@gonzih/cc-tg 0.2.12 → 0.2.14

package/dist/bot.js

@@ -3,7 +3,7 @@
  * One ClaudeProcess per chat_id — sessions are isolated per user.
  */
 import TelegramBot from "node-telegram-bot-api";
-import { existsSync, createWriteStream, mkdirSync } from "fs";
+import { existsSync, createWriteStream, mkdirSync, statSync, readdirSync } from "fs";
 import { resolve, basename, join } from "path";
 import os from "os";
 import { execSync } from "child_process";
@@ -23,7 +23,7 @@ const BOT_COMMANDS = [
     { command: "mcp_version", description: "Show cc-agent npm version and npx cache info" },
     { command: "clear_npx_cache", description: "Clear npx cache and restart MCP to pick up latest version" },
     { command: "restart", description: "Restart the bot process in-place" },
-    { command: "get_file", description: "Get a file from the server by path" },
+    { command: "get_file", description: "Send a file from the server to this chat" },
 ];
 const FLUSH_DELAY_MS = 800; // debounce streaming chunks into one Telegram message
 const TYPING_INTERVAL_MS = 4000; // re-send typing action before Telegram's 5s expiry
@@ -358,10 +358,45 @@ export class CcTgBot {
             }
             else if (name === "Bash") {
                 const cmd = input.command ?? "";
-                // yt-dlp / ffmpeg -o "path"
-                const oFlag = cmd.match(/-o\s+["']?([^\s"']+\.[\w]{1,10})["']?/);
-                if (oFlag)
-                    session.writtenFiles.add(resolve(cwd ?? process.cwd(), oFlag[1]));
+                if (/\byt-dlp\b|\bffmpeg\b/.test(cmd)) {
+                    // Scan output dir for recently modified media files (template paths like /tmp/%(title)s.%(ext)s
+                    // make the actual filename unknowable at tracking time)
+                    const oFlagMatch = cmd.match(/-o\s+["']?([^\s"']+)/);
+                    let scanDir = "/tmp/";
+                    if (oFlagMatch) {
+                        const oPath = oFlagMatch[1].replace(/["'].*$/, "");
+                        const dirEnd = oPath.lastIndexOf("/");
+                        if (dirEnd > 0)
+                            scanDir = oPath.slice(0, dirEnd + 1);
+                    }
+                    const MEDIA_EXTS = new Set([".mp3", ".mp4", ".wav", ".ogg", ".flac", ".webm", ".m4a", ".aac"]);
+                    const nowMs = Date.now();
+                    try {
+                        for (const entry of readdirSync(scanDir)) {
+                            const dotIdx = entry.lastIndexOf(".");
+                            if (dotIdx < 0)
+                                continue;
+                            const ext = entry.slice(dotIdx).toLowerCase();
+                            if (!MEDIA_EXTS.has(ext))
+                                continue;
+                            const full = join(scanDir, entry);
+                            try {
+                                if (nowMs - statSync(full).mtimeMs <= 90_000) {
+                                    console.log(`[claude:files] tracked yt-dlp/ffmpeg output: ${full}`);
+                                    session.writtenFiles.add(full);
+                                }
+                            }
+                            catch { /* skip unreadable entries */ }
+                        }
+                    }
+                    catch { /* scanDir doesn't exist or unreadable */ }
+                }
+                else {
+                    // Other bash commands: try to extract output path from -o flag
+                    const oFlag = cmd.match(/-o\s+["']?([^\s"']+\.[\w]{1,10})["']?/);
+                    if (oFlag)
+                        session.writtenFiles.add(resolve(cwd ?? process.cwd(), oFlag[1]));
+                }
                 // mv source dest — track dest
                 const mvMatch = cmd.match(/\bmv\s+\S+\s+["']?([^\s"']+)["']?$/);
                 if (mvMatch)
@@ -387,7 +422,7 @@ export class CcTgBot {
             /credential/i, /secret/i, /password/i, /passwd/i, /\.env/i,
             /api[_-]?key/i, /token/i, /private[_-]?key/i, /id_rsa/i,
             /\.pem$/i, /\.key$/i, /\.pfx$/i, /\.p12$/i,
-            /gmail/i, /oauth/i, /auth/i,
+            /gmail/i, /oauth/i, /\bauth\b/i,
         ];
         return sensitivePatterns.some((p) => p.test(name));
     }
@@ -395,11 +430,15 @@ export class CcTgBot {
         // Extract file path candidates from result text
         // Match: /absolute/path/file.ext or relative like ./foo/bar.csv or just foo.pdf
         const pathPattern = /(?:^|[\s`'"(])(\/?[\w.\-/]+\.[\w]{1,10})(?:[\s`'")\n]|$)/gm;
+        const quotedPattern = /"([^"]+\.[a-zA-Z0-9]{1,10})"|'([^']+\.[a-zA-Z0-9]{1,10})'/g;
         const candidates = new Set();
         let match;
         while ((match = pathPattern.exec(resultText)) !== null) {
             candidates.add(match[1]);
         }
+        while ((match = quotedPattern.exec(resultText)) !== null) {
+            candidates.add(match[1] ?? match[2]);
+        }
         const safeDirs = ["/tmp/", "/var/folders/", os.homedir() + "/Downloads/"];
         const isSafeDir = (p) => safeDirs.some(d => p.startsWith(d)) || p.startsWith(this.opts.cwd ?? process.cwd());
         const toUpload = [];
@@ -440,6 +479,13 @@ export class CcTgBot {
                 console.log(`[claude:files] skipping sensitive file: ${filePath}`);
                 continue;
             }
+            const fileSize = statSync(filePath).size;
+            const MAX_TG_FILE_BYTES = 50 * 1024 * 1024;
+            if (fileSize > MAX_TG_FILE_BYTES) {
+                const mb = (fileSize / (1024 * 1024)).toFixed(1);
+                this.bot.sendMessage(chatId, `File too large for Telegram (${mb}mb). Find it at: ${filePath}`).catch(() => { });
+                continue;
+            }
             console.log(`[claude:files] uploading to telegram: ${filePath}`);
             this.bot.sendDocument(chatId, filePath).catch((err) => console.error(`[tg:${chatId}] sendDocument failed for ${filePath}:`, err.message));
         }
@@ -676,9 +722,7 @@ export class CcTgBot {
             await this.bot.sendMessage(chatId, `File not found: ${filePath}`);
             return;
         }
-        const { statSync } = await import("fs");
-        const stat = statSync(filePath);
-        if (!stat.isFile()) {
+        if (!statSync(filePath).isFile()) {
             await this.bot.sendMessage(chatId, `Not a file: ${filePath}`);
             return;
         }
@@ -686,6 +730,13 @@ export class CcTgBot {
             await this.bot.sendMessage(chatId, "Access denied: sensitive file");
             return;
         }
+        const MAX_TG_FILE_BYTES = 50 * 1024 * 1024;
+        const fileSize = statSync(filePath).size;
+        if (fileSize > MAX_TG_FILE_BYTES) {
+            const mb = (fileSize / (1024 * 1024)).toFixed(1);
+            await this.bot.sendMessage(chatId, `File too large for Telegram (${mb}mb). Find it at: ${filePath}`);
+            return;
+        }
         await this.bot.sendDocument(chatId, filePath);
     }
     killSession(chatId, keepCrons = true) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gonzih/cc-tg",
-  "version": "0.2.12",
+  "version": "0.2.14",
   "description": "Claude Code Telegram bot — chat with Claude Code via Telegram",
   "type": "module",
   "bin": {