 Purpose:
 
 - inspect computed styles and box metrics for a DOM element in the session browser tab
+- if the session has a selected attached browser tab, inspect that real browser tab
+- otherwise inspect the isolated Playwright page
 
 Input:
 
@@ -1284,7 +1454,9 @@ Notes:
 
 Purpose:
 
-- close the isolated browser context for the current session
+- close the current browser target for the session
+- if the session has a selected attached browser tab, close that real browser tab and clear the attach state
+- otherwise close the isolated Playwright browser context
 
 Input:
 

package/config/templates/env.both.template

@@ -29,13 +29,27 @@ MCP_HTTP_PATH=/mcp
 MCP_HTTP_ENABLE_DEBUG_ROUTES=false
 MCP_HTTP_ENABLE_PRUNE_ROUTE=false
 
+# ChatGPT / Claude OAuth connector. Setting any OAuth value enables the facade.
+# TELLYMCP_PUBLIC_URL=https://your-domain.example/api
+# TELLYMCP_OAUTH_ISSUER=https://your-domain.example/api
+# TELLYMCP_OAUTH_AUDIENCE=https://your-domain.example/api
+# TELLYMCP_MAGIC_TOKEN=change_me_private_connector_token
+# TELLYMCP_MAGIC_TOKEN_HASH=sha256:<hex>
+# TELLYMCP_OAUTH_CLIENT_ID=tellymcp
+# TELLYMCP_OAUTH_CLIENT_SECRET=
+# TELLYMCP_ALLOWED_REDIRECT_URIS=https://chatgpt.com/connector/oauth/...,https://claude.ai/api/mcp/auth_callback
+# TELLYMCP_OAUTH_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
+# TELLYMCP_AUTH_CODE_TTL_SECONDS=300
+# TELLYMCP_OAUTH_SCOPES=tellymcp:read tellymcp:write
+# TELLYMCP_OAUTH_KEY_ID=tellymcp-oauth
+
 DISTRIBUTED_MODE=both
 GATEWAY_PUBLIC_URL=
 GATEWAY_WS_URL=
 GATEWAY_WS_PATH=/api/gateway/ws
 GATEWAY_TOKEN=
 GATEWAY_USER_UUID=
-# GATEWAY_AUTH_TOKEN=
+GATEWAY_AUTH_TOKEN=
 
 ROOT_PREFIX=/api
 PORT=8080
@@ -63,7 +77,6 @@ WEBAPP_INITDATA_TTL_SECONDS=300
 WEBAPP_SESSION_TTL_SECONDS=900
 WEBAPP_LAUNCH_MODE=fullscreen
 WEBAPP_VISIBLE_SCREENS=10
-WEBAPP_POLL_INTERVAL_MS=2000
 WEBAPP_ACTION_COOLDOWN_MS=150
 
 MCP_XCHANGE_DIR=.mcp-xchange

package/config/templates/env.client.template

@@ -24,7 +24,7 @@ GATEWAY_WS_URL=
 GATEWAY_WS_PATH=/api/gateway/ws
 GATEWAY_TOKEN=
 GATEWAY_USER_UUID=
-# GATEWAY_AUTH_TOKEN=
+GATEWAY_AUTH_TOKEN=
 
 TERMINAL_SHELL=bash
 TERMINAL_COLS=120
@@ -51,7 +51,6 @@ WEBAPP_INITDATA_TTL_SECONDS=300
 WEBAPP_SESSION_TTL_SECONDS=900
 WEBAPP_LAUNCH_MODE=fullscreen
 WEBAPP_VISIBLE_SCREENS=10
-WEBAPP_POLL_INTERVAL_MS=2000
 WEBAPP_ACTION_COOLDOWN_MS=150
 
 MCP_XCHANGE_DIR=.mcp-xchange
@@ -66,6 +65,10 @@ BROWSER_WAIT_UNTIL=load
 # BROWSER_EXECUTABLE_PATH=
 # BROWSER_CHANNEL=chrome
 BROWSER_SLOW_MO_MS=0
+# BROWSER_ATTACH_ENABLED=true
+# BROWSER_ATTACH_WS_HOST=127.0.0.1
+# BROWSER_ATTACH_WS_PORT=9999
+# BROWSER_ATTACH_WS_PATH=/browser-attach/ws
 
 NAMESPACE=mcp
 NODE_ID=agent

package/config/templates/env.gateway.template

@@ -25,12 +25,26 @@ MCP_HTTP_PATH=/mcp
 MCP_HTTP_ENABLE_DEBUG_ROUTES=false
 MCP_HTTP_ENABLE_PRUNE_ROUTE=false
 
+# ChatGPT / Claude OAuth connector. Setting any OAuth value enables the facade.
+# TELLYMCP_PUBLIC_URL=https://your-domain.example/api
+# TELLYMCP_OAUTH_ISSUER=https://your-domain.example/api
+# TELLYMCP_OAUTH_AUDIENCE=https://your-domain.example/api
+# TELLYMCP_MAGIC_TOKEN=change_me_private_connector_token
+# TELLYMCP_MAGIC_TOKEN_HASH=sha256:<hex>
+# TELLYMCP_OAUTH_CLIENT_ID=tellymcp
+# TELLYMCP_OAUTH_CLIENT_SECRET=
+# TELLYMCP_ALLOWED_REDIRECT_URIS=https://chatgpt.com/connector/oauth/...,https://claude.ai/api/mcp/auth_callback
+# TELLYMCP_OAUTH_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
+# TELLYMCP_AUTH_CODE_TTL_SECONDS=300
+# TELLYMCP_OAUTH_SCOPES=tellymcp:read tellymcp:write
+# TELLYMCP_OAUTH_KEY_ID=tellymcp-oauth
+
 DISTRIBUTED_MODE=gateway
 GATEWAY_PUBLIC_URL=
 GATEWAY_WS_URL=
 GATEWAY_WS_PATH=/api/gateway/ws
 GATEWAY_TOKEN=
-# GATEWAY_AUTH_TOKEN=
+GATEWAY_AUTH_TOKEN=
 
 ROOT_PREFIX=/api
 PORT=8080
@@ -58,7 +72,6 @@ WEBAPP_INITDATA_TTL_SECONDS=300
 WEBAPP_SESSION_TTL_SECONDS=900
 WEBAPP_LAUNCH_MODE=fullscreen
 WEBAPP_VISIBLE_SCREENS=10
-WEBAPP_POLL_INTERVAL_MS=2000
 WEBAPP_ACTION_COOLDOWN_MS=150
 
 MCP_XCHANGE_DIR=.mcp-xchange

package/dist/cli.js

@@ -7,6 +7,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_fs_1 = require("node:fs");
 const node_path_1 = __importDefault(require("node:path"));
 const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
 const node_net_1 = __importDefault(require("node:net"));
 const dotenv_1 = require("dotenv");
 const ioredis_1 = __importDefault(require("ioredis"));
@@ -77,6 +78,7 @@ function printHelp() {
         "  tellymcp codex-plugin install",
         "  tellymcp codex-plugin status",
         "  tellymcp mcp [--url <url>] [--bearer <token>] [--format claude|legacy]",
+        "  tellymcp oauth key",
         "  tellymcp help",
     ]);
     printSection("Examples", [
@@ -94,6 +96,7 @@ function printHelp() {
         "  tellymcp codex-plugin install",
         "  tellymcp codex-plugin status",
         "  tellymcp mcp --help",
+        "  tellymcp oauth key",
     ]);
     printSection("terminal", [
         `${picocolors_1.default.green("  OK")} built-in PTY runtime`,
@@ -238,6 +241,26 @@ function printMcpHelp() {
         "  tellymcp mcp --url https://builder.undoo.ru/api/mcp --format legacy",
     ]);
 }
+function runOAuthCommand(args) {
+    const [subcommand] = args;
+    if (!subcommand || subcommand === "--help" || subcommand === "-h") {
+        printBanner("OAuth helper", "Generate connector signing material");
+        printSection("Usage", ["  tellymcp oauth key"]);
+        printSection("Output", [
+            "  Prints a dotenv-ready TELLYMCP_OAUTH_PRIVATE_KEY_PEM value.",
+            "  Store it only on the gateway and never expose it to chat clients.",
+        ]);
+        return;
+    }
+    if (subcommand !== "key") {
+        fail("Supported OAuth subcommands: key");
+    }
+    const privateKeyPem = (0, node_crypto_1.generateKeyPairSync)("rsa", { modulusLength: 2048 })
+        .privateKey.export({ type: "pkcs8", format: "pem" })
+        .toString()
+        .replace(/\n/gu, "\\n");
+    process.stdout.write(`TELLYMCP_OAUTH_PRIVATE_KEY_PEM="${privateKeyPem}"\n`);
+}
 function printBrowserHelp() {
     printBanner("browser helper", "Manage Playwright browser binaries used by browser_* tools");
     printSection("Usage", [
@@ -1045,7 +1068,7 @@ async function runRuntime(args) {
 }
 async function main(argv) {
     const [rawCommand, firstArg, secondArg] = argv;
-    const command = rawCommand === "init" || rawCommand === "run" || rawCommand === "help" || rawCommand === "mcp" || rawCommand === "doctor" || rawCommand === "browser" || rawCommand === "system-prune"
+    const command = rawCommand === "init" || rawCommand === "run" || rawCommand === "help" || rawCommand === "mcp" || rawCommand === "oauth" || rawCommand === "doctor" || rawCommand === "browser" || rawCommand === "system-prune"
         || rawCommand === "codex-plugin" || rawCommand === "extension"
         ? rawCommand
         : "help";
@@ -1061,6 +1084,10 @@ async function main(argv) {
         printMcpConfig(argv.slice(1));
         return;
     }
+    if (command === "oauth") {
+        runOAuthCommand(argv.slice(1));
+        return;
+    }
     if (command === "doctor") {
         await runDoctor(argv.slice(1));
         return;